last executing test programs: 2.668129526s ago: executing program 2 (id=2869): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000005010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x401, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xc, 0x3, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x48}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000005010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x401, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xc, 0x3, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x48}}, 0x0) (async) 2.544094187s ago: executing program 3 (id=2871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) (async) 2.39549528s ago: executing program 2 (id=2872): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x1e8, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c927a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 2.394953012s ago: executing program 1 (id=2873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x28, 0x2, 0x233f, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0096a8", @ANYRES16=r2, @ANYBLOB="01002bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000023008e0002000000"], 0x79}, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000300)=@ethtool_eeprom={0x21, 0x9ae, 0x8}}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0xa, 0x8) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) recvmsg$can_raw(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x20) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\b\x00'], 0xfdef) 2.229059989s ago: executing program 3 (id=2874): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4044810) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000f5030100000000000000000000000000000000070000010200251d7c51adf40000ed030100"/60], 0x3c}}, 0xc144) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) unshare(0x22020600) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x2, &(0x7f00000002c0)=0x8, 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="02000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c001800000800696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510000002000000b7e5000000000000d6e4c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 2.122055572s ago: executing program 2 (id=2875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x6, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.052416885s ago: executing program 4 (id=2876): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 2.015803746s ago: executing program 3 (id=2877): socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x274, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x244, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x128, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xe4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x12, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="17000000140001002b02157a80cb9c4e907ee6634a7000ffdbdf2502380000c1a17df07ed000967620389e358de37a35d97b450163ccd1c127f706656a532abd0591", @ANYRES32=0x0, @ANYBLOB="00000800040000000800020064010101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) unshare(0x400) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x15, 0x0, &(0x7f0000000180)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 1.879090916s ago: executing program 2 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x17, 0x6, 0x3, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000600", @ANYRES32=r1, @ANYBLOB="0001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000dc53213bde1e49973f235c546185b5e046618c1d571f8fb93d6a4593cc22fc662fa3aa73a612b11a3baa7445fa99a02ccc40e0a5cf9c57be223b6"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400d4bdaeabf4f9c41e0000", @ANYRES32=r2, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)={'a', ' *:* ', 'r\x00'}, 0x41) write$cgroup_devices(r5, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, r6}, 0x38) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100104}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x9, {{0x17, 0x4, 0x2, 0x2, 0x5c, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@generic={0x94, 0x12, "f64711795df66266bdc7bf7b0e4bba9f"}, @lsrr={0x83, 0x7, 0x75, [@broadcast]}, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x3, [0xfffffff7]}, @end, @generic={0x8, 0xf, "b2a5a006598ad0de10c2c27890"}, @timestamp={0x44, 0x14, 0x9f, 0x0, 0x0, [0x90, 0x1ff, 0x4, 0x0]}, @noop]}}}}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000740)=0x17f, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xcc, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1c}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r7], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r11, r9, 0x25, 0x0, @void}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r13}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.710532393s ago: executing program 0 (id=2879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}, [@NDTA_NAME={0xd, 0x1, 'BATMAN_IV'}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) (async) close(0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}, [@NDTA_NAME={0xd, 0x1, 'BATMAN_IV'}]}, 0x24}}, 0x0) (async) 1.558769838s ago: executing program 0 (id=2880): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.405558307s ago: executing program 0 (id=2881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711041000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711041000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000080), 0x12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) (async) 1.284361345s ago: executing program 0 (id=2882): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r7, 0x401, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0xffff, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r10, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r11, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 1.183116082s ago: executing program 1 (id=2883): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff40, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000190000012abd7000fddbdf2502dcf7108008ff0233020010000000001d004e20000000000100ac14143400001d004e21000000001e643200000000001d004e2900000000", @ANYRES32=r2, @ANYBLOB], 0x14}}, 0x800) 1.175842278s ago: executing program 4 (id=2884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40001) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002000940e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r6, 0x402, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x27a98e73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 1.083568842s ago: executing program 1 (id=2885): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000340)=@framed={{}, [@exit, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xf6, &(0x7f0000000440)=""/246}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x0, 0x3ffffffc}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x4000}) 1.077181116s ago: executing program 1 (id=2886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r6 = gettid() socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 916.768081ms ago: executing program 4 (id=2887): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010800000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c000180080001400000018014"], 0x78}, 0x1, 0x0, 0x0, 0x2000c045}, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060062}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x7ff, 0xfffffffc, 0xfff, 0xb6, 0x35, 0xe2d2, 0xb, 0x1, 0x7, 0x7ff]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) 898.23094ms ago: executing program 2 (id=2888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000001020101000000000000000002000006240001800c0002800500010001000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) 831.021915ms ago: executing program 0 (id=2889): write(0xffffffffffffffff, &(0x7f0000000000)="c71129007f15c6c148cf97e728847ea1adf93b10219b1b7e5c0c5202e6f896946865900b50820e99988a01377b8fe92f94fa5a5513a717c20f9efa20c526ce2387bcb6566f9fb06c12dbb09f4a127dda58c3c4e3e2f434dc4636e02a16dcc04df5c9b8bcd47aa9b2c66e575080a2011966f38d0f333539c60505e25e18980f8077bb8b6e2b0208283456d92b8bd2ab651bee029462310fc2939e80563aa33b0b7536ae46a32bda17d187d5c4d247", 0xae) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x390, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b547581}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dd1fa05437b7ddd1066aa73e6c088af4a9170d78aeedb944e9155704ad757c86"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7a084d83}, @TIPC_NLA_NODE_ID={0x85, 0x3, "2d3009bb901713ae3352aabbfd2e9f48939bbb90a2441dcef655ea4a2d4a9ac2e4c9b69740474f748c7a1dffbd5f723b8ea4624615c94179cc129b9ed52fbe7a0d3c698f1e277c913bc1900ca34a668a787151361ec870dfe5c04d8d22d4ba5d261848fe15d7116b2ebc048086425820b8f26541ad923098730a1ce58b8046b68e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x15c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7728}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff2d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3986478c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9a2a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000844}, 0x24044011) r2 = openat$cgroup_freezer_state(r0, &(0x7f00000005c0), 0x2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000600)="57cef2013f4a8e5201b5a23a1366e1df7106da7d89f37fadba08d0fe3d21489f4d47f6272041682b5580c002722b3b38448f66af505188509886d1474184c5770914d8cf96d4832d90d7f84a47dcbd09d2063cc9679aded1c27df29e83f38f5d91a97d520ce0c8b67af86420aead9e887ca3fa74d27b06fd3a72dc43644a6bd0ac0d57813168d5e0833723f051ea679b2a305377c437a971d44533164595fc9f0286446453a32f7a30d501eccfb9d6b0adf2e269c1a22887db7475ef15603ef62c663a4c10c374659b09b7201a18d6da0e021bda02aa0e01f10a51916071699fb482929b7c72f0c5caaba8817dfee1dc5646ec681f0698f11caf1804d9ceaa6effee2a55fab3a50a9fd466d5afb7d83d975e351b7304ec279fdda09cf84ad3d8f7eac1904cdc0b8f1695b95475e418c60980a0486075b6a675727136bbe491c9ade6a6c772cbe5e0499840039ea5dbd3f422c02bc01e4f43825f4e6fd67c193867dcb3accfa7c80c1e0ddca11f75035397964af93ab9d7ae0ed3771096761b38016dccc1c3546f539e41b8e1ba530aa08bdf159f512e1155b0e9fabbae598b816a0bb9fa01e76a0e93511dc458d5c273cc54da8cab9ddeb3820b31bf91b75c63a9fb73153c89f081bc6eb690afd8d621247eef3259feb1ee5b75916d767255279d081dcd0c0c4765b81cc5678b4ea8a9828d89e26bcb6abadfa63f0bd4034e690d1a6f4af30365e0fa8055ad1b9fd727f9d1acbce00db743da61ec2ca5f3155a692420f96bfe128cd7c3caf8c57285c15652bc9dfd0d94644d129f034df5a6f4cef4f8b12867563bbc9f47c570415c29edef3fa605cb72115f34c4e7e7d08433a1e624ff764e7051f8259962d6b85c8b3f42593da04e548315ee0c1ac26814519a8ebe6a3ba3e52d2fcfd6ea3cd1ae5fc8681d1d124ca407da7088f96680ca13b463aeac74d55ca12da83442986c635d88a6d52094e0b92d8b85efa0b7e732541c49a7e76c735358abe72cdf6d2f3fd907a36f469043872af499b11ada1aa8832f7bff219b2edf34267e66e358dd0e7f57f07fe204b67d1caaeb320bfd87edab2fc6f2dd869a469b8fe0930ec5aab4fb5bf08330ed1c8b405570706b0d5996048d341dbd7f5473524d928107447bcd235d85ff22a47a00039728552a692e113944e8ee380feed35f10f5931c012ed2fd3bba5c18b7c15973ead5a420931baf5c1718443a59abd512e5c50a739ebf0d1b91d70298046376102e99c292acaa90537501d2a619abde6a18cf4381fedb2e1ed13bd71ee0f1495aa0a00691cecd9a5b466f2f90e8f82ced9f1a73269f4253bf36758f6ecbc418df007c180abfb2a4ca393b53a4c75decd73b68270e15bb3bcaea6643e1a04421622c23f8c25588684147d365339a0097266bac7a6c6de5bb3363441a5150ac848f1e213a153ce35f798a10ea81c96fc4116dc8af8be0bffbb9000a529d7a644ec8a7c19f24c6220d5df6cf05c0badd9e47af0b001f43e47aba827d6777bc3143cec8dffff87a99a26b2c7b520b2febdfb8205c90e17812d894c7cecb59037aa8b3054f0167204f98e017aa05501c1da254f43f83bfc06b42a92ec4d4254811efb073d2f2af67b419773fb2d16e9616ef4dd3f8918705316ce6a5329ed0b3ae102b7db7d29077a5d0fc12caec0086372d06fae76577d32bf7884b8615355c5b098c2264015bf72375f5a65b7506bd3b1511049adeeec21b3de30c9379f3f21be102c54782e9762a0cd558a9d17f8485725032020d349303e830a965f078803e077196f4a5e1ec38f9709712f18f26ac4db1385264d2819f40e7205f307f61829c50975c68677313141703a7f1bf11cebdf9b0d3a10c5405fc150166159604420892e06025db3aeb68a935829f02a59b66694d2ec258d68918f95bac5d57c1ad0789a452688d6965be075bb9ab51f44a163894995ec712d44af3d09bdbf26ca75ef7c464ab90185770d0de4b815479bb633c42f5da362b35d777fc3ed575e8961a86762923fbb6166bb0cf936aaebe870d202111d4d3bf49a20bb76fe3a4c1dfab18db9e08f99283870ea190c16fe1326dee522dd8a01a053f07cca9f37969334b44aac72c8b99536fb3e4df39929fd186fad109c981c5a448de1130c7b271cee012f13894db022e5f2e9fd9f6d970ac2ca78c0a1b442340f730e52781bc533e8b4e2e505d2485256a7a237304f8dd4e5ad8b8be6b7e23aeddfe7e478992043330ea1ca895f795bc4743e8679ab0969b68743e5bcd93c0f61ecbee50d4efae2a2a848b8743fe3b3502a20a462d27c686be745154de484d651fbe11ad5726b64213bef933bd24e9203241c3d55c95d00aee0d03c584ee759311f24e46c33d85bd8a2c1b42ee54cfcda003f34f4a0461c84f3ae3060b9b0d8eab337e9aed6e28673a126f2379f4225729bab6bcc0ffc26434a0575f5dc965d52db5d276b50980d0e2e1c044dc3f54347d7eb99d178a9059811f3d3c4f32bd053a14e583afed40affd04b2a399402696a15ba9fe304de99ed4dafa57b06707f9b7abb5b50f523479384f0c8e65136899359d8b5a2d3ef8694f8fe80c3f2040c208760e9c67f714be501f1f3ba8e1a92f8436a850c60d17768463ec29dc29fb7dedf0a9d9df1aef9e0dfe69e43cb9ccb966b6dde0e0fa9bfcdc63d7ef5ac49e7c1d22023bc68faa63d755d1babb525b617d2266036d68f4733cc3929b401229e53533a8d86b60d7d99cce6e29a0bed9de3d4775ed4868d8ec27d75add9ac4dee7c7fcaf50a60cb16952f48d4b947501cb9606ec2aece1b83fa0ceaccdea8cc96c4bf95691ae2ca6215bf90403ef7620d5a60c0154ca2fc5e40d24d69a7a07752cab79bd8f130021aae0f8496038054829b509a850316e744dcf1f1586765989c8a258cb8ca2f22d95b6b079025043eb8e07583b7624f084a1688a7ce42e7f19a7a002477fd3977244aefa561598d873af75ed56472f06c89ab92229e9bc6e86f10e95666f0237dbf889759b8005de585aab8dca9fb250c61b469909852960f9c4e94bdd5e9c3439264a0ab33413dfea08f640960633a3dd043b90143c39de003960fb69ef95729b255e586b2792d5cf71291e9b428902fc404ddb293cbd61b4f8a92c9849dcf7930371b25f9edcd5f9e18ad143dd786d936fdda4486c94e1da208aa8b44350a224cbfd9a026af1d4acfbae0ecfb2277e36942f5fbf89f1650a32c8f452c49150ec4f102867c4ef49d515309ec8089374c871e5c4fe55fc4694f45c34a495be5ad6ae603e428e7b99b0b28358148b8b655662350e0fd7ccb6181844dacef17fa4c0668228ce582383b396265aa05e0a64f0f364ec37a54756ddadc45a70053470b6c59f6bc5c229e204284db79397bdecd6b0d383cc4ce80dd70f066043d9f1e6caff6a52286e9891f92f6275a50a9d949e89b63317f25453a2f27f04ddfefd47622e245bccbc1ee30e8570084c30fcade91f884a8248518d53bc62d3f77a5d78a1093fb6bf66f6891b1bae870c784378f36f6648a2b9637a5117048d0c096c23d06bc5af5f04bef0435743f0ab22ac4516608f8f35437c1bb9e22f56e73b13ff57d3639e885f47cb4347793de29a2d6a3c14276b060188cd319c12e0ef6f1545dd1b65731093cafd122afa495e90767799767d0c0c2d1a4406fcacd9eac3b73287b15b3911ff4dec8cbe24452f99204589ce8b59c3496099af5f10e4e9b35f2b0fd1ecad4c6fab907f92b76caaa174a9be85e4b4f13c1bb2aba68018443689ea818c604c861d8fd39bdf6742d767c97688328ae63656edb1389a31a9f479a10fd84c840d48afcac70217dfd54c0c04c6e21b504d44882aa5d41d1ad6774f67d8a5729424cb8826a9e8fe4a2c72a9cb2494e7a3483ce8c6ef4d04668be6a9ac7d9e3e791a7cb5994d8248589a9440ad49280cfbd9eb98e3bf29a353addf4194476a74b9fab7c8194b8de301ca99703d0f3fa5ae8cda45c1fcc3ed741187bf91c06eadc7860ae3d782afbb6e55bd68dca8b4bbbfaddfa474a51e9cd3ae8dae339b4397107f77fe01c73fb40a7b8c1142eec6b6111ac30365581e54b3760ac0e90d9499f7f21eb39235afdffed9ec7d27289df495ea0349b54084dbc65b0169fb4b581ec427436dd5cc652ffe95a3cf9cdf4cb69b702353d3a7ece0ba3633560c8add0b5b593f5adaa1485ef5d107ffde92033c38bbb39005a775c6724fdb817dbb8b818716106e6b2ecd22d5ad6e353b3d8878f66070b495feb8ef5f8d0664909523ff39cbb6d47ac01faf7a0c96833d4a075471900cd0083b40014c359891870f784d68c7960a7bf2449aaca0dddcef7d66f3bf3b4209566c08efb7f845f6e8de197e5c6df2d0cfdc1872758189ca37852fd4f569406d5e2999b3497b5e298bad137a6a1eb29d95b8fc618d7fd039f349fbd22746c3f31abbaa6f0bf1b69f109ac12954997a0bcea99f98929611372b2622bb05fef4a781c4d2c1bfee4801c205430267a57ecd46c76b7e2524ec78e195c1d52bd1545eb2dcc81108e9585b012391a8f0ac70714060661026e9cf539b955868651fa2a0f38a015842de85662aed63efea852a5e20853a2d331df14f2a3b40703678532c2017d54d3a19e4f71fbdcae9c57d7e008831de203136f5cfda19c8aee57022a486b25b51586f86379216978b62ba40d7980b5320d799429d586a2bc99aad50c1af500f5e7124ef45b594f0fb178bc469b23e6b531b2aa2101a7dc6bcc69856b9c01ce17efd5b2a3648d5c4a9ef721ed9bbe071f14eddbb0b73b4b90f5456b7955cbf5b500e6cc064805ebeb4cdde0edc3fa79fab39a462f4ae503f70b62fdf3b07929614a91955a2f899d4e9420fe1cc2a307f40167d5625aa77c002b0464af27364643e2db2d31f13242dd255a2cf5526f290d38d94fa9b4ac8daa2c2b3b0d5ca5fb41a8730aab861302f505b83d235d6a26aff312f5cad8ec7e1f8daedcee09fa56001893486ed9b825a059779e629f98546d4e2dee980d66c74655ae9d051a874119956648d025ab824240725cafc46ce115022606e64ca9653cf46154a457e0ed2c570b21abf59e3ecb2dfab1bbcef7c73e40cdf592a833e0de75b883f59686b2ecae1218e33a63e7cff887d6dd07adfcc5b8b93de68804f2a363afb432715fbe2be27e76f431beb0122d6eb603387a05908f0ec49afe2e7517df010e86448479656a47e9a4bd3c8cf9cdea9ffae1720040b9533e48d28286eca52827c3ff5c4e4c8bc75a6e2d2bdf12b2062e4dfaa70c6f1bdfdebc6690ff754181896e910d0619cc544340b350bf22e3c3dbe7e7e69f747b19868d5df83ec344e502b53f9a8642aed7a311eb2d2ca499e58bb15a70a23862675ad67835c5886d6ebd89805c2974fbd3b3aeaa368156512ca5b11b20e85378325b82998b3208943aac6be874726542fa8c799512d853e5571746bcab93b05e2610244fa9954222b32d83cd3c5c9aefef0d679e84d27d264da89c78b478c5f01d6f1694c6eec6270aa22f383d53025cb12cb717e17da8cf07ad2db32691bb9576985c7ad47b49ccf27ac108397ffca2cdf32fe44d2e26908b47a9aa3b49ab280468fb5c8998595343462c0cbf89f0266bf692d63ecd15d3c715c382067b632a677811a968ccc4682d8f8409e06c0d55e7e626c2527c3c43326f5d590af7b9a402738e35c747ca85e1b78c611147ea161073b606fb36c2e442f1c558479e97aa7449fdb9573d47a90e84b2e7a0c485038fa95c18cb02fae29a641fe8a969624e4b8", 0x1000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000001600)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040000) unshare(0x4000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000018c0)={'tunl0\x00', &(0x7f0000001800)={'gretap0\x00', 0x0, 0x1, 0x0, 0x4, 0x0, {{0x26, 0x4, 0x3, 0x5, 0x98, 0x66, 0x0, 0x33, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x2c, 0x6a, 0x1, 0xf, [{@rand_addr=0x64010101, 0xfffffff8}, {@rand_addr=0x64010101, 0x3}, {@multicast1, 0x7}, {@loopback, 0x98}, {@broadcast, 0x2}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0xd, [0xae2dae5, 0x4, 0x7]}, @lsrr={0x83, 0x13, 0x87, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_addr={0x44, 0x1c, 0x60, 0x1, 0x3, [{@remote, 0xca}, {@rand_addr=0x64010100, 0x10000}, {@multicast1, 0xd26}]}, @generic={0x89, 0x12, "cdd5b565fc5f155b84b190e625934838"}]}}}}}) sendto(r0, &(0x7f0000001780)="29deab99f99447eae39b8cf77c0ba9850ab53c51ba3df2470ee306d17f7bd30f7935f344990d13a105dca097542a964527ea7c8d220b587f9871330326dd1915ba9d0598aea331e30b80e1f70eb1c1a72e455376a4b4d51b8b3e1d27062019db720cab2b115a525ec990e6152013d4459463", 0x72, 0xc040, &(0x7f0000001900)=@xdp={0x2c, 0x8, r4, 0x7}, 0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}}, 0x20000040) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xa8, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8000}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r2, 0x5dee9000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001cc0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001e80), r8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001fc0)={0x0, 0xd4, 0x10, 0x6, 0xfffffffe}, &(0x7f0000002000)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002040)={r11, 0xe2, 0x7, [0xc2, 0x7, 0x7ff, 0x8, 0x5, 0x76, 0x1e]}, 0x16) r12 = syz_genetlink_get_family_id$team(&(0x7f00000020c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002780)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f0000002140)={0x5c8, r12, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4a, 0x6, 0x0, 0x2000000}, {0x7, 0x5c, 0x6}, {0x8adc, 0x40, 0x4, 0x9}, {0x6, 0x3, 0x3, 0x7}, {0x5, 0x9, 0x7, 0x1}, {0x3cc5, 0x5, 0x8, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc7}}}]}}, {{0x8, 0x1, r13}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r4}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x4, 0x95, 0x1}, {0xe, 0x36, 0x1, 0x6}, {0x5, 0x7, 0x1, 0x10}, {0x3ff, 0x40, 0x7, 0x80000000}]}}}]}}, {{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000028c0)='GPL\x00', 0x7, 0xb, &(0x7f0000002900)=""/11, 0x41000, 0x10, '\x00', r7, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002940)={0x2, 0x7, 0x8000, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[r0, r0], 0x0, 0x10, 0x4}, 0x94) 830.132408ms ago: executing program 3 (id=2890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x43c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x408, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x3b0, 0x2, [@m_bpf={0x16c, 0xb, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x9, 0x4, 0x9, 0x9}, {0xfffd, 0x8, 0x80, 0x9}, {0x6, 0x81, 0x78, 0x7e4}, {0x7, 0x4, 0xf8, 0x7}, {0x6c2a, 0xc0, 0x78, 0xcd2}, {0x2140, 0x20, 0x1, 0x1}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0xf9, 0x6, "e92f1635bced924343e673ea64286f019eb2fa41b9f1b9cb563e2fcad5bca10b37c4e528e2281ea7a78599c70c569fd5c1327e7c3ef1a404a81b139380cf86b1cf811ee93fab85941d52982dee63f744ae18169ae87e150d4892b59cd9f16d601c748d6dd39a773e079761c4e57be04203d8e8c8046cab18e3d7a92b641974841d1b9c3184ce17d89f39030937f92493f6610b072264a15bebfde8ea32027eb4bc5c191b1acbed71a5322e1a0a83d20740183d45a72f8a0d8b2e50623b96c25d495754ecf97267e567ba1604f674203be7aaa350b185f192cef10b8d7b508b2f6b5adb785d78f8d730b8f8b5f1a562f0e498c9b4dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x10c, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x2, 0x8, 0x7, 0xfffffff7}, 0x10}}]}, {0xbb, 0x6, "13e9b7982829cd64c2aff305229cfea980114be1c872fd12c8d0a236ce38c920d3c0babbd4d97b96990d34522168247fd775b2899e15e67028e3484a7f7c59738651a79b45b4b9ca2e2bf13250b662e2b83513cb6216b48167d824675d1110b5c4c6849e226a9f318198058805c5fb50eca91662b8c54372098e9cd263d5d3510d4fc77e330bc5a0bd3916aeb043fb68c7861ab95e14ac8d37e668bbe4aaefeec0e0726b2a2ccb02facc8e08e694241acc26398e861ae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x94, 0x11, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x56, 0x6, "7c6587a229afd97da91c17c05f84c1b1805398931f135cc11fb694d8e4aff3b5df418ff3fcaf0a38739bc4c2125b2788031f5e028a907876e4b25a7f35177a3f0fcb04703cbedf3deba8a2a760873c248002"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xa0, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xdc4, 0x3, 0x9, 0x8}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x3, 0x845c, 0x1}, 0x1, r6}}]}, {0x33, 0x6, "b2bd3147b5f56419bd3f0895907b133a8941438fc99076c4ed1a9ebbf0289468d06ee6e958d7580f086ba4eb3d37ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20040014}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c00)=@newchain={0x2c, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0xb}, {}, {0x3, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r8, &(0x7f0000000280)="eb9cf2818f41dbe87d3f37c30496896ace86425e4fda502ffe791a71399417930ced758df0501c76858b50c2fc45a33c51a51f6f8e8b403a60da3d2b9e37e4a3cf4f1bfb76d9487f813128c9120f409b8595a9fedd10df71e7395c5223ebf4f8499b83991b84228920344f4b0bc57728", &(0x7f0000000340)=""/255}, 0x20) 794.910692ms ago: executing program 1 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x3e269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e60}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) poll(&(0x7f0000000040)=[{r0, 0xc024}, {r0, 0x1040}, {r0, 0x44}, {r1, 0x1040}, {r0, 0x8002}], 0x5, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32, @ANYBLOB="01000008000300"/18, @ANYRES32=r2, @ANYBLOB="08003200050000000500330005"], 0x2c}}, 0x18) 770.342672ms ago: executing program 4 (id=2892): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000540)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)}, 0x800) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={0x0, 0x0, 0xff, 0x4}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 676.336278ms ago: executing program 2 (id=2893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x9, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) socket$kcm(0x11, 0xa, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0xfffffcaa, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000283404000000069078ac1e0101ffffffff00004e22c0af2c10eae1b785214d51db4baa2b99abf5dab139baa6e63de95f40c3edc5bbfc4a270600000000000000ea0b59dc9778e848f97d519c634b7e6b9397582bf5aaa7ce9ea645e71c9ba0bce9e019db29071f4e68fc37a11e095383ff721bc5470bfc813489f3ef56e4e66a80895b42448ebffde909217b4cbd49a57ffe7d05edd7f30b33fe370c5e77ed8c24f1a29e5157870e61b6f53221e2b4333df107dffaa3ac8bac0a98942b660d57ee0fcb7e444dfb5da7560877135d17cde3e4e8073f6098940712f3b8a0312a38febb3ae90756d40e1821bba5f04e3aca095e5a292a1b9e0453d4b55558a5b09fe649b5dc2c89b9a0f196", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10002090780684"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000930abe52e2d38100400086dd6076b2af001400000000aaff02000000000000000000000000000188006611680000000000883e000c907801000000"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "00d23e", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @dest_unreach={0x1, 0x6, 0x0, 0x5, '\x00', {0x2, 0x6, "df23ea", 0x80, 0x32, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)}, {&(0x7f0000000180)="d084", 0x2}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 671.764924ms ago: executing program 0 (id=2894): socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x6}]}]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x7}, 0x28) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x6, 0x2, 0x4, 0x2, "070040000580cc0d"}, 0x210}}, 0x8001) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000006800e97800000800000000000a000000000000000400040057298b90d2273403e3a7b0c036442b91cc69ac8e83a9a5aea2824e90c6258ff850a750ef4c792c895f2af787de1256d0925357b18f2b8ce837fe9d6e3b3437d84169cd28002fffcc7bc2dca2f1b51b2a21d8c0a866f0cf19092ddea8bab0804c19bb9ebe237f0f96166e2cf8bd4a91b2cf7d51f190db95a6e23a69bca307c4b8d802a72a8215afea7f77cc1888d59758af439c542d853f5a6a9aaa00231c6f072d5b61879e"], 0x1c}}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffdf7f00000000000000000c0002000100"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, &(0x7f0000002a80)) 639.632617ms ago: executing program 1 (id=2895): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000ff0100000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000b6efe35102940000000000000003000000"], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@can={{0x2, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "7cc900"}, 0x10}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="3cc2a776b3a0ee91605e90491e6e7de781"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = accept$alg(r3, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@flushsa={0x180, 0x1c, 0x100, 0x70bd29, 0x25dfdbff, {0xaf}, [@algo_crypt={0x69, 0x2, {{'lrw(camellia)\x00'}, 0x108, "54b2a7496f699880df7e02afbc24a6d6c1cedf8dcde8e80ebd03f5a7b945f52d1b"}}, @tfcpad={0x8, 0x16, 0x7}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x0, 0xa, 0x60, 0x80, 0x5e}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0xff}, @in=@empty, {0x3ff, 0x0, 0xfff, 0x5, 0x30, 0x100000000, 0x10, 0x6f}, {0xffffffffffffffff, 0xb, 0x6, 0xfffffffffffffff9}, {0x7, 0x576}, 0x70bd27, 0x3501, 0xa, 0x2, 0x89, 0x8}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x18}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004854}, 0x8c0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYBLOB="48c160784c3e1389b0a05056936a61a5809e17238d64a582ee19a1f3f306813f2b8dc57e88cf593a1c8c7702da97fd4a98f21dfc90291d875d9d1cfc1fcb85cb6b96b639cf65a59af5acf2ea059c8804a53f4d38920d230f1f4e12e244ade9418de4fd13534c686adb8743127f6110305eb29684addec1d88a94ff8e7fd402f8bbd7699736017772f71ed21dcc6e6a219be401c42c22cfae8763b4a38fa96ce3dddecde759f9e69ba09fe5ae7494a215027e401905a825d0f4daef09c146d637eb1a4328c7dd3495fb5acaa6a19d9ab2a783cfce9becc39977f6", @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRES16=r6, @ANYBLOB="10e80f7fa037a6ef52d0e6272d0df0c6068d7e1054f23ed356f1ed6b8c1f80580567bc186ce318e0475c970343ea59293b6dabb263ddd2cdb99fe0fb229c5c961d8ea479970fa4031c371d36c00ad2b523e19c7994ce595e47d29d65cab7eac49a276855def9bfdbb2ec2a088d61c7da95d2d5ee0cdc372bc174e823e877d70b5d4266be5b5cc39f2dac278052bb81df5d24dc196221ad3ad87a1d8cdb95d02c3abc21c243a007a32430c799835004d5380e8013de"], 0x50) pipe(0xfffffffffffffffe) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r12 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r12, &(0x7f0000000080)="3f4e4d8375227d3678d5ec462971d2e3883e68bcdeb98d37b62728b8f054c327c17b7803d2939178169ba41f1a919b59d233f19e3c41ae5b36255d0457e99e8993", 0x41, 0x44040, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, 0x1c) tee(r11, r10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 492.34853ms ago: executing program 3 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) close(r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r11, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) 469.708203ms ago: executing program 4 (id=2897): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000600)={0x4000000a}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x10004) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) setsockopt$inet_int(r3, 0x0, 0x16, &(0x7f0000000380)=0x3, 0x4) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x1) close(r0) 118.103518ms ago: executing program 3 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x5, 0x80, 0xc, 0x7fffffff}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xd60, 0x9, 0x7fff}}}]}]}]}}]}, 0x6c}}, 0x20040054) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 0s ago: executing program 4 (id=2899): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x80000000, 0x4, 0x9}, {0x0, 0x4, 0x2}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x1, 0x4}, 0x28) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0, 0xb}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x54, 0x18, 0x409, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e21}}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x80000000, 0x4, 0x9}, {0x0, 0x4, 0x2}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x1, 0x4}, 0x28) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0, 0xb}], 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x54, 0x18, 0x409, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e21}}]}, 0x54}}, 0x0) (async) kernel console output (not intermixed with test programs): ttr [ 240.358050][T11085] block nbd3: shutting down sockets [ 240.378647][T11087] __nla_validate_parse: 3 callbacks suppressed [ 240.378666][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 240.462438][T11087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.487911][T11092] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 240.618328][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 240.629916][T11099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1270'. [ 240.639891][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1270'. [ 240.659480][T11099] vlan3: entered allmulticast mode [ 240.664886][T11099] dummy0: entered allmulticast mode [ 240.834152][T11110] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 240.853928][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 240.889698][T11117] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 240.907192][T11117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1273'. [ 240.968821][T11115] wg1 speed is unknown, defaulting to 1000 [ 241.034634][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 241.075368][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5900 ms [ 241.083410][ C0] lec:lec_tx_timeout: lec0 [ 241.089092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 241.181812][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 241.324879][T11121] syzkaller0: entered promiscuous mode [ 241.330837][T11121] syzkaller0: entered allmulticast mode [ 241.615457][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 243.051896][T11169] bond4: entered promiscuous mode [ 243.088021][T11178] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 243.095902][T11178] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 243.170917][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1285'. [ 243.326957][T11187] xt_recent: Unsupported userspace flags (000000b1) [ 243.660567][T11211] ieee802154 phy1 wpan1: encryption failed: -90 [ 244.057066][T11233] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 244.074989][T11233] bond4 (unregistering): Released all slaves [ 244.399425][T11256] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 244.724092][T11275] x_tables: duplicate underflow at hook 2 [ 245.380977][T11312] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 245.396307][T11315] tipc: Can't bind to reserved service type 1 [ 245.410361][T11315] __nla_validate_parse: 10 callbacks suppressed [ 245.410380][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 245.451711][T11312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.462151][T11315] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1328'. [ 245.481228][T11318] bond5: (slave geneve3): making interface the new active one [ 245.496797][T11318] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 245.507360][ T1136] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.516428][ T1136] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.539027][ T1136] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.574624][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.640264][T11322] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1331'. [ 245.734779][T11324] wg1 speed is unknown, defaulting to 1000 [ 245.999345][T11344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1336'. [ 246.018111][T11344] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 246.093916][T11342] wg1 speed is unknown, defaulting to 1000 [ 246.100137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 246.100182][ C0] lec:lec_tx_timeout: lec0 [ 246.108341][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 246.194366][T11351] dummy0: mtu less than device minimum [ 246.262002][T11351] syzkaller0: entered promiscuous mode [ 246.268179][T11351] syzkaller0: entered allmulticast mode [ 246.272444][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 246.349206][ T29] audit: type=1800 audit(1771454390.984:5): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1340" name="memory.events" dev="tmpfs" ino=1207 res=0 errno=0 [ 246.393522][ T29] audit: type=1804 audit(1771454391.004:6): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1340" name="memory.events" dev="tmpfs" ino=1207 res=1 errno=0 [ 246.449179][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 246.607126][T11370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.701176][T11376] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1343'. [ 247.018761][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 247.028470][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1349'. [ 247.116405][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 247.408856][T11408] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 247.659834][T11421] wg1 speed is unknown, defaulting to 1000 [ 248.228266][T11457] 8021q: VLANs not supported on nlmon0 [ 248.305008][T11457] bond6: entered promiscuous mode [ 248.311278][T11457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.402430][T11457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.424482][T11457] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 248.460991][T11457] bond6: (slave sit2): Error -95 calling set_mac_address [ 248.990297][T11484] netlink: 'syz.1.1375': attribute type 8 has an invalid length. [ 249.427507][T11507] tipc: Enabled bearer , priority 0 [ 249.469733][T11507] tipc: Resetting bearer [ 249.675225][T11522] netlink: 'syz.2.1390': attribute type 58 has an invalid length. [ 249.808837][T11525] bridge0: entered allmulticast mode [ 249.814356][T11525] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 250.238942][T11562] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 250.281098][T11562] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 250.539780][T11576] macsec1: entered promiscuous mode [ 250.573957][T11579] tipc: Enabled bearer , priority 0 [ 250.583145][T11579] syzkaller0: MTU too low for tipc bearer [ 250.589385][T11579] tipc: Disabling bearer [ 250.600101][T11581] __nla_validate_parse: 11 callbacks suppressed [ 250.600118][T11581] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1409'. [ 250.637294][T11574] syzkaller0: entered promiscuous mode [ 250.642880][T11574] syzkaller0: entered allmulticast mode [ 250.763906][T11586] netlink: 'syz.1.1411': attribute type 9 has an invalid length. [ 250.782684][T11589] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1410'. [ 250.919626][T11598] netlink: 'syz.1.1415': attribute type 39 has an invalid length. [ 251.115389][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 251.123527][ C0] lec:lec_tx_timeout: lec0 [ 251.128809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 251.394897][T11621] sctp: [Deprecated]: syz.1.1419 (pid 11621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.394897][T11621] Use struct sctp_sack_info instead [ 251.436045][T11625] 8021q: VLANs not supported on ip_vti0 [ 251.450213][T11626] 8021q: VLANs not supported on ip_vti0 [ 255.798045][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.135597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 256.143674][ C0] lec:lec_tx_timeout: lec0 [ 256.148507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 261.155522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 261.163746][ C0] lec:lec_tx_timeout: lec0 [ 261.168630][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 266.995409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 267.003500][ C0] lec:lec_tx_timeout: lec0 [ 267.008300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 272.015401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 272.023429][ C0] lec:lec_tx_timeout: lec0 [ 272.028369][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 277.035421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 277.043532][ C0] lec:lec_tx_timeout: lec0 [ 277.048460][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 280.331183][T11646] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1427'. [ 280.523290][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 280.569129][T11666] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.1429'. [ 280.639653][T11666] xt_bpf: check failed: parse error [ 280.721867][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 280.808745][T11676] netlink: 'syz.0.1432': attribute type 6 has an invalid length. [ 281.867739][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 282.055362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 282.063554][ C0] lec:lec_tx_timeout: lec0 [ 282.068653][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 282.182031][T11724] netlink: 'syz.0.1446': attribute type 5 has an invalid length. [ 282.375139][T11731] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 283.159367][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1456'. [ 283.193237][T11768] veth1: left promiscuous mode [ 283.198478][T11768] veth1: left allmulticast mode [ 283.212184][T11768] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 283.221415][T11768] ip6gre1: left allmulticast mode [ 283.234619][T11768] ip6erspan0: left promiscuous mode [ 283.244388][T11768] geneve2: left promiscuous mode [ 283.262127][T11768] geneve2: left allmulticast mode [ 283.279341][T11768] bond2: left allmulticast mode [ 283.279891][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 283.287286][T11768] ip6tnl3: left allmulticast mode [ 283.313302][T11768] vlan3: left allmulticast mode [ 283.331034][T11768] dummy0: left allmulticast mode [ 283.354475][T11771] hsr_slave_0: left promiscuous mode [ 283.364136][T11771] hsr_slave_1: left promiscuous mode [ 283.400794][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1458'. [ 283.597353][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 283.820145][T11783] wg1 speed is unknown, defaulting to 1000 [ 284.138276][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 284.971330][T11838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.002333][T11838] bond0: (slave rose0): Enslaving as an active interface with an up link [ 285.278246][T11855] netlink: 'syz.3.1479': attribute type 39 has an invalid length. [ 285.324490][T11855] bond0: (slave syz_tun): Releasing backup interface [ 285.397912][ T5886] syz1: Port: 1 Link DOWN [ 286.155183][T11893] xt_bpf: check failed: parse error [ 286.199034][T11887] wg1 speed is unknown, defaulting to 1000 [ 286.354813][T11899] xt_l2tp: missing protocol rule (udp|l2tpip) [ 286.798404][T11917] wg1 speed is unknown, defaulting to 1000 [ 286.844608][T11918] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 286.852136][T11918] pim6reg1: linktype set to 805 [ 286.871914][T11914] wg1 speed is unknown, defaulting to 1000 [ 287.075767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 287.083868][ C0] lec:lec_tx_timeout: lec0 [ 287.088880][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 287.645185][T11937] veth0_vrt_wifi: renamed from dummy0 (while UP) [ 287.770847][T11960] __nla_validate_parse: 10 callbacks suppressed [ 287.770869][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 287.878368][T11945] wg1 speed is unknown, defaulting to 1000 [ 288.153709][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'. [ 288.249103][T11973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'. [ 288.419317][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 288.453991][T11996] bridge_slave_0: left allmulticast mode [ 288.462892][T11996] bridge_slave_0: left promiscuous mode [ 288.471604][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.638146][T12002] netlink: 'syz.1.1507': attribute type 29 has an invalid length. [ 288.659809][T12001] netlink: 'syz.1.1507': attribute type 29 has an invalid length. [ 288.694257][T12001] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1507'. [ 288.967242][T12017] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 289.170489][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1516'. [ 289.282839][T12028] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 289.365629][T12028] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1514'. [ 289.406744][T12028] ip6t_rpfilter: unknown options [ 289.421428][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 289.498709][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 289.620527][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 289.640679][T12056] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 289.737626][T12067] netlink: 'syz.2.1522': attribute type 8 has an invalid length. [ 290.034665][T12083] tipc: Enabled bearer , priority 0 [ 290.077041][T12082] syzkaller0: entered promiscuous mode [ 290.082733][T12082] syzkaller0: entered allmulticast mode [ 290.193337][T12082] tipc: Resetting bearer [ 290.229148][T12082] tipc: Disabling bearer [ 290.667014][T12124] tipc: Enabled bearer , priority 0 [ 290.675992][T12124] syzkaller0: entered promiscuous mode [ 290.681504][T12124] syzkaller0: entered allmulticast mode [ 290.712543][T12124] tipc: Resetting bearer [ 290.887923][T12118] tipc: Resetting bearer [ 290.952040][T12118] tipc: Disabling bearer [ 291.513528][T12172] sch_tbf: burst 2 is lower than device tunl0 mtu (68) ! [ 291.602316][T12170] tipc: Enabled bearer , priority 0 [ 291.634154][T12170] syzkaller0: entered promiscuous mode [ 291.666530][T12170] syzkaller0: entered allmulticast mode [ 291.717850][T12170] tipc: Resetting bearer [ 291.824422][T12168] tipc: Resetting bearer [ 291.958020][T12168] tipc: Disabling bearer [ 292.095574][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 292.103675][ C0] lec:lec_tx_timeout: lec0 [ 292.108392][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 292.843871][T12223] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.034260][T12233] bond8: option lacp_rate: invalid value (192) [ 293.052418][T12233] bond8 (unregistering): Released all slaves [ 293.639116][T12247] __nla_validate_parse: 4 callbacks suppressed [ 293.639136][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 293.665888][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 293.711244][T12254] syzkaller0: entered promiscuous mode [ 293.718219][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1559'. [ 293.742939][T12254] syzkaller0: entered allmulticast mode [ 293.787913][T12257] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 294.202900][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.252794][T12272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.297802][T12288] netlink: 'syz.4.1567': attribute type 29 has an invalid length. [ 294.326456][T12288] netlink: 'syz.4.1567': attribute type 29 has an invalid length. [ 294.353741][T12288] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1567'. [ 294.363691][T12288] unsupported nla_type 58 [ 294.606770][T12305] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 294.624135][T12305] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 294.666040][T12305] tipc: Resetting bearer [ 294.704758][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1571'. [ 294.764552][T12317] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1572'. [ 294.770707][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 294.893484][T12318] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 295.497823][T12336] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 297.115641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 297.123891][ C0] lec:lec_tx_timeout: lec0 [ 297.128507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 297.690959][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1574'. [ 297.703503][T12342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1574'. [ 297.714185][T12342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1574'. [ 297.814442][T12354] netlink: 'syz.0.1576': attribute type 21 has an invalid length. [ 297.867697][T12357] netlink: 'syz.0.1576': attribute type 21 has an invalid length. [ 297.998275][T12363] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 298.038256][T12363] netlink: 'syz.4.1579': attribute type 4 has an invalid length. [ 298.125422][T12369] tipc: Enabling of bearer rejected, failed to enable media [ 298.182774][T12370] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 298.248827][T12377] Unsupported ieee802154 address type: 0 [ 298.298116][T12370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.326188][T12380] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 298.399714][T12386] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 298.485737][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 298.647726][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.674289][T12393] veth0_to_team: entered promiscuous mode [ 298.695841][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.699375][T12393] veth0_to_team: left promiscuous mode [ 298.715989][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.745651][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.774260][T12411] Cannot find set identified by id 65534 to match [ 298.785471][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.826049][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 298.838281][T12416] __nla_validate_parse: 5 callbacks suppressed [ 298.838300][T12416] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1591'. [ 298.839466][T12395] veth0_to_team: entered promiscuous mode [ 298.862650][T12395] veth0_to_team: left promiscuous mode [ 298.894346][T12407] batman_adv: batadv0: Adding interface: macsec0 [ 298.911365][T12407] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.977615][T12407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.017533][T12407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.043350][T12407] batman_adv: batadv0: Interface activated: macsec0 [ 299.285504][ T7254] net_ratelimit: 13 callbacks suppressed [ 299.285526][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.336847][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.357211][T12435] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.396067][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.416532][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.437355][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.473085][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.488449][T12451] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 299.536512][T12435] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.602783][T12435] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.605513][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.655592][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.692390][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 299.754926][T12435] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.840578][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 299.865038][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 299.882093][T12469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1602'. [ 299.992095][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.057359][ T7262] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.076738][T12481] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1604'. [ 300.089287][T12480] syzkaller1: entered promiscuous mode [ 300.095971][T12480] syzkaller1: entered allmulticast mode [ 300.143214][ T7254] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.187332][ T7254] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.299325][T12487] syzkaller0: entered promiscuous mode [ 300.310487][T12487] syzkaller0: entered allmulticast mode [ 300.330126][T12485] syz.2.1607: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 300.359000][T12490] tipc: Enabled bearer , priority 0 [ 300.392219][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.2.1607 Not tainted syzkaller #0 PREEMPT(full) [ 300.392249][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.392261][T12485] Call Trace: [ 300.392270][T12485] [ 300.392279][T12485] dump_stack_lvl+0xe8/0x150 [ 300.392314][T12485] warn_alloc+0x249/0x340 [ 300.392342][T12485] ? stack_trace_save+0xa9/0x100 [ 300.392373][T12485] ? __pfx_warn_alloc+0x10/0x10 [ 300.392405][T12485] ? kasan_save_track+0x4f/0x80 [ 300.392428][T12485] ? kasan_save_track+0x3e/0x80 [ 300.392449][T12485] ? __kasan_kmalloc+0x93/0xb0 [ 300.392472][T12485] ? __kmalloc_cache_noprof+0x31c/0x660 [ 300.392494][T12485] ? xskq_create+0x56/0x170 [ 300.392515][T12485] ? xsk_setsockopt+0x54c/0x990 [ 300.392533][T12485] ? do_sock_setsockopt+0x17c/0x1b0 [ 300.392552][T12485] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 300.392573][T12485] ? do_syscall_64+0x14d/0xf80 [ 300.392600][T12485] __vmalloc_node_range_noprof+0x132/0x1730 [ 300.392672][T12485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 300.392705][T12485] ? __kasan_kmalloc+0x93/0xb0 [ 300.392739][T12485] vmalloc_user_noprof+0xad/0xe0 [ 300.392765][T12485] ? xskq_create+0xbf/0x170 [ 300.392788][T12485] xskq_create+0xbf/0x170 [ 300.392814][T12485] xsk_init_queue+0xad/0x110 [ 300.392839][T12485] xsk_setsockopt+0x54c/0x990 [ 300.392865][T12485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.392886][T12485] ? __pfx_aa_sk_perm+0x10/0x10 [ 300.392917][T12485] ? aa_sock_opt_perm+0xff/0x1a0 [ 300.392947][T12485] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 300.392980][T12485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 300.393002][T12485] do_sock_setsockopt+0x17c/0x1b0 [ 300.393031][T12485] __x64_sys_setsockopt+0x13d/0x1b0 [ 300.393061][T12485] do_syscall_64+0x14d/0xf80 [ 300.393083][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.393102][T12485] ? trace_irq_disable+0x37/0x100 [ 300.393123][T12485] ? clear_bhb_loop+0x40/0x90 [ 300.393148][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.393166][T12485] RIP: 0033:0x7f233e39c629 [ 300.393185][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.393200][T12485] RSP: 002b:00007f233f2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.393222][T12485] RAX: ffffffffffffffda RBX: 00007f233e615fa0 RCX: 00007f233e39c629 [ 300.393236][T12485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 300.393248][T12485] RBP: 00007f233e432b39 R08: 0000000000000004 R09: 0000000000000000 [ 300.393260][T12485] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.393272][T12485] R13: 00007f233e616038 R14: 00007f233e615fa0 R15: 00007ffcbfb08d28 [ 300.393304][T12485] [ 300.393402][T12485] Mem-Info: [ 300.666199][T12498] can: request_module (can-proto-0) failed. [ 300.674606][T12485] active_anon:6148 inactive_anon:0 isolated_anon:0 [ 300.674606][T12485] active_file:3412 inactive_file:40017 isolated_file:0 [ 300.674606][T12485] unevictable:768 dirty:184 writeback:0 [ 300.674606][T12485] slab_reclaimable:11571 slab_unreclaimable:163164 [ 300.674606][T12485] mapped:29512 shmem:1366 pagetables:1345 [ 300.674606][T12485] sec_pagetables:0 bounce:0 [ 300.674606][T12485] kernel_misc_reclaimable:0 [ 300.674606][T12485] free:1252825 free_pcp:12463 free_cma:0 [ 300.735667][T12485] Node 0 active_anon:24592kB inactive_anon:0kB active_file:13648kB inactive_file:159868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118048kB dirty:736kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13668kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.784365][T12485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.833992][T12485] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.876213][T12486] tipc: Resetting bearer [ 300.900619][T12485] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 300.932605][T12485] Node 0 DMA32 free:1061480kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24476kB inactive_anon:0kB active_file:13648kB inactive_file:159868kB unevictable:1536kB writepending:740kB zspages:0kB present:3129332kB managed:2554012kB mlocked:0kB bounce:0kB free_pcp:50048kB local_pcp:20868kB free_cma:0kB [ 300.969696][T12486] tipc: Disabling bearer [ 301.005583][T12485] lowmem_reserve[]: 0 0 0 0 0 [ 301.010904][T12485] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 301.135428][T12485] lowmem_reserve[]: 0 0 0 0 0 [ 301.140246][T12485] Node 1 Normal free:3934460kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.152517][T12520] wg1 speed is unknown, defaulting to 1000 [ 301.221183][T12485] lowmem_reserve[]: 0 0 0 0 0 [ 301.237990][T12485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.274950][T12485] Node 0 DMA32: 765*4kB (UM) 603*8kB (UME) 203*16kB (UME) 283*32kB (UME) 99*64kB (UME) 58*128kB (UM) 83*256kB (UME) 71*512kB (UM) 51*1024kB (UE) 18*2048kB (UM) 209*4096kB (M) = 1036700kB [ 301.332792][T12485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.350179][T12485] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UME) 9*32kB (UME) 8*64kB (UM) 6*128kB (UME) 4*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 957*4096kB (M) = 3934460kB [ 301.379322][T12485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.408641][T12485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.433461][T12485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.453039][T12485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.462998][T12485] 44793 total pagecache pages [ 301.471055][T12485] 0 pages in swap cache [ 301.479345][T12485] Free swap = 124996kB [ 301.492772][T12485] Total swap = 124996kB [ 301.505031][T12485] 2097051 pages RAM [ 301.517128][T12485] 0 pages HighMem/MovableOnly [ 301.530868][T12485] 426702 pages reserved [ 301.535747][T12485] 0 pages cma reserved [ 301.578110][T12541] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1616'. [ 301.737093][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1619'. [ 301.754456][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1619'. [ 302.128587][T12564] wg1 speed is unknown, defaulting to 1000 [ 302.135362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 302.143615][ C0] lec:lec_tx_timeout: lec0 [ 302.148677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 302.358940][T12580] netlink: 'syz.3.1624': attribute type 4 has an invalid length. [ 302.559846][T12590] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1628'. [ 302.668600][T12599] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1629'. [ 302.771798][T12592] tipc: Enabled bearer , priority 0 [ 302.793859][T12597] syzkaller0: entered promiscuous mode [ 302.846889][T12597] syzkaller0: entered allmulticast mode [ 302.983216][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 303.017220][T12592] tipc: Resetting bearer [ 303.032997][T12616] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 303.066744][T12616] erspan1: entered allmulticast mode [ 303.120511][T12586] tipc: Resetting bearer [ 303.171085][T12586] tipc: Disabling bearer [ 303.401534][T12632] bond4: (slave dummy0): Releasing active interface [ 303.895094][T12644] syzkaller0: entered promiscuous mode [ 303.991344][T12644] syzkaller0: entered allmulticast mode [ 304.308856][ T60] net_ratelimit: 121 callbacks suppressed [ 304.308880][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.366140][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.407511][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.437745][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.466741][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.485439][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.509990][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.535987][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.558085][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 304.585731][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.031210][T12702] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.183282][T12702] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.361798][T12725] __nla_validate_parse: 3 callbacks suppressed [ 306.361819][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1655'. [ 306.408122][T12702] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.528020][T12702] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.572065][T12740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1658'. [ 306.606056][T12740] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 306.633142][T12740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1658'. [ 306.645840][ T2983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.679646][T12740] team0: Port device geneve0 added [ 306.685709][ T2983] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.738301][ T2983] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.767183][ T2983] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.791891][ T2983] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.823148][ T2983] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.904028][ T7264] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.935831][ T7264] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.970353][T12706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.063603][T12706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.144426][T12706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.155474][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 307.163609][ C0] lec:lec_tx_timeout: lec0 [ 307.168702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.232544][T12706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.263945][T12734] netlink: 'syz.3.1656': attribute type 12 has an invalid length. [ 307.470422][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 307.644137][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1667'. [ 307.668189][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 307.787493][T12793] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 307.878093][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1671'. [ 307.943095][T12803] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1671'. [ 307.954918][T12797] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 307.963306][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 307.968698][T12797] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 308.069942][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1669'. [ 308.077468][T12793] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 308.091143][T12797] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.133555][T12793] macvlan2: entered promiscuous mode [ 308.139231][T12793] macvlan2: entered allmulticast mode [ 308.153943][T12793] bond9: entered promiscuous mode [ 308.171796][T12793] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.181526][T12793] bond9: left promiscuous mode [ 308.241903][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.288149][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.321750][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.375957][T12706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.501311][T12706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.610255][T12706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.335783][ T60] net_ratelimit: 161 callbacks suppressed [ 309.335807][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 309.349858][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.465501][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 309.473362][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.527968][T12843] syzkaller1: entered promiscuous mode [ 309.533842][T12843] syzkaller1: entered allmulticast mode [ 309.585815][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 309.596194][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.705697][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 309.713788][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.825706][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 309.834067][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 309.992988][ T5820] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 310.006235][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 310.006264][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.006274][ T5820] Call Trace: [ 310.006283][ T5820] [ 310.006292][ T5820] dump_stack_lvl+0xe8/0x150 [ 310.006323][ T5820] dump_header+0xd3/0x4c0 [ 310.006345][ T5820] oom_kill_process+0x3ab/0x970 [ 310.006374][ T5820] out_of_memory+0x106c/0x1410 [ 310.006397][ T5820] ? percpu_ref_put+0x19/0x180 [ 310.006424][ T5820] ? __pfx___mutex_lock+0x10/0x10 [ 310.006457][ T5820] ? __pfx_out_of_memory+0x10/0x10 [ 310.006477][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 310.006514][ T5820] try_charge_memcg+0xc53/0x1560 [ 310.006559][ T5820] ? __pfx_try_charge_memcg+0x10/0x10 [ 310.006579][ T5820] ? xa_load+0x60/0x210 [ 310.006615][ T5820] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 310.006650][ T5820] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 310.006679][ T5820] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 310.006706][ T5820] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 310.006734][ T5820] __read_swap_cache_async+0x212/0x480 [ 310.006764][ T5820] swap_cluster_readahead+0x358/0x680 [ 310.006792][ T5820] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 310.006828][ T5820] ? get_vma_policy+0x27b/0x3c0 [ 310.006857][ T5820] swapin_readahead+0x196/0xc50 [ 310.006874][ T5820] ? finish_task_switch+0x161/0x920 [ 310.006896][ T5820] ? swap_table_get+0x1e/0x260 [ 310.006929][ T5820] ? __pfx_swapin_readahead+0x10/0x10 [ 310.006951][ T5820] ? swap_table_get+0x1e/0x260 [ 310.006975][ T5820] ? swap_table_get+0x1e/0x260 [ 310.006989][ T5820] ? swap_table_get+0x1e/0x260 [ 310.007008][ T5820] ? swap_table_get+0x216/0x260 [ 310.007027][ T5820] ? swap_cache_get_folio+0x513/0x520 [ 310.007053][ T5820] do_swap_page+0x8ce/0x5e10 [ 310.007072][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 310.007112][ T5820] ? __pte_offset_map+0x29/0x240 [ 310.007135][ T5820] ? __pte_offset_map+0x29/0x240 [ 310.007155][ T5820] ? do_swap_page+0x18b/0x5e10 [ 310.007178][ T5820] ? __pfx_do_swap_page+0x10/0x10 [ 310.007198][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 310.007217][ T5820] ? __pfx_default_wake_function+0x10/0x10 [ 310.007240][ T5820] ? __pte_offset_map+0x1ae/0x240 [ 310.007264][ T5820] ? pte_offset_map_rw_nolock+0xea/0x160 [ 310.007289][ T5820] handle_mm_fault+0x12d2/0x32a0 [ 310.007327][ T5820] ? handle_mm_fault+0xee/0x32a0 [ 310.007355][ T5820] ? __pfx_handle_mm_fault+0x10/0x10 [ 310.007373][ T5820] ? lock_vma_under_rcu+0x45a/0x500 [ 310.007433][ T5820] do_user_addr_fault+0xa73/0x1360 [ 310.007464][ T5820] ? rcu_is_watching+0x15/0xb0 [ 310.007486][ T5820] ? trace_page_fault_user+0x84/0x1c0 [ 310.007510][ T5820] exc_page_fault+0x6a/0xc0 [ 310.007534][ T5820] asm_exc_page_fault+0x26/0x30 [ 310.007551][ T5820] RIP: 0033:0x7fcab015cece [ 310.007569][ T5820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.007584][ T5820] RSP: 002b:00007ffcb029d118 EFLAGS: 00010246 [ 310.007609][ T5820] RAX: 0000000000000000 RBX: 000055556b459500 RCX: 00007fcab015cece [ 310.007622][ T5820] RDX: 00007ffcb029d170 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.007633][ T5820] RBP: 00007ffcb029d1dc R08: 0000000000000000 R09: 0000000000000000 [ 310.007644][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 310.007655][ T5820] R13: 00000000000927c0 R14: 000000000004b94a R15: 00007ffcb029d230 [ 310.007689][ T5820] [ 310.007697][ T5820] memory: usage 307200kB, limit 307200kB, failcnt 604 [ 310.374307][ T5820] memory+swap: usage 285260kB, limit 9007199254740988kB, failcnt 0 [ 310.382354][ T5820] kmem: usage 283204kB, limit 9007199254740988kB, failcnt 0 [ 310.389979][ T5820] Memory cgroup stats for /syz0: [ 310.390251][ T5820] cache 0 [ 310.398216][ T5820] rss 0 [ 310.401007][ T5820] rss_huge 0 [ 310.404217][ T5820] shmem 0 [ 310.407443][ T5820] mapped_file 0 [ 310.411093][ T5820] dirty 0 [ 310.414050][ T5820] writeback 0 [ 310.417489][ T5820] workingset_refault_anon 10 [ 310.422180][ T5820] workingset_refault_file 54 [ 310.424280][T12773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.427036][ T5820] swap 163840 [ 310.439151][ T5820] swapcached 36864 [ 310.442884][ T5820] pgpgin 51202 [ 310.472097][ T5820] pgpgout 51193 [ 310.481325][ T5820] pgfault 85239 [ 310.484920][ T5820] pgmajfault 5 [ 310.518457][ T5820] inactive_anon 0 [ 310.522150][ T5820] active_anon 36864 [ 310.535590][ T5820] inactive_file 0 [ 310.545848][ T5820] active_file 0 [ 310.549370][ T5820] unevictable 0 [ 310.552861][ T5820] hierarchical_memory_limit 314572800 [ 310.584081][ T5820] hierarchical_memsw_limit 9223372036854771712 [ 310.594155][ T5820] total_cache 0 [ 310.618840][ T5820] total_rss 0 [ 310.634640][ T5820] total_rss_huge 0 [ 310.659420][ T5820] total_shmem 0 [ 310.663508][ T5820] total_mapped_file 0 [ 310.696362][ T5820] total_dirty 0 [ 310.700631][ T5820] total_writeback 0 [ 310.705090][ T5820] total_workingset_refault_anon 10 [ 310.740259][ T5820] total_workingset_refault_file 54 [ 310.765597][ T5820] total_swap 163840 [ 310.769472][ T5820] total_swapcached 36864 [ 310.774365][ T5820] total_pgpgin 51202 [ 310.816699][ T5820] total_pgpgout 51193 [ 310.820751][ T5820] total_pgfault 85239 [ 310.840836][ T5820] total_pgmajfault 5 [ 310.844902][ T5820] total_inactive_anon 0 [ 310.863123][ T5820] total_active_anon 36864 [ 310.887552][ T5820] total_inactive_file 0 [ 310.925377][ T5820] total_active_file 0 [ 310.929452][ T5820] total_unevictable 0 [ 310.933537][ T5820] anon_cost 0 [ 310.975552][ T5820] file_cost 0 [ 310.978904][ T5820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1676,pid=12842,uid=0 [ 311.051479][ T5820] Memory cgroup out of memory: Killed process 12842 (syz.0.1676) total-vm:104328kB, anon-rss:1224kB, file-rss:23112kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 311.420732][T12878] __nla_validate_parse: 7 callbacks suppressed [ 311.420753][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 311.463439][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 311.559931][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 311.582791][T12884] tipc: Enabling of bearer rejected, failed to enable media [ 311.666679][T12884] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 311.860332][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 312.207800][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 312.280753][T12921] bond7 (unregistering): Released all slaves [ 312.292890][T12929] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1694'. [ 312.725011][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 312.995327][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 313.003405][ C0] lec:lec_tx_timeout: lec0 [ 313.015457][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 313.119185][T12963] erspan1: entered promiscuous mode [ 313.124469][T12963] erspan1: entered allmulticast mode [ 313.151872][T12970] batadv_slave_1: entered promiscuous mode [ 313.177946][T12963] netlink: 'syz.0.1704': attribute type 3 has an invalid length. [ 313.187156][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 313.226803][T12960] batadv_slave_1: left promiscuous mode [ 313.247524][T12972] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1708'. [ 314.166580][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 314.436210][ T12] net_ratelimit: 104 callbacks suppressed [ 314.436232][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 314.471051][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.635629][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 314.686091][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 314.715415][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.865660][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 314.877439][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 314.976843][T13055] bridge0: port 2(ip6gretap0) entered blocking state [ 314.983690][T13055] bridge0: port 2(ip6gretap0) entered disabled state [ 315.015653][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.025598][T13055] ip6gretap0: entered allmulticast mode [ 315.033176][T13055] ip6gretap0: entered promiscuous mode [ 315.049332][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.085442][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 315.130724][T13060] netlink: 'syz.1.1730': attribute type 15 has an invalid length. [ 315.223615][T13062] geneve3: entered promiscuous mode [ 315.247975][ T12] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 20000 - 0 [ 315.295391][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.314116][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.344582][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 315.467520][T13078] bond0: (slave bond_slave_0): Releasing backup interface [ 315.543476][T13078] bond0: (slave bond_slave_1): Releasing backup interface [ 315.581795][T13082] netlink: 'syz.1.1737': attribute type 5 has an invalid length. [ 315.883419][T13106] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.126209][T13125] tipc: New replicast peer: 255.255.255.255 [ 316.143383][T13125] tipc: Enabled bearer , priority 26 [ 316.464805][T13141] wg1 speed is unknown, defaulting to 1000 [ 316.658765][T13150] __nla_validate_parse: 6 callbacks suppressed [ 316.658786][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 316.796170][T13150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.832084][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 316.846263][T13159] syzkaller0: entered promiscuous mode [ 316.851789][T13159] syzkaller0: entered allmulticast mode [ 316.958831][T13150] macsec3: entered promiscuous mode [ 316.964464][T13150] bond9: entered promiscuous mode [ 316.971400][T13150] macsec3: entered allmulticast mode [ 316.977878][T13150] bond9: entered allmulticast mode [ 316.993571][T13150] bond9: left allmulticast mode [ 317.005877][T13150] bond9: left promiscuous mode [ 317.091073][T13173] netlink: 'syz.4.1759': attribute type 39 has an invalid length. [ 317.105873][T13172] netlink: 'syz.4.1759': attribute type 39 has an invalid length. [ 317.179093][T13177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1759'. [ 317.204420][T13177] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1759'. [ 317.215525][T13177] netlink: 'syz.4.1759': attribute type 5 has an invalid length. [ 317.228876][T13177] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1759'. [ 317.240169][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260119][ T5963] tipc: Node number set to 1906854588 [ 317.298465][T13183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1761'. [ 317.326944][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 317.416449][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1761'. [ 317.472131][T13190] netlink: 'syz.0.1764': attribute type 6 has an invalid length. [ 317.565708][T13191] wg1 speed is unknown, defaulting to 1000 [ 317.584095][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 317.623236][T13203] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 317.681053][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1765'. [ 317.893407][T13203] bond4: entered promiscuous mode [ 317.899184][T13203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.025326][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 318.033413][ C0] lec:lec_tx_timeout: lec0 [ 318.038350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 318.789849][T13264] xt_ecn: cannot match TCP bits for non-tcp packets [ 318.898215][ T1136] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.949309][ T1136] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.012006][ T2983] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.069827][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.537143][ T1136] net_ratelimit: 126 callbacks suppressed [ 319.537165][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.555949][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 319.628082][T13313] netlink: 'syz.0.1791': attribute type 13 has an invalid length. [ 319.688469][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.722079][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.765623][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.797822][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.825652][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.878514][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.893188][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.925511][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 319.935457][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.952637][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.966332][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 320.050261][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.027451][T13375] wg1 speed is unknown, defaulting to 1000 [ 321.726218][T13418] __nla_validate_parse: 15 callbacks suppressed [ 321.726241][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 322.496789][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1821'. [ 322.700577][T13464] netlink: 'syz.2.1825': attribute type 3 has an invalid length. [ 322.741682][T13464] netlink: 'syz.2.1825': attribute type 3 has an invalid length. [ 322.778629][T13466] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1826'. [ 322.993809][T13482] netlink: 'syz.4.1829': attribute type 5 has an invalid length. [ 323.016565][T13482] netlink: 'syz.4.1829': attribute type 5 has an invalid length. [ 323.033157][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 323.045663][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 323.053746][ C0] lec:lec_tx_timeout: lec0 [ 323.058883][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 323.111684][T13489] IPVS: set_ctl: invalid protocol: 4 172.20.20.20:20000 [ 323.182363][T13494] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 323.198003][T13489] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 323.389045][T13499] bond10: (slave gretap3): making interface the new active one [ 323.416286][T13499] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 323.849482][T13527] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1839'. [ 323.906973][T13529] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1840'. [ 323.952644][T13530] wg1 speed is unknown, defaulting to 1000 [ 324.089776][T13539] netlink: 'syz.2.1840': attribute type 2 has an invalid length. [ 324.202202][T13539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1840'. [ 324.596104][ T2983] net_ratelimit: 128 callbacks suppressed [ 324.596125][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.645428][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.665718][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.697389][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.748411][T13573] syzkaller1: entered promiscuous mode [ 324.754169][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.781064][T13573] syzkaller1: entered allmulticast mode [ 324.816522][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.824852][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 324.975393][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.995567][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 325.046674][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 325.121629][T13588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1852'. [ 325.166712][T13588] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1852'. [ 325.211983][T13587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1851'. [ 325.299555][T13587] ip6gre1: entered promiscuous mode [ 325.304927][T13587] ip6gre1: entered allmulticast mode [ 325.489993][T13607] tipc: Enabled bearer , priority 0 [ 325.527953][T13605] syzkaller0: entered promiscuous mode [ 325.579413][T13605] syzkaller0: entered allmulticast mode [ 325.625790][T13614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.656204][T13605] tipc: Resetting bearer [ 325.682662][T13618] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 325.752129][T13605] tipc: Disabling bearer [ 325.792951][T13618] !: entered promiscuous mode [ 325.889416][T13627] syzkaller1: entered promiscuous mode [ 325.922468][T13627] syzkaller1: entered allmulticast mode [ 326.274492][T13644] wg1 speed is unknown, defaulting to 1000 [ 326.440473][T13649] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 327.106175][T13668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 327.159314][T13672] syzkaller0: entered promiscuous mode [ 327.193190][T13672] syzkaller0: entered allmulticast mode [ 327.339704][T13687] __nla_validate_parse: 4 callbacks suppressed [ 327.339725][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1871'. [ 327.373085][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1871'. [ 327.448819][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 327.799257][T13705] syzkaller0: entered promiscuous mode [ 327.836200][T13705] syzkaller0: entered allmulticast mode [ 327.886718][T13710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1875'. [ 327.930754][T13710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1875'. [ 328.085352][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 328.093462][ C0] lec:lec_tx_timeout: lec0 [ 328.098969][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.156975][T13710] wg1 speed is unknown, defaulting to 1000 [ 328.222851][T13719] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1878'. [ 328.241387][T13716] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 328.263532][T13719] netlink: 91 bytes leftover after parsing attributes in process `syz.4.1878'. [ 328.414181][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 328.448673][T13725] netlink: 'syz.3.1880': attribute type 5 has an invalid length. [ 328.520056][T13727] wg1 speed is unknown, defaulting to 1000 [ 328.542291][T13725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 328.655430][T13726] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1880'. [ 328.690389][T13720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.712753][T13725] geneve4: entered promiscuous mode [ 328.718137][T13725] geneve4: entered allmulticast mode [ 328.915110][ T7254] netdevsim netdevsim3 : set [1, 2] type 2 family 0 port 256 - 0 [ 328.927385][ T7254] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 328.946010][ T7254] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 328.954997][ T7254] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 329.209306][T13751] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 329.264876][T13751] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 329.270550][T13754] wg1 speed is unknown, defaulting to 1000 [ 329.439451][T13763] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 329.447224][T13763] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 329.455007][T13763] tipc: Resetting bearer [ 329.615931][ T12] net_ratelimit: 130 callbacks suppressed [ 329.615955][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 329.661722][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 329.709184][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 329.725430][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 329.857089][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 329.872564][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.024957][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 330.068798][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 330.135789][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 330.175444][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 330.454952][T13797] pimreg: entered allmulticast mode [ 330.479788][T13806] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 331.632689][T13841] netlink: 'syz.3.1903': attribute type 2 has an invalid length. [ 332.289232][T13872] wg1 speed is unknown, defaulting to 1000 [ 332.827911][T13890] __nla_validate_parse: 4 callbacks suppressed [ 332.827933][T13890] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1912'. [ 332.945688][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1913'. [ 332.962742][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 333.044027][T13896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1914'. [ 333.105424][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 333.113485][ C0] lec:lec_tx_timeout: lec0 [ 333.118784][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.427762][T13916] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 333.799850][T13927] syzkaller0: entered promiscuous mode [ 333.835584][T13927] syzkaller0: entered allmulticast mode [ 334.340229][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 334.629535][ T60] net_ratelimit: 121 callbacks suppressed [ 334.629558][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.657286][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.689817][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.716616][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.736604][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.757020][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.777279][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.819163][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.855855][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 334.878774][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 335.889787][T13956] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 335.897939][T13956] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1927'. [ 335.915656][T13962] veth0: entered promiscuous mode [ 335.928561][T13970] veth0 (unregistering): left promiscuous mode [ 335.989395][T13979] tipc: Enabled bearer , priority 0 [ 336.042563][T13983] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 336.071259][T13979] tipc: Disabling bearer [ 336.101924][T13988] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 336.115975][T13983] team0: Device vxcan1 is of different type [ 336.150046][T13988] team0: Device vxcan1 is of different type [ 336.173081][T13991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.296565][T13998] netlink: 'syz.0.1937': attribute type 21 has an invalid length. [ 336.313612][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1937'. [ 336.329334][T13998] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 336.417503][T14004] netlink: 'syz.4.1939': attribute type 1 has an invalid length. [ 336.574952][T14010] bond5: (slave bridge4): making interface the new active one [ 336.592572][T14010] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 336.650794][T14012] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 336.666922][T14012] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1940'. [ 336.679901][T14016] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 337.058486][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 337.085782][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 337.377313][T14041] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.443593][T14041] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.616912][T14041] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.626979][T14041] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.684316][T14060] wg1 speed is unknown, defaulting to 1000 [ 337.700954][T14073] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 337.784326][T14074] bond6 (unregistering): Released all slaves [ 337.857991][T14073] bond6: entered promiscuous mode [ 337.877825][T14073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.901936][T14041] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.948621][T14041] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.046582][T14041] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.072383][T14041] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.122220][T14080] wg1 speed is unknown, defaulting to 1000 [ 338.135534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 338.143654][ C0] lec:lec_tx_timeout: lec0 [ 338.148819][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.495647][T14098] wg1 speed is unknown, defaulting to 1000 [ 338.516880][ T1136] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.530816][ T1136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.641909][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.665579][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.684057][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.708627][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.758328][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.787654][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.908362][T14128] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 339.014811][T14128] bond7: entered promiscuous mode [ 339.035991][T14128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.112050][T14132] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 339.145792][T14132] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 339.156440][T14132] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 339.205864][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.429252][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 339.441742][T14155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1967'. [ 339.637007][ T12] net_ratelimit: 177 callbacks suppressed [ 339.637032][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 339.695787][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 339.725906][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.836625][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 339.853100][ T2983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 339.995382][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 340.017075][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.125633][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 340.143775][ T7254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 340.336106][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 340.879186][T14210] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1980'. [ 340.978792][T14210] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1980'. [ 341.074640][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 341.142751][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1983'. [ 341.428671][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 341.480462][T14232] netlink: 'syz.0.1987': attribute type 16 has an invalid length. [ 341.514530][T14232] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1987'. [ 341.827041][T14245] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 342.117999][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 342.265577][T14265] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.300757][T14275] wg1 speed is unknown, defaulting to 1000 [ 342.380239][T14265] bond8: (slave ip6gretap2): making interface the new active one [ 342.407803][T14265] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 342.946786][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2001'. [ 343.155359][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.163475][ C0] lec:lec_tx_timeout: lec0 [ 343.168785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.564177][T14311] syzkaller1: entered promiscuous mode [ 343.579087][T14311] syzkaller1: entered allmulticast mode [ 344.323953][T14359] bond3 (unregistering): Released all slaves [ 344.683480][ T60] net_ratelimit: 111 callbacks suppressed [ 344.683504][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 344.713535][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 344.846687][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 344.890667][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.035430][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 345.166573][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.221667][T14394] __nla_validate_parse: 1 callbacks suppressed [ 345.221689][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 345.307067][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 345.314871][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.368030][T14397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 345.528798][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 345.601051][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.002575][T14418] netlink: 'syz.4.2022': attribute type 3 has an invalid length. [ 346.385856][T14437] ip6t_srh: unknown srh match flags 4000 [ 346.865239][T14450] ieee802154 phy1 wpan1: encryption failed: -90 [ 347.221436][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 347.287537][T14474] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2034'. [ 347.372731][T14474] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2034'. [ 347.898487][T14493] wg1 speed is unknown, defaulting to 1000 [ 347.993763][T14458] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 347.999598][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 348.015662][T14458] bond11 (unregistering): Released all slaves [ 348.386601][T14511] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2043'. [ 348.407564][T14511] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2043'. [ 348.448229][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 348.456687][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 348.499600][T14511] xt_limit: Overflow, try lower: 31324/2147483648 [ 348.810304][T14523] sctp: [Deprecated]: syz.0.2047 (pid 14523) Use of int in max_burst socket option deprecated. [ 348.810304][T14523] Use struct sctp_assoc_value instead [ 349.118985][T14537] nft_compat: unsupported protocol 0 [ 349.184445][T14537] nft_compat: unsupported protocol 0 [ 349.727591][ T7262] net_ratelimit: 83 callbacks suppressed [ 349.727615][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.758051][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 349.905460][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 349.913499][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.025521][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 350.037643][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.165449][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 350.174479][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.225487][T14572] Bluetooth: MGMT ver 1.23 [ 350.285750][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 350.293855][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 350.397793][T14602] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 352.622557][T14569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.850772][T14619] __nla_validate_parse: 10 callbacks suppressed [ 352.850793][T14619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2071'. [ 352.897045][T14619] netlink: 91 bytes leftover after parsing attributes in process `syz.4.2071'. [ 352.915603][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 352.923695][ C1] lec:lec_tx_timeout: lec0 [ 352.929747][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.986121][T14627] wg1 speed is unknown, defaulting to 1000 [ 353.180118][T14639] netlink: 'syz.4.2076': attribute type 5 has an invalid length. [ 353.580302][T14659] netlink: 'syz.1.2079': attribute type 33 has an invalid length. [ 353.637308][T14659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2079'. [ 353.668502][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2081'. [ 353.725525][T14666] xt_hashlimit: max too large, truncated to 1048576 [ 353.732745][T14666] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.799942][T14659] `: renamed from team0 (while UP) [ 353.939432][T14663] netlink: 'syz.0.2080': attribute type 4 has an invalid length. [ 354.003511][T14666] netlink: 'syz.0.2080': attribute type 4 has an invalid length. [ 354.389594][T14691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2086'. [ 354.413255][T14691] netlink: 91 bytes leftover after parsing attributes in process `syz.1.2086'. [ 354.736544][ T7264] net_ratelimit: 96 callbacks suppressed [ 354.736566][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.743275][T14701] wg1 speed is unknown, defaulting to 1000 [ 354.756973][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 354.779177][T14704] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2089'. [ 354.875503][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.895498][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.935424][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.954010][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 355.069914][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2091'. [ 355.079236][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 355.097314][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 355.225872][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 355.258462][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 355.723769][T14734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2097'. [ 355.755241][T14734] netlink: 91 bytes leftover after parsing attributes in process `syz.0.2097'. [ 356.406132][T14774] ..0{X: renamed from gretap0 [ 356.413979][T14774] ..0{X: entered allmulticast mode [ 356.470825][T14779] netlink: 'syz.0.2107': attribute type 21 has an invalid length. [ 356.702364][T14791] netlink: 'syz.2.2111': attribute type 10 has an invalid length. [ 357.450776][T14832] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 357.472194][T14833] delete_channel: no stack [ 357.478769][T14839] netlink: 'syz.4.2124': attribute type 10 has an invalid length. [ 357.537226][T14840] netlink: 'syz.4.2124': attribute type 10 has an invalid length. [ 357.548327][T14839] team0: Device vxcan1 is of different type [ 357.588773][T14840] team0: Device vxcan1 is of different type [ 357.653816][T14846] syzkaller0: entered promiscuous mode [ 357.675427][T14846] syzkaller0: entered allmulticast mode [ 357.708696][T14852] netlink: 'syz.1.2130': attribute type 2 has an invalid length. [ 357.748471][T14852] : entered promiscuous mode [ 357.800531][T14852] : left promiscuous mode [ 357.906377][T14863] __nla_validate_parse: 14 callbacks suppressed [ 357.906399][T14863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2134'. [ 357.945723][T14863] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2134'. [ 357.956329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 357.964435][ C1] lec:lec_tx_timeout: lec0 [ 358.075148][T14869] bond9: (slave bridge5): making interface the new active one [ 358.084434][T14869] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 358.192238][T14875] syzkaller0: entered promiscuous mode [ 358.200681][T14875] syzkaller0: entered allmulticast mode [ 358.995084][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 359.032679][T14938] vlan4: entered promiscuous mode [ 359.056409][T14938] bond0: entered promiscuous mode [ 359.071727][T14938] : entered promiscuous mode [ 359.091168][T14938] bond_slave_1: entered promiscuous mode [ 359.108223][T14938] bridge_slave_1: entered promiscuous mode [ 359.134318][T14946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2154'. [ 359.173912][T14945] : entered promiscuous mode [ 359.400738][T14962] validate_nla: 5 callbacks suppressed [ 359.400759][T14962] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 359.421731][T14963] netlink: 'syz.2.2160': attribute type 1 has an invalid length. [ 359.487719][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 359.499760][T14966] bond3: entered promiscuous mode [ 359.508083][T14966] bond3: entered allmulticast mode [ 359.513774][T14966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.546787][T14963] bond11: (slave gretap1): making interface the new active one [ 359.555015][T14963] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 359.565985][T14971] syzkaller0: entered promiscuous mode [ 359.566839][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 359.580949][T14971] syzkaller0: entered allmulticast mode [ 359.602956][T14962] bridge3: entered promiscuous mode [ 359.611193][T14962] bridge3: entered allmulticast mode [ 359.627365][T14962] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 359.642960][T14963] 8021q: adding VLAN 0 to HW filter on device bond11 [ 359.684807][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 359.702075][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2161'. [ 359.707975][T14968] vlan0: entered promiscuous mode [ 359.721265][T14968] bond11: entered promiscuous mode [ 359.750908][T14968] gretap1: entered promiscuous mode [ 359.757035][ T12] net_ratelimit: 126 callbacks suppressed [ 359.757053][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.785753][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.805465][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.826164][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.865526][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.889462][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.916036][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 359.996656][T14987] openvswitch: netlink: IPv4 tun info is not correct [ 360.025554][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 360.033723][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 360.358065][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 360.430286][T15008] bond12: option ad_actor_sys_prio: invalid value (0) [ 360.437676][T15008] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 360.452672][T15008] bond12 (unregistering): Released all slaves [ 360.491592][T15012] nbd: socks must be embedded in a SOCK_ITEM attr [ 360.500178][T15012] block nbd3: shutting down sockets [ 360.669405][T15020] netlink: 'syz.0.2171': attribute type 8 has an invalid length. [ 360.698583][T15016] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 360.702652][T15020] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 360.749118][T15020] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.790673][T15023] bond7: (slave dummy0): making interface the new active one [ 360.816055][T15025] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 360.827198][T15023] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 360.841661][T15025] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 360.975833][T15027] netlink: 'syz.1.2175': attribute type 7 has an invalid length. [ 361.312920][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 361.335927][T15057] netlink: 'syz.1.2185': attribute type 1 has an invalid length. [ 361.470846][T15069] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 361.500932][T15069] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 361.549403][T15068] wg1 speed is unknown, defaulting to 1000 [ 362.177221][T15100] bridge7: entered promiscuous mode [ 362.192782][T15100] bridge7: entered allmulticast mode [ 362.851621][ T7254] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 362.860760][ T7254] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.886405][ T7254] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.905586][ T7254] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.995448][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 363.013216][T15143] syz.1.2204 uses old SIOCAX25GETINFO [ 363.170849][T15154] __nla_validate_parse: 10 callbacks suppressed [ 363.170871][T15154] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2212'. [ 363.667155][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 363.812412][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 363.831194][T15197] tipc: Enabled bearer , priority 0 [ 363.858537][T15197] syzkaller0: entered promiscuous mode [ 363.864058][T15197] syzkaller0: entered allmulticast mode [ 363.958452][T15201] tipc: Resetting bearer [ 363.979032][T15195] tipc: Resetting bearer [ 363.990320][T15210] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2225'. [ 364.000964][T15195] tipc: Disabling bearer [ 364.144503][T15219] sit0: entered promiscuous mode [ 364.150102][T15219] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2227'. [ 364.550489][T15250] validate_nla: 7 callbacks suppressed [ 364.550510][T15250] netlink: 'syz.2.2236': attribute type 10 has an invalid length. [ 364.612377][T15248] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 364.622146][T15248] bridge8: entered allmulticast mode [ 364.653538][T15254] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2237'. [ 364.804372][T15261] vti1: entered promiscuous mode [ 364.838142][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 364.856360][ T1136] net_ratelimit: 118 callbacks suppressed [ 364.856381][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.890120][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 364.894464][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 364.982836][T15276] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 365.025454][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.038138][T15276] netlink: 'syz.4.2246': attribute type 5 has an invalid length. [ 365.076539][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.107075][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.136221][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.175400][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.217082][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.217187][T15288] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 365.235505][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.269845][T15291] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2251'. [ 365.320616][T15288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 365.520537][T15305] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 365.655997][T15312] tipc: Enabled bearer , priority 0 [ 365.686529][T15312] syzkaller0: entered promiscuous mode [ 365.692809][T15312] syzkaller0: entered allmulticast mode [ 365.726882][T15318] wg1 speed is unknown, defaulting to 1000 [ 365.770160][T15312] tipc: Resetting bearer [ 365.810537][T15321] ip6gre1: entered allmulticast mode [ 365.897804][T15311] tipc: Resetting bearer [ 365.926903][T15311] tipc: Disabling bearer [ 367.003003][T15384] syzkaller0: entered promiscuous mode [ 367.015457][T15384] syzkaller0: entered allmulticast mode [ 367.091805][T15394] netlink: 'syz.2.2274': attribute type 6 has an invalid length. [ 367.145176][T15386] netlink: 'syz.2.2274': attribute type 6 has an invalid length. [ 367.231476][T15388] wg1 speed is unknown, defaulting to 1000 [ 368.005307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.013401][ C1] lec:lec_tx_timeout: lec0 [ 368.036312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.084976][T15439] raw_sendmsg: syz.0.2285 forgot to set AF_INET. Fix it! [ 368.324321][T15446] wg1 speed is unknown, defaulting to 1000 [ 368.511325][T15474] __nla_validate_parse: 12 callbacks suppressed [ 368.511345][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'. [ 368.592233][T15474] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2290'. [ 369.547321][T15535] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 369.568581][T15535] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 369.935537][ T7264] net_ratelimit: 139 callbacks suppressed [ 369.935561][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.016655][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.020555][T15564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2309'. [ 370.032254][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 370.179144][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.196882][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 370.264275][T15575] netlink: 'syz.1.2313': attribute type 6 has an invalid length. [ 370.325986][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.339410][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 370.467440][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.505599][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.511855][T15586] vlan0: entered promiscuous mode [ 370.541837][T15586] geneve1: entered promiscuous mode [ 370.547241][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.557371][T15586] vlan0: entered allmulticast mode [ 370.563044][T15586] geneve1: entered allmulticast mode [ 370.642982][T15592] vxcan3: entered promiscuous mode [ 370.771567][T15593] wg1 speed is unknown, defaulting to 1000 [ 370.932104][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 370.954057][T15610] netlink: 'syz.0.2321': attribute type 30 has an invalid length. [ 371.014052][ T7264] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.051656][ T7264] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.087703][ T7264] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.130676][ T7264] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.284402][T15633] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 371.334990][T15633] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 371.386200][T15620] syzkaller0: entered promiscuous mode [ 371.391746][T15620] syzkaller0: entered allmulticast mode [ 371.624157][T15642] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 372.278763][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 373.045680][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 373.053790][ C1] lec:lec_tx_timeout: lec0 [ 373.076439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.475834][T15658] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2335'. [ 373.572821][T15665] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 374.083033][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 374.088757][T15689] wg1 speed is unknown, defaulting to 1000 [ 374.111152][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 374.193885][T15695] dvmrp0: entered allmulticast mode [ 374.213964][T15693] tipc: Enabling of bearer rejected, already enabled [ 374.320670][T15693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 374.397427][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 374.557170][T15710] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.2348'. [ 374.742630][T15729] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2353'. [ 374.770532][T15730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2354'. [ 374.804829][T15731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2354'. [ 374.943601][T15741] wg1 speed is unknown, defaulting to 1000 [ 374.951983][T15695] delete_channel: no stack [ 374.956728][ T7264] net_ratelimit: 164 callbacks suppressed [ 374.956747][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.987441][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 375.000855][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 375.097289][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.126464][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.155669][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.175567][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.195940][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.225374][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.245508][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.275676][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.594911][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2366'. [ 375.608981][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2366'. [ 375.749017][T15778] nbd: couldn't find a device at index 0 [ 375.811460][T15784] team0: Device gtp0 is of different type [ 376.056843][T15793] netlink: 'syz.4.2371': attribute type 2 has an invalid length. [ 376.087165][T15793] netlink: 'syz.4.2371': attribute type 1 has an invalid length. [ 376.239872][T15803] wg1 speed is unknown, defaulting to 1000 [ 376.350619][T15792] syzkaller1: entered promiscuous mode [ 376.358077][T15792] syzkaller1: entered allmulticast mode [ 376.599303][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.019282][T15840] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 377.048049][T15840] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 377.222683][T15855] netlink: 'syz.4.2389': attribute type 10 has an invalid length. [ 377.348177][T15860] gtp0: entered promiscuous mode [ 377.353220][T15860] gtp0: entered allmulticast mode [ 378.085310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.093485][ C1] lec:lec_tx_timeout: lec0 [ 378.116353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.678554][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.035815][ T7264] net_ratelimit: 94 callbacks suppressed [ 380.035838][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.049405][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.123167][T15847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.165404][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.204779][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.351952][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.398057][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.407053][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.525632][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.547022][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 380.551887][T15913] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 380.567783][T15914] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 380.583840][T15913] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 380.593132][T15914] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 380.618353][T15916] __nla_validate_parse: 6 callbacks suppressed [ 380.618372][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 380.655614][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.679014][ T5831] block nbd3: Receive control failed (result -107) [ 380.693649][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 380.706822][T15924] netlink: 'syz.1.2413': attribute type 29 has an invalid length. [ 380.715473][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 380.839272][T15928] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2415'. [ 380.896243][T15930] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2416'. [ 380.934900][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 380.944085][ T29] audit: type=1804 audit(1771454525.564:7): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2417" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2427 res=1 errno=0 [ 380.991812][ T29] audit: type=1800 audit(1771454525.564:8): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2417" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2427 res=0 errno=0 [ 381.095375][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2419'. [ 381.351132][T15952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2423'. [ 381.373293][T15952] netlink: 'syz.1.2423': attribute type 10 has an invalid length. [ 381.424677][T15961] netlink: 'syz.1.2423': attribute type 10 has an invalid length. [ 381.853539][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2432'. [ 382.006844][T15985] wg1 speed is unknown, defaulting to 1000 [ 382.066601][T15988] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 382.129300][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 382.299673][T15995] bond11: (slave bridge9): making interface the new active one [ 382.311731][T15995] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 382.441479][T16013] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 382.474237][T16020] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 382.481683][T16021] netlink: 'syz.2.2439': attribute type 10 has an invalid length. [ 382.527537][T16013] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 382.532845][T16021] netlink: 'syz.2.2439': attribute type 10 has an invalid length. [ 382.741403][T16027] netlink: 'syz.1.2442': attribute type 10 has an invalid length. [ 383.125612][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.133708][ C1] lec:lec_tx_timeout: lec0 [ 383.139384][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.232240][T16059] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 383.290850][T16059] team0: Device vxcan1 is of different type [ 383.311766][T16065] netlink: 'syz.4.2453': attribute type 10 has an invalid length. [ 383.348226][T16065] team0: Device vxcan1 is of different type [ 383.811592][T16103] batadv0: entered promiscuous mode [ 383.967442][T16109] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.128742][T16122] tipc: New replicast peer: 255.255.255.255 [ 384.136543][T16122] tipc: Enabled bearer , priority 26 [ 385.158859][ T7254] net_ratelimit: 111 callbacks suppressed [ 385.158882][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.205414][ T7254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.325920][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.333808][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.487101][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.525978][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.533944][ T7254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 385.614773][T16206] bond10: entered promiscuous mode [ 385.625793][T16206] bond10: entered allmulticast mode [ 385.632012][T16206] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.655614][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.695608][ T7254] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.716863][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 386.179101][T16241] wg1 speed is unknown, defaulting to 1000 [ 386.772888][T16267] validate_nla: 3 callbacks suppressed [ 386.772909][T16267] netlink: 'syz.3.2508': attribute type 4 has an invalid length. [ 386.845210][T16270] __nla_validate_parse: 21 callbacks suppressed [ 386.845233][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'. [ 386.926129][T16270] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 387.256526][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 387.310654][T16294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 387.526423][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 387.570072][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 387.638637][T16298] wg1 speed is unknown, defaulting to 1000 [ 387.661957][T16309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2515'. [ 387.868828][T16313] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2519'. [ 388.224038][T16328] wg1 speed is unknown, defaulting to 1000 [ 388.496625][T16298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2516'. [ 388.915595][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 388.923768][ C1] lec:lec_tx_timeout: lec0 [ 389.718265][T16373] bond13: entered promiscuous mode [ 389.724275][T16373] bond13: entered allmulticast mode [ 389.743532][T16373] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.817919][T16377] syzkaller0: entered promiscuous mode [ 389.823449][T16377] syzkaller0: entered allmulticast mode [ 390.195923][ T7260] net_ratelimit: 129 callbacks suppressed [ 390.195956][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.245607][ T7260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.295917][T16394] syzkaller0: entered promiscuous mode [ 390.301536][T16394] syzkaller0: entered allmulticast mode [ 390.395976][ T7249] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.406024][T16413] netlink: 'syz.1.2541': attribute type 7 has an invalid length. [ 390.425998][T16413] netlink: 'syz.1.2541': attribute type 8 has an invalid length. [ 390.433778][T16413] netlink: 209828 bytes leftover after parsing attributes in process `syz.1.2541'. [ 390.437369][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.485819][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.506838][ T7262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.620511][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.665692][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.706266][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.714149][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 390.806422][T16429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2545'. [ 390.822605][T16429] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 391.826633][T16473] netlink: 'syz.1.2557': attribute type 39 has an invalid length. [ 392.060832][T16482] veth1_to_bond: entered allmulticast mode [ 392.089812][T16485] sctp: [Deprecated]: syz.2.2561 (pid 16485) Use of int in max_burst socket option. [ 392.089812][T16485] Use struct sctp_assoc_value instead [ 392.535221][T16494] __nla_validate_parse: 236 callbacks suppressed [ 392.559407][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 392.649675][T16494] wg1 speed is unknown, defaulting to 1000 [ 392.721417][T16496] debugfs: '&%Q0@æjʫ}!' already exists in 'ieee80211' [ 392.959883][T16478] veth1_to_bond: left allmulticast mode [ 393.235984][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.685046][T16533] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 393.704490][T16529] bridge_slave_0: left allmulticast mode [ 393.720830][T16529] bridge_slave_0: left promiscuous mode [ 393.731187][T16537] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 393.732391][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.748798][T16534] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2568'. [ 393.770399][T16529] bridge_slave_1: left allmulticast mode [ 393.776911][T16529] bridge_slave_1: left promiscuous mode [ 393.782899][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.796723][T16529] bond0: (slave 30): Releasing backup interface [ 393.805533][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 393.815187][T16529] bond0: (slave bond_slave_1): Releasing backup interface [ 393.816808][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 393.834765][T16529] `: Port device C removed [ 393.843036][T16529] `: Port device team_slave_1 removed [ 393.849795][T16529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.858948][T16529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.902550][T16537] bond11: entered promiscuous mode [ 393.908632][T16537] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.032584][T16542] bond11: (slave bridge7): making interface the new active one [ 394.040673][T16542] bridge7: entered promiscuous mode [ 394.048909][T16542] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 394.255057][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 394.459393][T16562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.466708][T16562] IPv6: NLM_F_CREATE should be set when creating new route [ 394.473985][T16562] IPv6: NLM_F_CREATE should be set when creating new route [ 394.731549][T16568] syzkaller0: entered promiscuous mode [ 394.737563][T16568] syzkaller0: entered allmulticast mode [ 394.900012][T16573] netlink: 'syz.3.2584': attribute type 21 has an invalid length. [ 395.205637][ T7264] net_ratelimit: 127 callbacks suppressed [ 395.205655][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.235474][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.256536][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.275745][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.296150][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.317560][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.345920][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.372918][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.398669][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.441161][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 396.575697][T16573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2584'. [ 396.750046][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 396.825085][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'. [ 397.103720][T16626] wg1 speed is unknown, defaulting to 1000 [ 397.285545][T16641] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2601'. [ 397.322771][T16641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2601'. [ 397.630446][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2607'. [ 397.863618][T16681] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2610'. [ 397.965795][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'. [ 398.084660][T16693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2613'. [ 398.915467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 398.923549][ C1] lec:lec_tx_timeout: lec0 [ 398.928372][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.244509][T16719] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2617'. [ 399.275589][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 399.300059][T16719] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2617'. [ 399.328817][T16726] netlink: 5156 bytes leftover after parsing attributes in process `syz.3.2621'. [ 399.401629][T16726] syzkaller0: entered promiscuous mode [ 399.416176][T16726] syzkaller0: entered allmulticast mode [ 399.453761][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 399.519080][T16741] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2623'. [ 399.767768][T16753] tipc: Enabled bearer , priority 0 [ 399.781646][T16753] syzkaller0: entered promiscuous mode [ 399.789041][T16753] syzkaller0: entered allmulticast mode [ 399.836263][T16747] tipc: Resetting bearer [ 399.891820][T16747] tipc: Disabling bearer [ 399.968968][T16760] netlink: 'syz.4.2631': attribute type 10 has an invalid length. [ 399.982405][T16760] team0: Device vxcan1 is of different type [ 400.015872][T16760] netlink: 'syz.4.2631': attribute type 10 has an invalid length. [ 400.048630][T16760] team0: Device vxcan1 is of different type [ 400.236623][ T12] net_ratelimit: 147 callbacks suppressed [ 400.236644][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.325340][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.465929][ T1136] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.484338][ T1136] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.605866][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.623878][ T7264] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 400.737140][T16798] bond14: entered promiscuous mode [ 400.742838][T16798] bond14: entered allmulticast mode [ 400.749885][T16798] 8021q: adding VLAN 0 to HW filter on device bond14 [ 400.772975][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.807479][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.856234][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.883705][ T60] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 401.076868][T16821] netlink: 'syz.1.2643': attribute type 8 has an invalid length. [ 401.439882][T16835] tipc: Enabling of bearer rejected, media not registered [ 401.471563][ T5831] block nbd4: Receive control failed (result -32) [ 401.591589][T16842] tipc: Enabled bearer , priority 0 [ 401.644793][T16842] syzkaller0: entered promiscuous mode [ 401.675606][T16842] syzkaller0: entered allmulticast mode [ 401.742506][T16842] tipc: Resetting bearer [ 401.785999][T16853] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:1 [ 401.831701][T16848] xt_CT: No such helper "syz0" [ 401.840173][T16855] 8021q: adding VLAN 0 to HW filter on device bond12 [ 401.853172][T16855] bond12: entered promiscuous mode [ 401.859337][T16855] bond0: (slave bond12): Enslaving as an active interface with an up link [ 401.941575][T16841] tipc: Resetting bearer [ 402.798075][T16888] __nla_validate_parse: 12 callbacks suppressed [ 402.798097][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2661'. [ 402.871935][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2662'. [ 403.965387][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 403.973540][ C1] lec:lec_tx_timeout: lec0 [ 404.058067][T16841] tipc: Disabling bearer [ 404.068718][T16877] netlink: 'syz.1.2660': attribute type 33 has an invalid length. [ 404.279025][T16908] x_tables: duplicate underflow at hook 3 [ 404.299875][T16908] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 404.332542][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2666'. [ 404.424567][T16915] netlink: 'syz.1.2668': attribute type 20 has an invalid length. [ 404.437436][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 404.471699][T16920] batadv_slave_1: entered promiscuous mode [ 404.495774][T16918] batadv_slave_1: left promiscuous mode [ 404.648199][T16928] syzkaller1: entered promiscuous mode [ 404.651107][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 404.653883][T16928] syzkaller1: entered allmulticast mode [ 404.662915][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 404.662946][T16931] netlink: 'syz.3.2673': attribute type 18 has an invalid length. [ 404.695974][T16931] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2673'. [ 405.133690][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 405.178801][T16952] veth1_to_batadv: invalid flags given to default FDB implementation [ 405.219346][T16952] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2681'. [ 405.231126][T16952] veth1_to_batadv: invalid flags given to default FDB implementation [ 405.247210][ T12] net_ratelimit: 148 callbacks suppressed [ 405.247231][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.266500][T16949] wg1 speed is unknown, defaulting to 1000 [ 405.316424][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.336729][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.355399][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.379563][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.415369][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.435678][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.465495][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.496433][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.529452][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.651508][T16958] wg1 speed is unknown, defaulting to 1000 [ 405.782241][T16974] syzkaller1: entered promiscuous mode [ 405.795757][T16974] syzkaller1: entered allmulticast mode [ 405.816877][T16974] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 406.002219][T16989] xt_bpf: check failed: parse error [ 406.280983][ T5831] block nbd5: Receive control failed (result -32) [ 406.496844][T17010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 406.529509][T17010] xfrm1: entered allmulticast mode [ 406.555962][T17017] ipvlan0: entered promiscuous mode [ 407.171330][T17044] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 407.191363][T17044] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 407.212700][T17044] NCSI netlink: No device for ifindex 808464432 [ 407.317419][T17062] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 407.564689][T17079] bridge11: entered promiscuous mode [ 407.849188][T17087] __nla_validate_parse: 8 callbacks suppressed [ 407.849211][T17087] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2719'. [ 407.973857][T17095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 407.990225][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 408.065228][T17101] netlink: 'syz.2.2725': attribute type 89 has an invalid length. [ 408.264757][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 408.356455][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.410250][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2728'. [ 408.429845][T17122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2728'. [ 408.921234][T17130] wg1 speed is unknown, defaulting to 1000 [ 408.963934][T17142] syzkaller0: entered promiscuous mode [ 408.969920][T17142] syzkaller0: entered allmulticast mode [ 409.456829][T17165] lo speed is unknown, defaulting to 1000 [ 409.473108][T17167] wg1 speed is unknown, defaulting to 1000 [ 409.685053][T17165] lo speed is unknown, defaulting to 1000 [ 409.724773][T17165] lo speed is unknown, defaulting to 1000 [ 409.743936][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2743'. [ 409.767385][T17165] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 409.776307][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2743'. [ 409.931483][T17165] lo speed is unknown, defaulting to 1000 [ 409.996955][T17165] lo speed is unknown, defaulting to 1000 [ 410.083099][T17165] lo speed is unknown, defaulting to 1000 [ 410.096808][T17165] lo speed is unknown, defaulting to 1000 [ 410.109217][T17165] lo speed is unknown, defaulting to 1000 [ 410.124077][T17165] lo speed is unknown, defaulting to 1000 [ 410.203512][T17191] wg1 speed is unknown, defaulting to 1000 [ 410.263223][T17191] lo speed is unknown, defaulting to 1000 [ 410.315414][ T7249] net_ratelimit: 133 callbacks suppressed [ 410.315441][ T7249] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.375576][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.407658][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.455368][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.475942][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.505385][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.527802][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.565674][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.585912][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.618289][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 411.151702][T17236] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 411.257042][T17246] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.687319][T17259] pim6reg: entered allmulticast mode [ 411.721002][T17259] pim6reg: left allmulticast mode [ 411.763990][T17241] syzkaller0: entered promiscuous mode [ 411.772377][T17241] syzkaller0: entered allmulticast mode [ 411.841437][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'. [ 411.951573][T17273] syzkaller1: entered promiscuous mode [ 411.962595][T17273] syzkaller1: entered allmulticast mode [ 412.023350][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 412.109444][T17279] hsr_slave_1 (unregistering): left promiscuous mode [ 412.715200][T17314] bond15 (unregistering): Released all slaves [ 412.880109][T17325] wg1 speed is unknown, defaulting to 1000 [ 412.907348][T17325] lo speed is unknown, defaulting to 1000 [ 412.961804][T17334] __nla_validate_parse: 2 callbacks suppressed [ 412.961825][T17334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'. [ 412.977213][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2780'. [ 413.209159][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 413.577363][T17353] syzkaller0: entered promiscuous mode [ 413.583132][T17353] syzkaller0: entered allmulticast mode [ 413.600911][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 413.959121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 413.967213][ C1] lec:lec_tx_timeout: lec0 [ 413.973076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 415.337177][ T7262] net_ratelimit: 182 callbacks suppressed [ 415.337201][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.365775][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.385449][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.406816][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.425659][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.445433][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.466164][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.498836][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.525460][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.556712][ T7264] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.353915][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2808'. [ 416.419273][T17419] tipc: Resetting bearer [ 416.453109][T17419] tipc: Resetting bearer [ 416.718009][T17445] netlink: 'syz.4.2810': attribute type 15 has an invalid length. [ 416.792477][T17448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2811'. [ 416.964215][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2813'. [ 417.113798][T17454] 8021q: adding VLAN 0 to HW filter on device bond14 [ 417.137732][T17454] bond14: entered promiscuous mode [ 417.144599][T17454] bond0: (slave bond14): Enslaving as an active interface with an up link [ 417.194864][T17464] tipc: Enabling of bearer rejected, already enabled [ 417.211479][T17461] syzkaller1: entered promiscuous mode [ 417.223803][T17461] syzkaller1: entered allmulticast mode [ 417.357764][T17475] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 417.387075][T17475] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 417.484809][T17486] tipc: Enabled bearer , priority 0 [ 417.497340][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 417.683001][T17485] syzkaller0: entered promiscuous mode [ 417.696168][T17485] syzkaller0: entered allmulticast mode [ 417.702286][T17485] tipc: Resetting bearer [ 417.746406][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 417.755956][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2823'. [ 417.861565][T17489] tipc: Resetting bearer [ 418.055159][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 418.075838][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 418.714763][T17501] netlink: 'syz.2.2825': attribute type 2 has an invalid length. [ 418.985316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.993367][ C1] lec:lec_tx_timeout: lec0 [ 420.228368][T17489] tipc: Disabling bearer [ 420.343811][T17538] wg1 speed is unknown, defaulting to 1000 [ 420.369319][T17538] lo speed is unknown, defaulting to 1000 [ 420.387337][ T7260] net_ratelimit: 204 callbacks suppressed [ 420.387357][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.436334][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.465894][ T7262] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.485426][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.505460][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.545538][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.557143][ T2983] bond3: (slave bridge3): failed to get link speed/duplex [ 420.580335][ T7260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 420.700892][ T35] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.748202][ T35] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.868209][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2843'. [ 420.910383][T17584] netlink: 'syz.4.2843': attribute type 2 has an invalid length. [ 420.945557][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2843'. [ 421.511723][T17607] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2850'. [ 422.241796][T17630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2856'. [ 422.367825][T17641] batman_adv: batadv0: Adding interface: geneve5 [ 422.382953][T17641] batman_adv: batadv0: Interface activated: geneve5 [ 422.408494][ T2983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.420028][ T2983] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.455114][ T2983] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.467948][ T2983] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.893437][T17659] wg1 speed is unknown, defaulting to 1000 [ 422.924760][T17659] lo speed is unknown, defaulting to 1000 [ 423.048097][T17670] netlink: 'syz.0.2868': attribute type 49 has an invalid length. [ 423.130092][T17677] tipc: Enabled bearer , priority 12 [ 423.349251][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'. [ 423.407786][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 423.464246][T17696] bridge5: entered allmulticast mode [ 423.475425][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.699130][T17715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.237316][T17778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.325698][T17779] wg1 speed is unknown, defaulting to 1000 [ 425.337566][T17779] lo speed is unknown, defaulting to 1000 [ 425.349035][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 425.395435][ T7260] net_ratelimit: 151 callbacks suppressed [ 425.395457][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.425357][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.457777][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.492443][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.526934][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.545386][ T2983] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.565457][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.589085][ T60] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.614437][ T2983] bond3: (slave bridge3): failed to get link speed/duplex [ 425.621797][ T7260] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.788088][T17800] ================================================================== [ 425.796218][T17800] BUG: KASAN: slab-out-of-bounds in fib6_add_rt2node+0x349c/0x3500 [ 425.804150][T17800] Read of size 1 at addr ffff88807cae38de by task syz.4.2899/17800 [ 425.812061][T17800] [ 425.814406][T17800] CPU: 1 UID: 0 PID: 17800 Comm: syz.4.2899 Not tainted syzkaller #0 PREEMPT(full) [ 425.814430][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.814443][T17800] Call Trace: [ 425.814450][T17800] [ 425.814458][T17800] dump_stack_lvl+0xe8/0x150 [ 425.814485][T17800] print_report+0xba/0x230 [ 425.814505][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 425.814525][T17800] kasan_report+0x117/0x150 [ 425.814552][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 425.814576][T17800] fib6_add_rt2node+0x349c/0x3500 [ 425.814596][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 425.814627][T17800] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 425.814647][T17800] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.814671][T17800] ? fib6_add+0x84b/0x18c0 [ 425.814691][T17800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.814722][T17800] fib6_add+0x910/0x18c0 [ 425.814745][T17800] ? do_raw_spin_lock+0x12b/0x2f0 [ 425.814771][T17800] ? __pfx_fib6_add+0x10/0x10 [ 425.814794][T17800] ? ip6_route_add+0xc9/0x1b0 [ 425.814817][T17800] ip6_route_add+0xde/0x1b0 [ 425.814840][T17800] inet6_rtm_newroute+0x268/0x19e0 [ 425.814867][T17800] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 425.814886][T17800] ? is_bpf_text_address+0x26/0x2b0 [ 425.814924][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 425.814946][T17800] ? is_bpf_text_address+0x292/0x2b0 [ 425.814971][T17800] ? is_bpf_text_address+0x26/0x2b0 [ 425.815009][T17800] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 425.815029][T17800] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 425.815053][T17800] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 425.815071][T17800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.815089][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 425.815113][T17800] netlink_rcv_skb+0x232/0x4b0 [ 425.815132][T17800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.815150][T17800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.815173][T17800] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.815193][T17800] netlink_unicast+0x80f/0x9b0 [ 425.815222][T17800] ? __pfx_netlink_unicast+0x10/0x10 [ 425.815247][T17800] ? netlink_sendmsg+0x650/0xb40 [ 425.815263][T17800] ? skb_put+0x11b/0x210 [ 425.815284][T17800] netlink_sendmsg+0x813/0xb40 [ 425.815308][T17800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.815329][T17800] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.815356][T17800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.815382][T17800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.815400][T17800] ____sys_sendmsg+0xa68/0xad0 [ 425.815423][T17800] ? __might_fault+0xaf/0x130 [ 425.815446][T17800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.815473][T17800] ? import_iovec+0x73/0xa0 [ 425.815494][T17800] ___sys_sendmsg+0x2a5/0x360 [ 425.815516][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 425.815536][T17800] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.815560][T17800] ? futex_wait+0x29a/0x380 [ 425.815592][T17800] ? __fget_files+0x2a/0x420 [ 425.815608][T17800] ? __fget_files+0x3a0/0x420 [ 425.815629][T17800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.815653][T17800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.815680][T17800] ? rcu_is_watching+0x15/0xb0 [ 425.815709][T17800] do_syscall_64+0x14d/0xf80 [ 425.815734][T17800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.815751][T17800] ? trace_irq_disable+0x37/0x100 [ 425.815771][T17800] ? clear_bhb_loop+0x40/0x90 [ 425.815789][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.815806][T17800] RIP: 0033:0x7fbce099c629 [ 425.815824][T17800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.815841][T17800] RSP: 002b:00007fbce1880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.815863][T17800] RAX: ffffffffffffffda RBX: 00007fbce0c15fa0 RCX: 00007fbce099c629 [ 425.815876][T17800] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 425.815887][T17800] RBP: 00007fbce0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 425.815907][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.815918][T17800] R13: 00007fbce0c16038 R14: 00007fbce0c15fa0 R15: 00007ffe790d4418 [ 425.815938][T17800] [ 425.815945][T17800] [ 426.207780][T17800] Allocated by task 17800: [ 426.212193][T17800] kasan_save_track+0x3e/0x80 [ 426.216880][T17800] __kasan_kmalloc+0x93/0xb0 [ 426.221477][T17800] __kmalloc_noprof+0x35c/0x760 [ 426.226340][T17800] fib6_info_alloc+0x30/0xf0 [ 426.230928][T17800] ip6_route_info_create+0x142/0x860 [ 426.236209][T17800] ip6_route_add+0x49/0x1b0 [ 426.240714][T17800] inet6_rtm_newroute+0x268/0x19e0 [ 426.245822][T17800] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 426.250757][T17800] netlink_rcv_skb+0x232/0x4b0 [ 426.255539][T17800] netlink_unicast+0x80f/0x9b0 [ 426.260327][T17800] netlink_sendmsg+0x813/0xb40 [ 426.265086][T17800] ____sys_sendmsg+0xa68/0xad0 [ 426.269853][T17800] ___sys_sendmsg+0x2a5/0x360 [ 426.274532][T17800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.279470][T17800] do_syscall_64+0x14d/0xf80 [ 426.284060][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.289957][T17800] [ 426.292287][T17800] The buggy address belongs to the object at ffff88807cae3800 [ 426.292287][T17800] which belongs to the cache kmalloc-256 of size 256 [ 426.306340][T17800] The buggy address is located 22 bytes to the right of [ 426.306340][T17800] allocated 200-byte region [ffff88807cae3800, ffff88807cae38c8) [ 426.321008][T17800] [ 426.323337][T17800] The buggy address belongs to the physical page: [ 426.329747][T17800] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807cae2e00 pfn:0x7cae2 [ 426.339805][T17800] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 426.348299][T17800] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 426.356795][T17800] page_type: f5(slab) [ 426.360803][T17800] raw: 00fff00000000240 ffff88813fe9ab40 ffff88813fe99708 ffffea00022c3910 [ 426.369381][T17800] raw: ffff88807cae2e00 000000000010000a 00000000f5000000 0000000000000000 [ 426.377968][T17800] head: 00fff00000000240 ffff88813fe9ab40 ffff88813fe99708 ffffea00022c3910 [ 426.386691][T17800] head: ffff88807cae2e00 000000000010000a 00000000f5000000 0000000000000000 [ 426.395368][T17800] head: 00fff00000000001 ffffea0001f2b881 00000000ffffffff 00000000ffffffff [ 426.404168][T17800] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 426.413006][T17800] page dumped because: kasan: bad access detected [ 426.419430][T17800] page_owner tracks the page as allocated [ 426.425144][T17800] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 87681570790, free_ts 87649849354 [ 426.446962][T17800] post_alloc_hook+0x228/0x280 [ 426.451733][T17800] get_page_from_freelist+0x24dc/0x2580 [ 426.457284][T17800] __alloc_frozen_pages_noprof+0x18d/0x380 [ 426.463101][T17800] allocate_slab+0x77/0x660 [ 426.467626][T17800] refill_objects+0x331/0x3c0 [ 426.472317][T17800] __pcs_replace_empty_main+0x2b9/0x620 [ 426.477874][T17800] __kmalloc_cache_noprof+0x392/0x660 [ 426.483262][T17800] ____ip_mc_inc_group+0x518/0xdd0 [ 426.488381][T17800] ip_mc_up+0x115/0x2e0 [ 426.492532][T17800] inetdev_event+0xff6/0x1610 [ 426.497207][T17800] notifier_call_chain+0x19d/0x3a0 [ 426.502320][T17800] __dev_notify_flags+0x1a9/0x310 [ 426.507344][T17800] netif_change_flags+0xe8/0x1a0 [ 426.512284][T17800] do_setlink+0xf82/0x4590 [ 426.516787][T17800] rtnl_newlink+0x15a9/0x1be0 [ 426.521460][T17800] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 426.526395][T17800] page last free pid 5821 tgid 5821 stack trace: [ 426.532724][T17800] __free_frozen_pages+0xbf8/0xd70 [ 426.537922][T17800] __slab_free+0x263/0x2b0 [ 426.542340][T17800] qlist_free_all+0x97/0x100 [ 426.546932][T17800] kasan_quarantine_reduce+0x148/0x160 [ 426.552391][T17800] __kasan_slab_alloc+0x22/0x80 [ 426.557244][T17800] __kmalloc_cache_noprof+0x2ba/0x660 [ 426.562614][T17800] devl_resource_register+0xf9/0x370 [ 426.567909][T17800] nsim_drv_probe+0x50c/0xc20 [ 426.572583][T17800] really_probe+0x267/0xaf0 [ 426.577095][T17800] __driver_probe_device+0x18c/0x320 [ 426.582383][T17800] driver_probe_device+0x4f/0x240 [ 426.587410][T17800] __device_attach_driver+0x2d4/0x4c0 [ 426.592783][T17800] bus_for_each_drv+0x258/0x2f0 [ 426.597646][T17800] __device_attach+0x2c5/0x450 [ 426.602408][T17800] device_initial_probe+0xa1/0xd0 [ 426.607527][T17800] bus_probe_device+0x12a/0x220 [ 426.612382][T17800] [ 426.614700][T17800] Memory state around the buggy address: [ 426.620326][T17800] ffff88807cae3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 426.628399][T17800] ffff88807cae3800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 426.636455][T17800] >ffff88807cae3880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 426.644508][T17800] ^ [ 426.651435][T17800] ffff88807cae3900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 426.659495][T17800] ffff88807cae3980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 426.667552][T17800] ================================================================== [ 426.675804][T17800] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 426.683016][T17800] CPU: 1 UID: 0 PID: 17800 Comm: syz.4.2899 Not tainted syzkaller #0 PREEMPT(full) [ 426.692497][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.702579][T17800] Call Trace: [ 426.705879][T17800] [ 426.708839][T17800] vpanic+0x1e0/0x670 [ 426.712858][T17800] panic+0xc5/0xd0 [ 426.716607][T17800] ? __pfx_panic+0x10/0x10 [ 426.721051][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 426.726282][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 426.731545][T17800] check_panic_on_warn+0x89/0xb0 [ 426.736509][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 426.741731][T17800] end_report+0x6f/0x140 [ 426.746006][T17800] kasan_report+0x128/0x150 [ 426.750535][T17800] ? fib6_add_rt2node+0x349c/0x3500 [ 426.755852][T17800] fib6_add_rt2node+0x349c/0x3500 [ 426.760909][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 426.765882][T17800] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 426.771288][T17800] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.776336][T17800] ? fib6_add+0x84b/0x18c0 [ 426.780773][T17800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.786178][T17800] fib6_add+0x910/0x18c0 [ 426.790450][T17800] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.795537][T17800] ? __pfx_fib6_add+0x10/0x10 [ 426.800246][T17800] ? ip6_route_add+0xc9/0x1b0 [ 426.804961][T17800] ip6_route_add+0xde/0x1b0 [ 426.809525][T17800] inet6_rtm_newroute+0x268/0x19e0 [ 426.814860][T17800] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 426.820434][T17800] ? is_bpf_text_address+0x26/0x2b0 [ 426.825661][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 426.830639][T17800] ? is_bpf_text_address+0x292/0x2b0 [ 426.835954][T17800] ? is_bpf_text_address+0x26/0x2b0 [ 426.841185][T17800] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 426.846726][T17800] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 426.851737][T17800] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 426.856858][T17800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.862323][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 426.867271][T17800] netlink_rcv_skb+0x232/0x4b0 [ 426.872036][T17800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.877492][T17800] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.882786][T17800] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.888002][T17800] netlink_unicast+0x80f/0x9b0 [ 426.892778][T17800] ? __pfx_netlink_unicast+0x10/0x10 [ 426.898072][T17800] ? netlink_sendmsg+0x650/0xb40 [ 426.903022][T17800] ? skb_put+0x11b/0x210 [ 426.907283][T17800] netlink_sendmsg+0x813/0xb40 [ 426.912048][T17800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.917344][T17800] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.922299][T17800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.927607][T17800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.932917][T17800] ____sys_sendmsg+0xa68/0xad0 [ 426.937680][T17800] ? __might_fault+0xaf/0x130 [ 426.942370][T17800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.947755][T17800] ? import_iovec+0x73/0xa0 [ 426.952255][T17800] ___sys_sendmsg+0x2a5/0x360 [ 426.956928][T17800] ? __lock_acquire+0x6b5/0x2cf0 [ 426.961858][T17800] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.967079][T17800] ? futex_wait+0x29a/0x380 [ 426.971598][T17800] ? __fget_files+0x2a/0x420 [ 426.976196][T17800] ? __fget_files+0x3a0/0x420 [ 426.980877][T17800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.985822][T17800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.991280][T17800] ? rcu_is_watching+0x15/0xb0 [ 426.996135][T17800] do_syscall_64+0x14d/0xf80 [ 427.000733][T17800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.006883][T17800] ? trace_irq_disable+0x37/0x100 [ 427.011919][T17800] ? clear_bhb_loop+0x40/0x90 [ 427.016800][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.022700][T17800] RIP: 0033:0x7fbce099c629 [ 427.027128][T17800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.046830][T17800] RSP: 002b:00007fbce1880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.055368][T17800] RAX: ffffffffffffffda RBX: 00007fbce0c15fa0 RCX: 00007fbce099c629 [ 427.063437][T17800] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 427.071490][T17800] RBP: 00007fbce0a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 427.079468][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.087522][T17800] R13: 00007fbce0c16038 R14: 00007fbce0c15fa0 R15: 00007ffe790d4418 [ 427.095509][T17800] [ 427.098949][T17800] Kernel Offset: disabled [ 427.103281][T17800] Rebooting in 86400 seconds..