last executing test programs: 4.644601052s ago: executing program 2 (id=3579): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80000) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private0, 0x2}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="2738cd015bca59e543c1ec27a649d18e26d6fc19e95e2fa82cbf256aa3538e248311cce0b4a4687ad7749bfcb3641817ccac05de3d85f75298d398adce268f4b55b83d58bd5a6e363ceb01a620711604341ae0a066d3dd4db385da7585c6048b3e7f6dd29e0b2d2c2aab79f7241da6913c1705d832ebb46c57a606209e0b461ba59c590ba625ecefb234537f657f2457b49297c19d97fc5da4fca671e4e137ba63593e2fadf3812d527e26dcbe5049d2b55d8dbb54530d15f9f8d009245d853c43938be51d7702e6849bed05836051be254b212e47255bb3e7f0877d0261112d7a7e3c0f78ab47e4d87f7fa764727ab9aae724cd02", 0xf5}, {&(0x7f00000001c0)="1ea6f8832fe4ece6ea4aa08986", 0xd}, {&(0x7f0000000200)="8eb9ee8487b1caa6f3495ecdd82961d622fcaf4fa9cdba59b2b22b3280eaf2dffd36", 0x22}, {&(0x7f0000000240)="29d7ec70d102e68b073531baf757985adf4cc345dc24cebc31482f781bc10e6a8c6c33488fc1c39ec97574dc6574bb4f9a065931bcd088e0cab1c66e0cd7bfdb3d07f88465e578ce2ae4c8224a427c13727c0a17be0c5abdf2f4d03b5dc805b9e58b3074fb6b", 0x66}, {&(0x7f00000002c0)="3bab3c411199abfc42dbca2ab3e20c69a08effb2dc0381b3abe0b9cf71fee3f89701d285ce0c520753b91b693bd76c4b49d19a5331864909a1ef04474ac4dd7e265f0117d0233d241611ea9ef5e16f74a244c5bb", 0x54}], 0x5}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1717}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000400)="210b947bc37a867c174f457d199b501f57a1ce2f9a4578146f0d9991632759814223125b4eec9a01c942e96a144521c4b279eb682b32a9c38189bac36b3f886f196e8c147289bbabe4953db3cd7c81936b15911d8df7aeb835c98d1a0520282c2f2dd6bae71072de8694777a1269618a0a5146991d37a5bb3dbd47f6e12b8a48b61c9c4adfb4448da3d40a972c4931e0e9b25328b94a8a77963ee7310bc10177f5abca1ab6eab75414da2861ca853eea6026a110091024c1ac4b7cf22af89890d120426dc320b7a178a173d0919025468c5e52f0eac96dd993559635a3627bcaa482", 0xe2}, {&(0x7f0000000500)="6cd146416b2da821221ae367a185b9ee984f6196b9e204b2f99fddb0d336e23457e95876826a1f7888047875adf0b1f2c5610b170555c9dd6a5a766b79cf1554f5f85f04f68b9cf27554d4007f328a0696d1738048e94ddc8fffccabd747eef53a3fc76a7a0de9a7582572b9baf813848fac4965d21ac465", 0x78}, {&(0x7f0000000580)="ddcae36946efced1b5e41836e7bf7adadf5b6057a5d9ef7014fbe0dda4e955d15c0d38d1a152685fb29556a1d62deecf25daeb597b28e3bda865e27523997c796fab75f1f22ebe67dd0afa37cc111b3334c634abe468b02561eb99039ed17ec34f459f703bedd9470befc88f64a603b04ede7aff", 0x74}, {&(0x7f0000000600)="f3ff40a72cb61cc19942f8bc2e442674aa1aa5ef4232e63e46f557656cfd19fad1f91d6fae5ccc02d4b2d99f68b2859922e664c5350b06b3bb47ebaba22e7e2983aba808b429197808bfc072ce2f18256223e82993edf47c4414605a3e89f739bd1bc93675fc7183b72a0d7949ad15ad6479c7aa9a1b05e145473ab792c154b8f129659510b1db3a467e4e35bc8d0b0bc499ab503360b5b77b16abf97daebf033edf4f767b5d4141bdfef1b6af4340dab9b2fe65f522c6ad074b477663034a15eae96d58c2e05e9d083db1ef5de237d4c752e618aff2a42ce78f00c803e9a0e6f4316a24ff57f53e4b610b811bbb574636", 0xf1}, {&(0x7f0000000700)="ab6c005c891596dfbca7e0a8170553e5a9bbeeefb9cdeb285ab4a44594c70ad7d475e7fcab4b95217579cf9e0be902d7fa04345d33f2c0711b57b46e0fab217e3a339ab762fb53eaa979d747456e6356ef2ea49685db89596fc3e620a2251e7899454e600566", 0x66}, {&(0x7f0000000780)="979df2b9b8ba1eccf669bf20c774f4d3aa5b3d7a29487158981755ea59b0c768e1fc76431e5bcb5c94bbe292187e1ceceaaaac2f7394850e98b654b0f46fff2881ee1623c9ef742e9eba2b22f4e5c14d72a71f08356aeb69f0b21642", 0x5c}, {&(0x7f0000000800)="bd4515b35b019c4c4284219259de93356b9d43127f65f657001a05d157c336c574ec8f81399a6caa7e4715190ab1726a0ff2b8719bd949a00cbfd2cf1da6c16226f5aac75b319ab50a94c2d1b8964d67800e0f405bac5bf4bcd7aabd1494b844a4829761eefaaa80fb6df1616c56c18713a338377b15e339a30c2067", 0x7c}], 0x7, &(0x7f0000000900)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x20, 0x29, 0x37, {0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x9}]}}}], 0x50}}], 0x2, 0x4040001) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000a00)={0x11, 0x1d, '\x00', [@generic={0x0, 0x7e, "c4214a6b142e57d77c49ae2711be1370663d2f40a751390bf28262221aff40834e244b45ab653ad16ce0e8db736a4150b67a29d2f3792c22ac3667476666d9939626f7bf56343be5fa0608db544c4fa5f8f2527ff8531ae4eaa00b33ff902fb6aaef18cef5f651ea4fc5fe4e0190ce0f5d71a666d0637a599790d8d042ca"}, @calipso={0x7, 0x50, {0x3, 0x12, 0xd, 0x32c, [0x0, 0x5, 0xe00000000000, 0x7fffffffffffffff, 0x7, 0x4, 0x29, 0x81, 0x0]}}, @ra={0x5, 0x2, 0xe}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xf8) 4.585829466s ago: executing program 2 (id=3580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b501566500"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x7868, 0x8000, 0x4, 0x8, {{0x14, 0x4, 0x0, 0x20, 0x50, 0x68, 0x0, 0x3, 0x2b, 0x0, @local, @multicast2, {[@rr={0x7, 0x1b, 0xcf, [@multicast2, @private=0xa010102, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x6, "239fdfa3"}, @generic={0x89, 0xd, "c2ae41ac4212d8a54411cc"}, @rr={0x7, 0xb, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0xa2ec9000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r8, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.119198884s ago: executing program 2 (id=3587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) (async) unshare(0x20000400) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) (async) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async, rerun: 32) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18670000070000000000000000000000852000000500000085000000a00000001836000005000000000000000000000018360000040000000000000000000000006bffffffffffffa7ba02001400000018470000fcffffff0000000000000000159a00010000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200"/24], &(0x7f0000000040)='GPL\x00', 0x6, 0x72, &(0x7f0000000280)=""/114, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xe, 0x1, 0x514}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x1, 0xb, 0xb}, {0x5, 0x5, 0x10, 0x4}, {0x5, 0x2, 0xb, 0x2}]}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x30, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xda, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r7, r8, 0x32, 0x20, 0x0, @void, @void, @void, @value=r9}, 0x20) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}}, 0x0) 4.030295925s ago: executing program 2 (id=3590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'macvlan0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @ldst={0x2, 0x2, 0x0, 0x1, 0xa, 0x50, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x400, 0x8}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {0x0}, {&(0x7f0000001300)="da02e0929db59d75", 0x8}, {&(0x7f00000002c0)="40288f34", 0x4}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x6, 0x6) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2e4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x27, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x9c, &(0x7f0000000940)=""/156, 0x41100, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x6, 0x3, 0x666}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r4, r5, r6, r7, r8], 0x0, 0x10, 0x3}, 0x94) unshare(0x62040200) r9 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r10 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x20, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.34611801s ago: executing program 4 (id=3608): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000)) close(r3) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7fffffff, 0x3, 0x54c, 0xd}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x3, 0x16, 0x4}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xa4}}, 0x24008040) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000c00044000000000000000054c000000030a01010000000000000000020000000900010073797a30000000000900030073797a31000000000b00070066696c7465720000140004800800014000000003080002400000000014000000020a0108000000000000000000000000140000001100010000000000000000000000000a89bd68e50e3b2d29a48ff948d3ce57c947dbae"], 0xa8}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000)) (async) close(r3) (async) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7fffffff, 0x3, 0x54c, 0xd}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x3, 0x16, 0x4}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xa4}}, 0x24008040) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000c00044000000000000000054c000000030a01010000000000000000020000000900010073797a30000000000900030073797a31000000000b00070066696c7465720000140004800800014000000003080002400000000014000000020a0108000000000000000000000000140000001100010000000000000000000000000a89bd68e50e3b2d29a48ff948d3ce57c947dbae"], 0xa8}}, 0x0) (async) 1.991337925s ago: executing program 0 (id=3613): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x128}}, 0x20030080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffffffffffff2}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x800) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4088, 0xff8}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.967510132s ago: executing program 4 (id=3614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x4c, r1, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 1.963050834s ago: executing program 2 (id=3615): unshare(0x68040200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffff6a, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf2528000000"], 0x34}, 0x1, 0x0, 0x0, 0x4009d}, 0x40842) 1.900626825s ago: executing program 0 (id=3617): r0 = socket(0x10, 0x803, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0xc0e, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x800) 1.718469728s ago: executing program 4 (id=3618): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x31, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) 1.678824339s ago: executing program 0 (id=3619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10030b0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) r9 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)="d6f0951da59701668083045b5470c1159cba0924c7bdeba804f94bd785132b0fb6d98d1fc3bb4ac09d8a1d68cec402b20cdcb6969310f43eb3399f3eae8de7a0ba8d50b0ea651e213c2876a4a66e1faae5e89944daeb1cbdad16fbd25e6078eb75c031cc7208bb34a7add9000dc001e54136e505a4dfeaa2efd0784ffb218b4c7074c542e8bedd1faf76e537adc4e8465b0703ef98a1d9fb314ce3c5ba0c959d4c", 0xa1) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10030b0, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (async) close(r5) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) (async) socket$inet(0x2, 0xa, 0x7) (async) setsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)="d6f0951da59701668083045b5470c1159cba0924c7bdeba804f94bd785132b0fb6d98d1fc3bb4ac09d8a1d68cec402b20cdcb6969310f43eb3399f3eae8de7a0ba8d50b0ea651e213c2876a4a66e1faae5e89944daeb1cbdad16fbd25e6078eb75c031cc7208bb34a7add9000dc001e54136e505a4dfeaa2efd0784ffb218b4c7074c542e8bedd1faf76e537adc4e8465b0703ef98a1d9fb314ce3c5ba0c959d4c", 0xa1) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 1.596970801s ago: executing program 4 (id=3621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840), &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000005c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/64, 0x40, 0x40000000, &(0x7f0000000880)={0x11, 0x19, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x40, 0x7f, 0x5, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x2, 0x4}, @mss={0x2, 0x5}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r3, &(0x7f00000007c0)="25d7fe75", 0x4, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)={0x0, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc85b}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'dvmrp1\x00'}) 1.35543036s ago: executing program 4 (id=3624): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5, 0x60ff, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3acf1ec7ae70bb24"}}, 0x48}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x50864c3c5b6a2a38, 0xffffffffffffffff, 0x4b17e000) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="410305a1b727039dab30ac06db7f457fac5a"], 0x12) 1.317409957s ago: executing program 2 (id=3625): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003a16b88c4995a975a3518184a21f691b124aebf153a4ddd52c8ea40a033461e56055ce905a49668eee2ced5433c8f10528d3183a776fd0efdd81e1b17bc54826d3c9ae0a71f7e450854f63bb8b0ceeeb7689dcadd92867f3a95a8f81462d1cfe7a1c7edc774d540b36539602ef623677370294f96742ea119d60e1c2be457d671232927f76b441b9247d4bd4394fa78a0cdd7c50db2329d8e5691c348f877a2393884bd80dee0878f61ca71e9d2a000000001cdb080e2e1d959abeae08ce5c236cbabbd64cc8bea707bcc2e71a30", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500"/28], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) close(0x3) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.309330661s ago: executing program 0 (id=3626): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000240)=0x10000, 0x12) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x584}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000109010800000000000000000a0000042c0002001400018008000100e000000208000200ac14142a0c000280050001000100000006000340000100000c00020004000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008006d6163766c616e310000000000000000050012000b000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x1c2b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) 1.259232465s ago: executing program 1 (id=3627): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\b\x00\x00', @ANYRES32=r2, @ANYRESHEX=r2], 0x38}}, 0x4061) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffc00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRES16=r11, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad000001080002000500000014000600ff020000000000a30885621a982b3c0106000b0002"], 0x4c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000086) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r12 = socket(0x1e, 0x4, 0xfffffffc) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, 0x0, 0x0) 1.244526127s ago: executing program 4 (id=3628): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="800202000a000200577f"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000004c0)) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r7, 0x0, 0x0) connect$rose(r7, 0x0, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.011364269s ago: executing program 0 (id=3630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 776.68768ms ago: executing program 1 (id=3632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x22020600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r2, &(0x7f0000000000)=""/112, 0x70, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x38, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x101}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1f, 0x80000, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r9, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x141c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x10cea943f7746519}, [@NFTA_SET_EXPRESSIONS={0x1400, 0x12, 0x0, 0x1, [{0x13bc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x13a8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "e31293bf01b9482c6017b3c5a9b0ebea0b4232fd634972458ea313c0561227a88873a969199d4901d294d1a9c571127ad6f67af10e13aeba45"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x118c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "2869977c758c9b82f4966aed5a27c277afa569badc2482fa7ea79e2ba811e5e391b5aba7d40fbb23c73628b41b97ee75d140374a1c8dd01058bceead23e80173381aaae7716545c814541adbc3b4ca3c28cc39166bb71d7f97eeffd6c6e008c243b68067093799cbe720e90f173e0356923213073839236ddcc55c19c46520410c1cc56d65402f3f8b4576fc1ba27f16811c9f7f302b347b8bcab919ab93d0c790f376a20a86d9ad7e5838d4a8bdbf3f85d2e67c16117697aede6b081467cf7607b2ed0c3dcb78aa25c64ebae9d67fec96c4397e1e66fe94b697e209029dd8ff21dc4673cc083115552bdb2c6dfe5138d40861394728817175405a42abca764faf9a2db29a144acc7b7cfb1e7a9c2e72e1b494b8142673a9bd2af27b026ab98303a76d017955f0148c120a655078d672204b49746ab63c6a7918cc650fdf83264e04639a14d40874426ac9d449b9e649bdeedf167c1e5840908393ee751f2d5a85beab3648f61288cb0e05fd670acb13dd5097527eff25e86f1ace8b29d77189290bc82c82b2da968167c933a081fddd2a616d9f9f006f65bfebf8d46315c0c3c5bb00b113f02deec3b82ad1cd713c81b27bfeb9d507e9231fc3e7dce86814d2662d5b5a26802b14e0afb100dabd2d40888188e3862eda8b58df0c9d7bdfd86f2158d2bcbb9fa0f3051329536ab92bd803ac88f4c0339f4881eccc9cff44a2127b296edbf5796b6c87bc375729e54cc48aa90bd7a0106a7475af6395e6de4e21c4a6907d723a0ce23a4a335ff95ca4c6159b9210c7a09ded83b3c08fb2341f4ab36f77024b02f87d464d23f933a825b6d135606200de5e73e240aa84bb96e40fb3546a54a317a14cd7fb71ed153796dcffef79885bcbf0902f6a39ad0e4dee5cc988f76c613a23ec1f97cfea22174c42c96156e5b953c332537015ec1ba2f436f7d549de05e5c883badac7bc882d52e98ffed16c69316fc4ddc38ef1b1d5347f3733e208f06ed3d14309d3fe1bebbea6047a3494934aee08da3cc97665fbfe395d4deeed23b66e66d1cfdb273ffaf55a8cc0d802e8f01b2bbebe2dd5e73b80bccb7a4e927a9ae11ea1b9c07559be8328e461a684ec6c11194bf3c44bbef85b537677b548a318ba8f3bc3694d6c65cae4e6fd24afe470cfc27a1c5336fcd25bc5a35c0e5e19f9b5f2195ee02d8d036df35315a9bf2bcd746ebea08fcec4aaf7d451ffe7fa764aaadaf0dd5e2420e908c6c3470d7f7a16c15e76ca767358cfba9a836df0f3de4cdf7da33ad08a26e4c00fa813fd61229ea49d05ebfddecaa53d9a472cfb6abac2c7059d1d455fa601ebb124d6ebc5fd5d2659074ec83cdcb588d7a73b351a627bb93bd3e2c0f6fb7de911d0cf856008155642ec1194fcd68c74e8b2cca6b7466de06f70a36f69f763d8299bcaed8eed931b2d51c9a33e3d00bdba158d72ebf215dfdfe3e98ffa4624bc3337ca33249a63bd01e18995a8dd6d90ea553fbccc051881f1c9fcf49f09eb39e3d4ff5b3b767da4136e4760e52c44d5ec3cb8bae04f8464d4d6a470beef27aa5f712b50cf92b94136dee5fadf723016e81dc1f09e399639fb2af5f8b8b4106e827d5cd7870be1bf1f89537244026f0acc6d54c57fb986f9fba9aa2970cffd95d035167db8937b3a633163ca82bf452e747f201548641b1cebea28e53187ef5c0fcfa78ffb481936a94647a100f58b119e068f2b8fdd9ea9fd54793bde74729287c721c390e5530be9a50d90ce43eadab39ac73ce79a2b0275dabbfcb61422ce3e4908b1600a09a034e086908b0beb99d0fee4a9f273b617d50819862c6c8fe94db9e6f9db1c62d9bca272da41d07aa4f4661ad224926e35000ab588b1949c1494648ad34f16f3205b2d9273599a07259731c3ed7ff1e5e475e34a6fa0df219e62ad14baa2d16aaf2292037957f970e376dac0bdca6973d7e3f09e5b549df658fb4ac445dd0b4ab084efef41b7b10f63e4fa32a47a9fc570fae2f3a0deaacd53f1ca9203a9ef88497318fde025432bc2392c437596b1486d53c1119157862c39818928df4015d889da8c79f6a9db7fc4ad0fb6a10546f2f32686a46bc2e9fe51d4e6140ea5a59ffd20c7cbec94ad2f0c16f5b814a1dcc5d1ae247697b6b203f982c697285e863fc80761d89ac65c52bd166a44726b22d20f3d5125e5378df79dbea7eaaaa65099101e23d05562e2f5679188ef015c56d69dac9f6268d6beb98b74c4ec7bdb3ae9b121129eb25e3d0984c6610b421abdf76390ff9dfc6abd7231c0621f51db130d13363f8689aca09ddcb3f01f00adb7b049930b22fdc07bb5a41b400ee4582e2775b86c854738c12ee0ae3a06904af68c3b7981e38e4aa3eaf338e4556e1bf844d9df4143d8cd2380b990a98572532e535c1f1788bbd04dee8b34647d12074ff37f4b39bcf003879c1456427ac718d74fd4b3d08432abb94a01420ae63eace606117d7af9e96d31f4cabe28ab93c72c9f9aa6cbf13bbc914300422c7271a71c17280211eef956fce17779a2dbdf8d79a32ab32f460a21b6b9628dbdf940ba84597b5584f226dbc29e95a44dd27a8745fa9764985fafcad5747d2fb24b7fe6b061c043b92f31acc1996c253b00d415063c5f8cdc0e55c7810c47cece126c4d235d2b43168f280856564330a50b11c4912ae21b4fc5b3f63c89eb969aeafa1d0f916dec06e663ce3a20aa0b35133277c763277f6ef537dcd5d5c245380e55a73e16e7690cf43d2852c88125fbd1d56001dcb9bc29b0e3b8eec1e366a5642743bede76ef2391dfb541316565f421477c7b27d76fea94108ef9e0975e1a8857d36288d3c3a3123ce3bb1d2ffb75af60dd725701f4701bd8943a85e595502c55834f7613b2a3ac167fe8547c2c85a10922f0896aea14a2467f82356201a2821cf565037db62c26efe6a07a6771445fff86ad787f02faf0b40fd914727bb85b782026421a5f2f84f45cf9e28b72e7c6ec5cac8110e4b951e6e3b0bb1b33bd645f5a55cf43c16576d4b2193e22b212417e8f1f339b7c69fcc7b5fff315ea1a4fb2625ea14906eca42795eba31a73859b4651f3ad3e0c4f6fbc2287c6946ef7b1ee6c617885391e205374e55a9c23517b29129ea2a7e606095efa9b8389e3444dace86d1412f843b35d8355cb75d386a511dff40871811121515b6ae54ca673d97a75a3f0e044f532cdd2bcda8ed264abd34e5f9e0255a6315cdfcdae551351e3cb58214b37433748e8fb14f4158e1ac37f83d6ab962a3a5f7d646d7388e0a998a959166fd5a3a704a6cd1c978ca57b6a9af4443ab64e3b5ed1a930a2bd7158820be68dbff5fafbe35de603a4d29b274b22a5bfc1e8e6506b4186a0f924b7e4586e0873d58322d3b2a7e2c52734be0f9cf1d8fd7f8273076f988a6b7bccdfac52fc03e89a88206e8fd78954949762bc95d7f75cf506e1669b6efc0a68d3cdbf0582f7b3b3f1f73c801b7ebbf4ecd06ecbc6f5a8c104624873e7d4802c286a36bdc84d70cae6be762f11b551deb32eef56113e12502f61bef6a9990d41610fbd81c3217061f4786875ef8c7c15f182b9a65141d9cb6f4e392c0ea3a87f20c7e1ba53126447070e49e35aaea74ed451e42644cc35db0861f41a01d7bcf75bbbf342073d614c9bb9bc1a14be95d3d87d02f1152480eddec038b893a0adb4f5a72dd33dfd7c17fd5a6077418cc6609d3221b8607e3e8eb36615d377986be93923c77cce721bd2748c9367eb29da1c26aa59ee7b5f92dec097c419322a182729d6402b9157dc7b36af99f7563805d2ed113eabd9a97b689d8210239fb19dc7104fbd34b5fe3a775436665af768de95dabb93ab622f78c398aa482264cb39d727a935cd261cc5ec826ad81d260113a2de3bacb54ce8800b464fba3de411a866c8ce7ea1b870e05c561b06e58b943d28b4e7aa04d2b6ceae6d43e7259777521083e833a812b3ba5e048e6e8ca0f4fe44a272420acdf2b40b2d0d17a8def6323132199e910eb1e047d44b14519e56a231cbe1610421fb45d3ceacda0d767fa4e2794c577d67b8156031d3f3058b4f7b3b875a5201219d9b7e6da48bbd570f3b1c73ee16ec1182ca75d1eaaefece8c8c807854e64600a51eb1fdaeeb10cb599c62fdd043024791ce6882689c6be64fc1a4cda440db1fd69192ca710d6ba187dac24445944a926668716298666e09a2557062379be0da74c0225ea4a2a7e09761024dbf1402b4d604fce56b5df00529f36d95364626a6249b475f8ada71a7917de0828a8ea8b83583092bb5df92c739a540c9856355991565e63dbcb775e195fc11f574ec2dfb856abfa6a9c303a3536b3fe1f2b4fa9ebb74bfc04d015661202027afd9300b583dbc9acaa43c295d2fd4e65f216fb0cf210110a99241bdebab97044188632426925c3a4b3621c99af294956432f2a9be408385ae6aff01a833ce9b036914a61386e4a28db688e66bfe5e106d58155ab9465ed2d6c505b0d58b84e83c6b96ee8461f2b96bbac9ffcf602c75e0ffc15827c87fad28ba202f0b9403b64bfa787dd99cee8fed2ae94ff868e778f565fef4c8d0f41cd7786cde06748b8f9429b46a52f54734aff10b8dd1bbb488ada6ad8f6147b4c594aa84901a1d511c43d662d87e829fd1f6f98230a9ad646af1c1366752349d208c3cd87e436500b69086ba1854d38cb91ca417aeddc02bd6cc89204f5c7449026aefcc28cedc2a93e816c0db1663a7f729996a275774c3ff625b8e7df3d84902e985e1213a06969db4ddc32820af7d582cb078cd5129d34cebeb8d35daf540ca7d335cb940ec03187e98db055c799f88131df79ff5a678710e4574e198c79112b0a45f66dc9e3091290be9240c9a8e321eea16a30678bc4fc99d70b8e9ca35c16545c83f7e7343a5c2377c28103c28b0801bbfac7f86d08b119efc991a741a5b3378e7405f33845b670b520f779246c60686773b6b93f504e37b70b40f70a745e29a01d7e66e1db158f0a8f52130af362d30156bdfdcc11ec184b282ae10156943046523b88470a8b0850cc9cdbba600b9f2aae22199d562ed2b67948d14f6ea5ebf4cf7463fc37895e08bd42560702e6dc8dfd151c249bfca2f3d67ffb2aa0781030a12b9d454468af00447b276e275b8c917a95ae0465f2318335c3e8596bb15e3255a634d3ac9c0d81988bb44b5e7744136ff0cac2be40a339379c0d1385fd5157358c016cd274b3e50cc1f54615cb6edcebc95b1848fb299bbb9450eaa37c55fa7024f9e7dfed82cc1964a460481f8870e62321309a8d7b4e03b6994c1d71b801d68df4e22d3f425440f1fff17a711bb5f533fbd44f1b37c660b56d5651c8b0c364dc6ef7b316f7a69f516022912ffac9ad13812e3feb11a48cfbda1ddd8f14e602100e3930d1939028b1f9ca002942c545d8ba0fd650eaf7ad499c2d77e7925d1b057ad286a8ca295b989d548a5dc6a4c1db2fbc7701e4370ed1cda2604d8f258faeea2df8d962d07bbe99f84a1010434b4c01d3f4508c057567c4f966eb191475b0e5a96d7e5dd31872fca3fb35f2c92031a8e240652e02775fc04471fd6406905db364014facb0eaadc68c861f9403dcbcc84153083d9bb44a569574be1980f08c32b4f396d75c1db69c366d7e83d2df92b23eb68e965629c8b8b1082b454404f4e352b8840b3ba3cb4081cd4f51320130f57c030196807ddd6b111c84c70223bf26f4f6dfc9da173a5e4088307a2af3dc5833f45cedf3252bf4cc38f57c7eb19447bb7a5352d42590be6525df3b0fae0a7d06ea4ac15"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x48, 0x1, "4db10ce5fc57a52a311a2b40de41328bd0ac2060c738921dcc115335ee5d38d7b0c0a01248b0b5ccff09c7a66727ec3930c6efcb1489251223504f615c7368f4e4bd8402"}, @NFTA_DATA_VALUE={0xb9, 0x1, "9e72ab24d942dd07bae7deb54dd66d32b5e8b611bbc725f60a4337320e5c87704a650452f69f21cb9f2087216dba87de0f14f8416ae8098b7252a0d10061007e7bba0d97904765ecac4103ee1de0407285c3ea534dfb7a1936bbd42c7a0eed68f2e9696be129dd7f0b6f6a342731380dc8b61a2db7ed76fe0106b857e681501ccde3afa4ffdc4281187190767d99c3cdbb1666291e2c4e238f5a1669acedcdbe6dde1119da2fcaa462caf124f21c17e10990dad0ab"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "20864ef16ea754431ad7dbaf79456fcf5d3aa996f633fba402a2960f5d1b6abdd9d914d3cf526c029df4fac5b38d3696d59e45e923e8e9a1c975320dcb151d4e49269806fb94e4ca9208bec9d7d40a4e25fd58cbd127fc720ba741b1005da7b28d384af31cade128724e9ab81214df67d36078de9ebd50f590a05b5450c5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_DELRULE={0xb8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x69f52ff236365a66}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, @NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1604}, 0x1, 0x0, 0x0, 0x4}, 0x20000034) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x1b4, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb0b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xef}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf89, @local, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b54194f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc20a}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x81) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 695.10777ms ago: executing program 0 (id=3633): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0xe}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x3d, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600f87ef5607416a037f1eaa64d652902ab4e2b2cd3c638cc9d2114f8182e00e42d47d084453cb9b3b3994ca1da9c370100820699e5f6d28715bf4d4ac3c314dbe93b1850b5f400000000000000000000000000002451584fd8d139729f1d3c7df074e7a4343efa55444dbcf4310db0f3dd039c1c9735de6a72ba845f42737e6a087ce45bc7693f3ab3cf4d152589a736561c5ca1bd15a1730e34511e38ecfe", @ANYRESOCT=r1], 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) getsockname$inet6(r3, &(0x7f00000005c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x10, 0x0, 0x8, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x700, 0x9, 0xffff}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000380)=""/61, 0x3d, 0x0, &(0x7f00000003c0)=""/201, 0xc9}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000005000000182a0500", @ANYRES32=r2, @ANYBLOB="0000000080000000185a00000000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x51, &(0x7f0000000140)=""/81, 0x41100, 0x4, '\x00', r4, @fallback=0x5, r5, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x10, 0xa0c, 0x400}, 0x10, r6, r7, 0x5, &(0x7f0000000580)=[r8], &(0x7f0000000640)=[{0x1, 0x4, 0xe, 0x4}, {0x3, 0x2, 0x8, 0xa}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x1, 0xb, 0xc}, {0x3, 0x2, 0x7, 0x9}], 0x10, 0xa8}, 0x94) 674.546625ms ago: executing program 3 (id=3634): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x2000884c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000480)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1}, 0x10120) shutdown(r4, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @mcast2, 0x9}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, 0x0, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4001c00) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) 612.076118ms ago: executing program 3 (id=3635): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, &(0x7f0000000040)=0x4, r0, &(0x7f0000000180)=0x5, 0xe6, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r1}, 0x20) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0xc]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x9, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x29, 0x4e, 0x80, 0x8, 0x8, @local, @mcast2, 0x80, 0x7, 0x10000, 0xfffffff8}}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r8) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x21c, r9, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdd, 0x3, "01a9bfd1a44ea64f71eb1900ea1a88d0bc3e4540429b7dc6f77990014ea23f6a92c5679ef4f4ee4b3f44c7d530ed8ada332dd4f0026e464575cc8c26abe60e9ca5987d83c341d0fd86916cf0e5fce06477ed288896553fd3e70ac1ea020d2a717621ece9349ade4637c40934b74e8fdd54c1e019dc6e89fe15b0de2e666d3cfc139fcf01dc1bf5089630ace74cbadc85e79174703c852576a47ec93bdeb22077c531bcc91913d12c5456d04d17169e48645f16f3f1f35300e12f7f9bc65a69b596ec72c9b7d3c9489fe8170be584ff2ab8be2612393d8052fa"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "2150499db5ba978d26934dc96ceb13dab4d6d892d6de830aedb66aad44194eff1a60afd49d3517a526dd219481a91c82908d7f042df2a61efa84ceedf81701ca3270758467d9f071eaee13b955b0258da2f14849ecf5259a62229478b4edcf64046f1ec44c0c7aa1979d01382fe824c06678af47e4324b23525ea8b9d8bf347272429f265d36ce9602876eac0c"}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8810) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r7, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$MRT_DONE(r8, 0x0, 0xc9, 0x0, 0x0) 487.183707ms ago: executing program 3 (id=3636): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x0, 0x0}, 0x8) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3, 0x8}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0d", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x38, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x38}}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r8, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x100, 0x2c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x9, &(0x7f0000000180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000240)=""/171, 0x41100, 0x0, '\x00', r2, @cgroup_device=0x6, r0, 0x8, &(0x7f0000000600)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x6, 0x2, 0x5}, 0x10, r3, r4, 0x0, &(0x7f0000000780)=[r5]}, 0x94) 485.94978ms ago: executing program 1 (id=3637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c", 0x201}], 0x1, 0x9) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f0000000040)=0xfffffffd, 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x1, 0x9, 0x1, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0)=r5, 0xfffffffffffffe1a) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20004801) (async) connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x1, 0x4) (async) r6 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r6, &(0x7f0000000700)={0x23, 0x3b}, 0x10) 323.286085ms ago: executing program 1 (id=3638): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 322.79267ms ago: executing program 3 (id=3639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0), 0x1000000000000129}}], 0x1, 0x2400c004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000240)='\x00\x00\x00\x00\x00\xd9\x00\xb5\x13\x8c\x8fH\\ER\xaa\x1b\xa7\x8d\xa7\x1fW\xb1\x8c\xce|[m\x12\xac\xf5W\xba\x01\x8c\xbb6'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x970b) shutdown(r1, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000200)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r9, &(0x7f0000000a40)=[{&(0x7f00000007c0)='p', 0x1}], 0x1) socket$packet(0x11, 0x2, 0x300) 288.241384ms ago: executing program 1 (id=3640): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r2 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x5, 0x0, 0x5, 0x4}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={r3, 0x0, 0x30}, &(0x7f00000004c0)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r6, 0x25, 0x10, @void}, 0x10) 221.541488ms ago: executing program 3 (id=3641): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 78.431026ms ago: executing program 3 (id=3642): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) (async, rerun: 64) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0xb8) (rerun: 64) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, r1, 0xffffffffffffffff, 0x0, 0x0, 0xe0, "99b36eda1557b836f0e915303b69cb936e61820cbdb3723d9661590f951ada2a8df5682234e9faac8a6b6d0ef40790657a1a9591118fc4d284fc2e25c0c6b1", 0x3d}, 0x60) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x7f, 0x1, [0x8, 0x10000, 0xffffffff, 0x5], [0x1, 0x9e, 0x1, 0xd577, 0x3, 0x7, 0x6, 0x1ff, 0x1ff, 0x62d5f161, 0xc, 0xd5, 0x7, 0x6, 0x1, 0xff, 0x9, 0x5, 0x1, 0x3, 0x6, 0x80000001, 0xca, 0x0, 0x0, 0x8000000000000001, 0x5, 0x80, 0x8, 0x100, 0x6, 0x9, 0x10000, 0xabb2, 0x0, 0x7, 0xfffffffffffffff9, 0x1, 0x2, 0x7fff, 0x8000, 0xffffffff, 0x40, 0xfffffffffffffff7, 0x533, 0x10000, 0x3fffffff8, 0x6, 0x0, 0x8, 0x4, 0x6, 0x8000000000000001, 0x7, 0x4, 0x9, 0x2, 0x4, 0x926, 0x200, 0x7, 0x2, 0xfbb, 0x9, 0x646, 0x40, 0xfffffffffffffff8, 0x4, 0x800, 0x8, 0x7f, 0xbf, 0x1, 0x3f3, 0x9, 0x3, 0xd, 0x0, 0x101, 0x9, 0x2, 0x5, 0x1379, 0xd4e5, 0x7, 0x81, 0x9, 0x2, 0x4, 0x6, 0x3, 0x1, 0x5, 0x26, 0x7, 0x2, 0x3, 0x8, 0x0, 0xc417, 0x47, 0x4, 0x4, 0x944b, 0x92f, 0xd, 0x4, 0xa, 0x5ed, 0xfffffffffffeffff, 0x3ff, 0x98c, 0x9d, 0x2, 0x7, 0x0, 0x9b, 0xe47d, 0xffffffffffffffff, 0x8000000000000000, 0x7f]}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000005c0)={0x2, 0xa62, @start={r2, 0x1, "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", "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"}, [0x2, 0x1, 0x4, 0x8, 0x1, 0x3, 0xa66, 0x81, 0x1, 0x8000000000000000, 0x2, 0x5, 0x6, 0x159, 0x6, 0x8, 0x9, 0x4, 0x3, 0x9, 0x2, 0x3, 0x4, 0x6, 0x9, 0xff, 0x10001, 0x35, 0x81, 0xfffffffffffffff8, 0x5, 0x7f, 0x7, 0x2, 0x4, 0xacb, 0x1, 0x7, 0x60d, 0x5, 0x7, 0x0, 0x3, 0x8000000000000001, 0x7, 0x0, 0x100000001, 0x60, 0x40, 0x2, 0x3, 0x4, 0x7fffffffffffffff, 0x6, 0xeb, 0x6, 0xfffffffffffffff8, 0xa4, 0x2, 0x81, 0x0, 0x40, 0x3, 0x4]}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r4, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r3) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa4, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffd2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf01}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc114}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff74}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) (async) sendmsg$inet(r3, &(0x7f0000001b40)={&(0x7f0000001340)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001380)="bc51c4ddf6af6fe6403c9cb1670babe232f2f85302bc908af3e889c151bbd59810f2fa7a7a344aea6004b1a5882ddf3f105270009ec895a9cd3ad1736be8e7b60ff04c42558b1ecc46ecf22f6e1df323a6b3e1484296184c10f1d1bddb5cdfc40f0ae3185670551ae0eb", 0x6a}, {&(0x7f0000001400)="3976680fe2146ce3fa166f960a5fd65d058fbfba6f08d8df4de8d993092fc2adedb76595bb6b0465fc8df05059de26d9229a86bb15cd3b33bfd086b136822305c38aa4c297dd2382f76f66567c7125e2276a11bccdba08576032a6c25005b1b811fd2c81de64342635f1db6ebc357599a2eace24ca5ae0603127a3efd3bf65861a3cbe7a00f16cedc2e7efa00cc5ef9c10968922ae8bad416e020d4e65f22e4b5b209754893981b27434d6a074a01265d67fe280f0a3cd5833447e25b28cfa435de3f6961fe0d99b37ff36adda21fd7bed3ddcb36b99d6988d7305d7d1", 0xdd}, {&(0x7f0000001500)="b0", 0x1}, {&(0x7f0000001540)="909c8eec9147c07bb4869a6fe87ae24603e7d373c687f4eaba8869ec1024ebeab9e6f57aa21c6d913a42a93488b735633f9d1211b1ed9317662bd6ff29077f4bf050482d9b161438e3cdba30f491711d9e65f7eb7f802893e98fe3536eab0516c824a3d36146a681e01acacb946c9892ece382eb87eecc314849bf", 0x7b}, {&(0x7f00000015c0)="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", 0xfd}, {&(0x7f00000016c0)="7c7aa658c67d01f785d7911ea6c5322fb8931d267147b3fa3700ced80a211784f18104002cc856a72521fa32a7c9ba62fc41202a7c6f56f1acd0083632833299d37dc89f73871c01323d5dfb11a8889a4dbc740e2a621eb8f0a1d71377870dd1db9ccf361e4b8fbc6771dbdb609fd8d78ce5cf934721e0259dfcc617737ac96ccb02f82660933a5ecea431435c918735c4633b5f4a37a6ed2a67e9016c679c1c6f21ccc22006713219fc9d2acbc426fc4b9d780cae1dd482762d686ebf3809b83f54bebed0982afb3a5693415bb814f07b3221a9d8ca4eac328d6127db479a285ba80b2520381b0de31187c5812452065e3c0cd35b6e15f8b64ba3ce", 0xfc}, {&(0x7f00000017c0)="1f1e75f6ef5a1d31950c61d4066a80bb785fbb18b96a786b950eeb02671dd0cdb17aa9e465530c5dc7321ace8808feb288a290e6fbecab497e3a0eb0dd861675c078c566c4fdddb5fd738cebd302c6f0cb2bbf614b8afa76e9327b861d9e81a6adaf9a4f", 0x64}, {&(0x7f0000001840)="06155706fe0b7496e3d36ad7639cffd51f56d8743f83fc3ce0042b7b2e7e1ab31c7aacb02986bf688bae5747f288d3fb6ffb4aa4d3b261e62177eeca353d4b5b66f7bf8c255f1011c15b87", 0x4b}, {&(0x7f00000018c0)="5f02ff26d980c39a18d42c4071fe8467c531cbfe89281ac8fa6e880bc0f9c78f113fc6c2678f161432065ac9a02d3beb4eb8a64fa405ae6ca4606232bb9b169e627db0a20afb77756c9cefffdb9c93f7635fbf91d429c77df455249afd04aa58191faaae0750419fdd7e49830032fb559311d32662f8c59a2604afe42112dd8a399f74bac95d2d0a602c16ebada2778e89ef78da989fb51c1db94a31d072a5e1d92559dd8fcfc2e4d844c36c46d21727c88cf1fcc0c3992de2d0b15e41ccc0c0b48c453d1525df092d8c1bd4546ed88f64567c4578d2a6e64db79fdd464ca6aaee", 0xe1}, {0xfffffffffffffffd}], 0xa, &(0x7f0000001a80)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x27}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x338931b7}, {@multicast1, 0xdcc}, {@rand_addr=0x64010100, 0x471}, {@multicast1, 0xc00000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x34, 0x3b, 0x1, 0x1, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcd6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@multicast2, 0xa}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010102, 0x3ff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x98}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001b80)={'bridge0\x00', 0x0}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001bc0)=""/253, &(0x7f0000001cc0)=0xfd) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000002f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000001d40)={0x11b4, 0x12, 0x10, 0x70bd2b, 0x25dfdbfd, {0x18, 0x0, 0x8, 0x2, {0x4e24, 0x4e21, [0x9, 0x0, 0x0, 0x6], [0x9, 0x4, 0xa81, 0x4], r6, [0x7]}, 0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "71d8db5ebd7a74f811f9e3535ac590a61c25e0681b04caa396f1b97e7397639023c2f7d38bdb197ff6f7a2bc195decb9c9a2205735740008751dc2f03d9887ec991373994e4470da17e56c28ec09d991268b18cde66f6721c5859d1879499f4cb124"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "7d8d704de5f3d54ea5"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "7453593d9dbc366ed5fa0b7bbde6882ce999ddaf58395c7408b339731552574e4ed131e87ee6638f320f7879be26280c7865f0f99f985e87ce63636ff7848107d850c189092482822fb52b0b88effd49c26810fbc392c950606954d6fe88583c4c3f94ba403f0458c9951e828f80aef0b90291d09dae9f3f02fa39b95e7c395faa0fbbed55142e0a54a0917e480e671fb1c40646e30226d3d78f0c7fa9968a326061"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "143b97f16b332545ad0eb0a906a2a0f61071b12779e7f49561b9f5ffe3c705a0fd100ccaea3f87876783c6c81739ae8e6daa0fe391"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) syz_emit_ethernet(0x738, &(0x7f0000002f80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0xa, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, "41a4c6", 0x6fa, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@dstopts={0x8, 0x33, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x2, [0x6, 0xffffffffffff5808]}}, @generic={0x7f, 0xb5, "ad27e8186aa44c7217930b8f31d8bea25a7433ea8e29b5e2f732e5bdb0055687253065ca30903091a82969d0b3e67156321c9c8519ff0ddf721c1cc4e1342d115f5649b6f0b16c3179ee290ee1260c53075fd4fa688fc95068c91735a615e4e19e4c6fdb410a6df61a5b62d9fa10ff46866ea00be36f2214228123be536756d006a1d80c355110b9ebd72c5625b1970d44d0971a05e97b4df0d2e58a5bfcaa75789612ca28690d2ae508f465e6dcc1e09d15328b0c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0xbc, "6e7d20d5b92d0c711e22f2d3dbc067c5cb273b3b4766e12992872041cbaf3db485bdaf0bb2fc25251776f630ac59f84cb18598318f25c329048aad359bc114f049995135aff6b751e017d57524ddf5052f6c4e1125e2093c6cb62c6a17ff3b221252f9b4f26779776b0057683fe0bb8293ad1f6314f3f8418d6bbb3320144fc52c31a4f4c1653fa19ab25b201daac94c94eed7f7a7a9b3fd02169cc84de420450c66dc0e59139e843ebddd4640fbb67560e65ad6fbf2cf733dfd5d89"}, @jumbo={0xc2, 0x4, 0x4}]}, @srh={0x5e, 0x8, 0x4, 0x4, 0x0, 0x0, 0x2, [@mcast1, @private0, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @srh={0x3c, 0xc, 0x4, 0x6, 0xe, 0x8, 0x26, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x33}, @empty]}, @dstopts={0x2, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x6, [0x81]}}]}, @dstopts={0x3b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2a, 0x1c, [0xa445, 0x0, 0x3, 0x4, 0x56e6]}}]}, @hopopts={0x3a, 0x8, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0x7, [0x3, 0x5, 0x92d, 0xffff, 0x8, 0xb900]}}, @jumbo={0xc2, 0x4, 0xffffffbd}]}, @hopopts={0x3c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x1, 0xa, 0x4, 0x5, 0xfc, 0x18, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, @mcast2]}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private0, [{0x1f, 0x19, "d46052841e1f5f3a4a3d57330bc5df3351356823198f3ceba4c9db495260cc128012a5a60e79afe90345cf49bbc3195a218a62832e221b0de2ac70b24c6e1a8786414b85a68b8a0b95e3bd3d2f0a918bc9e0830f7b1057ea96cc98fc773d3fa0db7b809d157dace458c9a795eb345fcdc70acd6c9f80518a4db4639c2d36a7c9346d1641414291333ff065206be4fcb08fe3c18e2d24a6308781bd78bdcedd2f99ceb3f344d1b08760960e8cbb6e08191689c529c67e5f6d11e357daef25bfe45403cc56768469ecbe"}, {0x5, 0x14, "6e0ef11d01ce6e61bc16f04b554e40149e959085171234b9fcf7c817ab493bb7839a925d863a0a7432c4048dde830e52ff5f3c458f78adea3d38ce7143418864da8a45354fd600801f9d3cb7248041e729680feef3d28132ac387863c673ab6d8352e3e93ff89e6583db0087723d0e49eb1e500f0c205694c9887179cb47453cd901fd2a19d427ebef3672c9d1855517f65cd3f329d019c54fe055c3fc1e1545bc33b7"}, {0xe, 0x1d, "c03c9e8eee64b8d3fdc02cbe07fbcef560a4b32931f84d6cf3e45974bedcb952feaa44af4b31e3b5f863176c04ee29eaa8422d4b7aaa249bff2c31347a03120338c6d5e9f33b858d4e519a20b726c88a237876cc6ec71092a96095183058e3427c693dfc3fc72d1ae18bf95f9dc28a2c4e25961af65ac89059d5e2f04e22294fb41c43a6f7e0bf94296043e8ed668eecce6bd39e4da1372427c1f164b9c3d12ed751cc931c63026720946dfbfe951559ce293d1418d9cb12d272c80e0d4b3a3de69d82a3c781e51986012300e4b8256cb330d6c32431a8562b828b7725e09228fa26be988d340f113953"}, {0x5, 0xd, "2cc4f70db80c046918bb9e165deb28c5cfd85e6f0aefbf9f309086595108beda5d60445ae12209b1a2d15700974b80d4ae3e6aff0048e84f36bce773badcbdad957b72927d5cd9bfb7403ea588ba4a00177fc947b127e76bcce05cc01d52094d971cbe3aa108b1153e"}, {0x18, 0x12, "44ffbfa1d75ac28c2232e28aa8e13b77bcfea31a268443f211ae0b9d54e8d48a625e0cc926c2ffa98ae5c2a8fe1400fad51def8a09674cd4a0d02646c2c30c858c28f41867e823af9024cd89e960bfd110583d963c6960522c491a7e8b552c7861a35889db42c6483106fe48cbdf7f057fabe3875d0a59eae971400e5ad27731089371110325101ecbf66b690020f20f99"}]}}}}}}}, 0x0) (rerun: 32) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000036c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0xa2, 0x1000}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x60, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x23, 0x10}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40400c3}, 0x8845) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)=@gettaction={0x44, 0x32, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) 0s ago: executing program 1 (id=3643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000a78500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) r2 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000240)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200d90417010c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280040001"], 0x138}}, 0x4) readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000040)={0x1, 0x0, 0x1d}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 423.926691][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2391'. [ 423.939983][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 424.123174][T14558] syz_tun: entered allmulticast mode [ 424.151846][T14561] syz_tun: left allmulticast mode [ 424.228621][T14565] lo speed is unknown, defaulting to 1000 [ 424.409911][T14579] vlan0: entered promiscuous mode [ 424.415249][T14579] team0: entered promiscuous mode [ 424.420299][T14579] dummy0: entered promiscuous mode [ 424.589154][T14589] vlan3: entered promiscuous mode [ 424.589208][T14594] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 424.608810][T14589] bond0: entered promiscuous mode [ 424.617182][T14594] netlink: 'syz.2.2402': attribute type 2 has an invalid length. [ 424.760326][T14565] lo speed is unknown, defaulting to 1000 [ 425.709703][T14638] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 425.728615][T14638] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 426.214378][T14651] af_packet: tpacket_rcv: packet too big, clamped from 133 to 4294967272. macoff=96 [ 426.224715][T14651] netlink: 'syz.3.2424': attribute type 8 has an invalid length. [ 426.306267][T14649] netlink: 'syz.3.2424': attribute type 10 has an invalid length. [ 426.478630][T14665] __nla_validate_parse: 19 callbacks suppressed [ 426.478648][T14665] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2429'. [ 426.522548][T14665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2429'. [ 426.543771][T14672] pimreg: left allmulticast mode [ 426.641517][T14675] tipc: Enabled bearer , priority 0 [ 426.683445][T14675] syzkaller0: entered promiscuous mode [ 426.688094][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'. [ 426.689132][T14675] syzkaller0: entered allmulticast mode [ 426.727358][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 426.743831][T14675] tipc: Resetting bearer [ 426.844087][T14681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 426.868609][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 426.878834][T14681] bond6: (slave bond7): Enslaving as an active interface with an up link [ 426.918918][T14674] tipc: Resetting bearer [ 426.941176][T14674] tipc: Disabling bearer [ 426.980087][T14679] bond6 (unregistering): (slave bond7): Releasing backup interface [ 427.030694][T14679] bond6 (unregistering): Released all slaves [ 427.114006][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 427.164272][T14692] netlink: 'syz.2.2440': attribute type 19 has an invalid length. [ 427.202435][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 427.226614][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 427.260572][T14692] netlink: 'syz.2.2440': attribute type 19 has an invalid length. [ 427.288894][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 427.346187][T14702] tipc: Invalid UDP bearer configuration [ 427.346228][T14702] tipc: Enabling of bearer rejected, failed to enable media [ 427.878988][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 428.210124][T14744] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 428.221197][T14742] IPVS: stopping backup sync thread 14744 ... [ 428.417243][T14754] netlink: 'syz.1.2458': attribute type 8 has an invalid length. [ 428.485913][T14762] FAULT_INJECTION: forcing a failure. [ 428.485913][T14762] name failslab, interval 1, probability 0, space 0, times 0 [ 428.503247][T14762] CPU: 1 UID: 0 PID: 14762 Comm: syz.2.2460 Not tainted syzkaller #0 PREEMPT(full) [ 428.503277][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.503290][T14762] Call Trace: [ 428.503298][T14762] [ 428.503308][T14762] dump_stack_lvl+0x189/0x250 [ 428.503339][T14762] ? __pfx____ratelimit+0x10/0x10 [ 428.503371][T14762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.503396][T14762] ? __pfx__printk+0x10/0x10 [ 428.503425][T14762] ? rcu_is_watching+0x15/0xb0 [ 428.503451][T14762] should_fail_ex+0x414/0x560 [ 428.503481][T14762] should_failslab+0xa8/0x100 [ 428.503513][T14762] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.503542][T14762] ? __alloc_skb+0x112/0x2d0 [ 428.503564][T14762] __alloc_skb+0x112/0x2d0 [ 428.503584][T14762] _sctp_make_chunk+0x5e/0x430 [ 428.503616][T14762] ? lock_acquire+0x5f/0x360 [ 428.503647][T14762] sctp_make_shutdown+0xb1/0x3d0 [ 428.503678][T14762] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 428.503710][T14762] ? kstrtouint+0x6e/0xe0 [ 428.503741][T14762] sctp_sf_do_9_2_start_shutdown+0x2b/0x4c0 [ 428.503765][T14762] ? sctp_sf_do_9_2_prm_shutdown+0xd2/0x140 [ 428.503791][T14762] sctp_do_sm+0x1e4/0x5a20 [ 428.503815][T14762] ? __pfx_sctp_pname+0x10/0x10 [ 428.503838][T14762] ? lock_release+0x4b/0x3e0 [ 428.503873][T14762] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 428.503911][T14762] ? __pfx_sctp_do_sm+0x10/0x10 [ 428.503937][T14762] ? security_file_permission+0x75/0x290 [ 428.503984][T14762] ? rcu_is_watching+0x15/0xb0 [ 428.504008][T14762] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 428.504031][T14762] ? __pfx_sctp_shutdown+0x10/0x10 [ 428.504050][T14762] inet_shutdown+0x26e/0x390 [ 428.504079][T14762] __x64_sys_shutdown+0x13f/0x1a0 [ 428.504102][T14762] do_syscall_64+0xfa/0x3b0 [ 428.504121][T14762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.504142][T14762] ? clear_bhb_loop+0x60/0xb0 [ 428.504166][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.504186][T14762] RIP: 0033:0x7f7b9b78ebe9 [ 428.504204][T14762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.504223][T14762] RSP: 002b:00007f7b9c53b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 428.504246][T14762] RAX: ffffffffffffffda RBX: 00007f7b9b9b5fa0 RCX: 00007f7b9b78ebe9 [ 428.504262][T14762] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 428.504275][T14762] RBP: 00007f7b9c53b090 R08: 0000000000000000 R09: 0000000000000000 [ 428.504288][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.504300][T14762] R13: 00007f7b9b9b6038 R14: 00007f7b9b9b5fa0 R15: 00007ffc8aff7118 [ 428.504324][T14762] [ 428.508396][T14765] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.803541][T14765] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 428.833142][T14765] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 428.871012][T14778] lo speed is unknown, defaulting to 1000 [ 429.155918][T14778] lo speed is unknown, defaulting to 1000 [ 429.374528][T14792] netlink: 'syz.3.2467': attribute type 12 has an invalid length. [ 429.499817][T14801] Ã: renamed from bond0 [ 429.642664][T14805] validate_nla: 2 callbacks suppressed [ 429.642685][T14805] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 429.808745][T14821] lo speed is unknown, defaulting to 1000 [ 429.862388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.933757][T14828] bridge: RTM_NEWNEIGH with invalid ether address [ 429.971490][T14821] lo speed is unknown, defaulting to 1000 [ 430.457740][T14866] netlink: 'syz.1.2493': attribute type 19 has an invalid length. [ 430.466556][T14866] netlink: 'syz.1.2493': attribute type 19 has an invalid length. [ 430.568379][T14872] lo speed is unknown, defaulting to 1000 [ 430.723250][T14872] lo speed is unknown, defaulting to 1000 [ 431.171753][T14894] bridge0 (unregistering): left allmulticast mode [ 431.369136][T14899] lo speed is unknown, defaulting to 1000 [ 431.461297][T14902] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.578855][T14899] lo speed is unknown, defaulting to 1000 [ 432.156127][T14949] ±ÿ: renamed from batadv_slave_1 [ 432.390723][T14968] openvswitch: netlink: IP tunnel dst address not specified [ 432.553493][T14974] lo speed is unknown, defaulting to 1000 [ 432.599825][T14982] geneve3: entered allmulticast mode [ 432.608451][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.622117][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.631321][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.643661][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.680151][T14984] lo speed is unknown, defaulting to 1000 [ 432.681152][T14974] lo speed is unknown, defaulting to 1000 [ 432.845799][T14984] lo speed is unknown, defaulting to 1000 [ 432.981007][T14995] __nla_validate_parse: 17 callbacks suppressed [ 432.981026][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 433.004641][T14995] veth0: entered promiscuous mode [ 433.029406][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 433.043984][T14995] veth0 (unregistering): left promiscuous mode [ 433.070413][T14995] bond1: (slave vlan2): Releasing active interface [ 433.130360][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2533'. [ 433.141442][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 433.151361][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 433.264790][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 433.290281][ T1161] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.306287][T15004] pim6reg99999999: entered allmulticast mode [ 433.312798][ T1161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.344693][ T1161] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.370355][ T1161] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.455083][T15018] lo speed is unknown, defaulting to 1000 [ 433.637210][T15027] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.654014][T15027] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.661484][T15027] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 433.806825][T15018] lo speed is unknown, defaulting to 1000 [ 433.877268][T15038] syzkaller0: entered promiscuous mode [ 433.892568][T15038] syzkaller0: entered allmulticast mode [ 434.180154][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 434.206393][T15057] netlink: 'syz.0.2550': attribute type 19 has an invalid length. [ 434.235987][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 434.267854][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2550'. [ 434.294834][T15057] netlink: 'syz.0.2550': attribute type 19 has an invalid length. [ 434.309078][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 434.798202][T15089] tipc: Enabled bearer , priority 0 [ 434.808631][T15089] tipc: Resetting bearer [ 434.829447][T15092] netlink: 'syz.3.2563': attribute type 19 has an invalid length. [ 434.848627][T15092] netlink: 'syz.3.2563': attribute type 19 has an invalid length. [ 435.157994][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.173122][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.181932][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 435.220236][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.229895][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.238885][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 435.249489][T15115] lo speed is unknown, defaulting to 1000 [ 435.256809][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.312381][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.320776][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 435.342401][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.350777][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.392536][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 435.416221][T15115] lo speed is unknown, defaulting to 1000 [ 435.529694][T15081] tipc: Disabling bearer [ 437.358168][T15186] netlink: 'syz.2.2590': attribute type 1 has an invalid length. [ 437.801348][T15213] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 437.937871][T15224] netlink: 'syz.4.2600': attribute type 11 has an invalid length. [ 438.584372][T15236] netlink: 'syz.0.2605': attribute type 21 has an invalid length. [ 438.605937][T15236] netlink: 'syz.0.2605': attribute type 1 has an invalid length. [ 438.630357][T15236] __nla_validate_parse: 12 callbacks suppressed [ 438.630378][T15236] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2605'. [ 438.888952][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 438.898004][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 438.907766][T15244] netlink: 'syz.0.2608': attribute type 20 has an invalid length. [ 439.255242][T15254] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 439.317650][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2612'. [ 439.330415][T15260] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 439.827736][T15289] netlink: 'syz.2.2621': attribute type 13 has an invalid length. [ 439.874606][T15295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.047414][T15307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106476][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.112968][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.292830][T15318] nbd4: detected capacity change from 0 to 63 [ 440.299128][T15319] block nbd4: NBD_DISCONNECT [ 440.303977][T15319] block nbd4: Disconnected due to user request. [ 440.310330][T15319] block nbd4: shutting down sockets [ 440.317337][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 440.346096][T15318] bond7: entered promiscuous mode [ 440.369756][T15318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.412510][T15318] bond7 (unregistering): Released all slaves [ 440.581472][T15336] dummy0: left promiscuous mode [ 440.612657][T15341] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2636'. [ 440.613839][T15336] team0: Port device dummy0 removed [ 440.636950][T15336] netlink: 'syz.3.2637': attribute type 10 has an invalid length. [ 440.791389][T15350] netlink: zone id is out of range [ 440.796885][T15350] netlink: zone id is out of range [ 440.802124][T15350] netlink: zone id is out of range [ 440.809328][T15350] netlink: zone id is out of range [ 440.815055][T15350] netlink: zone id is out of range [ 440.820422][T15350] netlink: zone id is out of range [ 440.826648][T15350] netlink: zone id is out of range [ 440.831982][T15350] netlink: zone id is out of range [ 440.838098][T15350] netlink: del zone limit has 4 unknown bytes [ 440.851906][T15350] netlink: 'syz.3.2639': attribute type 1 has an invalid length. [ 440.860144][T15350] netlink: 'syz.3.2639': attribute type 10 has an invalid length. [ 440.868451][T15350] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2639'. [ 441.133355][T15359] dvmrp8: entered allmulticast mode [ 441.169575][T15359] lo speed is unknown, defaulting to 1000 [ 441.316576][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2646'. [ 441.526714][T15359] lo speed is unknown, defaulting to 1000 [ 441.624322][T15358] dvmrp8: left allmulticast mode [ 441.968785][T15401] FAULT_INJECTION: forcing a failure. [ 441.968785][T15401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.982405][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.3.2655 Not tainted syzkaller #0 PREEMPT(full) [ 441.982432][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.982445][T15401] Call Trace: [ 441.982452][T15401] [ 441.982459][T15401] dump_stack_lvl+0x189/0x250 [ 441.982488][T15401] ? __pfx____ratelimit+0x10/0x10 [ 441.982515][T15401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.982537][T15401] ? __pfx__printk+0x10/0x10 [ 441.982562][T15401] ? __might_fault+0xb0/0x130 [ 441.982592][T15401] ? rcu_is_watching+0x15/0xb0 [ 441.982612][T15401] should_fail_ex+0x414/0x560 [ 441.982639][T15401] _copy_from_user+0x2d/0xb0 [ 441.982662][T15401] ___sys_sendmsg+0x158/0x2a0 [ 441.982683][T15401] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.982705][T15401] ? kstrtouint+0x6e/0xe0 [ 441.982744][T15401] ? __fget_files+0x2a/0x420 [ 441.982760][T15401] ? __fget_files+0x3a0/0x420 [ 441.982780][T15401] __sys_sendmmsg+0x227/0x430 [ 441.982803][T15401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 441.982822][T15401] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 441.982864][T15401] ? ksys_write+0x22a/0x250 [ 441.982890][T15401] ? __pfx_ksys_write+0x10/0x10 [ 441.982930][T15401] ? rcu_is_watching+0x15/0xb0 [ 441.982952][T15401] __x64_sys_sendmmsg+0xa0/0xc0 [ 441.982975][T15401] do_syscall_64+0xfa/0x3b0 [ 441.982994][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.983014][T15401] ? clear_bhb_loop+0x60/0xb0 [ 441.983036][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.983056][T15401] RIP: 0033:0x7f0d1878ebe9 [ 441.983074][T15401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.983092][T15401] RSP: 002b:00007f0d1951c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.983114][T15401] RAX: ffffffffffffffda RBX: 00007f0d189b5fa0 RCX: 00007f0d1878ebe9 [ 441.983130][T15401] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000008 [ 441.983144][T15401] RBP: 00007f0d1951c090 R08: 0000000000000000 R09: 0000000000000000 [ 441.983157][T15401] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 441.983170][T15401] R13: 00007f0d189b6038 R14: 00007f0d189b5fa0 R15: 00007fff827d2858 [ 441.983194][T15401] [ 442.271989][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 442.281218][T15405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2656'. [ 442.692827][T15415] lo speed is unknown, defaulting to 1000 [ 442.880832][T15415] lo speed is unknown, defaulting to 1000 [ 443.065452][T15437] FAULT_INJECTION: forcing a failure. [ 443.065452][T15437] name failslab, interval 1, probability 0, space 0, times 0 [ 443.082251][T15437] CPU: 1 UID: 0 PID: 15437 Comm: syz.0.2669 Not tainted syzkaller #0 PREEMPT(full) [ 443.082279][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.082291][T15437] Call Trace: [ 443.082299][T15437] [ 443.082307][T15437] dump_stack_lvl+0x189/0x250 [ 443.082335][T15437] ? __pfx____ratelimit+0x10/0x10 [ 443.082362][T15437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.082384][T15437] ? __pfx__printk+0x10/0x10 [ 443.082411][T15437] ? __pfx___might_resched+0x10/0x10 [ 443.082430][T15437] ? lock_acquire+0x5f/0x360 [ 443.082458][T15437] should_fail_ex+0x414/0x560 [ 443.082485][T15437] should_failslab+0xa8/0x100 [ 443.082512][T15437] __kmalloc_noprof+0xcb/0x4f0 [ 443.082537][T15437] ? iovec_from_user+0x87/0x250 [ 443.082559][T15437] iovec_from_user+0x87/0x250 [ 443.082582][T15437] __import_iovec+0x163/0x7f0 [ 443.082607][T15437] import_iovec+0x74/0xa0 [ 443.082629][T15437] ___sys_sendmsg+0x1e7/0x2a0 [ 443.082650][T15437] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.082672][T15437] ? kstrtouint+0x6e/0xe0 [ 443.082711][T15437] ? __fget_files+0x2a/0x420 [ 443.082726][T15437] ? __fget_files+0x3a0/0x420 [ 443.082747][T15437] __sys_sendmmsg+0x227/0x430 [ 443.082769][T15437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 443.082788][T15437] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 443.082830][T15437] ? ksys_write+0x22a/0x250 [ 443.082855][T15437] ? __pfx_ksys_write+0x10/0x10 [ 443.082878][T15437] ? rcu_is_watching+0x15/0xb0 [ 443.082907][T15437] __x64_sys_sendmmsg+0xa0/0xc0 [ 443.082928][T15437] do_syscall_64+0xfa/0x3b0 [ 443.082945][T15437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.082963][T15437] ? clear_bhb_loop+0x60/0xb0 [ 443.082984][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.083003][T15437] RIP: 0033:0x7f62cf38ebe9 [ 443.083019][T15437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.083036][T15437] RSP: 002b:00007f62d018e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 443.083057][T15437] RAX: ffffffffffffffda RBX: 00007f62cf5b5fa0 RCX: 00007f62cf38ebe9 [ 443.083071][T15437] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000008 [ 443.083084][T15437] RBP: 00007f62d018e090 R08: 0000000000000000 R09: 0000000000000000 [ 443.083096][T15437] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 443.083108][T15437] R13: 00007f62cf5b6038 R14: 00007f62cf5b5fa0 R15: 00007ffe03eedcb8 [ 443.083130][T15437] [ 443.635325][T15455] netlink: 'syz.2.2675': attribute type 7 has an invalid length. [ 443.660377][T15455] __nla_validate_parse: 6 callbacks suppressed [ 443.660395][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 443.733282][T15443] lo speed is unknown, defaulting to 1000 [ 443.765266][T15455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.772880][T15455] bridge5: port 1(bond6) entered blocking state [ 443.779297][T15455] bridge5: port 1(bond6) entered disabled state [ 443.789767][T15455] bond6: entered allmulticast mode [ 443.798345][T15455] bridge5: port 1(bond6) entered blocking state [ 443.804701][T15455] bridge5: port 1(bond6) entered forwarding state [ 443.813628][ T13] bridge5: port 1(bond6) entered disabled state [ 444.145149][T15484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2684'. [ 444.203500][T15443] lo speed is unknown, defaulting to 1000 [ 444.209330][T15466] lo speed is unknown, defaulting to 1000 [ 444.322359][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 444.331272][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 444.365257][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 444.380439][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 444.382040][T15476] lo speed is unknown, defaulting to 1000 [ 444.523791][T15476] lo speed is unknown, defaulting to 1000 [ 444.538264][T15466] lo speed is unknown, defaulting to 1000 [ 444.737645][T15501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2688'. [ 444.746743][T15501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2688'. [ 445.112748][T15508] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2691'. [ 445.282599][T15516] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2695'. [ 445.369936][T15518] lo speed is unknown, defaulting to 1000 [ 445.597511][T15528] tipc: Bearer : already 2 bearers with priority 10 [ 445.613769][T15528] tipc: Bearer : trying with adjusted priority [ 445.633738][T15528] tipc: Enabling of bearer rejected, failed to enable media [ 445.707958][T15538] netlink: 'syz.3.2701': attribute type 5 has an invalid length. [ 445.721054][T15531] IPVS: Scheduler module ip_vs_ not found [ 445.812089][T15518] lo speed is unknown, defaulting to 1000 [ 445.886465][T15545] pim6reg1: entered promiscuous mode [ 445.914328][T15545] pim6reg1: entered allmulticast mode [ 446.735749][T15575] lo speed is unknown, defaulting to 1000 [ 446.846255][T15575] lo speed is unknown, defaulting to 1000 [ 446.974286][T15598] tipc: Enabled bearer , priority 0 [ 446.981332][T15599] syzkaller1: entered promiscuous mode [ 446.987335][T15599] syzkaller1: entered allmulticast mode [ 446.996695][T15598] syzkaller0: entered promiscuous mode [ 447.002477][T15598] syzkaller0: entered allmulticast mode [ 447.557271][T15596] tipc: Resetting bearer [ 447.577787][T15596] tipc: Disabling bearer [ 447.964587][T15621] lo speed is unknown, defaulting to 1000 [ 448.130878][T15633] tipc: Enabled bearer , priority 0 [ 448.161799][T15633] syzkaller0: entered promiscuous mode [ 448.232859][T15633] syzkaller0: entered allmulticast mode [ 448.253761][T15621] lo speed is unknown, defaulting to 1000 [ 448.539380][T15632] tipc: Resetting bearer [ 448.558823][T15632] tipc: Disabling bearer [ 448.718939][T15642] __nla_validate_parse: 10 callbacks suppressed [ 448.718961][T15642] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2733'. [ 448.759068][T15642] tipc: Can't bind to reserved service type 2 [ 448.893095][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 448.925757][T15650] veth1: entered promiscuous mode [ 448.955516][T15650] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 448.987617][T15657] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2738'. [ 448.989464][T15650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2736'. [ 449.012834][T15657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2738'. [ 449.032006][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2738'. [ 449.036788][T15650] net_ratelimit: 1 callbacks suppressed [ 449.036806][T15650] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 449.290847][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2743'. [ 449.399614][T15670] lo speed is unknown, defaulting to 1000 [ 449.663993][T15670] lo speed is unknown, defaulting to 1000 [ 450.066783][T15712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2757'. [ 450.185676][T15717] lo speed is unknown, defaulting to 1000 [ 450.289611][T15723] gtp0: entered promiscuous mode [ 450.297042][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 450.478679][T15717] lo speed is unknown, defaulting to 1000 [ 450.735243][T15753] tunl0: Caught tx_queue_len zero misconfig [ 450.741307][T15753] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 450.836144][T15761] FAULT_INJECTION: forcing a failure. [ 450.836144][T15761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.888371][T15761] CPU: 0 UID: 0 PID: 15761 Comm: syz.4.2772 Not tainted syzkaller #0 PREEMPT(full) [ 450.888397][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.888410][T15761] Call Trace: [ 450.888417][T15761] [ 450.888426][T15761] dump_stack_lvl+0x189/0x250 [ 450.888472][T15761] ? __pfx____ratelimit+0x10/0x10 [ 450.888502][T15761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.888526][T15761] ? __pfx__printk+0x10/0x10 [ 450.888557][T15761] ? rcu_is_watching+0x15/0xb0 [ 450.888598][T15761] should_fail_ex+0x414/0x560 [ 450.888636][T15761] _copy_to_user+0x31/0xb0 [ 450.888662][T15761] simple_read_from_buffer+0xe1/0x170 [ 450.888696][T15761] proc_fail_nth_read+0x1b3/0x220 [ 450.888721][T15761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.888746][T15761] ? rw_verify_area+0x2a6/0x4d0 [ 450.888772][T15761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.888796][T15761] vfs_read+0x1fd/0xa30 [ 450.888822][T15761] ? fdget_pos+0x247/0x320 [ 450.888842][T15761] ? __pfx___mutex_lock+0x10/0x10 [ 450.888875][T15761] ? __pfx_vfs_read+0x10/0x10 [ 450.888906][T15761] ? __fget_files+0x3a0/0x420 [ 450.888923][T15761] ? __fget_files+0x2a/0x420 [ 450.888946][T15761] ksys_read+0x145/0x250 [ 450.888973][T15761] ? __pfx_ksys_read+0x10/0x10 [ 450.889003][T15761] ? rcu_is_watching+0x15/0xb0 [ 450.889025][T15761] do_syscall_64+0xfa/0x3b0 [ 450.889044][T15761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.889065][T15761] ? clear_bhb_loop+0x60/0xb0 [ 450.889088][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.889109][T15761] RIP: 0033:0x7f231ab8d5fc [ 450.889128][T15761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.889159][T15761] RSP: 002b:00007f231ba2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.889181][T15761] RAX: ffffffffffffffda RBX: 00007f231adb5fa0 RCX: 00007f231ab8d5fc [ 450.889197][T15761] RDX: 000000000000000f RSI: 00007f231ba2c0a0 RDI: 0000000000000006 [ 450.889211][T15761] RBP: 00007f231ba2c090 R08: 0000000000000000 R09: 0000000000000000 [ 450.889224][T15761] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 450.889238][T15761] R13: 00007f231adb6038 R14: 00007f231adb5fa0 R15: 00007ffd876342e8 [ 450.889262][T15761] [ 451.155779][T15773] "syz.3.2778" (15773) uses obsolete ecb(arc4) skcipher [ 451.209827][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 451.218818][T15776] netlink: 'syz.4.2779': attribute type 19 has an invalid length. [ 451.229187][T15776] netlink: 'syz.4.2779': attribute type 19 has an invalid length. [ 451.751112][T15823] lo speed is unknown, defaulting to 1000 [ 451.914705][T15823] lo speed is unknown, defaulting to 1000 [ 452.046373][T15832] netlink: 'syz.0.2793': attribute type 19 has an invalid length. [ 452.055034][T15832] netlink: 'syz.0.2793': attribute type 19 has an invalid length. [ 452.527305][T15852] netlink: 'syz.3.2799': attribute type 12 has an invalid length. [ 452.614974][T15858] batman_adv: batadv0: Interface deactivated: macvtap2 [ 452.634676][T15858] batman_adv: batadv0: Removing interface: macvtap2 [ 452.671585][T15851] netlink: 'syz.1.2800': attribute type 1 has an invalid length. [ 453.024365][T15874] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 453.332412][T15886] siw: device registration error -23 [ 453.658829][T15901] lo speed is unknown, defaulting to 1000 [ 453.875180][T15901] lo speed is unknown, defaulting to 1000 [ 454.044943][T15929] netlink: 'syz.1.2818': attribute type 4 has an invalid length. [ 454.063916][T15929] __nla_validate_parse: 14 callbacks suppressed [ 454.063933][T15929] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2818'. [ 454.157366][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 454.167049][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 454.547717][T15979] netlink: 'syz.4.2832': attribute type 21 has an invalid length. [ 454.558573][T15979] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2832'. [ 454.569812][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 454.580860][T15983] netlink: 'syz.4.2832': attribute type 21 has an invalid length. [ 454.583797][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 454.600626][T15983] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2832'. [ 454.614638][T15977] tipc: Enabled bearer , priority 0 [ 454.699751][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 454.712017][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2837'. [ 454.896289][T16013] lo speed is unknown, defaulting to 1000 [ 454.986421][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 455.012017][T16013] lo speed is unknown, defaulting to 1000 [ 455.189535][T16027] lo speed is unknown, defaulting to 1000 [ 455.372896][T15976] tipc: Disabling bearer [ 455.400436][T16027] lo speed is unknown, defaulting to 1000 [ 455.812823][ T6372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.840969][ T6372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.851363][ T6372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.874822][ T6372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.889492][ T6372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.930051][T16043] lo speed is unknown, defaulting to 1000 [ 456.103613][T16043] lo speed is unknown, defaulting to 1000 [ 456.205845][T16072] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 456.241176][T16067] lo speed is unknown, defaulting to 1000 [ 456.460423][T16067] lo speed is unknown, defaulting to 1000 [ 456.491181][T16084] validate_nla: 3 callbacks suppressed [ 456.491198][T16084] netlink: 'syz.1.2862': attribute type 2 has an invalid length. [ 456.568420][T16043] chnl_net:caif_netlink_parms(): no params data found [ 456.931960][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.946192][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.982913][T16043] bridge_slave_0: entered allmulticast mode [ 456.994459][T16043] bridge_slave_0: entered promiscuous mode [ 457.003099][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.014081][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.021590][T16043] bridge_slave_1: entered allmulticast mode [ 457.029321][T16043] bridge_slave_1: entered promiscuous mode [ 457.067442][T16098] syzkaller0: entered promiscuous mode [ 457.074020][T16098] syzkaller0: entered allmulticast mode [ 457.082420][T16043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.100205][T16099] delete_channel: no stack [ 457.100635][T16043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.153165][T16043] team0: Port device team_slave_0 added [ 457.160860][T16043] team0: Port device team_slave_1 added [ 457.210546][T16043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.218312][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.245553][T16043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.258156][T16043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.267914][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.297683][T16043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.356710][T16043] hsr_slave_0: entered promiscuous mode [ 457.369632][T16043] hsr_slave_1: entered promiscuous mode [ 457.477800][T16043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.518433][T16043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.600855][T16043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.636975][T16124] bridge_slave_0: entered promiscuous mode [ 457.681061][T16043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.826900][T16043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.848226][T16043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.895934][T16043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.918619][T16120] bridge_slave_0: left promiscuous mode [ 457.959110][T16043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.977659][T16133] netlink: 'syz.0.2875': attribute type 16 has an invalid length. [ 457.986457][T16133] netlink: 'syz.0.2875': attribute type 17 has an invalid length. [ 457.996722][T16145] team0: Caught tx_queue_len zero misconfig [ 458.007758][T16133] mac80211_hwsim hwsim27 wlan0: left allmulticast mode [ 458.056839][T16143] tipc: Enabled bearer , priority 0 [ 458.081200][T16143] syzkaller0: entered promiscuous mode [ 458.087592][T16143] syzkaller0: entered allmulticast mode [ 458.100261][T16157] netlink: 'syz.4.2880': attribute type 1 has an invalid length. [ 458.110098][T16144] tipc: Resetting bearer [ 458.162356][T16144] tipc: Resetting bearer [ 458.169297][T16144] tipc: Disabling bearer [ 458.203378][T16043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.224261][T16043] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.241000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.248183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.276994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.284159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.400479][T16167] lo speed is unknown, defaulting to 1000 [ 458.564381][T16043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.636622][T16043] veth0_vlan: entered promiscuous mode [ 458.655918][T16043] veth1_vlan: entered promiscuous mode [ 458.667766][T16167] lo speed is unknown, defaulting to 1000 [ 458.706843][T16043] veth0_macvtap: entered promiscuous mode [ 458.745799][T16043] veth1_macvtap: entered promiscuous mode [ 458.778816][T16043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.800620][T16043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.911279][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.960735][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.991461][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.025311][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.219893][ T677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.259878][ T677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.307965][ T677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.337903][ T677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.359899][T16199] lo speed is unknown, defaulting to 1000 [ 459.708203][T16202] lo speed is unknown, defaulting to 1000 [ 459.807265][T16223] netlink: 'syz.3.2898': attribute type 3 has an invalid length. [ 459.854661][T16201] lo speed is unknown, defaulting to 1000 [ 459.953681][T16202] lo speed is unknown, defaulting to 1000 [ 459.994280][T16199] lo speed is unknown, defaulting to 1000 [ 460.106244][T16201] lo speed is unknown, defaulting to 1000 [ 460.387843][T16237] __nla_validate_parse: 10 callbacks suppressed [ 460.387860][T16237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2902'. [ 460.477517][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'. [ 460.501574][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 460.511088][T16239] netlink: 'syz.1.2903': attribute type 7 has an invalid length. [ 460.530238][T16242] netlink: 'syz.4.2904': attribute type 1 has an invalid length. [ 460.928903][T16258] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2907'. [ 461.006074][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 461.140779][T16269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.231945][T16275] lo speed is unknown, defaulting to 1000 [ 461.441532][T16275] lo speed is unknown, defaulting to 1000 [ 461.507774][ T6372] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.515417][ T6372] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.535039][ T6372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.543191][ T6372] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.550749][ T6372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.665510][T16287] lo speed is unknown, defaulting to 1000 [ 461.843781][T16287] lo speed is unknown, defaulting to 1000 [ 461.918198][T16313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2928'. [ 462.040516][T16321] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 462.048737][T16323] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 462.056722][T16323] netlink: 'syz.4.2929': attribute type 2 has an invalid length. [ 462.064146][T16321] netlink: 'syz.4.2929': attribute type 2 has an invalid length. [ 462.084297][T16269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.155418][T16269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.208248][T16269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.254892][T16287] chnl_net:caif_netlink_parms(): no params data found [ 462.347150][ T1161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.358008][T16287] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.365272][T16287] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.372855][T16287] bridge_slave_0: entered allmulticast mode [ 462.379474][T16287] bridge_slave_0: entered promiscuous mode [ 462.387129][T16287] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.394324][T16287] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.401481][T16287] bridge_slave_1: entered allmulticast mode [ 462.408773][T16287] bridge_slave_1: entered promiscuous mode [ 462.445960][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.464427][T16287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.479495][T16287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.496696][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.539667][T16287] team0: Port device team_slave_0 added [ 462.552624][ T1161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.564756][T16287] team0: Port device team_slave_1 added [ 462.605823][T16287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.615738][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.650877][T16287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.663816][T16287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.670917][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.706416][T16287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.795057][T16287] hsr_slave_0: entered promiscuous mode [ 462.802731][T16287] hsr_slave_1: entered promiscuous mode [ 462.808814][T16287] debugfs: 'hsr0' already exists in 'hsr' [ 462.815242][T16287] Cannot create hsr debugfs directory [ 462.820846][T16359] tipc: Enabled bearer , priority 0 [ 462.836980][T16359] syzkaller0: entered promiscuous mode [ 462.844610][T16359] syzkaller0: entered allmulticast mode [ 462.873021][T16359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2939'. [ 462.907573][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 462.939218][T16359] tipc: Resetting bearer [ 462.976292][T16358] tipc: Resetting bearer [ 462.998378][T16358] tipc: Disabling bearer [ 463.198376][T16385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2948'. [ 463.214893][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 463.374020][T16390] syzkaller0: entered promiscuous mode [ 463.379609][T16390] syzkaller0: entered allmulticast mode [ 463.623316][ T6372] Bluetooth: hci2: command tx timeout [ 463.633077][T16287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.659100][T16287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.675262][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 463.713915][T16287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.727872][T16287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.860388][T16407] lo speed is unknown, defaulting to 1000 [ 463.887553][T16287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.939587][T16413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.975356][T16287] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.001745][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.008931][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.054554][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.061704][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.166214][T16425] veth1_to_bridge: mtu less than device minimum [ 464.205707][T16407] lo speed is unknown, defaulting to 1000 [ 464.655346][T16287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.752748][T16287] veth0_vlan: entered promiscuous mode [ 464.788802][T16287] veth1_vlan: entered promiscuous mode [ 464.869323][T16287] veth0_macvtap: entered promiscuous mode [ 464.934914][T16287] veth1_macvtap: entered promiscuous mode [ 465.031347][T16287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.090856][T16287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.128969][T16478] tipc: Started in network mode [ 465.138434][T16485] Bluetooth: MGMT ver 1.23 [ 465.156231][T16478] tipc: Node identity fa145cfb4346, cluster identity 4711 [ 465.179090][T16478] tipc: Enabled bearer , priority 0 [ 465.206207][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.238273][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.267785][T16478] syzkaller0: entered promiscuous mode [ 465.289215][T16478] syzkaller0: entered allmulticast mode [ 465.319233][T16478] tipc: Resetting bearer [ 465.406810][T16477] tipc: Resetting bearer [ 465.424385][T16477] tipc: Disabling bearer [ 465.458074][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.476469][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.591650][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.617642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.648013][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.660251][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.703137][ T6372] Bluetooth: hci2: command tx timeout [ 465.842078][T16529] netlink: 'syz.0.2984': attribute type 12 has an invalid length. [ 465.851152][T16529] __nla_validate_parse: 5 callbacks suppressed [ 465.851171][T16529] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2984'. [ 466.157754][T16538] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 466.177902][T16538] macvlan0: entered promiscuous mode [ 466.225373][T16538] macvlan0: entered allmulticast mode [ 466.263051][T16538] veth1_vlan: entered allmulticast mode [ 466.285944][T16538] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 466.310536][ T5180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.322577][ T5180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.331988][ T5180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.354930][ T5180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.372683][ T5180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.499712][T16541] lo speed is unknown, defaulting to 1000 [ 466.869929][ T49] bridge_slave_1: left allmulticast mode [ 466.895812][ T49] bridge_slave_1: left promiscuous mode [ 466.920453][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.946155][ T49] bridge_slave_0: left allmulticast mode [ 466.951951][ T49] bridge_slave_0: left promiscuous mode [ 466.958164][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.971841][ T49] veth0_to_bond: left allmulticast mode [ 466.984968][ T49] veth0_to_bond: left promiscuous mode [ 466.998989][ T49] bridge4: port 2(veth0_to_bond) entered disabled state [ 467.023816][ T49] veth3: left allmulticast mode [ 467.038866][ T49] veth3: left promiscuous mode [ 467.048311][ T49] bridge4: port 1(veth3) entered disabled state [ 467.067971][ T49] bond6: left allmulticast mode [ 467.079892][ T49] bridge5: port 1(bond6) entered disabled state [ 467.202061][ T49] bond3 (unregistering): (slave gretap2): Releasing active interface [ 467.320058][T16568] Bluetooth: MGMT ver 1.23 [ 467.345497][ T49] team0: Port device bridge2 removed [ 467.385573][ T49] team0: Port device bridge3 removed [ 467.551179][ T49] bond1 (unregistering): Released all slaves [ 467.578125][ T49] bond0 (unregistering): Released all slaves [ 467.610698][ T49] bond2 (unregistering): Released all slaves [ 467.639772][ T49] bond3 (unregistering): Released all slaves [ 467.654866][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 467.690438][ T49] bond4 (unregistering): Released all slaves [ 467.712509][ T49] bond5 (unregistering): Released all slaves [ 467.731307][ T49] bond6 (unregistering): Released all slaves [ 467.758051][T16541] lo speed is unknown, defaulting to 1000 [ 467.773800][T16568] geneve2: entered promiscuous mode [ 467.782496][ T6372] Bluetooth: hci2: command tx timeout [ 467.784519][T16582] bridge_slave_1: left allmulticast mode [ 467.796326][T16582] bridge_slave_1: left promiscuous mode [ 467.819410][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.846980][T16582] bridge_slave_0: left allmulticast mode [ 467.866994][T16582] bridge_slave_0: left promiscuous mode [ 467.879974][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.967944][ T49] : left promiscuous mode [ 467.974881][T16586] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 468.031316][ T49] tipc: Left network mode [ 468.236045][T16609] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3007'. [ 468.273744][T16609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3007'. [ 468.287665][T16541] chnl_net:caif_netlink_parms(): no params data found [ 468.502391][ T6372] Bluetooth: hci5: command tx timeout [ 468.509471][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.522437][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.529803][T16541] bridge_slave_0: entered allmulticast mode [ 468.540955][T16541] bridge_slave_0: entered promiscuous mode [ 468.604070][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.626811][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.636337][T16541] bridge_slave_1: entered allmulticast mode [ 468.646964][T16541] bridge_slave_1: entered promiscuous mode [ 468.658321][T16640] netlink: 'syz.3.3015': attribute type 83 has an invalid length. [ 468.762984][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.806744][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.039084][ T49] hsr_slave_0: left promiscuous mode [ 469.049152][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.063390][ T49] batman_adv: batadv0: Removing interface: 26±ÿ [ 469.076713][ T49] team0: left promiscuous mode [ 469.081597][ T49] team_slave_0: left promiscuous mode [ 469.087903][ T49] team_slave_1: left promiscuous mode [ 469.250693][ T49] team0 (unregistering): Port device team_slave_1 removed [ 469.270447][ T49] team0 (unregistering): Port device team_slave_0 removed [ 469.418582][T16541] team0: Port device team_slave_0 added [ 469.446273][ T6681] lo speed is unknown, defaulting to 1000 [ 469.453522][ T6681] infiniband syz2: ib_query_port failed (-19) [ 469.535145][T16541] team0: Port device team_slave_1 added [ 469.673662][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 469.692127][T16663] gretap1: entered promiscuous mode [ 469.726865][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.752502][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.785602][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.796757][T16669] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 469.809467][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.816624][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.849585][T16672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 469.860224][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.871450][ T6372] Bluetooth: hci2: command tx timeout [ 469.929043][T16674] bond0: (slave macvlan0): Releasing backup interface [ 469.951198][T16674] macvlan0: left allmulticast mode [ 469.962436][T16674] veth1_vlan: left allmulticast mode [ 470.063283][T16670] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.070799][T16670] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.228014][T16670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.241776][T16670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.384196][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.396652][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.436366][ T49] IPVS: stop unused estimator thread 0... [ 470.476948][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.486047][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.509216][T16541] hsr_slave_0: entered promiscuous mode [ 470.525294][T16541] hsr_slave_1: entered promiscuous mode [ 470.550424][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 470.568644][T16541] Cannot create hsr debugfs directory [ 470.582642][ T6372] Bluetooth: hci5: command tx timeout [ 470.588490][T16693] geneve4: entered promiscuous mode [ 470.621215][ T6326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.637323][ T6326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.660644][ T6326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.687572][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 470.780548][ T6326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.794137][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 470.855444][T16692] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3030'. [ 470.883182][ T6681] IPVS: starting estimator thread 0... [ 470.986584][T16703] IPVS: using max 37 ests per chain, 88800 per kthread [ 471.042748][T16709] lo speed is unknown, defaulting to 1000 [ 471.081320][T16710] netlink: 'syz.1.3034': attribute type 10 has an invalid length. [ 471.092623][T16710] netlink: 'syz.1.3034': attribute type 10 has an invalid length. [ 471.444093][T16541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.478695][T16541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.489589][T16541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.544070][T16541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.856728][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3042'. [ 472.022993][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.074788][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.136177][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.143378][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.186447][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.193671][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.258577][ T6885] IPVS: starting estimator thread 0... [ 472.272939][T16767] netlink: 'syz.1.3049': attribute type 13 has an invalid length. [ 472.291117][T16767] netlink: 'syz.1.3049': attribute type 17 has an invalid length. [ 472.353392][T16766] IPVS: using max 38 ests per chain, 91200 per kthread [ 472.361453][T16772] netlink: 'syz.4.3050': attribute type 6 has an invalid length. [ 472.415823][T16767] bond0: left promiscuous mode [ 472.431565][T16767] bond0: left allmulticast mode [ 472.440843][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.454551][T16767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.530530][T16770] lo speed is unknown, defaulting to 1000 [ 472.551895][T16767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.587470][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 472.664385][ T6372] Bluetooth: hci5: command tx timeout [ 472.713716][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.799589][T16541] veth0_vlan: entered promiscuous mode [ 472.816238][T16541] veth1_vlan: entered promiscuous mode [ 472.872117][T16541] veth0_macvtap: entered promiscuous mode [ 472.881512][T16541] veth1_macvtap: entered promiscuous mode [ 472.897040][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.914702][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.928468][ T6326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.938228][ T6326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.948427][ T6326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.958833][ T6326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.008185][ T6326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.019510][ T6326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.037998][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.046257][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.362957][T16802] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 473.393409][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.400899][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.484874][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.497530][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.628557][ T6326] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.652807][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.795352][ T6326] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.829550][ T6326] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.017512][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3063'. [ 474.040697][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 474.055769][ T5180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.076068][ T5180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.085137][ T5180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.095904][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.104618][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.119493][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.126069][T16825] netlink: 'syz.2.3065': attribute type 4 has an invalid length. [ 474.128861][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.141130][T16825] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3065'. [ 474.149146][T16826] netlink: 'syz.2.3065': attribute type 4 has an invalid length. [ 474.155218][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.173434][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.200314][T16821] lo speed is unknown, defaulting to 1000 [ 474.231923][T16824] tipc: Started in network mode [ 474.240621][T16824] tipc: Node identity c6965f83662d, cluster identity 4711 [ 474.255374][T16824] tipc: Enabled bearer , priority 0 [ 474.290591][T16825] syzkaller0: entered promiscuous mode [ 474.296250][T16825] syzkaller0: entered allmulticast mode [ 474.322376][T16823] tipc: Resetting bearer [ 474.346570][T16823] tipc: Disabling bearer [ 474.464671][T16821] chnl_net:caif_netlink_parms(): no params data found [ 474.527015][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.534538][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.541756][T16821] bridge_slave_0: entered allmulticast mode [ 474.550083][T16821] bridge_slave_0: entered promiscuous mode [ 474.558961][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.570465][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.578017][T16821] bridge_slave_1: entered allmulticast mode [ 474.586183][T16821] bridge_slave_1: entered promiscuous mode [ 474.620150][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.638563][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.661583][T16843] syz_tun: entered promiscuous mode [ 474.668118][T16843] batadv_slave_0: entered promiscuous mode [ 474.675926][T16843] debugfs: 'hsr1' already exists in 'hsr' [ 474.681691][T16843] Cannot create hsr debugfs directory [ 474.691565][T16843] hsr1: entered allmulticast mode [ 474.698138][T16843] syz_tun: entered allmulticast mode [ 474.707027][T16843] batadv_slave_0: entered allmulticast mode [ 474.730827][T16821] team0: Port device team_slave_0 added [ 474.742586][ T6372] Bluetooth: hci5: command tx timeout [ 474.748636][T16821] team0: Port device team_slave_1 added [ 474.764097][T16846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.812671][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.820124][T16846] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 474.838356][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.846391][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.873525][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.898697][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.907783][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.939541][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.996428][T16821] hsr_slave_0: entered promiscuous mode [ 475.003056][T16821] hsr_slave_1: entered promiscuous mode [ 475.009276][T16821] debugfs: 'hsr0' already exists in 'hsr' [ 475.017535][T16821] Cannot create hsr debugfs directory [ 475.141410][T16821] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.226416][T16821] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.272105][T16821] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.346740][T16821] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.521584][T16821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.545932][T16821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.593999][T16821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.628523][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.642565][T16821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.653460][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.655480][T16876] Unsupported ieee802154 address type: 0 [ 475.936629][ T6690] lo speed is unknown, defaulting to 1000 [ 475.942603][ T6690] s: Port: 1 Link DOWN [ 475.955485][T16870] lo speed is unknown, defaulting to 1000 [ 475.985013][ T6690] lo speed is unknown, defaulting to 1000 [ 476.121614][T16821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.148091][T16905] __nla_validate_parse: 10 callbacks suppressed [ 476.148109][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 476.150137][T16821] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.172107][T16905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3086'. [ 476.202745][ T6372] Bluetooth: hci1: command tx timeout [ 476.233648][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.240827][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.243249][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 476.258910][T16877] netlink: 424 bytes leftover after parsing attributes in process `syz.2.3079'. [ 476.265570][T16905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3086'. [ 476.289351][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.296548][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.367905][T16910] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 476.406262][T16910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.453390][T16910] vlan2: entered promiscuous mode [ 476.458546][T16910] bond1: entered promiscuous mode [ 476.469649][T16910] vlan2: entered allmulticast mode [ 476.476398][T16910] bond1: entered allmulticast mode [ 476.525196][T16910] bond1: (slave gretap2): making interface the new active one [ 476.538444][T16910] gretap2: entered promiscuous mode [ 476.544218][T16910] gretap2: entered allmulticast mode [ 476.551240][T16910] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 476.659705][T16917] "syz.3.3090" (16917) uses obsolete ecb(arc4) skcipher [ 476.801756][T16923] gtp0: entered promiscuous mode [ 476.819643][T16923] gtp0: entered allmulticast mode [ 476.851839][T16927] pimreg: entered allmulticast mode [ 476.861633][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3092'. [ 476.940032][T16821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.971137][T16931] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3095'. [ 477.019152][T16821] veth0_vlan: entered promiscuous mode [ 477.027642][T16931] batadv_slave_1: entered promiscuous mode [ 477.048823][T16821] veth1_vlan: entered promiscuous mode [ 477.064948][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 477.103816][T16934] 8021q: VLANs not supported on 60ªX¹¦À [ 477.157670][T16821] veth0_macvtap: entered promiscuous mode [ 477.193462][T16821] veth1_macvtap: entered promiscuous mode [ 477.232930][T16821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.260944][T16821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.297231][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.318218][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.343434][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.398870][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.530135][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.530958][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3100'. [ 477.552086][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.605641][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.614548][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.746044][T16954] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3102'. [ 477.771006][T16954] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 477.781985][T16957] "syz.2.3103" (16957) uses obsolete ecb(arc4) skcipher [ 478.263011][ T6372] Bluetooth: hci1: command tx timeout [ 478.496977][T17006] "syz.4.3117" (17006) uses obsolete ecb(arc4) skcipher [ 479.145451][T17032] netlink: 'syz.4.3126': attribute type 7 has an invalid length. [ 479.153399][T17032] netlink: 'syz.4.3126': attribute type 8 has an invalid length. [ 479.171108][T17032] netlink: 'syz.4.3126': attribute type 4 has an invalid length. [ 479.488040][T17055] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 479.518332][T17055] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 479.572014][T17055] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 479.621017][T17055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.703126][T17063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.710426][T17063] IPv6: NLM_F_CREATE should be set when creating new route [ 479.758378][T17064] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 479.821834][T17055] vlan3: entered allmulticast mode [ 479.831369][T17055] veth1: entered allmulticast mode [ 479.866058][T17055] veth1: entered promiscuous mode [ 479.889140][T17055] veth1: left promiscuous mode [ 479.906150][T17055] bond2: (slave vlan3): making interface the new active one [ 479.951213][T17055] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 479.992062][T17055] veth1: entered promiscuous mode [ 479.999352][T17055] vlan3: entered promiscuous mode [ 480.009836][T17055] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 480.217248][T17084] sit1: entered promiscuous mode [ 480.351293][ T6372] Bluetooth: hci1: command tx timeout [ 480.509614][T17105] netlink: 'syz.1.3145': attribute type 1 has an invalid length. [ 480.520112][T17105] netlink: 'syz.1.3145': attribute type 1 has an invalid length. [ 480.560341][T17109] "syz.4.3147" (17109) uses obsolete ecb(arc4) skcipher [ 480.700980][T17119] netlink: 'syz.0.3148': attribute type 4 has an invalid length. [ 481.155194][T17145] __nla_validate_parse: 20 callbacks suppressed [ 481.155217][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'. [ 481.221291][T17147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3159'. [ 481.280629][T17148] bridge_slave_0: left allmulticast mode [ 481.304443][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 481.322303][T17148] bridge_slave_0: left promiscuous mode [ 481.328185][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.344905][T17148] bridge_slave_1: left allmulticast mode [ 481.360815][T17148] bridge_slave_1: left promiscuous mode [ 481.382054][T17150] netlink: 'syz.0.3160': attribute type 7 has an invalid length. [ 481.422438][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.424792][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 481.459981][T17148] bond0: (slave bond_slave_0): Releasing backup interface [ 481.477790][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3161'. [ 481.489574][T17148] bond0: (slave bond_slave_1): Releasing backup interface [ 481.527424][T17148] team0: Port device team_slave_0 removed [ 481.546811][T17154] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3160'. [ 481.556527][T17148] team0: Port device team_slave_1 removed [ 481.569773][T17148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.575207][ T5180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.584706][ T5180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.587907][T17148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.593283][ T5180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.606777][ T5180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.614779][ T5180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.632624][T17145] bridge_slave_1: left allmulticast mode [ 481.638405][T17145] bridge_slave_1: left promiscuous mode [ 481.644591][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.654643][T17145] bridge_slave_0: left allmulticast mode [ 481.660332][T17145] bridge_slave_0: left promiscuous mode [ 481.666766][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.795461][T17151] bond2 (unregistering): Released all slaves [ 481.824081][T17153] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3161'. [ 481.952032][T17156] lo speed is unknown, defaulting to 1000 [ 482.035855][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3162'. [ 482.117255][T17171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3164'. [ 482.125914][T17173] veth1: mtu greater than device maximum [ 482.353131][T17179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3167'. [ 482.428732][ T5180] Bluetooth: hci1: command tx timeout [ 482.635061][T17156] chnl_net:caif_netlink_parms(): no params data found [ 482.656266][T17205] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 482.683608][T17207] veth1: mtu greater than device maximum [ 482.891719][T17156] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.902264][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.909500][T17156] bridge_slave_0: entered allmulticast mode [ 482.918619][T17156] bridge_slave_0: entered promiscuous mode [ 482.929794][T17156] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.938485][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.946214][T17156] bridge_slave_1: entered allmulticast mode [ 482.953874][T17156] bridge_slave_1: entered promiscuous mode [ 483.115170][T17230] syzkaller0: entered promiscuous mode [ 483.125390][T17230] syzkaller0: entered allmulticast mode [ 483.137336][T17156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.169782][T17156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.403510][T17156] team0: Port device team_slave_0 added [ 483.478852][T17156] team0: Port device team_slave_1 added [ 483.559655][T17156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.572407][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.702360][ T5180] Bluetooth: hci3: command tx timeout [ 483.897940][T17156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.948199][T17156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.974808][T17156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.045987][T17156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.148366][T17156] hsr_slave_0: entered promiscuous mode [ 484.167468][T17156] hsr_slave_1: entered promiscuous mode [ 484.183517][T17156] debugfs: 'hsr0' already exists in 'hsr' [ 484.200027][T17156] Cannot create hsr debugfs directory [ 484.269499][T17258] ip6gre1: entered promiscuous mode [ 484.571190][T17264] bond0: (slave bond_slave_1): Releasing backup interface [ 484.618808][T17266] netlink: 'syz.2.3192': attribute type 1 has an invalid length. [ 484.765490][T17156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 484.822533][T17156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 484.846053][T17156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.867151][T17156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.894684][T17276] gretap0: entered promiscuous mode [ 484.918970][T17276] vlan2: entered promiscuous mode [ 485.043885][ T7527] IPVS: starting estimator thread 0... [ 485.116077][T17156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.132982][T17290] IPVS: using max 41 ests per chain, 98400 per kthread [ 485.157840][T17156] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.194567][ T677] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.201742][ T677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.233954][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.241091][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.350207][T17293] netlink: 'syz.2.3198': attribute type 1 has an invalid length. [ 485.629752][T17156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.782329][ T5180] Bluetooth: hci3: command tx timeout [ 486.136408][T17156] veth0_vlan: entered promiscuous mode [ 486.168974][T17156] veth1_vlan: entered promiscuous mode [ 486.232162][T17316] macsec0: entered promiscuous mode [ 486.238153][T17316] macsec0: entered allmulticast mode [ 486.273223][T17319] veth1_macvtap: entered allmulticast mode [ 486.279227][T17319] macsec0: left promiscuous mode [ 486.281839][T17322] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 486.293390][T17319] macsec0: left allmulticast mode [ 486.298493][T17319] veth1_macvtap: left allmulticast mode [ 486.350934][T17156] veth0_macvtap: entered promiscuous mode [ 486.371044][T17325] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 486.392615][T17325] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 486.407962][T17156] veth1_macvtap: entered promiscuous mode [ 486.437314][T17328] __nla_validate_parse: 4 callbacks suppressed [ 486.437334][T17328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3204'. [ 486.456460][T17156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.495986][T17156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.534326][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.550816][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3208'. [ 486.569051][ T1108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.611842][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.629687][T17340] gtp0: entered promiscuous mode [ 486.635548][T17340] gtp0: entered allmulticast mode [ 486.646479][T17341] netlink: 'syz.3.3208': attribute type 13 has an invalid length. [ 486.656357][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.669075][T17341] netlink: 'syz.3.3208': attribute type 17 has an invalid length. [ 486.778846][T17341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.826178][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.836774][T17342] lo speed is unknown, defaulting to 1000 [ 486.854702][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.893365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.908145][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.918966][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.155220][T17352] lo speed is unknown, defaulting to 1000 [ 487.499197][T17362] tipc: Started in network mode [ 487.504797][T17362] tipc: Node identity eec60ee8f7b, cluster identity 4711 [ 487.515756][T17362] tipc: Enabled bearer , priority 0 [ 487.541009][T17369] Bluetooth: MGMT ver 1.23 [ 487.558772][T17362] syzkaller0: entered promiscuous mode [ 487.564733][T17362] syzkaller0: entered allmulticast mode [ 487.570965][T17362] tipc: Resetting bearer [ 487.587649][T17369] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.598685][T17369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.635149][T17361] tipc: Resetting bearer [ 487.815013][T17361] tipc: Disabling bearer [ 487.862527][ T5180] Bluetooth: hci3: command tx timeout [ 488.174094][T17391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3218'. [ 488.379676][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3223'. [ 488.426821][T17400] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 488.448821][T17402] netlink: 'syz.0.3223': attribute type 30 has an invalid length. [ 488.511684][T17402] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3223'. [ 488.524111][T17402] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3223'. [ 488.561739][T17402] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3223'. [ 488.649276][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 488.659795][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3226'. [ 488.673755][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 488.704859][T17412] sctp: [Deprecated]: syz.4.3224 (pid 17412) Use of int in max_burst socket option. [ 488.704859][T17412] Use struct sctp_assoc_value instead [ 488.861893][T17431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.881696][T17429] netlink: 'syz.3.3231': attribute type 12 has an invalid length. [ 488.896345][T17426] lo speed is unknown, defaulting to 1000 [ 488.991467][T17438] netlink: 'syz.3.3233': attribute type 33 has an invalid length. [ 489.058940][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a06800: rx timeout, send abort [ 489.288726][T17445] veth1_to_bond: entered allmulticast mode [ 489.320372][T17445] veth1_to_bond (unregistering): left allmulticast mode [ 489.360575][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 489.549523][T17466] netlink: 'syz.1.3239': attribute type 13 has an invalid length. [ 489.567235][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a06800: abort rx timeout. Force session deactivation [ 489.706276][T17476] lo speed is unknown, defaulting to 1000 [ 489.895127][T17485] openvswitch: netlink: Message has 16 unknown bytes. [ 489.942401][ T5180] Bluetooth: hci3: command tx timeout [ 490.010799][T17487] netlink: 'syz.4.3244': attribute type 5 has an invalid length. [ 490.021913][T17487] geneve2: entered promiscuous mode [ 490.028925][T17487] geneve2: entered allmulticast mode [ 490.035732][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 490.047249][ T30] audit: type=1804 audit(1756297487.543:6): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3244" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=61 res=1 errno=0 [ 490.047821][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 490.069905][ T30] audit: type=1800 audit(1756297487.543:7): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3244" name="cgroup.controllers" dev="tmpfs" ino=61 res=0 errno=0 [ 490.101356][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 490.110830][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 490.457656][T17512] lo speed is unknown, defaulting to 1000 [ 490.576006][T17521] veth1: mtu greater than device maximum [ 490.976901][T17540] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 491.006012][T17544] netlink: 'syz.1.3261': attribute type 7 has an invalid length. [ 491.015823][T17544] netlink: 'syz.1.3261': attribute type 8 has an invalid length. [ 491.041050][T17544] batadv_slave_1: entered promiscuous mode [ 491.048079][T17544] erspan0: entered promiscuous mode [ 491.055333][T17544] debugfs: 'hsr1' already exists in 'hsr' [ 491.061230][T17544] Cannot create hsr debugfs directory [ 491.232903][ T677] vlan3: left promiscuous mode [ 491.269378][T17559] tipc: Started in network mode [ 491.275925][T17559] tipc: Node identity eeb2162fdbe8, cluster identity 4711 [ 491.285093][T17559] tipc: Enabled bearer , priority 0 [ 491.317340][T17560] tipc: Enabling of bearer rejected, already enabled [ 491.342904][T17559] syzkaller0: entered promiscuous mode [ 491.348447][T17559] syzkaller0: entered allmulticast mode [ 491.364109][T17560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.374111][T17559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.453059][T17558] tipc: Resetting bearer [ 491.492880][T17558] tipc: Disabling bearer [ 491.521423][T17575] __nla_validate_parse: 25 callbacks suppressed [ 491.521440][T17575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3270'. [ 491.635295][T17575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3270'. [ 491.769528][T17587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'. [ 491.821021][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 491.830493][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3277'. [ 491.840144][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 491.850548][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3277'. [ 491.959643][T17607] lo speed is unknown, defaulting to 1000 [ 492.044086][T17604] nbd1: detected capacity change from 0 to 127 [ 492.055312][ T5180] block nbd1: Receive control failed (result -32) [ 492.062113][ T6372] block nbd1: Receive control failed (result -32) [ 492.246976][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 492.370099][T17611] lo speed is unknown, defaulting to 1000 [ 492.475334][T17624] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:65535 [ 492.684729][T17634] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3288'. [ 492.701090][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 493.209942][T17665] netlink: 'syz.0.3297': attribute type 11 has an invalid length. [ 494.037140][T17704] FAULT_INJECTION: forcing a failure. [ 494.037140][T17704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.070632][T17704] CPU: 1 UID: 0 PID: 17704 Comm: syz.3.3304 Not tainted syzkaller #0 PREEMPT(full) [ 494.070661][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.070675][T17704] Call Trace: [ 494.070683][T17704] [ 494.070691][T17704] dump_stack_lvl+0x189/0x250 [ 494.070720][T17704] ? __pfx____ratelimit+0x10/0x10 [ 494.070750][T17704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.070774][T17704] ? __pfx__printk+0x10/0x10 [ 494.070801][T17704] ? __might_fault+0xb0/0x130 [ 494.070834][T17704] ? rcu_is_watching+0x15/0xb0 [ 494.070855][T17704] should_fail_ex+0x414/0x560 [ 494.070884][T17704] _copy_from_iter+0x1db/0x16f0 [ 494.070907][T17704] ? rcu_is_watching+0x15/0xb0 [ 494.070928][T17704] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 494.070956][T17704] ? __pfx__copy_from_iter+0x10/0x10 [ 494.070977][T17704] ? __build_skb_around+0x257/0x3e0 [ 494.071011][T17704] ? netlink_sendmsg+0x642/0xb30 [ 494.071027][T17704] ? skb_put+0x11b/0x210 [ 494.071048][T17704] netlink_sendmsg+0x6b2/0xb30 [ 494.071070][T17704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.071090][T17704] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.071110][T17704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.071132][T17704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.071151][T17704] __sock_sendmsg+0x219/0x270 [ 494.071180][T17704] ____sys_sendmsg+0x505/0x830 [ 494.071204][T17704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.071230][T17704] ? import_iovec+0x74/0xa0 [ 494.071255][T17704] ___sys_sendmsg+0x21f/0x2a0 [ 494.071278][T17704] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.071318][T17704] ? __fget_files+0x2a/0x420 [ 494.071335][T17704] ? __fget_files+0x3a0/0x420 [ 494.071359][T17704] __x64_sys_sendmsg+0x19b/0x260 [ 494.071381][T17704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.071409][T17704] ? __pfx_ksys_write+0x10/0x10 [ 494.071439][T17704] ? rcu_is_watching+0x15/0xb0 [ 494.071461][T17704] do_syscall_64+0xfa/0x3b0 [ 494.071480][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.071500][T17704] ? clear_bhb_loop+0x60/0xb0 [ 494.071524][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.071565][T17704] RIP: 0033:0x7fd51df8ebe9 [ 494.071584][T17704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.071610][T17704] RSP: 002b:00007fd51edda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.071634][T17704] RAX: ffffffffffffffda RBX: 00007fd51e1b6090 RCX: 00007fd51df8ebe9 [ 494.071650][T17704] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 494.071664][T17704] RBP: 00007fd51edda090 R08: 0000000000000000 R09: 0000000000000000 [ 494.071677][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.071689][T17704] R13: 00007fd51e1b6128 R14: 00007fd51e1b6090 R15: 00007ffe628ff228 [ 494.071714][T17704] [ 494.375257][T17707] lo speed is unknown, defaulting to 1000 [ 494.741697][T17704] lo speed is unknown, defaulting to 1000 [ 494.797456][T17739] tipc: Enabled bearer , priority 0 [ 494.804565][T17739] syzkaller0: entered promiscuous mode [ 494.810091][T17739] syzkaller0: entered allmulticast mode [ 494.878029][T17723] lo speed is unknown, defaulting to 1000 [ 494.906333][T17744] tipc: Resetting bearer [ 494.921585][T17744] tipc: Disabling bearer [ 495.182695][T17758] lo speed is unknown, defaulting to 1000 [ 495.380232][T17767] vlan2: entered promiscuous mode [ 495.393820][T17767] bridge0: entered promiscuous mode [ 496.008461][T17785] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 496.167235][T17798] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 496.253340][T17804] netlink: zone id is out of range [ 496.258522][T17804] netlink: zone id is out of range [ 496.274194][T17804] netlink: zone id is out of range [ 496.279344][T17804] netlink: zone id is out of range [ 496.332261][T17804] netlink: zone id is out of range [ 496.337433][T17804] netlink: zone id is out of range [ 496.386450][T17804] netlink: zone id is out of range [ 496.391638][T17804] netlink: zone id is out of range [ 496.397841][T17804] netlink: zone id is out of range [ 496.485716][T17814] FAULT_INJECTION: forcing a failure. [ 496.485716][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.499146][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.0.3333 Not tainted syzkaller #0 PREEMPT(full) [ 496.499170][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.499181][T17814] Call Trace: [ 496.499188][T17814] [ 496.499195][T17814] dump_stack_lvl+0x189/0x250 [ 496.499240][T17814] ? __pfx____ratelimit+0x10/0x10 [ 496.499268][T17814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.499291][T17814] ? __pfx__printk+0x10/0x10 [ 496.499315][T17814] ? __might_fault+0xb0/0x130 [ 496.499346][T17814] ? rcu_is_watching+0x15/0xb0 [ 496.499366][T17814] should_fail_ex+0x414/0x560 [ 496.499394][T17814] _copy_from_user+0x2d/0xb0 [ 496.499417][T17814] ___sys_sendmsg+0x158/0x2a0 [ 496.499438][T17814] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.499484][T17814] ? __fget_files+0x2a/0x420 [ 496.499501][T17814] ? __fget_files+0x3a0/0x420 [ 496.499523][T17814] __x64_sys_sendmsg+0x19b/0x260 [ 496.499546][T17814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.499572][T17814] ? __pfx_ksys_write+0x10/0x10 [ 496.499595][T17814] ? rcu_is_watching+0x15/0xb0 [ 496.499616][T17814] ? rcu_is_watching+0x15/0xb0 [ 496.499635][T17814] do_syscall_64+0xfa/0x3b0 [ 496.499652][T17814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.499672][T17814] ? clear_bhb_loop+0x60/0xb0 [ 496.499694][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.499713][T17814] RIP: 0033:0x7f40a978ebe9 [ 496.499729][T17814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.499747][T17814] RSP: 002b:00007f40aa5ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.499768][T17814] RAX: ffffffffffffffda RBX: 00007f40a99b5fa0 RCX: 00007f40a978ebe9 [ 496.499783][T17814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 496.499796][T17814] RBP: 00007f40aa5ab090 R08: 0000000000000000 R09: 0000000000000000 [ 496.499808][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.499819][T17814] R13: 00007f40a99b6038 R14: 00007f40a99b5fa0 R15: 00007ffcb87ec9e8 [ 496.499841][T17814] [ 496.812118][T17821] __nla_validate_parse: 45 callbacks suppressed [ 496.812135][T17821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3335'. [ 496.908075][T17822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3334'. [ 496.919211][T17821] FAULT_INJECTION: forcing a failure. [ 496.919211][T17821] name failslab, interval 1, probability 0, space 0, times 0 [ 496.997606][T17821] CPU: 1 UID: 0 PID: 17821 Comm: syz.2.3335 Not tainted syzkaller #0 PREEMPT(full) [ 496.997636][T17821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.997650][T17821] Call Trace: [ 496.997658][T17821] [ 496.997666][T17821] dump_stack_lvl+0x189/0x250 [ 496.997695][T17821] ? __pfx____ratelimit+0x10/0x10 [ 496.997726][T17821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.997751][T17821] ? __pfx__printk+0x10/0x10 [ 496.997793][T17821] ? __pfx___might_resched+0x10/0x10 [ 496.997811][T17821] ? lock_acquire+0x5f/0x360 [ 496.997839][T17821] should_fail_ex+0x414/0x560 [ 496.997866][T17821] should_failslab+0xa8/0x100 [ 496.997895][T17821] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 496.997921][T17821] ? __alloc_skb+0x112/0x2d0 [ 496.997940][T17821] __alloc_skb+0x112/0x2d0 [ 496.997959][T17821] netlink_ack+0x146/0xa50 [ 496.997985][T17821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.998014][T17821] ? __netlink_lookup+0xbd/0x810 [ 496.998031][T17821] ? rcu_is_watching+0x15/0xb0 [ 496.998050][T17821] ? rcu_is_watching+0x15/0xb0 [ 496.998071][T17821] netlink_rcv_skb+0x28c/0x470 [ 496.998100][T17821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 496.998129][T17821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.998168][T17821] netlink_unicast+0x82f/0x9e0 [ 496.998206][T17821] ? __pfx_netlink_unicast+0x10/0x10 [ 496.998230][T17821] ? netlink_sendmsg+0x642/0xb30 [ 496.998244][T17821] ? skb_put+0x11b/0x210 [ 496.998279][T17821] netlink_sendmsg+0x805/0xb30 [ 496.998301][T17821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.998319][T17821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.998337][T17821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.998368][T17821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.998386][T17821] __sock_sendmsg+0x219/0x270 [ 496.998411][T17821] ____sys_sendmsg+0x505/0x830 [ 496.998434][T17821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.998459][T17821] ? import_iovec+0x74/0xa0 [ 496.998482][T17821] ___sys_sendmsg+0x21f/0x2a0 [ 496.998503][T17821] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.998539][T17821] ? __fget_files+0x2a/0x420 [ 496.998554][T17821] ? __fget_files+0x3a0/0x420 [ 496.998573][T17821] __x64_sys_sendmsg+0x19b/0x260 [ 496.998595][T17821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.998619][T17821] ? __pfx_ksys_write+0x10/0x10 [ 496.998646][T17821] ? rcu_is_watching+0x15/0xb0 [ 496.998666][T17821] do_syscall_64+0xfa/0x3b0 [ 496.998684][T17821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.998702][T17821] ? clear_bhb_loop+0x60/0xb0 [ 496.998724][T17821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.998743][T17821] RIP: 0033:0x7f5bdd78ebe9 [ 496.998760][T17821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.998777][T17821] RSP: 002b:00007f5bde571038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.998798][T17821] RAX: ffffffffffffffda RBX: 00007f5bdd9b6090 RCX: 00007f5bdd78ebe9 [ 496.998812][T17821] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 496.998825][T17821] RBP: 00007f5bde571090 R08: 0000000000000000 R09: 0000000000000000 [ 496.998838][T17821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.998849][T17821] R13: 00007f5bdd9b6128 R14: 00007f5bdd9b6090 R15: 00007fff5e28b318 [ 496.998870][T17821] [ 497.327525][T17822] lo speed is unknown, defaulting to 1000 [ 497.414602][T17824] netlink: 'syz.4.3337': attribute type 14 has an invalid length. [ 497.676142][T17821] lo speed is unknown, defaulting to 1000 [ 498.170472][T17856] netlink: 'syz.1.3345': attribute type 1 has an invalid length. [ 498.222674][T17852] tipc: Enabled bearer , priority 0 [ 498.283685][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 498.341943][T17851] tipc: Disabling bearer [ 498.391481][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 498.603166][T17870] bond0: (slave bond_slave_0): Releasing backup interface [ 498.634078][T17870] team0: Port device team_slave_0 removed [ 498.649003][T17870] team0: Port device team_slave_1 removed [ 498.658226][T17870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.672644][T17870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.681018][T17870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.688687][T17877] netlink: 'syz.1.3348': attribute type 10 has an invalid length. [ 498.722309][T17870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.788804][T17868] lo speed is unknown, defaulting to 1000 [ 498.796780][T17877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 498.956678][T17886] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3353'. [ 499.471607][T17913] netlink: 'syz.2.3362': attribute type 16 has an invalid length. [ 499.521628][T17913] netlink: 'syz.2.3362': attribute type 17 has an invalid length. [ 499.539511][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 499.596943][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 500.105880][T17932] netlink: 'syz.0.3366': attribute type 30 has an invalid length. [ 500.304416][T17935] lo speed is unknown, defaulting to 1000 [ 500.546367][T17943] pim6reg: entered allmulticast mode [ 500.611878][T17919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.664330][T17941] pim6reg: left allmulticast mode [ 500.756646][T17951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3372'. [ 500.864232][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'. [ 500.898785][T17965] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3370'. [ 500.949016][T17968] FAULT_INJECTION: forcing a failure. [ 500.949016][T17968] name failslab, interval 1, probability 0, space 0, times 0 [ 500.999993][T17968] CPU: 0 UID: 0 PID: 17968 Comm: syz.3.3376 Not tainted syzkaller #0 PREEMPT(full) [ 501.000023][T17968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.000036][T17968] Call Trace: [ 501.000044][T17968] [ 501.000052][T17968] dump_stack_lvl+0x189/0x250 [ 501.000082][T17968] ? __pfx____ratelimit+0x10/0x10 [ 501.000111][T17968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.000142][T17968] ? __pfx__printk+0x10/0x10 [ 501.000179][T17968] should_fail_ex+0x414/0x560 [ 501.000208][T17968] should_failslab+0xa8/0x100 [ 501.000239][T17968] kmem_cache_alloc_noprof+0x73/0x3c0 [ 501.000265][T17968] ? skb_clone+0x212/0x3a0 [ 501.000291][T17968] skb_clone+0x212/0x3a0 [ 501.000315][T17968] __netlink_deliver_tap+0x404/0x850 [ 501.000353][T17968] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.000384][T17968] netlink_deliver_tap+0x19c/0x1b0 [ 501.000416][T17968] netlink_unicast+0x7fa/0x9e0 [ 501.000448][T17968] ? __pfx_netlink_unicast+0x10/0x10 [ 501.000476][T17968] ? netlink_sendmsg+0x642/0xb30 [ 501.000492][T17968] ? skb_put+0x11b/0x210 [ 501.000512][T17968] netlink_sendmsg+0x805/0xb30 [ 501.000535][T17968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.000555][T17968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.000575][T17968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.000600][T17968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.000617][T17968] __sock_sendmsg+0x219/0x270 [ 501.000645][T17968] ____sys_sendmsg+0x505/0x830 [ 501.000668][T17968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.000694][T17968] ? import_iovec+0x74/0xa0 [ 501.000719][T17968] ___sys_sendmsg+0x21f/0x2a0 [ 501.000741][T17968] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.000782][T17968] ? __fget_files+0x2a/0x420 [ 501.000800][T17968] ? __fget_files+0x3a0/0x420 [ 501.000823][T17968] __x64_sys_sendmsg+0x19b/0x260 [ 501.000847][T17968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.000874][T17968] ? __pfx_ksys_write+0x10/0x10 [ 501.000900][T17968] ? rcu_is_watching+0x15/0xb0 [ 501.000922][T17968] ? rcu_is_watching+0x15/0xb0 [ 501.000944][T17968] do_syscall_64+0xfa/0x3b0 [ 501.000963][T17968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.000984][T17968] ? clear_bhb_loop+0x60/0xb0 [ 501.001007][T17968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.001028][T17968] RIP: 0033:0x7fd51df8ebe9 [ 501.001046][T17968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.001066][T17968] RSP: 002b:00007fd51edfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.001088][T17968] RAX: ffffffffffffffda RBX: 00007fd51e1b5fa0 RCX: 00007fd51df8ebe9 [ 501.001104][T17968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.001117][T17968] RBP: 00007fd51edfb090 R08: 0000000000000000 R09: 0000000000000000 [ 501.001131][T17968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.001150][T17968] R13: 00007fd51e1b6038 R14: 00007fd51e1b5fa0 R15: 00007ffe628ff228 [ 501.001175][T17968] [ 501.387501][T17978] net_ratelimit: 8 callbacks suppressed [ 501.387518][T17978] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 501.555272][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.842449][T17980] lo speed is unknown, defaulting to 1000 [ 501.881590][T18001] netlink: ct family unspecified [ 501.887575][T18001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.078395][T18012] __nla_validate_parse: 8 callbacks suppressed [ 502.078420][T18012] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3389'. [ 502.253563][T18018] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3392'. [ 502.282029][T17999] lo speed is unknown, defaulting to 1000 [ 502.428733][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'. [ 502.441549][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3394'. [ 502.469427][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'. [ 502.503400][T18022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3394'. [ 502.621396][T18027] bridge_slave_0: left allmulticast mode [ 502.635130][T18027] bridge_slave_0: left promiscuous mode [ 502.641570][T18027] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.655976][T18031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3395'. [ 502.670194][T18027] bridge_slave_1: left allmulticast mode [ 502.689644][T18027] bridge_slave_1: left promiscuous mode [ 502.714353][T18027] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.751681][T18027] bond0: (slave bond_slave_0): Releasing backup interface [ 502.760854][T18027] bond0: (slave bond_slave_1): Releasing backup interface [ 502.776883][T18027] team0: Port device team_slave_0 removed [ 502.789725][T18027] team0: Port device team_slave_1 removed [ 502.796375][T18027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.805196][T18027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.171086][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 503.374463][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 503.468317][T18076] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.3407'. [ 503.611473][T18089] tipc: Started in network mode [ 503.618414][T18089] tipc: Node identity 4e781386b488, cluster identity 4711 [ 503.629802][T18089] tipc: Enabled bearer , priority 0 [ 503.640368][T18089] syzkaller0: entered promiscuous mode [ 503.650700][T18089] syzkaller0: entered allmulticast mode [ 503.668058][T18089] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 503.690649][T18089] tipc: Resetting bearer [ 503.700513][T18088] tipc: Resetting bearer [ 503.717858][T18088] tipc: Disabling bearer [ 503.906265][T18103] lo speed is unknown, defaulting to 1000 [ 504.668411][T18133] lo speed is unknown, defaulting to 1000 [ 505.023528][T18140] netlink: 'syz.1.3421': attribute type 1 has an invalid length. [ 505.239102][T18162] lo speed is unknown, defaulting to 1000 [ 505.719225][T18194] veth1: mtu greater than device maximum [ 505.730227][T18169] lo speed is unknown, defaulting to 1000 [ 506.235402][T18217] tipc: Enabled bearer , priority 0 [ 506.270475][T18214] syzkaller0: entered promiscuous mode [ 506.276758][T18214] syzkaller0: entered allmulticast mode [ 506.293668][T18215] lo speed is unknown, defaulting to 1000 [ 506.329994][T18214] tipc: Resetting bearer [ 506.353286][T18213] tipc: Resetting bearer [ 506.378806][T18213] tipc: Disabling bearer [ 506.493851][T18229] netlink: 'syz.3.3445': attribute type 15 has an invalid length. [ 506.502085][T18229] netlink: 'syz.3.3445': attribute type 17 has an invalid length. [ 506.596850][T18229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.658589][T18228] lo speed is unknown, defaulting to 1000 [ 506.690747][T18229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.056934][T18251] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 507.098053][T18254] __nla_validate_parse: 19 callbacks suppressed [ 507.098070][T18254] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.114811][T18254] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.127275][T18254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.137067][T18253] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.147249][T18253] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.156765][T18253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3454'. [ 507.479157][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 507.621311][T18256] geneve2: left promiscuous mode [ 507.628645][T18256] gtp0: left promiscuous mode [ 507.638615][T18256] gtp0: left allmulticast mode [ 507.671719][T18256] vlan2: left promiscuous mode [ 507.683933][T18256] bridge0: left promiscuous mode [ 508.070022][T18278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.092760][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 508.704821][T18300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3468'. [ 508.860443][T18309] netlink: 'syz.3.3472': attribute type 1 has an invalid length. [ 508.956245][T18318] tipc: Enabled bearer , priority 0 [ 508.979843][T18320] syzkaller0: entered promiscuous mode [ 508.986009][T18320] syzkaller0: entered allmulticast mode [ 509.039850][T18317] tipc: Resetting bearer [ 509.064933][T18317] tipc: Disabling bearer [ 509.065266][T18328] sctp: [Deprecated]: syz.2.3478 (pid 18328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.065266][T18328] Use struct sctp_sack_info instead [ 509.219429][T18335] tipc: Enabled bearer , priority 0 [ 509.229922][T18335] syzkaller0: entered promiscuous mode [ 509.239938][T18335] syzkaller0: entered allmulticast mode [ 509.360471][T18335] tipc: Resetting bearer [ 509.367621][T18334] tipc: Resetting bearer [ 509.384632][T18334] tipc: Disabling bearer [ 509.566916][T11032] IPVS: starting estimator thread 0... [ 509.576930][T18355] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 509.601434][T18350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3486'. [ 509.688198][T18364] lo speed is unknown, defaulting to 1000 [ 509.696818][T18357] IPVS: using max 35 ests per chain, 84000 per kthread [ 510.689958][T18399] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 510.714575][T18399] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 510.730028][T18407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.756878][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.765861][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.774356][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.793572][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.806222][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.815577][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.825027][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.846206][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.871334][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.884227][T18408] netlink: 'syz.3.3504': attribute type 1 has an invalid length. [ 510.920712][T18399] macvlan2: entered promiscuous mode [ 510.926467][T18399] macvlan2: entered allmulticast mode [ 510.937692][T18399] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 511.147484][T18435] lo speed is unknown, defaulting to 1000 [ 511.675954][T18462] team0: entered promiscuous mode [ 511.684043][T18462] ip6gretap0: entered promiscuous mode [ 511.691011][T18462] team0: left promiscuous mode [ 511.700025][T18462] ip6gretap0: left promiscuous mode [ 511.843989][T18477] syzkaller1: entered promiscuous mode [ 511.849642][T18477] syzkaller1: entered allmulticast mode [ 511.908141][T18481] tipc: Enabled bearer , priority 0 [ 511.934450][T18481] syzkaller0: entered promiscuous mode [ 511.952620][T18481] syzkaller0: entered allmulticast mode [ 511.986835][T18480] tipc: Resetting bearer [ 512.020960][T18480] tipc: Disabling bearer [ 512.240652][T18498] __nla_validate_parse: 100 callbacks suppressed [ 512.240674][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3528'. [ 512.284710][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 512.516588][T18523] lo speed is unknown, defaulting to 1000 [ 512.602502][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 512.623561][T18526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3533'. [ 512.654945][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 512.718178][T18526] gretap1: entered promiscuous mode [ 512.786873][T18531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.843546][T18535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.864973][T18535] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 512.909885][T18535] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 513.278737][T18528] lo speed is unknown, defaulting to 1000 [ 513.299276][T18523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3535'. [ 513.323680][T18553] pimreg: entered allmulticast mode [ 513.329438][T18523] ip6_vti0: entered promiscuous mode [ 513.350225][T18523] ip6_vti0: entered allmulticast mode [ 513.500555][T18558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3544'. [ 513.532243][T18558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3544'. [ 513.559018][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3544'. [ 513.609716][T18562] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3546'. [ 514.598779][T18567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.616987][T18567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.964519][T18567] gretap1: left promiscuous mode [ 514.969840][T18567] hsr1: left allmulticast mode [ 514.974931][T18567] syz_tun: left allmulticast mode [ 514.979971][T18567] batadv_slave_0: left allmulticast mode [ 514.992517][T18567] vlan2: left promiscuous mode [ 514.997309][T18567] bond1: left promiscuous mode [ 515.002083][T18567] gretap2: left promiscuous mode [ 515.007922][T18567] vlan2: left allmulticast mode [ 515.012970][T18567] bond1: left allmulticast mode [ 515.017830][T18567] gretap2: left allmulticast mode [ 515.027330][T18567] vlan3: left allmulticast mode [ 515.032465][T18567] veth1: left allmulticast mode [ 515.045924][T18573] hsr_slave_0: left promiscuous mode [ 515.051811][T18573] hsr_slave_1: left promiscuous mode [ 515.078735][T18588] syzkaller0: entered promiscuous mode [ 515.092369][T18588] syzkaller0: entered allmulticast mode [ 515.118537][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.162614][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.171018][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.216339][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.451128][T18618] NCSI netlink: No device for ifindex 0 [ 515.680895][T18633] syz_tun: entered allmulticast mode [ 515.737212][T18633] dvmrp1: entered allmulticast mode [ 515.893810][T18632] syz_tun: left allmulticast mode [ 516.118146][T18663] validate_nla: 85 callbacks suppressed [ 516.118165][T18663] netlink: 'syz.1.3574': attribute type 13 has an invalid length. [ 516.140028][T18663] netlink: 'syz.1.3574': attribute type 17 has an invalid length. [ 516.162055][T18666] netlink: 'syz.4.3571': attribute type 11 has an invalid length. [ 516.356108][T18663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.411569][T18665] lo speed is unknown, defaulting to 1000 [ 516.479709][T18680] rdma_op ffff8880757929f0 conn xmit_rdma 0000000000000000 [ 516.505837][T18680] netlink: 'syz.0.3577': attribute type 10 has an invalid length. [ 516.515537][T18680] bond0: (slave wlan1): Opening slave failed [ 516.584561][T18669] lo speed is unknown, defaulting to 1000 [ 517.208793][T18703] veth1: mtu greater than device maximum [ 517.283078][T18707] __nla_validate_parse: 11 callbacks suppressed [ 517.283095][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3587'. [ 517.324178][T18713] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3589'. [ 517.336988][T18713] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 517.444140][ T6890] IPVS: starting estimator thread 0... [ 517.451724][T18714] lo speed is unknown, defaulting to 1000 [ 517.489179][T18715] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.532386][T18720] IPVS: using max 36 ests per chain, 86400 per kthread [ 517.674308][T18729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.766654][T18726] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 517.775109][T18726] netlink: 'syz.0.3592': attribute type 2 has an invalid length. [ 517.783076][T18726] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.3592'. [ 518.132001][T18717] lo speed is unknown, defaulting to 1000 [ 518.728363][T18755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3597'. [ 519.182829][T18781] netlink: 'syz.0.3609': attribute type 12 has an invalid length. [ 519.210382][T18781] netlink: 'syz.0.3609': attribute type 4 has an invalid length. [ 519.240289][T18782] syzkaller0: entered promiscuous mode [ 519.248992][T18781] netlink: 'syz.0.3609': attribute type 4 has an invalid length. [ 519.257832][T18782] syzkaller0: entered allmulticast mode [ 519.421188][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 519.522845][T18799] lo speed is unknown, defaulting to 1000 [ 519.658964][T18806] bridge2: entered allmulticast mode [ 519.804166][T18811] tipc: Enabled bearer , priority 0 [ 519.813220][T18811] syzkaller0: entered promiscuous mode [ 519.818717][T18811] syzkaller0: entered allmulticast mode [ 519.877255][T18811] tipc: Resetting bearer [ 519.947118][T18818] tipc: Resetting bearer [ 520.019744][T18818] tipc: Disabling bearer [ 520.180507][T18835] netlink: 'syz.0.3626': attribute type 2 has an invalid length. [ 520.201190][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'. [ 520.368351][T18850] TCP: TCP_TX_DELAY enabled [ 520.487947][T18833] lo speed is unknown, defaulting to 1000 [ 520.512361][T18856] netlink: 'syz.0.3630': attribute type 4 has an invalid length. [ 520.561348][T18856] netlink: 'syz.0.3630': attribute type 11 has an invalid length. [ 520.699783][T18863] pim6reg1: entered promiscuous mode [ 520.719075][T18863] pim6reg1: entered allmulticast mode [ 520.955695][T18840] lo speed is unknown, defaulting to 1000 [ 521.232594][T18896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3641'. [ 521.502696][T18909] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3643'. [ 521.511789][T18909] validate_nla: 1 callbacks suppressed [ 521.511803][T18909] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 521.658553][T18909] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 521.664617][T18909] syzkaller0: linktype set to 1 Connection to 10.128.1.111 closed by remote host. [ 522.304046][T16043] syz_tun (unregistering): left promiscuous mode [ 522.630567][ T61] bond1 (unregistering): (slave gretap2): Releasing active interface [ 522.657419][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.671419][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.685022][ T61] bond0 (unregistering): Released all slaves [ 522.698045][ T61] bond1 (unregistering): Released all slaves [ 522.709478][ T61] bond2 (unregistering): (slave wlan0): Releasing active interface [ 522.717574][ T61] vlan3: entered promiscuous mode [ 522.725635][ T61] bond2 (unregistering): (slave vlan3): Releasing active interface [ 522.736263][ T61] bond2 (unregistering): Released all slaves [ 522.802278][ T61] tipc: Left network mode [ 523.078818][ T61] batadv_slave_0: left promiscuous mode [ 523.092128][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.110233][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.176782][ T61] team0 (unregistering): Port device team_slave_1 removed [ 523.193783][ T61] team0 (unregistering): Port device team_slave_0 removed [ 523.508388][ T61] IPVS: stop unused estimator thread 0... [ 523.587870][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.598633][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.647463][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.658725][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.717450][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.728005][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.756677][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.767225][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 523.823956][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.876144][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.928308][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.976441][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.211216][ T61] bridge_slave_1: left allmulticast mode [ 524.217714][ T61] bridge_slave_1: left promiscuous mode [ 524.223496][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.231926][ T61] bridge_slave_0: left allmulticast mode [ 524.237973][ T61] bridge_slave_0: left promiscuous mode [ 524.243680][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.325065][ T61] dvmrp1 (unregistering): left allmulticast mode [ 524.370872][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.383918][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.395841][ T61] bond0 (unregistering): Released all slaves [ 524.405110][ T61] bond1 (unregistering): Released all slaves [ 524.438079][ T61] erspan0 (unregistering): left promiscuous mode [ 524.461766][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 524.470330][ T61] bond0 (unregistering): Released all slaves [ 524.483775][ T61] bond1 (unregistering): Released all slaves [ 524.706334][ T61] bond0 (unregistering): Released all slaves [ 524.717459][ T61] bond1 (unregistering): Released all slaves [ 524.726884][ T61] bond2 (unregistering): Released all slaves [ 524.737463][ T61] bond3 (unregistering): Released all slaves [ 524.794613][ T61] tipc: Left network mode [ 524.800326][ T61] tipc: Left network mode [ 524.806662][ T61] tipc: Left network mode [ 525.389084][ T61] hsr_slave_0: left promiscuous mode [ 525.395049][ T61] hsr_slave_1: left promiscuous mode [ 525.400730][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.408251][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.416134][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.423626][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.431360][ T61] batadv_slave_1: left promiscuous mode [ 525.440439][ T61] hsr_slave_0: left promiscuous mode [ 525.446301][ T61] hsr_slave_1: left promiscuous mode [ 525.456684][ T61] hsr_slave_0: left promiscuous mode [ 525.462712][ T61] hsr_slave_1: left promiscuous mode [ 525.475096][ T61] veth1_macvtap: left promiscuous mode [ 525.480603][ T61] veth0_macvtap: left promiscuous mode [ 525.486218][ T61] veth1_vlan: left promiscuous mode [ 525.491453][ T61] veth0_vlan: left promiscuous mode [ 525.498308][ T61] veth1_macvtap: left promiscuous mode [ 525.505656][ T61] veth0_macvtap: left promiscuous mode [ 525.511211][ T61] veth1_vlan: left promiscuous mode [ 525.516956][ T61] veth0_vlan: left promiscuous mode [ 525.684662][ T61] team0 (unregistering): Port device team_slave_1 removed [ 525.698838][ T61] team0 (unregistering): Port device team_slave_0 removed [ 525.761083][ T61] pimreg (unregistering): left allmulticast mode [ 525.920139][ T61] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 525.932141][ T61] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 525.941692][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 525.950979][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.961026][ T61] Workqueue: netns cleanup_net [ 525.965792][ T61] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 525.971443][ T61] Code: ff ff ff e8 33 e5 41 01 89 c5 31 ff 89 c6 e8 a8 b9 87 f7 85 ed 74 45 e8 5f b5 87 f7 eb 05 e8 58 b5 87 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 12 21 eb f7 49 8b 2c 24 49 8d 7c [ 525.991059][ T61] RSP: 0018:ffffc9000212f340 EFLAGS: 00010206 [ 525.997117][ T61] RAX: 000000001fffe000 RBX: 1ffff1100b0ae102 RCX: ffff88801ab99e00 [ 526.005084][ T61] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.013050][ T61] RBP: 0000000000000000 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 526.021041][ T61] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: 00000000ffff0000 [ 526.029015][ T61] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888058570810 [ 526.036983][ T61] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 526.045909][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.052484][ T61] CR2: 00007f775c3c84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 526.060534][ T61] Call Trace: [ 526.063891][ T61] [ 526.066833][ T61] mld_clear_delrec+0x160/0x660 [ 526.071687][ T61] ipv6_mc_destroy_dev+0x45/0x5a0 [ 526.076712][ T61] addrconf_ifdown+0x139e/0x1880 [ 526.081653][ T61] ? tls_dev_event+0x717/0xec0 [ 526.086411][ T61] ? __pfx_addrconf_ifdown+0x10/0x10 [ 526.091687][ T61] ? lock_release+0x4b/0x3e0 [ 526.096285][ T61] ? net_generic+0x1e/0x240 [ 526.100780][ T61] ? __pfx_tls_dev_event+0x10/0x10 [ 526.105878][ T61] addrconf_notify+0x1bc/0x1010 [ 526.110736][ T61] notifier_call_chain+0x1b3/0x3e0 [ 526.115853][ T61] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 526.122289][ T61] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 526.129091][ T61] ? unregister_netdevice_queue+0x1b3/0x380 [ 526.134978][ T61] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 526.141216][ T61] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 526.147360][ T61] default_device_exit_batch+0x819/0x890 [ 526.152997][ T61] ? __pfx___might_resched+0x10/0x10 [ 526.158269][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 526.164427][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 526.170597][ T61] ops_undo_list+0x522/0x990 [ 526.175185][ T61] ? __pfx_ops_undo_list+0x10/0x10 [ 526.180284][ T61] ? do_raw_spin_unlock+0x122/0x240 [ 526.185492][ T61] cleanup_net+0x4c5/0x800 [ 526.189894][ T61] ? __pfx_cleanup_net+0x10/0x10 [ 526.194820][ T61] ? rcu_is_watching+0x15/0xb0 [ 526.199580][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 526.205297][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 526.211000][ T61] process_scheduled_works+0xae1/0x17b0 [ 526.216550][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 526.222562][ T61] worker_thread+0x8a0/0xda0 [ 526.227153][ T61] kthread+0x70e/0x8a0 [ 526.231215][ T61] ? __pfx_worker_thread+0x10/0x10 [ 526.236310][ T61] ? __pfx_kthread+0x10/0x10 [ 526.240889][ T61] ? _raw_spin_unlock_irq+0x23/0x50 [ 526.246078][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.251272][ T61] ? __pfx_kthread+0x10/0x10 [ 526.255853][ T61] ret_from_fork+0x3f9/0x770 [ 526.260433][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 526.265543][ T61] ? __switch_to_asm+0x39/0x70 [ 526.270320][ T61] ? __switch_to_asm+0x33/0x70 [ 526.275076][ T61] ? __pfx_kthread+0x10/0x10 [ 526.279656][ T61] ret_from_fork_asm+0x1a/0x30 [ 526.284416][ T61] [ 526.287436][ T61] Modules linked in: [ 526.292382][ T61] ---[ end trace 0000000000000000 ]--- [ 526.300878][ T61] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 526.306691][ T61] Code: ff ff ff e8 33 e5 41 01 89 c5 31 ff 89 c6 e8 a8 b9 87 f7 85 ed 74 45 e8 5f b5 87 f7 eb 05 e8 58 b5 87 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 12 21 eb f7 49 8b 2c 24 49 8d 7c [ 526.326891][ T61] RSP: 0018:ffffc9000212f340 EFLAGS: 00010206 [ 526.333031][ T61] RAX: 000000001fffe000 RBX: 1ffff1100b0ae102 RCX: ffff88801ab99e00 [ 526.341015][ T61] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.349011][ T61] RBP: 0000000000000000 R08: ffffffff8fa38437 R09: 1ffffffff1f47086 [ 526.357239][ T61] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: 00000000ffff0000 [ 526.365410][ T61] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888058570810 [ 526.373440][ T61] FS: 0000000000000000(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 526.382726][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.389325][ T61] CR2: 0000557644b184d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 526.397329][ T61] Kernel panic - not syncing: Fatal exception [ 526.403789][ T61] Kernel Offset: disabled [ 526.408109][ T61] Rebooting in 86400 seconds..