last executing test programs: 13.134192302s ago: executing program 3 (id=3683): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="3103000000000048264066374ec360e665f57330117f0000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073797a3000000000090003"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r6) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a011461}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d3df314df6f59e6e4c9ef08ca5"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "73f219414b2cdad8de680354d8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c004) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 12.600050955s ago: executing program 3 (id=3687): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={r5, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}]}, &(0x7f0000000540)=0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140b, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x41}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9b794470907345ecd5ffa42eff6d880cff6c45af30a38de2"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0xac}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10000040) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/21, 0x15}, 0x202) 12.008065505s ago: executing program 3 (id=3691): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b2000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(r0, 0x0, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2c000000}, 0x94) 11.571912041s ago: executing program 3 (id=3693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0xc02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='c'], 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x275, 0xa9, 0x5, 0x2f, 0x4, 0x6, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.521008437s ago: executing program 1 (id=3698): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2001d00bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) 9.276556331s ago: executing program 3 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x24000840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 9.101428458s ago: executing program 1 (id=3701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000008", @ANYRES16=r2, @ANYBLOB="1102040000000000000001000000"], 0x14}}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020008000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be98f0ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.37951224s ago: executing program 4 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r3, 0x1, 0x70bd30, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) 8.076160384s ago: executing program 2 (id=3707): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x574b3a32, 0x7}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x10) 7.830426095s ago: executing program 1 (id=3708): r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x91) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x800, 0x2, 0x6, 0x7e15, 0x2a2b, 0xfff, 0x8dc3}}], 0x48, 0x4855}, 0x24000052) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000040)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r11, @ANYBLOB="3ad0460edfdae0c28846a2d189af00499b0ff29300fcae772d082e64eb4581615b7c93ab8ce8ade78b4b8637a0017a52b4052e92de9148dd27a3701c7049b1256411cdf82108ec34c731f419015164636aa83edc67f7cd6df22143cddde107cf0f0e55962a24b5a4230ffb7e0ba20fed26b1f6d252f4262a9da13980c5c319253283eb2ba8fa4c6f7ae979d816deb0350ae86c7a8c3f7989b66f8426d8c64d1d61497f584a3488b2d1b15247ea691c5311047a2de0370cf846ae3382e4777b668a4ee8834ba5c2199acf5a6cae9d0d382ffc"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r6, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.718526911s ago: executing program 2 (id=3709): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.695565375s ago: executing program 1 (id=3710): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x128) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x96, &(0x7f00000015c0)=""/150}, 0x94) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.632199603s ago: executing program 3 (id=3711): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x2, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008855}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408a4}, 0x20004890) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0be69fda0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8abee2cf3e1fc17a406d0b63", 0xad}], 0x1) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r10, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 2.631690076s ago: executing program 0 (id=3712): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2001d00bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) 2.628173441s ago: executing program 4 (id=3713): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x0, 0x6, 0x22, 0x401}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0xc0, &(0x7f0000000240)=""/192, 0x41100, 0x0, '\x00', r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x13, 0x2, 0x401}, 0x10, 0xefb3, r4, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 2.4218541s ago: executing program 0 (id=3714): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c473"], 0xfdef) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r4, 0x8, 0x700d, 0x8}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x44) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x40, r8, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008895}, 0x804) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040804) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'veth0_macvtap\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 2.351570549s ago: executing program 2 (id=3715): unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000100)=0x3b) 2.304155517s ago: executing program 4 (id=3716): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000085c0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/253, 0xfd}, {&(0x7f0000001680)=""/144, 0x90}, {&(0x7f0000001740)=""/106, 0x6a}, {&(0x7f00000017c0)=""/195, 0xc3}, {&(0x7f00000018c0)=""/76, 0x4c}, {&(0x7f0000001940)=""/130, 0x82}], 0x8, &(0x7f0000001a80)=""/107, 0x6b}, 0x1}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005480)=""/234, 0xea}], 0x1}, 0x220}], 0x2, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 2.037273s ago: executing program 1 (id=3717): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000aeff20462dc1ba7101db124787e0b82ec0eea51b6cfa77ba28e94940a76a", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, 0x0, &(0x7f0000000280)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r6, 0x25, 0x13, @void}, 0x10) syz_emit_ethernet(0x3a, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f000074d000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x40010, r2, 0x7fb75000) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket(0x8, 0x4, 0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000080)="2a88262ad42f77776ab2d65c853bf6bc00", 0x11, 0x20008005, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r8, &(0x7f00000012c0)=""/4081, 0xff1, 0x142, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0x40106183, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 2.017355265s ago: executing program 2 (id=3718): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1bc, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0x29, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1b}}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x2}}, @ibss={0x6, 0x2, 0xffe0}]}, @NL80211_ATTR_IE={0x133, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x31, 0x5}}, @erp={0x2a, 0x1, {0x1}}, @measure_req={0x26, 0xfc, {0x9, 0x8, 0x9, "11ee442f1a0d0eefef5c5fdae8e903c10571b4e75062fefa5728948196268e152b2406b274bd1559e54f689934176c447b12a784e7eb910d5ec7ce68d00dcff6fec6526b43a6a8323dc1a24fcf45a3fbc5229010a851f688162108f631bdb3b5a0cee437533839fa533a6c267d038ed11e8e20981eaefc726d86e924f61ac35769b8059d434acdbc2609adb7a543199395bbceaf0e54499fa2f64158ba3f4276b53704f38cd35692c4d922c8238d2dc6d6434aee06cb945600e2c7b64bbd8d4e3e8abcfa74a4d2ebd1537461cae587f982e05208b4eb025952e100fbfb42555aa25ab79e8fb9a9184cea6b2cc9e3af5515e9c9f27807665781"}}, @ibss={0x6, 0x2, 0x2}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x9, 0x100}}, @mic={0x8c, 0x18, {0x84f, "aff9c76d0ea9", @long="903cc2045d2a5d0a43b1d61ab9ce874b"}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3ead54348655"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6105}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(0x4) socket$kcm(0x2d, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1bc, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0x29, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1b}}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x2}}, @ibss={0x6, 0x2, 0xffe0}]}, @NL80211_ATTR_IE={0x133, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x31, 0x5}}, @erp={0x2a, 0x1, {0x1}}, @measure_req={0x26, 0xfc, {0x9, 0x8, 0x9, "11ee442f1a0d0eefef5c5fdae8e903c10571b4e75062fefa5728948196268e152b2406b274bd1559e54f689934176c447b12a784e7eb910d5ec7ce68d00dcff6fec6526b43a6a8323dc1a24fcf45a3fbc5229010a851f688162108f631bdb3b5a0cee437533839fa533a6c267d038ed11e8e20981eaefc726d86e924f61ac35769b8059d434acdbc2609adb7a543199395bbceaf0e54499fa2f64158ba3f4276b53704f38cd35692c4d922c8238d2dc6d6434aee06cb945600e2c7b64bbd8d4e3e8abcfa74a4d2ebd1537461cae587f982e05208b4eb025952e100fbfb42555aa25ab79e8fb9a9184cea6b2cc9e3af5515e9c9f27807665781"}}, @ibss={0x6, 0x2, 0x2}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x9, 0x100}}, @mic={0x8c, 0x18, {0x84f, "aff9c76d0ea9", @long="903cc2045d2a5d0a43b1d61ab9ce874b"}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3ead54348655"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6105}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r0}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) close(0x4) (async) 1.899048098s ago: executing program 4 (id=3719): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000000010103fffffff10000000002000000240001801400018008000100ac1e000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f"], 0x128}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r4, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f00000000c0)={0x3f9, 0x4, 0x2, 0x6, 0x2}) 1.668731963s ago: executing program 0 (id=3720): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x8, 0x20, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x56}]}}, {0x1f, 0x8, 0x0, @local}}}, 0x2a) (async) write$tun(r1, &(0x7f0000000240)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x8, 0x20, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x56}]}}, {0x1f, 0x8, 0x0, @local}}}, 0x2a) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000400), &(0x7f00000004c0)=0xffffffb7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) (async) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000480)={r3}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000002c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xfff3}, {0x8, 0xc}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xfff3}, {0x8, 0xc}}}, 0x24}}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) read$alg(r4, &(0x7f0000003180)=""/4116, 0x1014) sendmmsg$alg(r4, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000300)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08360001ce61fcb7e067b20800000000000000d964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d0000000000000000000000000054f8f6f0fbedca1635c0be1c6c1bb4175608102fed6fd4801c17febeece4f6f759e5a4a81f07591ac94705cf7a5990f912faae39168e68a8a5e71618112370566708bbf42402c0ef220a766892fa1986c64e6867a23b98ffc0e82ebcd68b2a0eeb26a094c7e0359e0366c8584136ca931a6fe666797351b42565bf11b2b9d65ea4cb2b52f3f203395f21b81e7d08f7", 0xfe}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b019f86fa066c575b64dc7a6b9e13c535b4f77a7a745e413de0e7b942cbc20fdfc28910c4c39b0924dfdd3ab53ef5012b7f468cd16db00b011daebe55a0649e207137473d9b4baa2e651fc99d366e780f3f2709ff8b8f682c0001ef29d0d0239498bfba4b21ebd57185c546de5767cc394bb38e2aa88245fd6f41f91cac995d2d1c145b5a4d03a13f8f6dc29c8e9a8e79a740e3746ff5e4b7749d27ecd8d24d43a25c8415f89d63ccc71e456c0c69c6d2fc9faf3dc9b89bbe39c2b39c4babe7baf6ba2e293d07d55e927687c6b99a0badf8dd96ba9c90ab0296824fbf2026bcd56c3faebd60ce7bfd96e264c345bc76f78be3fb69332f3a750ff1e338ebd97e131744ed866f691580bf7908157fe4fe5dc1f301ee9df4324a5bfc96e3fa48c24315a71eca2d636da924f3f94bacee29e7930f9176dcb6bc0032341f4f97bff618dbc1862ce7a1a794010a841f12f2d32c78bf67e786aeb002c3ea772043bd1645d87da8f44db008da4604a28106283d0c21d905f6558449d4ee8510a901c99140432ce551aec56ec5dd4dea78c643ec3f4ffd6f3426a49792c406b8d1e507c4e75afd5819bf584f1993ef6c0f88bc08bc21e6169cae147f95572ced2d1e6f971b41f74bcd816f16bb8b32cdde61870f6c9214bfc66bbe671a8521f4adb5c59d14b5b3e641542f85aada33542ef0e788bc0cb9f97c1e5c865b64494858c11d7f9ccfe7bc6058756b92798d6c4c1c37b726ae1b6dcdea8006b30c3a656a849620cdcfa8e3cf51fad226f6a14945ea770e60aa65cd736314ac361d2406b42e23d0ffe90dd7485e8c159ac27cd59ec29814c76e338d0269ff867480d69e7494d68dd4cbffba6e54de0915de3e56153308f2cb3d53f81d528eeee8c100466e431607ff96329dc9915fa828b2293a4f9e03f41086cffe5302b9c68c739ca38bdd64645d76963a0a80d0d2fcb18ea4ef405e17030f63fde3a92884501b82183ddfab50a17bdb3237878386045a9d0a4495eba8e2ced021f34fc76d85fd854e7978bfb52b80ee6f0cca0dfef78847bd8347433f44559927553639e6f948011f2d013e2a2b1890cff11a82284d79aab555c187ef7c3b7f248618f434a4542d29b7f703f2ade1dd45aad4bfdf992994011f058f4318ab65638060fcfc69a84561696ba64d7b9f58222d41df12431881e74c70a41b5be2e5770b779902248ba5b5c07740ab2c0b5cb9fc6c7f7f45ee89ec1e5992344ec7cded5863862864117421515df64c08735b1d2580c03812dcbb4bf25c6dfd9b0f28a87a7f4d5fdb5dd179d20f941bcfd20dfce6f5aa4ec897f8bcb57db091dc1dde7dc1b830d296e729aee7ac57a3ef81b7584a93b102ca54bd031f651db7727a81d287bcd057758a6b470b0d262ceb0fb322cfb9be8c4ad3e8fe15bd65fe0429f02295b062a0c2fd4119a38a0b2b9a42adb2e7ad855379e9b510a8e90afa4b112e2d7d069917807967d7d4c459a33173864ca5f52eb0c0d6220b8a3f077084c2a1a4b0693cda65bb1e41b6e4a2a4f9cc91a6b8afe5a7d69cfd745150f462593599d5418ac73a768c61d9a969f041eb439f45cf80e22b7cb1f8f2d1f82e675a47782aa37d73328b8053f370b4796003f7ab9d3f5235ac1f065bba0bc86c57f66e40ce813a2df65536e26f7a162d6ce7a8e770060694e82257326f3b6b235b89025f0f65e57b1fce9f356d508c0a845cdbd74dd1a0c246b0d43e3ee2f09f22e04379d4aad9829ac4cb9b2b47356d1c4ea5184a64e664f9099fc5bae50e0237b3bb0e072489804b00e77773db7a21c2759b64faa265835f5251a2305a01a10f3bfd3f905b1032d66efc02f2f0533aab76274366b5008d9e711e84ac6cc06d3c7201957a9c6d62b3ad45259c844af433f17331ad6ebd673362ad79a289fa24e7f992f4e7dcf195dfefd8bc2a76907a1f7bea048aefc3b315b42042b79b31586c7c6a67255dc3b5867fa9daafead5eadc48388c23fe635d0d5c1f8172f8fff8920c685b2bfd3c4e9e556567c425b215e8f74f916e10604c700fd71e2ee01e32894ecc1ff2e79f09b974c80cf3e77b164f67e5bc5c7ce564c00d588b54c6e3c0594c29c92fb058c9275725f68f9cd93ca8953b609f546a11957680168d88b433082c764d93cab2454056db1897c97a2ad109c0b7f4fccfd748e2f9a32cf18b0bfee0531826b3d33819477bff8addb1a49190f25689240c13fd2a2b0021580d0bad26f7f9ca2285580329dd658fba93ec594c262364345af9ad8795433a59e948f95ce195c65ed15e2a31a3c71c2d9426be29a644dc9562440fc8a4e96413818bc631a917819189db338e1cf8177cf5d489e003b70d1a8b73755da2b565eff1456f9ee9dc3d8c3b3dc2c87b6138579ba4f15e9d0f13dbe2e3253b52dab9151a156f1d9024d3f8d79bc3fd71b1c797d0601dcced11ef73caca856b6dbaddec16e27097e00f5fd9f017ef41614bfb084043c451f7c60981e605e92eb2df015808303216d609e1d9826167cc58ef90a4b5211ab113e654995f9b6897894b5302edd5b3d469d01dd977eea6e71866f3b9fc1068dab8a1eac67619e8ee85b9e27a7dd485d409c70062a7a6d7c8c6574757c52a59523e425eb1877f62a2ee974a9ebccb9f145b2d47eeb4a5f994fe091eb57aacbd94c0dc372ce230b07bd3d4211dcfa461bc68379fecc739b20bca97dab74e2c01ed750fcc821e284c5112c865d7e932478a757e537a7d3f21bb823e3aafe42437e2cf974bfbf36ea06f411dea327c829d835385ec0570c2d3fdf77c51498f3a905a221b1496aced4fe43f294cf9ef3cdc8733136fb328504a2f451da4b3d7f32ba824030ec336fd740fc2d344fb00d2502cac23c445d0845b4f957705b46df02882a844194226f3713eea86cfafd63e6fe7d105cef3a2191030a47d32cf193d3d9990c54c023e38fbfe726c2dd77a555c91a3e75143909d710ee41555bbb6256ac035a81c6b743c1c57df53e0fc8ace56d09fd10d10f7c7d63dba8661c5c88ed460cc4f2917c6fc87f3382bfaaac0788c11ade6900b64fc772b7a5db2d3c260345412f15cacffc564de0becefe7c3fb52f9e7403252db215129b7a282f9c4427e6daedab2ad742bc7b6ffbd9723f8dd80197896f61c591d9f44365e4b7f593bab44c82f1a4e49808a78e75c90d2d4556b3a71a4ac9e71e07b6bdd56a542ce791de03e412dfb279eadece4ab0c95f94791158561904900f9c5ef70fb2bdf9ff131ee3bc0fea629f5bfad2a4f8c1fc9dd0eb8a67b3df1ddeaf0e3efb21ea010f30b5df8c17998be28847dea826949b28ad41da9f09e3c1a2d795c4a6d746d1b3ea75458ad6937497acc24eee66d5eebe93c40ca17829eccdb08754770f8961da57f69b7f36b6cac5f5f60880d894e9b7c623d30ea29a0056ce4a0592ce4f6ba285244b298ad06244deafde45dd82fa847353e1b13540353d78d2a365343b4121c4e913c45f1b9d23dc43fc101413fc46457d99af5c867536ec0c5bf1d7212d0b67241f5b0c2d84c09997218587c1a23baf7137b681be288fc8c550fc114dfffd643e0493e26cbc6be318e33422e8e741504925e92bbab3a4859302b1e5bf0ba302a61add05d84b8a168070d5a2ea8613c75847327c56f68fcf2b72a7b981c595a3730d3bb12eade2cce300c3cab0ddded7b3e706874a2e90957c99a8f35403cdd33f921b8b3d53a8e3d3c308e6975406b6a53781cf239bca4c9619bf39adb4f146be585e359a9913e19f3fb1720ced58d8c516f85e70e85bc8f03ddbbdca28cd816f3037ded67d9006b570c87035e4c17baf62c04db3ea4955bce1239188e5412086ae7377ec83f6f2e6d7d164fce8368edee634956e880a87a7ec522c70acd99c42429c40d8f64db61f8f0b9c8328b5dc8202886bb27d4c43413d0ca2b3f7a580e0a05d7141aa7ecdb9841fea8d7da51d02a207c9102ed17e8e831b63cf2d1f382b26d113f30d601ff58edc34253ce3b4aa2f7a3ecb6a257e59f6658da87e30d803eb48e760ff0f374d914bb4e6d72c594a9d5805984ca5a98ab86b17e7986facdba809e639b4097f63b75a6252e88cef3b85ab202b4ce007ead375c6e08677259a61477c31c2e7c52f3b0271264b85dcc1260c3d53693812108a519b730c2e0ea8512e91ea63609397a8546048f2c61f6c0e4a1ba0895525db5c481f41e9df36c12a3963c24b870b94ab57f9704789152d2816ad64ba448e476dd76ac6c7402d2a4e2cfb50247e008038b4f71628730d7f40f536512fb487bba24d5b0825bdda17bb8d58cdf74bfc11971a8f9d387b0962a1d59db67f1351611eb85b3bbf429e30c701235633fb157a9ea72f5005629cd1da83678939e97c7be765fd51309407d3f52ba7b38bf3bcafdf7e272fd41da20fca6cf70ff0c7c49839a299a4d44b5a6dee8fc4c2042fce9cceeb540f38f8b8c2c4c3c4a9ee39ac7215ad097df5fb22fa088b736ba5637088c086504d045dcf7ccced9e62c1821347c6f49446cbff08ea0ce72adb46362b22d445127941d3d1f5bed868b07af8ed3d40abb87416c5f5a18789877f496d28e8d442df635890747e42f96cff9c982d2543d4f5ae718e476d8b6db136889bd3be08dfe4481fa0054422ac9dd3bbfd7e3e6be68f1fe3a9d24da71fcba3e12679f88412834fc9a15d4ce7f94143174d08dd35289374ee68f1a7e629c221ad720a294283a543624e1174755c7fab60cba2f1dccb17cc3991a4df6e1b5c5dc6eff8fb8783f916070d160a5c50de150fcf44f9ac82322ed5550e526d4bbea18ebe7148b824300759f14e0c75a79fe39382be51a822aa711e6113dfa3e8b6c21a0e3f3b5e49d24651ba9542743746ed8123bd66ee5e2ede7ddc61bab5a45e8d71f8dfb4838bdb7b6315399632128f7770ffb0d38dec3cbae", 0xdc8}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) 1.29677897s ago: executing program 2 (id=3721): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001540)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x200, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b0d"}, {0x4, 0x28, "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"}]}}}}}, 0x236) 932.593614ms ago: executing program 4 (id=3722): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @remote, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x38, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0xd, 0x10}, {0xfff2}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x93, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x4801) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002300)={{}, {0x73}, 0x2, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="b4c70f393c2013089c7f684071db", 0xe, 0x0, &(0x7f0000000240)={0x2, 0x200d, {0x1, 0xc, 0x1000, "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", 0x1000, "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"}, 0x6c, "8cff0057e10868b71fa7ea645bba831eec0b005643233b318bab748fb8410d24a8b6703e0c2cfab0fd1d59092ad9b9e1bf242b4e3849cb3b4baec4791f27d344d97e9f5c84044ca0839cc3762f2e7d683312ece19b8098c4777edad642e43c11e5254195c376b28a57edf918"}, 0x2085}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000002380)={0x3, 0x2}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000024c0)={r0, &(0x7f00000023c0)='\x00', 0x800, &(0x7f0000002400)={@_ha_fsid={[0xe6, 0x1]}, {0x9, 0x7, 0x1000, 0x8}}, 0x1, &(0x7f0000002440), &(0x7f0000002480)=0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002580)={{r3, 0xffffffffffffffff}, &(0x7f0000002500), &(0x7f0000002540)=r3}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000025c0)={0x2, 0x7c, "5799210ad5d61bafecfda778e59c246cced88332b8a2b9925451486f38d15f3af4dd94895d9547a773d9a256f125ec0977eb1a86b34b5279069becd049f0fb9c24fca8d09af1332cf8c5fd97b08c3256bff89eac19416249a5635994c9abc63cb2602dd02f84211a6df656267e71a3c0e0ac0aef2f9ee979b805d551"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept$nfc_llcp(r3, 0x0, &(0x7f0000002640)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000002680)={0x1, 0x7fffffffffffffff, 0x4e9}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0xb4, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000002880), &(0x7f00000028c0)=0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002900)={0x2, 0x13, 0x4, 0x0, 0x40, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb2, 0x1, {0x6, 0x33, 0x4, 0x81, 0x0, 0x8, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x40, 0x0, 0x0, 0x70bd26, 0x6}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_lifetime={0x4, 0x2, 0x0, 0x3, 0x80000001, 0xb1}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33}, @sadb_sa={0x2, 0x1, 0x4d4, 0x8, 0x5, 0x71, 0x3, 0x20000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffb}, @in={0x2, 0x4e24, @multicast2}}, @sadb_key={0x16, 0x8, 0x520, 0x0, "1d2a9c439767190be8e320c4b2c862788478bb338e52beb2905f07ebe21ac339e5a698a85a4d2e3b126a13890cccb8f0ef1d6f4ac0880d8bf7fe584de77d559d6cf9a64dd3943686ece783cb53bad686bda4031de720791b9fd516099178d2b306d9a4713c40ac09cef9ae5f13649c890cbe9250ac80a8aed323f4ee95f1e614e5b6ecd631d2c74e64d89e0f923af1dd9df6a966fe5b01e2fff6147bed4ef7b5fc1fc77b"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_sec_ctx={0x5, 0x18, 0xf0, 0xda, 0x1b, "7d43cd3c017ff8939c44eee9b5e5cba4a2068f81335823955cf49a"}]}, 0x200}}, 0x20000000) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) write(r8, &(0x7f0000002c80)="53641c0e97eeaf615cef4c7cbc37e147587a069ca87f267fdbd482bb8f31d597047d673137ba7fd1f80eae1c89bdad0aa95e0bb7c3c450c6e3f9024a1d9e299502690aa7685680b4a81cf44bd31b82e7f6391b4f76e115a9336adf8901668a970734a2b66318480e43395a42c95e54e6eb6cc1ed4fd91bff2bed8389bf6554dd4e6e750f2f0f85cab1bd77aa4e96540fe12ed11d74ea73e10ae15ed9c4035eed7b438072f1bc72ebca798589c8df01029c8ad8aeca2d5861ca88b1a6c46892111ab6cb42ae30e7becdd274fb3a293caa71aa9634f994978b0cb7f67426c3089df1ba", 0xe2) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002dc0)=@o_path={&(0x7f0000002d80)='./file0\x00', 0x0, 0x4018, r5}, 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000002f00)={r0, &(0x7f0000002e00)='\x00', 0x41, &(0x7f0000002e40)={@_ha_fsid={[0x2, 0x800]}, {0x7, 0x7, 0x4, 0x9}}, 0x9963, &(0x7f0000002e80)={@_ha_fsid}, &(0x7f0000002ec0)=0x5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003000)={r10, 0x20, &(0x7f0000002fc0)={&(0x7f0000002f40)=""/7, 0x7, 0x0, &(0x7f0000002f80)=""/15, 0xf}}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r3) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x14, r11, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) splice(r10, &(0x7f0000003180)=0x5, r8, &(0x7f00000031c0)=0x5, 0xffffffff9c384ed9, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x4c, r11, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x51}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x6f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x69}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x55f24451, 0x2d}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x88884) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000003380), &(0x7f0000003400)=0x80) r13 = accept$unix(r3, &(0x7f0000003440), &(0x7f00000034c0)=0x6e) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, &(0x7f0000003780)={{r2}, 0x0, 0x4, @inherit={0x78, &(0x7f0000003700)={0x0, 0x6, 0x9, 0x2, {0x30, 0x7ff, 0xffffffff, 0xfffffffffffffff8, 0x8}, [0x0, 0x1, 0x4, 0x6, 0x1ab, 0xbb2]}}, @name="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"}) 905.279132ms ago: executing program 1 (id=3723): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x51, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000080c0)={0x28, r0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1c}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x800, 0xa}, {@in6=@local, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@local}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 564.342035ms ago: executing program 0 (id=3724): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2001d00bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) 563.851547ms ago: executing program 2 (id=3725): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x4}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000500)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x94}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x10}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048494}, 0x200000c4) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6c7831733ca886e99a61", 0xa}], 0x1}}], 0x1, 0xc8040) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) splice(r8, 0x0, r7, 0x0, 0x7ffff000, 0x6) 456.175324ms ago: executing program 4 (id=3726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x0, 0x7fffffffffffffff, 0x10003}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8001}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000400)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa500000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe08}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000601030095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) 339.881459ms ago: executing program 0 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) unshare(0x26020480) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=3728): unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000100)=0x3b) kernel console output (not intermixed with test programs): 0000000001 R11: 0000000000000246 R12: 0000000000000000 [ 440.150839][T17186] R13: 00007f1991c26128 R14: 00007f1991c26090 R15: 00007fff91bd36c8 [ 440.150941][T17186] [ 440.197895][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.635298][T17196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2660'. [ 441.471791][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 441.616894][T17228] 8021q: VLANs not supported on wg1 [ 441.674529][T17232] batadv_slave_0: entered promiscuous mode [ 441.864807][T17232] v: renamed from veth0_vlan [ 441.925165][T17231] batadv_slave_0: left promiscuous mode [ 442.013515][T17244] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 442.246037][T17244] bond2: entered promiscuous mode [ 442.252111][T17251] netlink: 'syz.0.2673': attribute type 3 has an invalid length. [ 442.268230][T17244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.357402][T17251] bond2: (slave bridge1): making interface the new active one [ 442.365147][T17251] bridge1: entered promiscuous mode [ 442.376248][T17251] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 443.149286][T17280] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2682'. [ 443.577671][T17301] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2686'. [ 443.765433][T17312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.778627][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 443.791207][T17313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 444.257548][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'. [ 444.621316][T17336] netlink: 'syz.4.2696': attribute type 4 has an invalid length. [ 444.729354][T17336] netlink: 'syz.4.2696': attribute type 4 has an invalid length. [ 445.938071][T17359] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2702'. [ 447.078191][T17372] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 447.399412][T17395] netlink: 'syz.4.2710': attribute type 10 has an invalid length. [ 448.106705][T17408] bond11: option ad_select: invalid value (34) [ 448.124892][T17408] bond11 (unregistering): Released all slaves [ 448.381606][T17420] tipc: Enabled bearer , priority 0 [ 448.388849][T17420] syzkaller0: entered promiscuous mode [ 448.389706][T17420] syzkaller0: entered allmulticast mode [ 448.502596][T17420] tipc: Resetting bearer [ 448.626861][T17419] tipc: Resetting bearer [ 448.783491][T17419] tipc: Disabling bearer [ 448.966355][T17438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2723'. [ 448.979605][T17437] syzkaller0: left promiscuous mode [ 448.979645][T17437] syzkaller0: left allmulticast mode [ 449.205997][T17422] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 449.389955][T17452] gre5: entered allmulticast mode [ 449.441974][T17452] netlink: 'syz.4.2727': attribute type 28 has an invalid length. [ 449.442018][T17452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2727'. [ 449.465203][T17452] bridge_slave_0: left promiscuous mode [ 449.471345][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.694584][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 449.704091][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 450.296490][T17487] bridge_slave_1: left allmulticast mode [ 450.306875][T17487] bridge_slave_1: left promiscuous mode [ 450.309637][T17487] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.509738][T17496] syz.3.2737: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 450.523670][T17496] CPU: 1 UID: 0 PID: 17496 Comm: syz.3.2737 Not tainted syzkaller #0 PREEMPT(full) [ 450.523701][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.523716][T17496] Call Trace: [ 450.523725][T17496] [ 450.523736][T17496] dump_stack_lvl+0xe8/0x150 [ 450.523779][T17496] warn_alloc+0x24d/0x270 [ 450.523819][T17496] ? kasan_save_track+0x4f/0x80 [ 450.523877][T17496] ? kasan_save_track+0x3e/0x80 [ 450.523906][T17496] ? __pfx_warn_alloc+0x10/0x10 [ 450.523939][T17496] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 450.524055][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.524101][T17496] __vmalloc_node_range_noprof+0x127/0x1540 [ 450.524163][T17496] ? rcu_is_watching+0x16/0xb0 [ 450.524211][T17496] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.524246][T17496] ? __kmalloc_cache_noprof+0x321/0x600 [ 450.524282][T17496] ? __kmalloc_cache_noprof+0x14d/0x600 [ 450.524311][T17496] ? xskq_create+0x56/0x220 [ 450.524393][T17496] xskq_create+0x148/0x220 [ 450.524425][T17496] ? xsk_init_queue+0x8a/0xe0 [ 450.524451][T17496] xsk_init_queue+0x8a/0xe0 [ 450.524477][T17496] xsk_setsockopt+0x5e0/0x960 [ 450.524504][T17496] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.524527][T17496] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.524599][T17496] ? aa_sock_opt_perm+0x142/0x1e0 [ 450.524623][T17496] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 450.524660][T17496] ? __pfx_xsk_setsockopt+0x10/0x10 [ 450.524686][T17496] do_sock_setsockopt+0x17c/0x1b0 [ 450.524709][T17496] __x64_sys_setsockopt+0x13d/0x1b0 [ 450.524732][T17496] do_syscall_64+0x166/0x520 [ 450.524759][T17496] ? trace_irq_disable+0x3b/0x140 [ 450.524776][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.524800][T17496] ? clear_bhb_loop+0x70/0xc0 [ 450.524822][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.524841][T17496] RIP: 0033:0x7fb6d559e159 [ 450.524859][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.524875][T17496] RSP: 002b:00007fb6d646f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.524895][T17496] RAX: ffffffffffffffda RBX: 00007fb6d5826090 RCX: 00007fb6d559e159 [ 450.524909][T17496] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 450.524922][T17496] RBP: 00007fb6d5635024 R08: 0000000000000004 R09: 0000000000000000 [ 450.524934][T17496] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.524945][T17496] R13: 00007fb6d5826128 R14: 00007fb6d5826090 R15: 00007ffceb146ec8 [ 450.524974][T17496] [ 450.567461][T17487] team0: Port device team_slave_0 removed [ 450.646339][T17496] Mem-Info: [ 450.646390][T17496] active_anon:6495 inactive_anon:0 isolated_anon:0 [ 450.646390][T17496] active_file:1 inactive_file:43489 isolated_file:0 [ 450.646390][T17496] unevictable:725 dirty:208 writeback:0 [ 450.646390][T17496] slab_reclaimable:11845 slab_unreclaimable:121719 [ 450.646390][T17496] mapped:32438 shmem:1325 pagetables:1297 [ 450.646390][T17496] sec_pagetables:0 bounce:0 [ 450.646390][T17496] kernel_misc_reclaimable:0 [ 450.646390][T17496] free:1299137 free_pcp:8029 free_cma:0 [ 450.646547][T17496] Node 0 active_anon:25980kB inactive_anon:0kB active_file:4kB inactive_file:173760kB unevictable:2900kB isolated(anon):0kB isolated(file):0kB mapped:129752kB dirty:828kB writeback:0kB shmem:5300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16492kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 450.647135][T17496] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 450.647320][T17496] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.647504][T17496] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 450.647624][T17496] Node 0 DMA32 free:1239708kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25980kB inactive_anon:0kB active_file:4kB inactive_file:173760kB unevictable:2900kB writepending:828kB zspages:0kB present:3129332kB managed:2546700kB mlocked:3000kB bounce:0kB free_pcp:32116kB local_pcp:16508kB free_cma:0kB [ 450.647799][T17496] lowmem_reserve[]: 0 0 0 0 0 [ 450.647926][T17496] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.648074][T17496] lowmem_reserve[]: 0 0 0 0 0 [ 450.648179][T17496] Node 1 Normal free:3941480kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 450.648346][T17496] lowmem_reserve[]: 0 0 0 0 0 [ 450.648487][T17496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 450.768039][T17496] Node 0 DMA32: 2041*4kB (UME) 851*8kB (UME) 166*16kB (ME) 512*32kB (UM) 160*64kB (UM) 229*128kB (UME) 143*256kB (UME) 18*512kB (UME) 22*1024kB (UME) 8*2048kB (UME) 264*4096kB (UM) = 1239644kB [ 450.768482][T17496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 450.768597][T17496] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941480kB [ 450.769010][T17496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.769064][T17496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.769134][T17496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 450.769185][T17496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 450.769229][T17496] 44836 total pagecache pages [ 450.769269][T17496] 0 pages in swap cache [ 450.769291][T17496] Free swap = 124996kB [ 450.769313][T17496] Total swap = 124996kB [ 450.769336][T17496] 2097051 pages RAM [ 450.769365][T17496] 0 pages HighMem/MovableOnly [ 450.769386][T17496] 428760 pages reserved [ 450.769417][T17496] 0 pages cma reserved [ 451.386668][T17487] team0: Port device team_slave_1 removed [ 451.470239][T17487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.572912][T17493] erspan1: entered promiscuous mode [ 451.913327][T17509] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2744'. [ 452.053773][T17519] syzkaller0: entered promiscuous mode [ 452.054433][T17519] syzkaller0: entered allmulticast mode [ 452.164634][T17528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.220977][T17519] tipc: Enabled bearer , priority 0 [ 452.324211][T17519] tipc: Resetting bearer [ 452.402519][T17518] tipc: Resetting bearer [ 452.488064][T17538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.556858][T17518] tipc: Disabling bearer [ 452.714829][T17541] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 452.849066][T17553] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 453.038612][T17558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2757'. [ 453.310751][T17570] bridge9: entered promiscuous mode [ 453.310799][T17570] bridge9: entered allmulticast mode [ 453.417451][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 453.558402][T17576] veth0: entered promiscuous mode [ 453.567446][T17573] veth0: left promiscuous mode [ 453.978820][T17586] netlink: 'syz.3.2764': attribute type 3 has an invalid length. [ 453.987014][T17586] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2764'. [ 454.280662][T17593] openvswitch: netlink: IPv4 tun info is not correct [ 454.301309][T17591] trusted_key: syz.3.2767 sent an empty control message without MSG_MORE. [ 454.386608][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 454.426681][T17599] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2768'. [ 454.639989][T17603] sctp: [Deprecated]: syz.4.2770 (pid 17603) Use of int in max_burst socket option deprecated. [ 454.639989][T17603] Use struct sctp_assoc_value instead [ 454.658770][T17603] x_tables: duplicate underflow at hook 1 [ 455.608257][T17628] tipc: Enabled bearer , priority 0 [ 455.626834][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 455.626881][T17628] openvswitch: netlink: Flow actions attr not present in new flow. [ 455.966364][ T7479] IPVS: starting estimator thread 0... [ 456.052959][T17643] IPVS: using max 27 ests per chain, 64800 per kthread [ 456.287680][T17612] lo speed is unknown, defaulting to 1000 [ 456.307036][T17612] wg2 speed is unknown, defaulting to 1000 [ 456.877886][ T6671] tipc: Node number set to 264710509 [ 456.978080][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 457.080743][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 457.594444][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.610134][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.624881][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.640001][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.666358][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.686956][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.706780][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.734296][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.773087][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 457.785761][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 457.804355][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.842062][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.893600][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.934924][T17682] openvswitch: netlink: Missing valid actions attribute. [ 457.942317][T17682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.957180][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.006041][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.076177][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.092654][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.106047][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.119561][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.133793][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.148471][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.162190][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.177340][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.240262][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.298353][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.339316][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.351219][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.363420][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.375231][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.387405][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.399409][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.411184][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.428959][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.440990][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.453883][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.466220][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.506333][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.519828][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.536911][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.549328][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.562079][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.574488][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.586816][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.600624][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.613762][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.627393][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.639926][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.652168][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.665978][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.672889][ T31] audit: type=1804 audit(1788668324.094:9): pid=17688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2789" name="/newroot/118/cgroup.controllers" dev="tmpfs" ino=618 res=1 errno=0 [ 458.700890][ T31] audit: type=1800 audit(1788668324.124:10): pid=17688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2789" name="cgroup.controllers" dev="tmpfs" ino=618 res=0 errno=0 [ 458.820626][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.835644][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.847778][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.861371][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.303715][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 459.349407][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 459.405777][T17711] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 459.414687][T17711] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2797'. [ 459.450928][T17711] team0: Port device wg2 added [ 459.574809][T17716] --map-set only usable from mangle table [ 459.732609][T17726] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 459.749294][T17723] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2801'. [ 460.027498][T17738] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 460.041503][T17738] netlink: 'syz.2.2804': attribute type 1 has an invalid length. [ 460.050697][T17738] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2804'. [ 460.062609][T17738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2804'. [ 460.589991][T17748] netlink: 'syz.4.2808': attribute type 15 has an invalid length. [ 460.590035][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2808'. [ 460.819047][T17757] tipc: Started in network mode [ 460.819101][T17757] tipc: Node identity 5300000000000000005f000000000001, cluster identity 4711 [ 460.819184][T17757] tipc: Enabling of bearer rejected, failed to enable media [ 460.998343][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2811'. [ 461.585897][T17780] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2818'. [ 461.596270][T17780] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2818'. [ 462.633573][T17788] netlink: 'syz.3.2820': attribute type 83 has an invalid length. [ 463.591189][T17831] netlink: 'syz.4.2831': attribute type 1 has an invalid length. [ 463.818713][T17831] 8021q: adding VLAN 0 to HW filter on device bond14 [ 463.921004][T17838] : renamed from dummy0 (while UP) [ 464.359971][T17854] tc_dump_action: action bad kind [ 464.418903][T17859] sysfs: cannot create duplicate filename '/class/ieee80211/!ù' [ 464.479708][T17859] CPU: 0 UID: 0 PID: 17859 Comm: syz.1.2834 Not tainted syzkaller #0 PREEMPT(full) [ 464.479743][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.479758][T17859] Call Trace: [ 464.479767][T17859] [ 464.479778][T17859] dump_stack_lvl+0xe8/0x150 [ 464.479828][T17859] sysfs_warn_dup+0x8e/0xa0 [ 464.479904][T17859] sysfs_do_create_link_sd+0xc0/0x110 [ 464.479947][T17859] device_add_class_symlinks+0x1cf/0x240 [ 464.480102][T17859] device_add+0x467/0xb80 [ 464.480141][T17859] wiphy_register+0x1fc8/0x2ff0 [ 464.480246][T17859] ? __pfx_wiphy_register+0x10/0x10 [ 464.480278][T17859] ? __pfx_netdev_run_todo+0x10/0x10 [ 464.480370][T17859] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 464.480451][T17859] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 464.480553][T17859] ieee80211_register_hw+0x3d3d/0x4a50 [ 464.480664][T17859] ? ieee80211_register_hw+0x1941/0x4a50 [ 464.480729][T17859] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 464.480769][T17859] ? __asan_memset+0x22/0x50 [ 464.480814][T17859] ? __hrtimer_setup+0x1b7/0x260 [ 464.480845][T17859] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 464.480927][T17859] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 464.480984][T17859] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 464.481041][T17859] ? kstrndup+0xbd/0x160 [ 464.481077][T17859] ? kstrndup+0xbd/0x160 [ 464.481102][T17859] hwsim_new_radio_nl+0xd8b/0xf90 [ 464.481159][T17859] genl_family_rcv_msg_doit+0x233/0x340 [ 464.481259][T17859] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 464.481313][T17859] ? bpf_lsm_capable+0x9/0x20 [ 464.481348][T17859] ? security_capable+0x7e/0x2c0 [ 464.481409][T17859] genl_rcv_msg+0x614/0x7a0 [ 464.481455][T17859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.481491][T17859] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 464.481547][T17859] netlink_rcv_skb+0x226/0x4a0 [ 464.481578][T17859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.481613][T17859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.481661][T17859] ? down_read+0x2be/0x330 [ 464.481732][T17859] genl_rcv+0x28/0x40 [ 464.481766][T17859] netlink_unicast+0x7bd/0x940 [ 464.481826][T17859] netlink_sendmsg+0x813/0xb40 [ 464.481869][T17859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.481909][T17859] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.481976][T17859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.482004][T17859] sock_sendmsg_nosec+0x13a/0x180 [ 464.482073][T17859] ____sys_sendmsg+0x54e/0x850 [ 464.482106][T17859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.482143][T17859] ? import_iovec+0x73/0xa0 [ 464.482175][T17859] ___sys_sendmsg+0x2a5/0x360 [ 464.482200][T17859] ? __lock_acquire+0x6df/0x2e50 [ 464.482229][T17859] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.482259][T17859] ? futex_wait+0x2a2/0x390 [ 464.482328][T17859] ? __fget_files+0x2a/0x420 [ 464.482358][T17859] ? __fget_files+0x3a2/0x420 [ 464.482401][T17859] __x64_sys_sendmsg+0x1b1/0x290 [ 464.482430][T17859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.482480][T17859] do_syscall_64+0x166/0x520 [ 464.482513][T17859] ? trace_irq_disable+0x3b/0x140 [ 464.482535][T17859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.482559][T17859] ? clear_bhb_loop+0x70/0xc0 [ 464.482589][T17859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.482612][T17859] RIP: 0033:0x7f1ecb19e159 [ 464.482634][T17859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.482653][T17859] RSP: 002b:00007f1ec93f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.482678][T17859] RAX: ffffffffffffffda RBX: 00007f1ecb425fa0 RCX: 00007f1ecb19e159 [ 464.482695][T17859] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 464.482709][T17859] RBP: 00007f1ecb235024 R08: 0000000000000000 R09: 0000000000000000 [ 464.482723][T17859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.482737][T17859] R13: 00007f1ecb426038 R14: 00007f1ecb425fa0 R15: 00007ffd55a45388 [ 464.482775][T17859] [ 465.219911][T17848] syzkaller0: entered promiscuous mode [ 465.228933][T17848] syzkaller0: entered allmulticast mode [ 465.697878][T17886] __nla_validate_parse: 4 callbacks suppressed [ 465.706349][T17886] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.2837'. [ 470.910910][T17915] ip6gretap1: entered allmulticast mode [ 471.839462][T17935] syzkaller1: entered promiscuous mode [ 471.845145][T17935] syzkaller1: entered allmulticast mode [ 472.203050][T17939] bond11 (unregistering): Released all slaves [ 473.585733][T17986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2870'. [ 473.585786][T17986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2870'. [ 473.800166][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 473.800217][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 474.035684][T18001] syzkaller0: entered promiscuous mode [ 474.041923][T18001] syzkaller0: entered allmulticast mode [ 474.169070][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2877'. [ 474.599738][T18022] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20002 [ 475.022883][T18031] siw: device registration error -23 [ 475.047116][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 475.308575][T18035] FAULT_INJECTION: forcing a failure. [ 475.308575][T18035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.322550][T18035] CPU: 1 UID: 0 PID: 18035 Comm: syz.4.2884 Not tainted syzkaller #0 PREEMPT(full) [ 475.322585][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.322599][T18035] Call Trace: [ 475.322610][T18035] [ 475.322620][T18035] dump_stack_lvl+0xe8/0x150 [ 475.322661][T18035] should_fail_ex+0x410/0x560 [ 475.322824][T18035] _copy_from_user+0x2d/0xb0 [ 475.322877][T18035] ___sys_sendmsg+0x1c6/0x360 [ 475.322905][T18035] ? __lock_acquire+0x6df/0x2e50 [ 475.322935][T18035] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.322998][T18035] ? __fget_files+0x2a/0x420 [ 475.323028][T18035] ? __fget_files+0x3a2/0x420 [ 475.323069][T18035] __x64_sys_sendmsg+0x1b1/0x290 [ 475.323097][T18035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.323146][T18035] do_syscall_64+0x166/0x520 [ 475.323180][T18035] ? trace_irq_disable+0x3b/0x140 [ 475.323202][T18035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.323228][T18035] ? clear_bhb_loop+0x70/0xc0 [ 475.323266][T18035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.323289][T18035] RIP: 0033:0x7fd2c279e159 [ 475.323311][T18035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.323331][T18035] RSP: 002b:00007fd2c359f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.323358][T18035] RAX: ffffffffffffffda RBX: 00007fd2c2a26090 RCX: 00007fd2c279e159 [ 475.323375][T18035] RDX: 0000000000000800 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 475.323390][T18035] RBP: 00007fd2c359f090 R08: 0000000000000000 R09: 0000000000000000 [ 475.323404][T18035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.323418][T18035] R13: 00007fd2c2a26128 R14: 00007fd2c2a26090 R15: 00007ffc49a3f708 [ 475.323455][T18035] [ 475.744014][T18039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'. [ 477.100527][T18030] lo speed is unknown, defaulting to 1000 [ 477.111001][T18030] wg2 speed is unknown, defaulting to 1000 [ 477.298963][T18087] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 477.377723][T18054] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 477.503661][T18093] FAULT_INJECTION: forcing a failure. [ 477.503661][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.518669][T18093] CPU: 1 UID: 0 PID: 18093 Comm: syz.1.2898 Not tainted syzkaller #0 PREEMPT(full) [ 477.518700][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.518714][T18093] Call Trace: [ 477.518723][T18093] [ 477.518733][T18093] dump_stack_lvl+0xe8/0x150 [ 477.518776][T18093] should_fail_ex+0x410/0x560 [ 477.518819][T18093] _copy_to_user+0x31/0xb0 [ 477.518846][T18093] simple_read_from_buffer+0xe1/0x170 [ 477.518886][T18093] proc_fail_nth_read+0x1bb/0x230 [ 477.518963][T18093] ? common_file_perm+0x20e/0x2b0 [ 477.518991][T18093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.519029][T18093] ? rw_verify_area+0x24a/0x4c0 [ 477.519063][T18093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.519106][T18093] vfs_read+0x213/0xa80 [ 477.519149][T18093] ? __pfx___mutex_lock+0x10/0x10 [ 477.519247][T18093] ? __pfx_vfs_read+0x10/0x10 [ 477.519279][T18093] ? __fget_files+0x2a/0x420 [ 477.519312][T18093] ? __fget_files+0x3a2/0x420 [ 477.519338][T18093] ? __fget_files+0x2a/0x420 [ 477.519374][T18093] ksys_read+0x150/0x270 [ 477.519418][T18093] ? __pfx_ksys_read+0x10/0x10 [ 477.519463][T18093] do_syscall_64+0x166/0x520 [ 477.519495][T18093] ? trace_irq_disable+0x3b/0x140 [ 477.519519][T18093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.519543][T18093] ? clear_bhb_loop+0x70/0xc0 [ 477.519571][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.519593][T18093] RIP: 0033:0x7f1ecb15e98e [ 477.519612][T18093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 477.519637][T18093] RSP: 002b:00007f1ec93f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.519661][T18093] RAX: ffffffffffffffda RBX: 00007f1ec93f66c0 RCX: 00007f1ecb15e98e [ 477.519678][T18093] RDX: 000000000000000f RSI: 00007f1ec93f60a0 RDI: 0000000000000004 [ 477.519691][T18093] RBP: 00007f1ec93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.519706][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.519719][T18093] R13: 00007f1ecb426038 R14: 00007f1ecb425fa0 R15: 00007ffd55a45388 [ 477.519756][T18093] [ 477.567047][T18054] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 478.554579][T18104] ip_tables: iptables: counters copy to user failed while replacing table [ 478.623430][T18107] netlink: 'syz.0.2900': attribute type 10 has an invalid length. [ 478.776532][T18107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.788436][T18107] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 478.789281][T18107] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 478.845262][T18114] team0: Device syz_tun is already a lower device of the team interface [ 479.224420][T18115] ip6gre2: entered promiscuous mode [ 479.233923][T18115] ip6gre2: entered allmulticast mode [ 479.782629][ T7501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.782966][ T7501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.831493][ T5734] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.852079][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.922108][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.225434][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.235606][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.249932][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.259305][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.273723][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.332461][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.350580][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.359378][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.390372][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.440331][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.574557][T18154] FAULT_INJECTION: forcing a failure. [ 480.574557][T18154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.588015][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.3.2916 Not tainted syzkaller #0 PREEMPT(full) [ 480.588047][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.588061][T18154] Call Trace: [ 480.588071][T18154] [ 480.588080][T18154] dump_stack_lvl+0xe8/0x150 [ 480.588117][T18154] should_fail_ex+0x410/0x560 [ 480.588156][T18154] _copy_from_user+0x2d/0xb0 [ 480.588182][T18154] __copy_msghdr+0x390/0x590 [ 480.588213][T18154] ___sys_sendmsg+0x213/0x360 [ 480.588236][T18154] ? __lock_acquire+0x6df/0x2e50 [ 480.588274][T18154] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.588303][T18154] ? kstrtouint+0x6e/0xe0 [ 480.588362][T18154] ? __fget_files+0x2a/0x420 [ 480.588389][T18154] ? __fget_files+0x3a2/0x420 [ 480.588430][T18154] __sys_sendmmsg+0x273/0x4d0 [ 480.588461][T18154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 480.588496][T18154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 480.588546][T18154] ? ksys_write+0x242/0x270 [ 480.588579][T18154] ? __pfx_ksys_write+0x10/0x10 [ 480.588618][T18154] __x64_sys_sendmmsg+0xa0/0xc0 [ 480.588645][T18154] do_syscall_64+0x166/0x520 [ 480.588677][T18154] ? trace_irq_disable+0x3b/0x140 [ 480.588698][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.588721][T18154] ? clear_bhb_loop+0x70/0xc0 [ 480.588749][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.588772][T18154] RIP: 0033:0x7fb6d559e159 [ 480.588792][T18154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.588812][T18154] RSP: 002b:00007fb6d6490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 480.588837][T18154] RAX: ffffffffffffffda RBX: 00007fb6d5825fa0 RCX: 00007fb6d559e159 [ 480.588853][T18154] RDX: 0000000000000020 RSI: 0000200000002f00 RDI: 0000000000000003 [ 480.588868][T18154] RBP: 00007fb6d6490090 R08: 0000000000000000 R09: 0000000000000000 [ 480.588882][T18154] R10: 0000000060004099 R11: 0000000000000246 R12: 0000000000000001 [ 480.588896][T18154] R13: 00007fb6d5826038 R14: 00007fb6d5825fa0 R15: 00007ffceb146ec8 [ 480.588932][T18154] [ 481.164644][T18163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.266715][T18169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.380795][T18163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.901277][T18189] netlink: 'syz.0.2922': attribute type 34 has an invalid length. [ 481.901324][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 482.051198][T18189] bond3: option lacp_strict: invalid value (109) [ 482.106013][T18189] bond3 (unregistering): Released all slaves [ 482.307375][T18199] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 482.394938][T18199] bond11: option mode: invalid value (8) [ 482.407986][T18199] bond11 (unregistering): Released all slaves [ 482.517740][T18208] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 482.517982][T18208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2924'. [ 482.601852][ T5629] Bluetooth: hci5: command tx timeout [ 482.790376][T18202] : entered allmulticast mode [ 482.798155][T18198] : left allmulticast mode [ 483.279479][T18227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 483.428248][T18219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2930'. [ 483.551955][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 483.727952][T18233] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 483.740956][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.989090][T18143] lo speed is unknown, defaulting to 1000 [ 483.997714][T18143] wg2 speed is unknown, defaulting to 1000 [ 484.061154][T18245] netlink: 'syz.1.2936': attribute type 11 has an invalid length. [ 484.557867][T18256] x_tables: duplicate underflow at hook 2 [ 484.671816][ T5629] Bluetooth: hci5: command tx timeout [ 485.046065][T18270] xt_CT: No such helper "snmp_trap" [ 485.147089][T18266] veth11: entered promiscuous mode [ 485.243649][T18278] FAULT_INJECTION: forcing a failure. [ 485.243649][T18278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.243704][T18278] CPU: 1 UID: 0 PID: 18278 Comm: syz.0.2946 Not tainted syzkaller #0 PREEMPT(full) [ 485.243732][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.243747][T18278] Call Trace: [ 485.243756][T18278] [ 485.243766][T18278] dump_stack_lvl+0xe8/0x150 [ 485.243807][T18278] should_fail_ex+0x410/0x560 [ 485.243850][T18278] _copy_from_user+0x2d/0xb0 [ 485.243878][T18278] ___sys_recvmsg+0x173/0x5a0 [ 485.243913][T18278] ? __pfx____sys_recvmsg+0x10/0x10 [ 485.243956][T18278] ? lock_acquire+0x115/0x350 [ 485.244013][T18278] do_recvmmsg+0x31a/0x7f0 [ 485.244049][T18278] ? __pfx_do_recvmmsg+0x10/0x10 [ 485.244089][T18278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.244127][T18278] ? __fget_files+0x3a2/0x420 [ 485.244170][T18278] __x64_sys_recvmmsg+0x198/0x250 [ 485.244201][T18278] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 485.244240][T18278] do_syscall_64+0x166/0x520 [ 485.244273][T18278] ? trace_irq_disable+0x3b/0x140 [ 485.244295][T18278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.244319][T18278] ? clear_bhb_loop+0x70/0xc0 [ 485.244347][T18278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.244370][T18278] RIP: 0033:0x7f2cf4f9e159 [ 485.244392][T18278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.244412][T18278] RSP: 002b:00007f2cf5e2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 485.244437][T18278] RAX: ffffffffffffffda RBX: 00007f2cf5225fa0 RCX: 00007f2cf4f9e159 [ 485.244455][T18278] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 485.244472][T18278] RBP: 00007f2cf5e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 485.244487][T18278] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 485.244501][T18278] R13: 00007f2cf5226038 R14: 00007f2cf5225fa0 R15: 00007ffe39b97b88 [ 485.244538][T18278] [ 485.536155][T18143] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.536289][T18143] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.536529][T18143] bridge_slave_0: entered allmulticast mode [ 485.559377][T18143] bridge_slave_0: entered promiscuous mode [ 485.571164][T18143] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.579220][T18143] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.579427][T18143] bridge_slave_1: entered allmulticast mode [ 485.602188][T18143] bridge_slave_1: entered promiscuous mode [ 485.622453][T18289] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 485.835462][T18291] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 485.930105][T18143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.978832][T18143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.023122][T18143] team0: Port device team_slave_0 added [ 486.033811][T18143] team0: Port device team_slave_1 added [ 486.074111][T18143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.081296][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.108278][T18143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.131921][T18143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.137440][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.137546][T18143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.329336][T18143] hsr_slave_0: entered promiscuous mode [ 486.336462][T18143] hsr_slave_1: entered promiscuous mode [ 486.343380][T18309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 486.352515][T18309] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 486.364297][T18143] debugfs: 'hsr0' already exists in 'hsr' [ 486.370535][T18143] Cannot create hsr debugfs directory [ 486.450355][T18309] geneve4: entered promiscuous mode [ 486.751867][ T5629] Bluetooth: hci5: command tx timeout [ 486.872948][T18317] syzkaller0: entered promiscuous mode [ 486.873885][T18317] syzkaller0: entered allmulticast mode [ 487.143089][T18317] tipc: Enabling of bearer rejected, already enabled [ 487.480158][T18143] bond0: (slave netdevsim1): Releasing backup interface [ 487.502912][T18143] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 487.999185][T18337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.168019][T18337] bond_slave_0: entered promiscuous mode [ 488.193260][T18337] batadv_slave_1: entered promiscuous mode [ 488.207968][T18337] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.219830][T18337] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.237882][T18337] veth1_vlan: left promiscuous mode [ 488.245803][T18337] v: left promiscuous mode [ 488.256595][T18337] v: entered promiscuous mode [ 488.266634][T18337] veth1_vlan: entered promiscuous mode [ 488.294097][T18328] FAULT_INJECTION: forcing a failure. [ 488.294097][T18328] name fail_futex, interval 1, probability 0, space 0, times 1 [ 488.294154][T18328] CPU: 1 UID: 0 PID: 18328 Comm: syz.4.2958 Not tainted syzkaller #0 PREEMPT(full) [ 488.294182][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.294197][T18328] Call Trace: [ 488.294205][T18328] [ 488.294215][T18328] dump_stack_lvl+0xe8/0x150 [ 488.294254][T18328] should_fail_ex+0x410/0x560 [ 488.294296][T18328] get_futex_key+0x1b4/0x1580 [ 488.294327][T18328] ? perf_lock_task_context+0x79b/0x850 [ 488.294394][T18328] ? __pfx_get_futex_key+0x10/0x10 [ 488.294423][T18328] ? __pfx___mutex_trylock_common+0x10/0x10 [ 488.294462][T18328] futex_wake+0x119/0x5f0 [ 488.294501][T18328] ? __pfx_futex_wake+0x10/0x10 [ 488.294546][T18328] ? mm_exit_exec_release+0x20/0x290 [ 488.294599][T18328] do_futex+0x458/0x4e0 [ 488.294634][T18328] ? __pfx_do_futex+0x10/0x10 [ 488.294669][T18328] ? __might_fault+0xaf/0x130 [ 488.294739][T18328] mm_exit_exec_release+0x10d/0x290 [ 488.294773][T18328] exit_mm+0x4d/0x2d0 [ 488.294818][T18328] do_exit+0x6cd/0x2360 [ 488.294850][T18328] ? __pfx_do_exit+0x10/0x10 [ 488.294877][T18328] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.294919][T18328] do_group_exit+0x22d/0x2f0 [ 488.294941][T18328] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.294977][T18328] get_signal+0x121b/0x12c0 [ 488.295031][T18328] arch_do_signal_or_restart+0xbb/0x860 [ 488.295084][T18328] ? __fget_files+0x3a2/0x420 [ 488.295115][T18328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 488.295157][T18328] ? __x64_sys_recvmmsg+0x198/0x250 [ 488.295202][T18328] exit_to_user_mode_loop+0x10e/0x770 [ 488.295227][T18328] ? rcu_is_watching+0x16/0xb0 [ 488.295259][T18328] do_syscall_64+0x328/0x520 [ 488.295291][T18328] ? trace_irq_disable+0x3b/0x140 [ 488.295313][T18328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.295337][T18328] ? clear_bhb_loop+0x70/0xc0 [ 488.295367][T18328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.295390][T18328] RIP: 0033:0x7fd2c279e159 [ 488.295411][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.295431][T18328] RSP: 002b:00007fd2c35c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 488.295455][T18328] RAX: fffffffffffffe00 RBX: 00007fd2c2a25fa0 RCX: 00007fd2c279e159 [ 488.295473][T18328] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 488.295489][T18328] RBP: 00007fd2c35c0090 R08: 0000000000000000 R09: 0000000000000000 [ 488.295504][T18328] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 488.295518][T18328] R13: 00007fd2c2a26038 R14: 00007fd2c2a25fa0 R15: 00007ffc49a3f708 [ 488.295555][T18328] [ 488.405604][T18337] veth1_vlan: entered allmulticast mode [ 488.620218][T18337] veth1_macvtap: left promiscuous mode [ 488.632185][T18337] veth0_macvtap: left promiscuous mode [ 488.639086][T18337] veth1_macvtap: entered promiscuous mode [ 488.652836][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.661852][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.670257][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.679268][T18337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.691730][T18337] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 488.831936][ T5629] Bluetooth: hci5: command tx timeout [ 489.730271][T18371] netlink: 'syz.0.2968': attribute type 30 has an invalid length. [ 489.912980][T18371] netlink: 'syz.0.2968': attribute type 30 has an invalid length. [ 489.982976][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2969'. [ 490.175495][T18143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.194880][T18143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.205945][T18143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.216784][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 490.226437][T18377] netlink: 'syz.3.2969': attribute type 30 has an invalid length. [ 490.237842][T18377] netlink: 'syz.3.2969': attribute type 29 has an invalid length. [ 490.237893][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 490.258702][T18143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.268813][T18143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.284802][T18143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.304816][T18143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.317107][T18143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.336234][T18377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2969'. [ 490.666101][T18143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.780679][T18143] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.827859][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.827988][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.864316][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.880919][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.881064][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.912612][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.952912][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.953352][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.954134][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 490.996955][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 491.392038][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 491.392273][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.228656][T18436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.028758][T18143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.119841][T18143] veth0_vlan: entered promiscuous mode [ 493.146843][T18143] veth1_vlan: entered promiscuous mode [ 493.193558][T18143] veth0_macvtap: entered promiscuous mode [ 493.206476][T18143] veth1_macvtap: entered promiscuous mode [ 493.236095][T18143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.258132][T18143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.301310][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.301386][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.301452][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.301496][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.988560][T18430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.128400][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.128442][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.507392][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.507439][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.586152][T18470] syzkaller0: left promiscuous mode [ 495.587021][T18470] syzkaller0: left allmulticast mode [ 495.858130][T18486] __nla_validate_parse: 2 callbacks suppressed [ 495.865061][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 495.865106][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 496.027083][T18475] smc: removing ib device syz0 [ 496.061605][T18493] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 496.074755][T18491] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 496.174882][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 496.175416][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 496.610098][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.631926][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.642390][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.658233][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.667899][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.302783][ T5627] team0: Port device vlan4 removed [ 497.353908][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'. [ 497.837904][T18475] smbdirect: ib_dev[syz0] removed [ 498.167079][ T136] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.195468][ T136] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.757562][ T136] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.758080][ T136] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.760885][ T5629] Bluetooth: hci2: command tx timeout [ 498.855483][T18535] netlink: 'syz.2.2995': attribute type 8 has an invalid length. [ 499.219772][ T136] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.219840][ T136] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.615173][ T136] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.654335][ T136] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.200220][T18502] lo speed is unknown, defaulting to 1000 [ 500.249266][T18502] wg2 speed is unknown, defaulting to 1000 [ 500.424287][T18558] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 500.424332][T18558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3000'. [ 500.424373][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 500.831775][ T5629] Bluetooth: hci2: command tx timeout [ 500.912429][ T7497] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.980078][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 501.572313][ T7490] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.637390][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.002583][ T7490] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.013230][ T7490] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.750007][T18599] netlink: 'syz.1.3008': attribute type 1 has an invalid length. [ 502.913291][ T5629] Bluetooth: hci2: command tx timeout [ 504.268176][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3011'. [ 504.991740][ T5629] Bluetooth: hci2: command tx timeout [ 505.057457][ T136] bond9 (unregistering): (slave geneve3): Releasing active interface [ 505.159685][ T136] bond2 (unregistering): (slave geneve2): Releasing active interface [ 505.276711][ T136] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 505.522981][ T136] bond1 (unregistering): Released all slaves [ 505.579305][ T136] bond2 (unregistering): Released all slaves [ 505.707677][ T136] team0: Port device macvlan2 removed [ 505.762931][ T136] bond3 (unregistering): Released all slaves [ 505.814542][ T136] bond4 (unregistering): Released all slaves [ 505.839750][ T136] bond5 (unregistering): Released all slaves [ 505.867355][ T136] bond6 (unregistering): Released all slaves [ 505.895389][ T136] bond7 (unregistering): Released all slaves [ 505.924894][ T136] bond8 (unregistering): Released all slaves [ 505.963292][ T136] bond9 (unregistering): Released all slaves [ 506.038590][ T136] bond0 (unregistering): Released all slaves [ 506.067177][ T136] bond10 (unregistering): Released all slaves [ 506.121891][ T136] bond11 (unregistering): Released all slaves [ 506.143637][ T136] bond12 (unregistering): Released all slaves [ 506.164791][ T136] bond13 (unregistering): Released all slaves [ 506.197705][ T136] bond14 (unregistering): Released all slaves [ 506.229522][T18592] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3007'. [ 506.784214][ T136] tipc: Left network mode [ 507.086853][T18652] bond11: entered allmulticast mode [ 507.560801][T18654] netlink: 'syz.3.3017': attribute type 4 has an invalid length. [ 507.976571][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 509.065995][T18708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3027'. [ 509.102411][T18704] vlan2: entered allmulticast mode [ 509.108013][T18704] bond0: entered allmulticast mode [ 509.114267][T18704] bond_slave_0: entered allmulticast mode [ 509.120527][T18704] bond_slave_1: entered allmulticast mode [ 509.129485][T18709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3027'. [ 509.857556][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.904865][T18734] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 509.928155][T18733] netlink: 'syz.1.3031': attribute type 83 has an invalid length. [ 509.976375][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.977896][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.987489][T18502] bridge_slave_0: entered allmulticast mode [ 510.043159][T18502] bridge_slave_0: entered promiscuous mode [ 510.235513][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.236850][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.237782][T18502] bridge_slave_1: entered allmulticast mode [ 510.275103][T18502] bridge_slave_1: entered promiscuous mode [ 510.601987][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 510.701310][T18743] syzkaller1: entered promiscuous mode [ 510.701351][T18743] syzkaller1: entered allmulticast mode [ 510.753533][ T136] hsr_slave_0: left promiscuous mode [ 510.766610][ T136] hsr_slave_1: left promiscuous mode [ 510.811721][T18759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 511.755295][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.769502][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.198465][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 512.390952][T18502] team0: Port device team_slave_0 added [ 512.419287][T18502] team0: Port device team_slave_1 added [ 512.608461][T18792] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 512.633480][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 512.674482][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.674719][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.674946][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.758990][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.759221][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.759447][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.159369][ T136] IPVS: stop unused estimator thread 0... [ 513.216959][T18814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.230060][T18814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.516768][T18502] hsr_slave_0: entered promiscuous mode [ 513.525106][T18502] hsr_slave_1: entered promiscuous mode [ 513.536399][T18502] debugfs: 'hsr0' already exists in 'hsr' [ 513.542654][T18502] Cannot create hsr debugfs directory [ 513.786170][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'. [ 514.781266][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 515.087414][T18502] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.258135][T18866] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3059'. [ 515.352265][T18502] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.148572][T18502] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.159991][T18896] xt_bpf: check failed: parse error [ 516.251510][T18896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.445114][T18908] ip6t_REJECT: ECHOREPLY is not supported [ 516.570628][T18502] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.711225][T18938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3072'. [ 517.722236][T18938] netlink: NAT attribute has 8 unknown bytes [ 517.728471][T18938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.763044][T18927] syzkaller1: entered promiscuous mode [ 517.763153][T18927] syzkaller1: entered allmulticast mode [ 518.257244][T18963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 518.864869][T18502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.907659][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.135395][T18502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.222288][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.223302][T18502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 519.321221][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.343453][T18502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.410517][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.070833][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.204404][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.270164][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.270298][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.336539][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.336651][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.625276][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 521.273467][T19038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.764717][T19045] syzkaller0: entered promiscuous mode [ 521.765675][T19045] syzkaller0: entered allmulticast mode [ 522.081241][T19065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'. [ 522.159192][T19066] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3095'. [ 522.573675][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.592923][T19077] tipc: New replicast peer: 172.20.20.170 [ 522.621749][T19077] tipc: Enabled bearer , priority 26 [ 522.628498][T19077] tipc: New replicast peer: 0.0.0.0 [ 522.918647][T19083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3100'. [ 523.122366][T19094] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3101'. [ 523.311099][T19102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3103'. [ 523.637176][T18502] veth0_vlan: entered promiscuous mode [ 523.679811][T18502] veth1_vlan: entered promiscuous mode [ 523.962728][ T6672] tipc: Node number set to 1398734849 [ 524.071260][T18502] veth0_macvtap: entered promiscuous mode [ 524.089700][T18502] veth1_macvtap: entered promiscuous mode [ 524.114215][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.140174][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.211896][ T7501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.214358][ T7501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.216627][ T7501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.218303][ T7501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.645482][T18113] udevd[18113]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 524.664642][T18113] udevd[18113]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 524.844277][ T7490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.853446][ T7490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.151048][T19153] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3109'. [ 525.183187][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3109'. [ 525.291049][T19164] netlink: 'syz.0.3109': attribute type 10 has an invalid length. [ 525.300415][T19164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3109'. [ 525.745844][T19156] netlink: 'syz.2.3110': attribute type 7 has an invalid length. [ 525.779248][T19154] syzkaller0: entered promiscuous mode [ 525.779295][T19154] syzkaller0: entered allmulticast mode [ 525.798899][ T7490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.798940][ T7490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.859356][T19164] dummy0: entered promiscuous mode [ 526.394273][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 526.860823][T19195] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 527.113568][T19201] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 527.414709][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3121'. [ 528.197868][T19227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.251881][T19227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.263949][T19227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.281672][T19227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.316282][T19227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.659396][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 530.206776][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 530.206914][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 530.435725][T19227] Bluetooth: hci3: command tx timeout [ 530.982360][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'. [ 532.055603][T19310] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 532.517744][T19227] Bluetooth: hci3: command tx timeout [ 534.592651][T19227] Bluetooth: hci3: command tx timeout [ 535.004613][T19300] ipvlan2: entered allmulticast mode [ 535.010086][T19300] syz_tun: entered allmulticast mode [ 535.160986][T19316] gretap0: entered promiscuous mode [ 535.168095][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 535.177550][T19316] gretap0: left promiscuous mode [ 535.204997][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 535.217750][T19222] lo speed is unknown, defaulting to 1000 [ 535.263676][T19222] wg2 speed is unknown, defaulting to 1000 [ 535.612226][T19339] netlink: 'syz.4.3150': attribute type 1 has an invalid length. [ 535.658489][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 535.777586][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 535.941026][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 536.673218][T19227] Bluetooth: hci3: command tx timeout [ 536.739158][T19356] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3155'. [ 536.751222][T19354] netlink: 'syz.0.3154': attribute type 1 has an invalid length. [ 536.751633][T19354] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3154'. [ 536.785004][T19356] netlink: 239 bytes leftover after parsing attributes in process `syz.2.3155'. [ 537.228305][T19373] pim6reg: entered allmulticast mode [ 537.289022][T19222] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.298640][T19222] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.306165][T19222] bridge_slave_0: entered allmulticast mode [ 537.322817][T19222] bridge_slave_0: entered promiscuous mode [ 537.340129][T19222] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.350287][T19222] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.350819][T19222] bridge_slave_1: entered allmulticast mode [ 537.371904][T19222] bridge_slave_1: entered promiscuous mode [ 537.481365][T19222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.500336][T19222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.568329][T19222] team0: Port device team_slave_0 added [ 537.579056][T19222] team0: Port device team_slave_1 added [ 537.645622][T19222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.653758][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.680603][T19222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.693851][T19222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.701182][T19222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.739420][T19222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.807696][T19222] hsr_slave_0: entered promiscuous mode [ 537.814921][T19222] hsr_slave_1: entered promiscuous mode [ 537.821947][T19222] debugfs: 'hsr0' already exists in 'hsr' [ 537.827917][T19222] Cannot create hsr debugfs directory [ 538.204907][T19222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.225004][T19222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.385079][T19222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.396595][T19222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.562746][T19222] bond0: (slave netdevsim1): Releasing backup interface [ 538.598278][T19222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.614583][T19222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.468261][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 539.468505][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 539.487334][T19425] netlink: 'syz.0.3171': attribute type 19 has an invalid length. [ 539.616328][T19430] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 539.624423][T19430] netlink: 'syz.3.3173': attribute type 2 has an invalid length. [ 539.860542][T19433] netlink: zone id is out of range [ 539.860987][T19433] netlink: zone id is out of range [ 539.861016][T19433] netlink: zone id is out of range [ 539.861050][T19433] netlink: zone id is out of range [ 539.861070][T19433] netlink: zone id is out of range [ 539.861092][T19433] netlink: zone id is out of range [ 539.861126][T19433] netlink: zone id is out of range [ 539.861147][T19433] netlink: zone id is out of range [ 539.861164][T19433] netlink: zone id is out of range [ 539.861186][T19433] netlink: zone id is out of range [ 539.984869][T19445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.108475][T19222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.226039][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.263914][T19222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.337264][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.541045][T19222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.577943][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.587654][T19222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.636020][T19222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.781259][T19454] vlan2: entered allmulticast mode [ 540.781306][T19454] bond0: entered allmulticast mode [ 540.781342][T19454] bond_slave_0: entered allmulticast mode [ 540.781366][T19454] bond_slave_1: entered allmulticast mode [ 541.136442][T19473] pim6reg1: entered promiscuous mode [ 541.143167][T19473] pim6reg1: entered allmulticast mode [ 541.350114][T19477] syzkaller0: left promiscuous mode [ 541.350160][T19477] syzkaller0: left allmulticast mode [ 541.367264][T19484] __nla_validate_parse: 3 callbacks suppressed [ 541.367498][T19484] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3180'. [ 541.367927][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'. [ 541.367976][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'. [ 541.473731][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 541.569398][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 541.874808][T19222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.996102][T19222] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.029743][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.029872][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.088604][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.088913][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.150346][T19483] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 542.165844][T19483] virtio_blk virtio5: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 543.120714][T19523] syzkaller0: entered promiscuous mode [ 543.128681][T19523] syzkaller0: entered allmulticast mode [ 543.260633][T19526] siw: device registration error -23 [ 543.342183][T19526] siw: device registration error -23 [ 543.588591][T19539] bridge0: port 3(syz_tun) entered blocking state [ 543.618089][T19539] bridge0: port 3(syz_tun) entered disabled state [ 543.618323][T19539] syz_tun: entered allmulticast mode [ 543.635892][T19539] syz_tun: entered promiscuous mode [ 543.662165][T19539] bridge0: port 3(syz_tun) entered blocking state [ 543.662316][T19539] bridge0: port 3(syz_tun) entered forwarding state [ 543.851108][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3200'. [ 544.079694][T19222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.302820][T19554] netlink: 10184 bytes leftover after parsing attributes in process `syz.2.3203'. [ 544.314660][T19554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3203'. [ 544.325734][T19222] veth0_vlan: entered promiscuous mode [ 544.355237][T19556] tipc: Enabling of bearer rejected, already enabled [ 544.436838][T19222] veth1_vlan: entered promiscuous mode [ 544.550126][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 544.724235][T19222] veth0_macvtap: entered promiscuous mode [ 544.749439][T19222] veth1_macvtap: entered promiscuous mode [ 544.776164][T19222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.790354][T19222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.912370][ T7490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.913949][ T7490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.933020][ T7480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.943005][ T7490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.133512][ T7480] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 545.187425][T19565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.366105][T19578] syzkaller0: entered promiscuous mode [ 545.367002][T19578] syzkaller0: entered allmulticast mode [ 545.471278][T19584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.526881][ T136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.528091][ T136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.550785][ T136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.550868][ T136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.577016][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.577060][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.757748][ T7492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.757791][ T7492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.456766][T19621] Bluetooth: MGMT ver 1.23 [ 548.464848][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.477950][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.481199][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.502667][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.517218][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.375789][T19647] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.322080][T19623] lo speed is unknown, defaulting to 1000 [ 550.335286][T19623] wg2 speed is unknown, defaulting to 1000 [ 550.536040][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 550.592502][T19227] Bluetooth: hci0: command tx timeout [ 550.695931][T19669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3233'. [ 550.819954][T19669] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.823766][T19669] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.000289][T19623] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.008439][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.019516][T19623] bridge_slave_0: entered allmulticast mode [ 552.049365][T19623] bridge_slave_0: entered promiscuous mode [ 552.087593][T19623] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.088324][T19623] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.092071][T19623] bridge_slave_1: entered allmulticast mode [ 552.101079][T19623] bridge_slave_1: entered promiscuous mode [ 552.372182][T19623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.392289][T19623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.563413][T19623] team0: Port device team_slave_0 added [ 552.567267][T19623] team0: Port device team_slave_1 added [ 552.629957][T19623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.637586][T19623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.675796][T19227] Bluetooth: hci0: command tx timeout [ 552.688871][T19623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.701913][T19697] lo: entered allmulticast mode [ 552.742121][T19623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.742356][T19623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.743530][T19623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.237384][T19698] lo: left allmulticast mode [ 553.253756][T19623] hsr_slave_0: entered promiscuous mode [ 553.260880][T19623] hsr_slave_1: entered promiscuous mode [ 553.267965][T19623] debugfs: 'hsr0' already exists in 'hsr' [ 553.274108][T19623] Cannot create hsr debugfs directory [ 553.492852][T19707] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3241'. [ 553.502846][T19707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3241'. [ 553.558795][T19708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3241'. [ 553.760243][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'. [ 553.942834][T19711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.200872][T19711] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 554.207191][T19711] syzkaller1: linktype set to 825 [ 554.265771][T19711] macvlan3: entered promiscuous mode [ 554.267431][T19711] macvlan3: entered allmulticast mode [ 554.331337][T19711] bond4: entered promiscuous mode [ 554.338271][T19711] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 554.367398][T19711] bond4: left promiscuous mode [ 554.759833][T19227] Bluetooth: hci0: command tx timeout [ 555.055407][T19623] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.091600][T19623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.520457][T19623] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.520729][T19623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.603029][T19722] lo speed is unknown, defaulting to 1000 [ 555.605415][T19722] wg2 speed is unknown, defaulting to 1000 [ 556.159976][T19623] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.160496][T19623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.522335][T19623] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.522592][T19623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.867529][T19227] Bluetooth: hci0: command tx timeout [ 557.258067][T19623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 557.273092][T19623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.274186][T19623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 557.314935][T19623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.317436][T19623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 557.360065][T19623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.369312][T19623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.420715][T19623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.889652][T19623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.949972][T19623] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.979041][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.979336][ T7487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.004133][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.004385][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.251657][T19753] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 558.251714][T19753] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 558.699890][T19760] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 558.816356][T19763] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 559.395932][T19773] ieee802154 phy0 wpan0: encryption failed: -90 [ 559.730091][T19623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.019507][T19623] veth0_vlan: entered promiscuous mode [ 560.093014][T19623] veth1_vlan: entered promiscuous mode [ 560.206897][T19623] veth0_macvtap: entered promiscuous mode [ 560.242439][T19623] veth1_macvtap: entered promiscuous mode [ 560.327716][T19623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.366119][T19623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.582208][ T7479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.582610][ T7479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.608491][ T7479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.609426][ T7479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.908922][T19661] net_ratelimit: 1705 callbacks suppressed [ 560.908999][T19661] Set syz1 is full, maxelem 65536 reached [ 561.206665][ T7501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.206723][ T7501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.490900][ T7501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.491132][ T7501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.655336][T19786] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 562.055680][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 562.250024][T19804] netlink: 'syz.0.3268': attribute type 2 has an invalid length. [ 562.539309][T19807] sctp: [Deprecated]: syz.2.3270 (pid 19807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.539309][T19807] Use struct sctp_sack_info instead [ 563.071763][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.085055][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.496866][T19848] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 564.029607][T19866] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 564.155115][T19869] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.3283'. [ 564.660143][T19882] openvswitch: netlink: Missing valid actions attribute. [ 564.660397][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.178530][T19878] ip_tables: iptables: counters copy to user failed while replacing table [ 565.309704][T19895] lo speed is unknown, defaulting to 1000 [ 565.343175][T19895] wg2 speed is unknown, defaulting to 1000 [ 565.681149][T19912] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 565.921401][T19923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3297'. [ 566.007426][T19926] syzkaller0: entered promiscuous mode [ 566.007471][T19926] syzkaller0: entered allmulticast mode [ 566.035035][T19925] tipc: Started in network mode [ 566.035089][T19925] tipc: Node identity da749a40bdec, cluster identity 4711 [ 566.057673][T19925] tipc: Enabled bearer , priority 0 [ 566.077062][T19930] tipc: Resetting bearer [ 566.157166][T19927] tipc: Resetting bearer [ 566.350456][T19927] tipc: Disabling bearer [ 566.731186][T19954] openvswitch: netlink: Missing valid actions attribute. [ 566.731266][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.380909][T19968] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3304'. [ 567.500047][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3305'. [ 567.790492][T19981] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 568.019181][T19983] netlink: 'syz.4.3308': attribute type 2 has an invalid length. [ 568.038083][T19988] netlink: 'syz.1.3310': attribute type 3 has an invalid length. [ 568.063594][T19983] : entered promiscuous mode [ 568.072719][T19988] netlink: 'syz.1.3310': attribute type 3 has an invalid length. [ 568.314355][T19990] tipc: Started in network mode [ 568.319733][T19990] tipc: Node identity ac1414aa, cluster identity 4711 [ 568.328479][T19990] tipc: New replicast peer: 172.20.20.187 [ 568.340320][T19990] tipc: Enabled bearer , priority 26 [ 568.878522][T20012] xt_l2tp: invalid flags combination: 8 [ 568.976075][T20012] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 569.011930][T20013] Cannot find add_set index 0 as target [ 569.023068][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3315'. [ 569.109514][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 569.163895][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'. [ 569.248217][ T6694] hid-generic 0005:0008:0009.0002: item fetching failed at offset 2/3 [ 569.294356][ T6694] hid-generic 0005:0008:0009.0002: probe with driver hid-generic failed with error -22 [ 569.452928][ T989] tipc: Node number set to 2886997162 [ 569.935539][T20028] netlink: 'syz.0.3322': attribute type 3 has an invalid length. [ 569.936046][T20028] netlink: 'syz.0.3322': attribute type 3 has an invalid length. [ 570.078000][T20032] openvswitch: netlink: Missing valid actions attribute. [ 570.078519][T20032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.234877][T20038] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 570.251171][T20040] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 570.439811][ T7497] IPVS: starting estimator thread 0... [ 570.521115][T20049] netlink: 'syz.4.3326': attribute type 1 has an invalid length. [ 570.525116][T20051] IPVS: using max 25 ests per chain, 60000 per kthread [ 570.538027][T20049] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3326'. [ 570.687889][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 570.687936][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 570.687982][T20059] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3333'. [ 570.892221][T20067] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 570.970167][T20063] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 570.970215][T20063] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 571.067372][T20063] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3335'. [ 571.067862][T20063] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 571.432891][T20084] netlink: 'syz.3.3338': attribute type 3 has an invalid length. [ 571.432940][T20084] netlink: 'syz.3.3338': attribute type 3 has an invalid length. [ 571.613915][T20094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.888648][T20102] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 572.075098][T20102] bond5: entered promiscuous mode [ 572.087862][T20102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.214581][T20109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.226804][T20109] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 572.237400][T20109] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 572.323659][T20109] bond5: (slave ipip0): making interface the new active one [ 572.331328][T20109] ipip0: entered promiscuous mode [ 572.354105][T20109] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 572.834610][T20121] netlink: 'syz.1.3349': attribute type 11 has an invalid length. [ 573.090723][T20126] gretap0: entered promiscuous mode [ 573.278850][T20132] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 573.293234][T20132] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 573.622512][T20148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3355'. [ 573.622746][T20148] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 574.184302][T20169] Bluetooth: MGMT ver 1.23 [ 575.123512][T20175] netlink: 'syz.4.3363': attribute type 7 has an invalid length. [ 575.133882][T20175] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3363'. [ 575.218277][T20178] netlink: 'syz.0.3364': attribute type 13 has an invalid length. [ 575.304537][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 575.305026][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 575.305112][T20180] netlink: 'syz.2.3365': attribute type 12 has an invalid length. [ 575.305162][T20180] netlink: 'syz.2.3365': attribute type 11 has an invalid length. [ 575.542808][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 575.688178][T20193] syzkaller0: entered promiscuous mode [ 575.694439][T20193] syzkaller0: entered allmulticast mode [ 575.869952][T20194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3366'. [ 576.550047][T20213] Bluetooth: ISO socket layer initialized [ 576.694758][T20217] ip6tnl1: entered promiscuous mode [ 577.285691][T20239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3384'. [ 577.585934][T20245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3385'. [ 578.189328][T20267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'. [ 578.347020][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 579.174869][T20291] syzkaller0: entered promiscuous mode [ 579.174912][T20291] syzkaller0: entered allmulticast mode [ 579.319027][T20302] sctp: [Deprecated]: syz.1.3403 (pid 20302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.319027][T20302] Use struct sctp_sack_info instead [ 579.350199][T20291] __nla_validate_parse: 2 callbacks suppressed [ 579.350704][T20291] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3402'. [ 579.367600][T20293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'. [ 579.769274][T20313] netlink: 'syz.4.3406': attribute type 2 has an invalid length. [ 579.889119][T20305] lo speed is unknown, defaulting to 1000 [ 580.121452][T20305] wg2 speed is unknown, defaulting to 1000 [ 580.509417][T20323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.660449][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3408'. [ 580.801177][T20326] bridge_slave_1: left allmulticast mode [ 580.802626][T20326] bridge_slave_1: left promiscuous mode [ 580.804868][T20326] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.852496][T20326] bridge_slave_0: left allmulticast mode [ 580.860066][T20326] bridge_slave_0: left promiscuous mode [ 580.895122][T20326] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.068604][T20364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3419'. [ 582.068898][T20364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.068931][T20364] IPv6: NLM_F_CREATE should be set when creating new route [ 582.068980][T20364] IPv6: NLM_F_CREATE should be set when creating new route [ 582.131864][T20367] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3420'. [ 583.197412][T20401] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.259067][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3428'. [ 583.667913][T20411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3430'. [ 583.684553][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3430'. [ 583.769539][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 583.770059][T20414] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3432'. [ 584.630393][T20439] __nla_validate_parse: 1 callbacks suppressed [ 584.631726][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 585.317998][T20464] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3442'. [ 585.475029][T20432] syzkaller0: entered promiscuous mode [ 585.475071][T20432] syzkaller0: entered allmulticast mode [ 585.700339][T20464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.713419][T20464] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.728403][T20464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.787715][T20464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.799961][T20464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.816643][T20464] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 585.827491][T20464] veth1_vlan: left promiscuous mode [ 585.834505][T20464] veth0_vlan: left promiscuous mode [ 585.842135][T20464] veth0_vlan: entered promiscuous mode [ 585.850578][T20464] veth1_vlan: entered promiscuous mode [ 585.858528][T20464] veth1_vlan: entered allmulticast mode [ 585.869234][T20464] veth1_macvtap: left promiscuous mode [ 585.877268][T20464] veth0_macvtap: left promiscuous mode [ 585.884964][T20464] veth0_macvtap: entered promiscuous mode [ 585.892593][T20464] veth1_macvtap: entered promiscuous mode [ 585.907651][T20464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.916862][T20464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.928127][T20464] batman_adv: batadv0: Interface activated: ipvlan2 [ 585.937771][T20464] batman_adv: batadv0: Interface activated: ipvlan3 [ 585.948530][T20464] veth0_virt_wifi: entered promiscuous mode [ 585.957883][T20464] ip6gretap0: entered promiscuous mode [ 585.966992][T20464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.976555][T20464] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 586.004481][T20468] ip6gretap1: entered allmulticast mode [ 586.012701][T20468] batman_adv: batadv0: Adding interface: ip6gretap1 [ 586.019603][T20468] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.046402][T20468] batman_adv: batadv0: Interface activated: ip6gretap1 [ 586.120882][ T7490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.133233][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.335247][ T7492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.347333][ T7492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.388674][T20484] IPv6: addrconf: prefix option has invalid lifetime [ 586.464023][ T7492] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.847447][T20529] veth0_to_hsr: entered allmulticast mode [ 587.900535][T20534] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 587.913563][T20534] netlink: Unknown NAT attribute (type=33, max=9) [ 587.914144][T20534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.069225][T20540] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 588.079852][T20538] erspan0: entered promiscuous mode [ 588.079896][T20538] erspan0: entered allmulticast mode [ 588.097369][T20540] netlink: Unknown NAT attribute (type=33, max=9) [ 588.097424][T20540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.628817][T20549] IPVS: persistence engine module ip_vs_pe_ not found [ 588.657854][T20558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3464'. [ 588.746000][T20552] syzkaller0: entered promiscuous mode [ 588.755514][T20552] syzkaller0: entered allmulticast mode [ 588.994225][T19227] Bluetooth: hci0: unexpected event 0x0e length: 1 < 3 [ 589.651810][T20585] netlink: 'syz.2.3475': attribute type 11 has an invalid length. [ 590.763835][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 594.024291][T20575] netlink: 'syz.3.3473': attribute type 5 has an invalid length. [ 594.035646][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3475'. [ 594.302193][T20593] netlink: 'syz.2.3477': attribute type 10 has an invalid length. [ 594.440271][T20598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3477'. [ 594.539667][T20593] team0 (unregistering): Port device team_slave_0 removed [ 594.611251][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 594.645526][T20593] team0 (unregistering): Port device team_slave_1 removed [ 594.676777][T20595] netlink: 'syz.3.3478': attribute type 4 has an invalid length. [ 594.688143][T20622] netlink: 'syz.2.3477': attribute type 2 has an invalid length. [ 594.696809][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 595.194029][T20634] openvswitch: netlink: Missing valid actions attribute. [ 595.202564][T20634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.774160][T20649] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 595.858319][T20648] lo speed is unknown, defaulting to 1000 [ 595.866984][T20648] wg2 speed is unknown, defaulting to 1000 [ 595.965780][T20658] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 595.965967][T20658] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 596.322640][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3497'. [ 596.433157][ C1] syz_tun: tun_net_xmit 42 [ 597.108712][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3503'. [ 597.284335][T20691] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3500'. [ 597.472253][ C1] syz_tun: tun_net_xmit 42 [ 597.957627][T20716] lo: entered promiscuous mode [ 597.980043][T20716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.184068][T20720] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3509'. [ 598.438635][ T31] audit: type=1800 audit(1788668463.864:11): pid=20729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3511" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1374 res=0 errno=0 [ 598.479329][T20729] bridge0: port 1(wlan1) entered blocking state [ 598.480870][T20729] bridge0: port 1(wlan1) entered disabled state [ 598.511651][ C1] syz_tun: tun_net_xmit 42 [ 598.532176][T20729] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 598.558852][T20729] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 598.770341][T20735] ip6gre1: entered allmulticast mode [ 598.786225][ T7492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.857368][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 598.903527][T20741] syzkaller0: left promiscuous mode [ 598.904458][T20741] syzkaller0: left allmulticast mode [ 599.352687][T20757] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 599.521138][T20758] syzkaller0: entered promiscuous mode [ 599.521182][T20758] syzkaller0: entered allmulticast mode [ 599.563614][ C1] syz_tun: tun_net_xmit 42 [ 599.637886][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 599.648552][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'. [ 599.672315][T20768] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 599.882568][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'. [ 599.917843][T20773] syzkaller0: entered promiscuous mode [ 599.923857][T20773] syzkaller0: entered allmulticast mode [ 600.192542][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.373236][T20786] siw: device registration error -23 [ 600.381991][T20791] siw: device registration error -23 [ 600.494619][T20789] lo speed is unknown, defaulting to 1000 [ 600.510212][T20789] wg2 speed is unknown, defaulting to 1000 [ 600.592330][ C1] syz_tun: tun_net_xmit 42 [ 600.780263][T20797] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 600.781408][T20797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 601.048289][T20804] syzkaller0: entered promiscuous mode [ 601.048339][T20804] syzkaller0: entered allmulticast mode [ 601.071076][T20789] netlink: 'syz.0.3531': attribute type 23 has an invalid length. [ 601.631645][ C1] syz_tun: tun_net_xmit 42 [ 602.512269][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.671785][ C1] syz_tun: tun_net_xmit 42 [ 603.164932][T20862] tc_dump_action: action bad kind [ 603.409564][T19227] block nbd3: Wrong magic (0x9be4da88) [ 603.465442][T20837] infiniband syz0: set active [ 603.471352][T20837] infiniband syz0: added veth0_vlan [ 603.482917][T20837] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 603.488260][T20837] infiniband syz0: Couldn't open port 1 [ 603.503896][T20837] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 603.519716][T20837] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 603.538125][T20837] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 603.552776][T20872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3550'. [ 603.712007][ C1] syz_tun: tun_net_xmit 42 [ 603.879754][T20837] RDS/IB: syz0: added [ 603.879892][T20837] smc: adding ib device syz0 with port count 1 [ 603.879941][T20837] smc: ib device syz0 port 1 has no pnetid [ 604.364545][T20890] netlink: 'syz.3.3552': attribute type 9 has an invalid length. [ 604.751756][ C1] syz_tun: tun_net_xmit 42 [ 605.792119][ C1] syz_tun: tun_net_xmit 42 [ 606.111682][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 606.415720][T20869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.832407][ C1] syz_tun: tun_net_xmit 42 [ 607.540923][T20927] netlink: 'syz.2.3564': attribute type 2 has an invalid length. [ 607.882312][ C1] syz_tun: tun_net_xmit 42 [ 608.657336][T20963] FAULT_INJECTION: forcing a failure. [ 608.657336][T20963] name failslab, interval 1, probability 0, space 0, times 0 [ 608.675674][T20963] CPU: 1 UID: 0 PID: 20963 Comm: syz.4.3576 Not tainted syzkaller #0 PREEMPT(full) [ 608.675708][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.675722][T20963] Call Trace: [ 608.675732][T20963] [ 608.675742][T20963] dump_stack_lvl+0xe8/0x150 [ 608.675786][T20963] should_fail_ex+0x410/0x560 [ 608.675832][T20963] should_failslab+0xa8/0x100 [ 608.675861][T20963] ? skb_clone+0x212/0x3a0 [ 608.675976][T20963] kmem_cache_alloc_noprof+0xa1/0x600 [ 608.676015][T20963] ? skb_clone+0x212/0x3a0 [ 608.676048][T20963] skb_clone+0x212/0x3a0 [ 608.676078][T20963] __netlink_deliver_tap+0x413/0x860 [ 608.676122][T20963] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.676152][T20963] netlink_deliver_tap+0x19c/0x1b0 [ 608.676183][T20963] netlink_unicast+0x781/0x940 [ 608.676230][T20963] netlink_sendmsg+0x813/0xb40 [ 608.676270][T20963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.676309][T20963] ? apparmor_socket_sendmsg+0x98/0x360 [ 608.676350][T20963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.676377][T20963] sock_sendmsg_nosec+0x13a/0x180 [ 608.676413][T20963] ____sys_sendmsg+0x54e/0x850 [ 608.676445][T20963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.676485][T20963] ? import_iovec+0x73/0xa0 [ 608.676515][T20963] ___sys_sendmsg+0x2a5/0x360 [ 608.676540][T20963] ? __lock_acquire+0x6df/0x2e50 [ 608.676569][T20963] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.676635][T20963] ? __fget_files+0x2a/0x420 [ 608.676665][T20963] ? __fget_files+0x3a2/0x420 [ 608.676706][T20963] __x64_sys_sendmsg+0x1b1/0x290 [ 608.676736][T20963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.676785][T20963] do_syscall_64+0x166/0x520 [ 608.676821][T20963] ? trace_irq_disable+0x3b/0x140 [ 608.676843][T20963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.676869][T20963] ? clear_bhb_loop+0x70/0xc0 [ 608.676897][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.676921][T20963] RIP: 0033:0x7f300359e159 [ 608.676944][T20963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.676963][T20963] RSP: 002b:00007f300440c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.676998][T20963] RAX: ffffffffffffffda RBX: 00007f3003825fa0 RCX: 00007f300359e159 [ 608.677014][T20963] RDX: 0000000004040894 RSI: 0000200000000000 RDI: 0000000000000005 [ 608.677029][T20963] RBP: 00007f300440c090 R08: 0000000000000000 R09: 0000000000000000 [ 608.677043][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.677056][T20963] R13: 00007f3003826038 R14: 00007f3003825fa0 R15: 00007ffc2f73f2b8 [ 608.677092][T20963] [ 608.919808][ C1] syz_tun: tun_net_xmit 42 [ 609.024389][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3580'. [ 609.073431][T20969] netlink: 'syz.2.3578': attribute type 2 has an invalid length. [ 609.101464][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 609.154999][T20977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3580'. [ 609.597003][T20985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3581'. [ 609.607540][T20985] openvswitch: netlink: Flow key attr not present in new flow. [ 609.650199][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3582'. [ 609.828547][T20993] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3583'. [ 609.954014][ C1] syz_tun: tun_net_xmit 42 [ 610.238463][T21002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3584'. [ 610.431740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.991683][ C1] syz_tun: tun_net_xmit 42 [ 611.021372][T21010] netlink: 'syz.3.3588': attribute type 10 has an invalid length. [ 611.024153][T21010] batman_adv: batadv0: Adding interface: netdevsim1 [ 611.024203][T21010] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.024285][T21010] batman_adv: batadv0: Interface activated: netdevsim1 [ 611.178015][T21018] FAULT_INJECTION: forcing a failure. [ 611.178015][T21018] name failslab, interval 1, probability 0, space 0, times 0 [ 611.178487][T21018] CPU: 0 UID: 0 PID: 21018 Comm: syz.2.3590 Not tainted syzkaller #0 PREEMPT(full) [ 611.178558][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.178593][T21018] Call Trace: [ 611.178622][T21018] [ 611.178645][T21018] dump_stack_lvl+0xe8/0x150 [ 611.178749][T21018] should_fail_ex+0x410/0x560 [ 611.178847][T21018] should_failslab+0xa8/0x100 [ 611.178933][T21018] __kmalloc_noprof+0xfe/0x720 [ 611.179023][T21018] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 611.179114][T21018] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 611.179230][T21018] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 611.179347][T21018] genl_family_rcv_msg_doit+0xda/0x340 [ 611.179472][T21018] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.179574][T21018] ? apparmor_capable+0x126/0x170 [ 611.179674][T21018] ? bpf_lsm_capable+0x9/0x20 [ 611.179769][T21018] ? security_capable+0x7e/0x2c0 [ 611.179849][T21018] genl_rcv_msg+0x614/0x7a0 [ 611.179946][T21018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.180015][T21018] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 611.180314][T21018] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.180456][T21018] netlink_rcv_skb+0x226/0x4a0 [ 611.180536][T21018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.180622][T21018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.180725][T21018] ? down_read+0x2be/0x330 [ 611.180796][T21018] genl_rcv+0x28/0x40 [ 611.180869][T21018] netlink_unicast+0x7bd/0x940 [ 611.180950][T21018] netlink_sendmsg+0x813/0xb40 [ 611.181054][T21018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.181168][T21018] ? apparmor_socket_sendmsg+0x98/0x360 [ 611.181261][T21018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.181326][T21018] sock_sendmsg_nosec+0x13a/0x180 [ 611.181404][T21018] ____sys_sendmsg+0x54e/0x850 [ 611.181486][T21018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.181578][T21018] ? import_iovec+0x73/0xa0 [ 611.181652][T21018] ___sys_sendmsg+0x2a5/0x360 [ 611.181714][T21018] ? __lock_acquire+0x6df/0x2e50 [ 611.181781][T21018] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.181934][T21018] ? __fget_files+0x2a/0x420 [ 611.182000][T21018] ? __fget_files+0x3a2/0x420 [ 611.182104][T21018] __x64_sys_sendmsg+0x1b1/0x290 [ 611.182174][T21018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.182289][T21018] do_syscall_64+0x166/0x520 [ 611.182369][T21018] ? trace_irq_disable+0x3b/0x140 [ 611.182430][T21018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.182500][T21018] ? clear_bhb_loop+0x70/0xc0 [ 611.182582][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.182642][T21018] RIP: 0033:0x7f19eb59e159 [ 611.182714][T21018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.182751][T21018] RSP: 002b:00007f19ec4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.182814][T21018] RAX: ffffffffffffffda RBX: 00007f19eb826090 RCX: 00007f19eb59e159 [ 611.182857][T21018] RDX: 0000000004040894 RSI: 0000200000000000 RDI: 0000000000000005 [ 611.182896][T21018] RBP: 00007f19ec4db090 R08: 0000000000000000 R09: 0000000000000000 [ 611.182929][T21018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.182955][T21018] R13: 00007f19eb826128 R14: 00007f19eb826090 R15: 00007ffd03f27208 [ 611.183026][T21018] [ 611.632060][T21021] netlink: 'syz.0.3594': attribute type 2 has an invalid length. [ 612.031824][ C1] syz_tun: tun_net_xmit 42 [ 613.063811][T21073] netlink: Invalid conntrack helper [ 613.063868][T21073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.079032][ C1] syz_tun: tun_net_xmit 42 [ 613.306085][T21082] FAULT_INJECTION: forcing a failure. [ 613.306085][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 613.306148][T21082] CPU: 1 UID: 0 PID: 21082 Comm: syz.2.3607 Not tainted syzkaller #0 PREEMPT(full) [ 613.306175][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.306189][T21082] Call Trace: [ 613.306198][T21082] [ 613.306209][T21082] dump_stack_lvl+0xe8/0x150 [ 613.306256][T21082] should_fail_ex+0x410/0x560 [ 613.306295][T21082] should_failslab+0xa8/0x100 [ 613.306320][T21082] ? skb_clone+0x212/0x3a0 [ 613.306344][T21082] kmem_cache_alloc_noprof+0xa1/0x600 [ 613.306381][T21082] ? skb_clone+0x212/0x3a0 [ 613.306414][T21082] skb_clone+0x212/0x3a0 [ 613.306443][T21082] __netlink_deliver_tap+0x413/0x860 [ 613.306484][T21082] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.306512][T21082] netlink_deliver_tap+0x19c/0x1b0 [ 613.306542][T21082] netlink_sendskb+0x68/0x140 [ 613.306570][T21082] netlink_rcv_skb+0x2a4/0x4a0 [ 613.306598][T21082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.306635][T21082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.306679][T21082] ? down_read+0x2be/0x330 [ 613.306708][T21082] genl_rcv+0x28/0x40 [ 613.306741][T21082] netlink_unicast+0x7bd/0x940 [ 613.306778][T21082] netlink_sendmsg+0x813/0xb40 [ 613.306814][T21082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.306849][T21082] ? apparmor_socket_sendmsg+0x98/0x360 [ 613.306887][T21082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.306918][T21082] sock_sendmsg_nosec+0x13a/0x180 [ 613.306952][T21082] ____sys_sendmsg+0x54e/0x850 [ 613.306983][T21082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.307018][T21082] ? import_iovec+0x73/0xa0 [ 613.307048][T21082] ___sys_sendmsg+0x2a5/0x360 [ 613.307071][T21082] ? __lock_acquire+0x6df/0x2e50 [ 613.307100][T21082] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.307165][T21082] ? __fget_files+0x2a/0x420 [ 613.307196][T21082] ? __fget_files+0x3a2/0x420 [ 613.307243][T21082] __x64_sys_sendmsg+0x1b1/0x290 [ 613.307272][T21082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.307321][T21082] do_syscall_64+0x166/0x520 [ 613.307353][T21082] ? trace_irq_disable+0x3b/0x140 [ 613.307376][T21082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.307399][T21082] ? clear_bhb_loop+0x70/0xc0 [ 613.307427][T21082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.307450][T21082] RIP: 0033:0x7f19eb59e159 [ 613.307472][T21082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.307491][T21082] RSP: 002b:00007f19ec4db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.307515][T21082] RAX: ffffffffffffffda RBX: 00007f19eb826090 RCX: 00007f19eb59e159 [ 613.307532][T21082] RDX: 0000000004040894 RSI: 0000200000000000 RDI: 0000000000000005 [ 613.307547][T21082] RBP: 00007f19ec4db090 R08: 0000000000000000 R09: 0000000000000000 [ 613.307561][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.307575][T21082] R13: 00007f19eb826128 R14: 00007f19eb826090 R15: 00007ffd03f27208 [ 613.307612][T21082] [ 613.906719][T21089] syzkaller0: entered promiscuous mode [ 613.906762][T21089] syzkaller0: entered allmulticast mode [ 613.955695][T21089] tipc: Enabled bearer , priority 0 [ 614.014665][T21089] tipc: Resetting bearer [ 614.114595][ C1] syz_tun: tun_net_xmit 42 [ 614.159058][T21093] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3611'. [ 614.172460][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'. [ 614.292287][T21087] tipc: Resetting bearer [ 614.418675][T21087] tipc: Disabling bearer [ 614.702530][T21107] syzkaller0: entered promiscuous mode [ 614.709370][T21107] syzkaller0: entered allmulticast mode [ 614.773913][T21107] syzkaller1: entered promiscuous mode [ 614.779607][T21107] syzkaller1: entered allmulticast mode [ 615.155731][ C1] syz_tun: tun_net_xmit 42 [ 615.206241][T21123] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3621'. [ 615.223393][T21124] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3621'. [ 615.734773][T21132] netlink: 'syz.2.3623': attribute type 5 has an invalid length. [ 615.794470][T21137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.894191][T21137] Bluetooth: hci0: unsupported parameter 512 [ 615.900693][T21137] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 615.992397][T21142] Bluetooth: hci0: unsupported parameter 512 [ 615.992439][T21142] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 616.195074][ C1] syz_tun: tun_net_xmit 42 [ 616.731149][T21176] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3634'. [ 616.741040][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 616.741270][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 616.773246][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 616.773479][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 616.775044][T21163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'. [ 617.231706][ C1] syz_tun: tun_net_xmit 42 [ 617.351388][T21193] netlink: 'syz.0.3640': attribute type 4 has an invalid length. [ 617.519612][T21201] netlink: 'syz.1.3643': attribute type 7 has an invalid length. [ 617.519656][T21201] netlink: 'syz.1.3643': attribute type 3 has an invalid length. [ 618.271865][ C1] syz_tun: tun_net_xmit 42 [ 618.886571][T21218] mac80211_hwsim hwsim51 wlan0: left promiscuous mode [ 618.886977][T21218] mac80211_hwsim hwsim51 wlan0: left allmulticast mode [ 618.953953][ T7501] IPVS: starting estimator thread 0... [ 619.071855][T21256] IPVS: using max 26 ests per chain, 62400 per kthread [ 619.224516][T21264] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 619.312231][ C1] syz_tun: tun_net_xmit 42 [ 619.399126][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 619.432226][T21268] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 619.484345][T21268] bond2 (unregistering): Released all slaves [ 619.664784][T21274] bridge2: entered promiscuous mode [ 619.693018][T21274] bond1: (slave bridge2): making interface the new active one [ 619.700710][T21274] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 620.003264][T21283] __nla_validate_parse: 4 callbacks suppressed [ 620.003455][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 620.154163][T21285] syzkaller0: entered promiscuous mode [ 620.154213][T21285] syzkaller0: entered allmulticast mode [ 620.190064][T21286] tc_dump_action: action bad kind [ 620.287695][T21285] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 620.331354][T21292] netlink: 'syz.2.3660': attribute type 16 has an invalid length. [ 620.331406][T21292] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3660'. [ 620.351697][ C1] syz_tun: tun_net_xmit 42 [ 620.356501][T21292] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3660'. [ 621.391792][ C1] syz_tun: tun_net_xmit 42 [ 621.512666][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 622.442442][ C1] syz_tun: tun_net_xmit 42 [ 623.471847][ C1] syz_tun: tun_net_xmit 42 [ 623.920873][T21316] syzkaller0: entered promiscuous mode [ 623.920920][T21316] syzkaller0: entered allmulticast mode [ 624.076895][T21313] netlink: 'syz.0.3665': attribute type 1 has an invalid length. [ 624.515134][ C1] syz_tun: tun_net_xmit 42 [ 624.550949][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.898630][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 625.354701][T21363] SET target dimension over the limit! [ 625.552097][ C1] syz_tun: tun_net_xmit 42 [ 625.691891][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3679'. [ 625.791771][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.266076][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 626.284334][T21394] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3683'. [ 626.601663][ C1] syz_tun: tun_net_xmit 42 [ 627.641839][ C1] syz_tun: tun_net_xmit 42 [ 627.770262][T21425] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 627.822209][T19227] Bluetooth: hci0: link tx timeout [ 627.822419][T19227] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 627.852705][T19227] Bluetooth: hci0: link tx timeout [ 627.852751][T19227] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 628.672059][ C1] syz_tun: tun_net_xmit 42 [ 629.592429][T19227] Bluetooth: hci0: link tx timeout [ 629.592491][T19227] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 629.619244][T21471] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 629.644596][T19227] Bluetooth: hci0: link tx timeout [ 629.644639][T19227] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 629.711652][ C1] syz_tun: tun_net_xmit 42 [ 629.876336][T19227] Bluetooth: hci0: command 0x0406 tx timeout [ 630.751761][ C1] syz_tun: tun_net_xmit 42 [ 631.230086][T21500] x_tables: duplicate underflow at hook 1 [ 631.792280][ C1] syz_tun: tun_net_xmit 42 [ 632.842951][ C1] syz_tun: tun_net_xmit 42 [ 633.884789][ C1] syz_tun: tun_net_xmit 42 [ 634.914290][ C1] syz_tun: tun_net_xmit 42 [ 635.954588][ C1] syz_tun: tun_net_xmit 42 [ 636.992115][ C1] syz_tun: tun_net_xmit 42 [ 637.435765][T21560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.448269][T21560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.458881][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.572214][T21567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.573363][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.574681][T21565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3718'. [ 637.660813][T21571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.722471][T21571] xt_hashlimit: overflow, try lower: 0/0 [ 637.833294][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3719'. [ 637.833748][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3719'. [ 638.032358][ C1] syz_tun: tun_net_xmit 42 [ 638.078380][T21571] veth5: entered allmulticast mode [ 638.115879][T21571] team0: Port device veth5 added [ 638.551380][T21546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3711'. [ 638.563918][T21546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3711'. [ 639.071640][ C1] syz_tun: tun_net_xmit 42 [ 639.423296][T21611] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 639.435284][T21611] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 639.443731][T21611] CPU: 1 UID: 0 PID: 21611 Comm: syz.1.3723 Not tainted syzkaller #0 PREEMPT(full) [ 639.453149][T21611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.463236][T21611] RIP: 0010:klist_remove+0x156/0x340 [ 639.468647][T21611] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 639.488378][T21611] RSP: 0018:ffffc9000517f960 EFLAGS: 00010202 [ 639.494490][T21611] RAX: 000000000000000b RBX: ffff88804e2a1f40 RCX: ffffffff9a9db501 [ 639.502494][T21611] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 639.510498][T21611] RBP: ffffc9000517fa60 R08: ffffffff905f90e3 R09: 1ffffffff20bf21c [ 639.518494][T21611] R10: dffffc0000000000 R11: fffffbfff20bf21d R12: 0000000000000000 [ 639.526490][T21611] R13: 1ffff1100f00bb8c R14: ffff88807805dc60 R15: dffffc0000000000 [ 639.534513][T21611] FS: 00007f90d84c26c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 639.543474][T21611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.550085][T21611] CR2: 000020000000d038 CR3: 0000000054e22000 CR4: 00000000003526f0 [ 639.558095][T21611] Call Trace: [ 639.561403][T21611] [ 639.564362][T21611] ? __pfx_klist_remove+0x10/0x10 [ 639.569429][T21611] ? kobject_move+0x5e2/0x720 [ 639.574148][T21611] ? __pfx_kobject_move+0x10/0x10 [ 639.579207][T21611] ? do_raw_spin_unlock+0xf5/0x200 [ 639.584377][T21611] ? get_device_parent+0x366/0x3a0 [ 639.589580][T21611] device_move+0x18e/0x720 [ 639.594034][T21611] hci_conn_del_sysfs+0xb8/0x1a0 [ 639.599129][T21611] hci_conn_del+0xc3d/0x1200 [ 639.603811][T21611] ? __pfx_iso_disconn_cfm+0x10/0x10 [ 639.609210][T21611] hci_conn_hash_flush+0x189/0x260 [ 639.614374][T21611] hci_dev_close_sync+0x7fc/0x10c0 [ 639.619570][T21611] ? __pfx___mutex_lock+0x10/0x10 [ 639.624643][T21611] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 639.630218][T21611] ? lockdep_hardirqs_on+0x7b/0x110 [ 639.635455][T21611] ? enable_work+0x1fd/0x230 [ 639.640086][T21611] hci_dev_close+0x108/0x260 [ 639.644800][T21611] sock_do_ioctl+0x101/0x320 [ 639.649426][T21611] ? __pfx_sock_do_ioctl+0x10/0x10 [ 639.654571][T21611] ? hook_file_ioctl+0x1f2/0x600 [ 639.659612][T21611] sock_ioctl+0x57a/0x7e0 [ 639.664022][T21611] ? __pfx_sock_ioctl+0x10/0x10 [ 639.669002][T21611] ? __fget_files+0x2a/0x420 [ 639.673631][T21611] ? __fget_files+0x3a2/0x420 [ 639.678352][T21611] ? __fget_files+0x2a/0x420 [ 639.682975][T21611] ? bpf_lsm_file_ioctl+0x9/0x20 [ 639.687956][T21611] ? __pfx_sock_ioctl+0x10/0x10 [ 639.692865][T21611] __se_sys_ioctl+0xfc/0x170 [ 639.697487][T21611] do_syscall_64+0x166/0x520 [ 639.702111][T21611] ? trace_irq_disable+0x3b/0x140 [ 639.707163][T21611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.713259][T21611] ? clear_bhb_loop+0x70/0xc0 [ 639.718108][T21611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.724031][T21611] RIP: 0033:0x7f90d759e159 [ 639.728475][T21611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.748115][T21611] RSP: 002b:00007f90d84c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.756569][T21611] RAX: ffffffffffffffda RBX: 00007f90d7826180 RCX: 00007f90d759e159 [ 639.764570][T21611] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 639.772570][T21611] RBP: 00007f90d7635024 R08: 0000000000000000 R09: 0000000000000000 [ 639.780566][T21611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.788562][T21611] R13: 00007f90d7826218 R14: 00007f90d7826180 R15: 00007ffc1600ec68 [ 639.796582][T21611] [ 639.799643][T21611] Modules linked in: [ 639.805847][T21611] ---[ end trace 0000000000000000 ]--- [ 640.023823][T21611] RIP: 0010:klist_remove+0x156/0x340 [ 640.029467][T21611] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 640.054547][T21611] RSP: 0018:ffffc9000517f960 EFLAGS: 00010202 [ 640.061039][T21611] RAX: 000000000000000b RBX: ffff88804e2a1f40 RCX: ffffffff9a9db501 [ 640.071991][T21611] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 640.080469][T21611] RBP: ffffc9000517fa60 R08: ffffffff905f90e3 R09: 1ffffffff20bf21c [ 640.100953][T21611] R10: dffffc0000000000 R11: fffffbfff20bf21d R12: 0000000000000000 [ 640.100998][T21611] R13: 1ffff1100f00bb8c R14: ffff88807805dc60 R15: dffffc0000000000 [ 640.101021][T21611] FS: 00007f90d84c26c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 640.101045][T21611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.101065][T21611] CR2: 000055f41043aca0 CR3: 0000000054e22000 CR4: 00000000003526f0 [ 640.101109][T21611] Kernel panic - not syncing: Fatal exception [ 640.146891][T21611] Kernel Offset: disabled [ 640.151249][T21611] Rebooting in 86400 seconds..