last executing test programs: 16.000261747s ago: executing program 2 (id=5969): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xcf}]}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 15.697481327s ago: executing program 2 (id=5974): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xcc3ba18b86fefb23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0) 15.239732739s ago: executing program 2 (id=5978): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}}, 0x2404c080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r14], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r13, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4048850) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 14.354047029s ago: executing program 2 (id=5986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x30b5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x101, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 14.110308463s ago: executing program 2 (id=5990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 13.890297206s ago: executing program 2 (id=5994): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x230, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x2, 0x4, 0x0, 0x1], 0x1, 0x4}, {0x0, [0x4, 0x6, 0x0, 0x5, 0x3, 0x3], 0x5, 0x5}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xff000000, 0xffffff00, 'wg2\x00', 'pim6reg0\x00', {0xff}, {}, 0x1, 0x3, 0x50}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x5, 0x3}, {{0x2}, 0x8}, {{}, 0x7f}, 0x401}}, @common=@ttl={{0x28}, {0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x230, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x7, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x2, 0x4, 0x0, 0x1], 0x1, 0x4}, {0x0, [0x4, 0x6, 0x0, 0x5, 0x3, 0x3], 0x5, 0x5}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xff000000, 0xffffff00, 'wg2\x00', 'pim6reg0\x00', {0xff}, {}, 0x1, 0x3, 0x50}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x5, 0x3}, {{0x2}, 0x8}, {{}, 0x7f}, 0x401}}, @common=@ttl={{0x28}, {0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x0) sendto$phonet(r1, &(0x7f0000000480)="422e9c1643226d7e259cf3da3a0ad368cf24a2da7fec4da7a7d5aaff7ceb03414645a7c13cad2c593f7703e1368cc6b4f237d4476aeb24b8779e4764e8ebea637b84", 0x42, 0x801, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0xf8, "f9ccbf10a16b37ce8e2efbb656ce6e64b0b07a8b3f2bedb0bfee1e021a95ed99ca0e9ce382bbd780fe497e2269f03fced5cc14d2b0ef7cbc6d69ee55d3e2647038f4e934fc0e9b5fa4506f29ef023397f3d2bc72de905c2f3a9d0c31e31a0058f51d1ccdd58e9ff53d698e7be73055f9a0aead13fe786ae5a7250f31404b5aa6211a1ca9f4f9efd48aa97e128006b4b70871aee642928e1ce40b6fb65f492f142a381dfc48ac4b173d789b5e73121f0ab151f8eb2289ed6f511eafc87b6749172c88066b97b7271ff694b319ba6b2fa15856ab95f3996b6225358523911287a63c95971e23db23a63992b6bf1b7aaf9da13972d7e15b4d0b"}, &(0x7f0000000640)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x2}}, 0xa, 0x6, 0x4aac717a, 0x2, 0x1, 0x7fffffff, 0xe}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x2}}, 0xa, 0x6, 0x4aac717a, 0x2, 0x1, 0x7fffffff, 0xe}, 0x9c) r5 = openat$cgroup_ro(r2, &(0x7f0000000740)='cpu.stat\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x3a0, 0x178, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, &(0x7f0000000780), {[{{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 'xfrm0\x00', 'gre0\x00', {}, {0xff}, 0x2c, 0x9, 0x0, 0x21}, 0x0, 0x138, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@rateest={{0x68}, {'macvlan1\x00', 'veth1_to_hsr\x00', 0x20, 0x3, 0x2, 0xfffffffb, 0x1, 0x0, {0xe5f}, {0x2}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x2, {0x2}}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff], 'vxcan1\x00', 'pimreg1\x00', {}, {0xff}, 0x2f, 0x4, 0x4, 0x8}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bridge0\x00', 'pim6reg0\x00', 0x10, 0x1, 0x3, 0x5, 0x2, 0x6, {0x800}, {0x5}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x3a0, 0x178, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, &(0x7f0000000780), {[{{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 'xfrm0\x00', 'gre0\x00', {}, {0xff}, 0x2c, 0x9, 0x0, 0x21}, 0x0, 0x138, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@rateest={{0x68}, {'macvlan1\x00', 'veth1_to_hsr\x00', 0x20, 0x3, 0x2, 0xfffffffb, 0x1, 0x0, {0xe5f}, {0x2}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x2, {0x2}}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff], 'vxcan1\x00', 'pimreg1\x00', {}, {0xff}, 0x2f, 0x4, 0x4, 0x8}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bridge0\x00', 'pim6reg0\x00', 0x10, 0x1, 0x3, 0x5, 0x2, 0x6, {0x800}, {0x5}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r5) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8c004010}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x120, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8c004010}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x120, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x8000) connect$inet(r5, &(0x7f0000000e40)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000e40)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x3, 0x5, 0x4, 0x807, 0x71, 0x2, 0x1}, &(0x7f0000000f40)=0x9c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000f80), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000fc0)={r8, @in6={{0xa, 0x4e22, 0xe, @mcast1, 0x401}}}, &(0x7f0000001080)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000010c0)={r9, 0x0, 0x6}, &(0x7f0000001100)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000010c0)={r9, 0x0, 0x6}, &(0x7f0000001100)=0x8) sendto$inet(r2, &(0x7f0000001140)="6c5734979366522478273ad048b6416ee7beae9ff09066343805d266c7d20da722d02749fd38a9f226a05cb92a9b155b14bf", 0x32, 0x4000000, &(0x7f0000001180)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f00000011c0), 0x4) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f00000011c0), 0x4) clock_gettime(0x0, &(0x7f0000001e00)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000001d00)=[{{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/224, 0xe0}, {&(0x7f0000001380)=""/35, 0x23}, {&(0x7f00000013c0)=""/33, 0x21}], 0x3, &(0x7f0000001440)=""/104, 0x68}, 0x4}, {{&(0x7f00000014c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/185, 0xb9}], 0x2, &(0x7f0000001740)=""/30, 0x1e}, 0x3e}, {{&(0x7f0000001780)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/254, 0xfe}], 0x2, &(0x7f0000001a40)=""/251, 0xfb}, 0xffff}, {{&(0x7f0000001b40)=@tipc=@name, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/55, 0x37}, {&(0x7f0000001c00)=""/26, 0x1a}, {&(0x7f0000001c40)=""/127, 0x7f}], 0x3}, 0x1}], 0x4, 0x2122, &(0x7f0000001e40)={r11, r12+60000000}) recvmmsg(r1, &(0x7f0000009080)=[{{&(0x7f0000001e80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/25, 0x19}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/51, 0x33}, {&(0x7f0000003080)=""/171, 0xab}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/24, 0x18}, {&(0x7f0000004180)=""/244, 0xf4}], 0x8, &(0x7f0000004300)=""/18, 0x12}, 0x3}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000005680)=[{&(0x7f00000043c0)=""/149, 0x95}, {&(0x7f0000004480)=""/29, 0x1d}, {&(0x7f00000044c0)=""/32, 0x20}, {&(0x7f0000004500)=""/141, 0x8d}, {&(0x7f00000045c0)=""/106, 0x6a}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/35, 0x23}], 0x7, &(0x7f0000005700)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000006700)=@caif=@dgm, 0x80, &(0x7f0000008c00)=[{&(0x7f0000006780)=""/176, 0xb0}, {&(0x7f0000006840)=""/168, 0xa8}, {&(0x7f0000006900)=""/82, 0x52}, {&(0x7f0000006980)=""/164, 0xa4}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/170, 0xaa}, {&(0x7f0000007b00)=""/229, 0xe5}, {&(0x7f0000007c00)=""/4096, 0x1000}], 0x8, &(0x7f0000008c80)=""/86, 0x56}, 0x6}, {{&(0x7f0000008d00)=@pppol2tpin6, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008d80)=""/120, 0x78}, {&(0x7f0000008e00)=""/224, 0xe0}, {&(0x7f0000008f00)=""/185, 0xb9}], 0x3, &(0x7f0000009000)=""/68, 0x44}, 0x7}], 0x4, 0x1, &(0x7f0000009180)) (async) recvmmsg(r1, &(0x7f0000009080)=[{{&(0x7f0000001e80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004280)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/25, 0x19}, {&(0x7f0000002f40)=""/195, 0xc3}, {&(0x7f0000003040)=""/51, 0x33}, {&(0x7f0000003080)=""/171, 0xab}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/24, 0x18}, {&(0x7f0000004180)=""/244, 0xf4}], 0x8, &(0x7f0000004300)=""/18, 0x12}, 0x3}, {{&(0x7f0000004340)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000005680)=[{&(0x7f00000043c0)=""/149, 0x95}, {&(0x7f0000004480)=""/29, 0x1d}, {&(0x7f00000044c0)=""/32, 0x20}, {&(0x7f0000004500)=""/141, 0x8d}, {&(0x7f00000045c0)=""/106, 0x6a}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/35, 0x23}], 0x7, &(0x7f0000005700)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000006700)=@caif=@dgm, 0x80, &(0x7f0000008c00)=[{&(0x7f0000006780)=""/176, 0xb0}, {&(0x7f0000006840)=""/168, 0xa8}, {&(0x7f0000006900)=""/82, 0x52}, {&(0x7f0000006980)=""/164, 0xa4}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/170, 0xaa}, {&(0x7f0000007b00)=""/229, 0xe5}, {&(0x7f0000007c00)=""/4096, 0x1000}], 0x8, &(0x7f0000008c80)=""/86, 0x56}, 0x6}, {{&(0x7f0000008d00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008d80)=""/120, 0x78}, {&(0x7f0000008e00)=""/224, 0xe0}, {&(0x7f0000008f00)=""/185, 0xb9}], 0x3, &(0x7f0000009000)=""/68, 0x44}, 0x7}], 0x4, 0x1, &(0x7f0000009180)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f00000091c0)={r9, 0x3, 0x9480, 0x95, 0x1, 0x1}, &(0x7f0000009200)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000009240)={r14, @in={{0x2, 0x4e24, @loopback}}, 0x5, 0x2, 0x8, 0x3a4, 0xd4, 0x0, 0x6}, &(0x7f0000009300)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000009240)={r14, @in={{0x2, 0x4e24, @loopback}}, 0x5, 0x2, 0x8, 0x3a4, 0xd4, 0x0, 0x6}, &(0x7f0000009300)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000009340)={r10, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000009340)={r10, 0x2}, 0x8) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000009380), &(0x7f00000093c0)=0x4) r15 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r15, &(0x7f0000009780)={0x0, 0x0, &(0x7f0000009500)=[{&(0x7f0000009400)="b0c82f0913fe18c5addfff347f8d16e60c8014996c966fdbc8f63d7e23d0b627e4415cedae8fa33506e4e7cdb235360c17748b5aa58c1b694ea969ff6cc04a954fd6c668944504aa3c7e1b9ebedbf47562c780a1a9d8a2026e4fe4f6d556d665f375398beb5ad8caaa87b2f6247bd0ed1515d746818353f3eb7e323e52c3c131eff9016b202bd95af95200099e9a6258a6452c5e17d6b52cab04579eac34a58ec5d3871f80e3d59d073efa267042de3ae8e70fc432e087f8c2a57312d19ec81b7add040cd55a9ba8073b7da3fb8bc548b92d8760b2854e56ba5c25752a639235257fbbb8a6eda56d813601df6f546a31", 0xf0}], 0x1, &(0x7f0000009540)=[{0xf8, 0x10e, 0x3, "88af3c323b2f33caaea949177f5cb9adb8f7bf3ba4374d8503261494b2f23ea6cf45cf4472cc95c51a1af79f4aae3c384f1bb2c22e001c03e6e833f2cab13d7ff0ccadbf4b783e963bc680363c23d745191ce129e990396de9be136550e8b9f197747ccaa15229ac4a448da2402c7a04297dade1e4e73f40fdefb232af2c7b60d7213b22d0fb98ad8435b01aabd2a7a4af39a9ee56df64331f71c6a9142c0655070820a607c96f51de71452083dafccd070873d4bedc2cf79af77a8bac9d53133b64588966b7c0d55421244c007ff53817e531f7fb74d3d2d6cb104d22a37ea51881177ca6bcbe"}, {0x90, 0x0, 0x8, "48255821cf496cf55800ffcd7c78b9e6b17aaf79de47f0c82eb958d5ab23f508799ea2fb3765333c105c0d0d8570a2cc8bc141c247e6f8df9ec19392ac5ddeee2cb4497bc5f9d770fc62d67aa0b90c2678d746c0c85680d87588a269c1bbe3803242d3ac375055d8d5f37377e4bc1e8cc7f5e14cea3ce8a8ff1ac8be48e5"}, {0x88, 0x119, 0x12, "41810cc510e3a1e86ada9b8f738b7446e1d77fe4e46288784bad96c85d1701fb2e9faf876c1c3cf3860011829ce40f6f9d8c6468f0217bb7ce89c14fdf6b71bf2e563cf6d9b161c07d41ffc018b4f6a221aa71b0276d4129513c9e0aea0bb3c1d354639fc340272710e79c17264e2dcc29cc1aeb"}], 0x210}, 0x40000) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f00000097c0), &(0x7f0000009800)=0x4) socket(0x28, 0xa, 0xc412) 4.041190774s ago: executing program 1 (id=6070): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x31, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) 3.561639308s ago: executing program 1 (id=6074): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000079104891ec251ef6d720f400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.472206552s ago: executing program 1 (id=6075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x47, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0xb, 0x5}}}}]}, 0x40}}, 0x840) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09000056"], 0x398}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080005000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a3000000000140004800800024000000073797a3000000000140000001000010000000000000000000000000a"], 0x88}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX=r9], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.082637768s ago: executing program 0 (id=6077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ffed0000000000001c00128009000100626f6e64000000000c000280080007"], 0x3c}}, 0x0) 2.824361789s ago: executing program 0 (id=6080): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000080)=0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010001b1d00000000ffdbd02500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000180012800e0001007769726567756172640000000400028008001f0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socketpair(0x2a, 0x80003, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0005003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3594}, 0x1, 0x0, 0x0, 0x810}, 0x4008000) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000037c00000400fc800c00018006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.468311389s ago: executing program 0 (id=6083): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xffff, 0x1, 0xffff]}}]}]}]}, 0x38}}, 0x0) 2.377897379s ago: executing program 4 (id=6084): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b000000080000000003c00e0000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e000100000000000000000004001980080011800400cf804c0253a4bfb077a52bc7e80278afbe181efe056946d5c78355a438ad439c2ebed473add22c35915478e4"], 0x1c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.115874503s ago: executing program 0 (id=6085): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) sendto$packet(r0, &(0x7f0000000700)="5e410c7641e54213a422b372f0072817957e22f7b7a925f0717f4ff24d717b0f4347e71977c3cf7108a1251d5e28e24ab5e306f77049e482a51429e12c15ace48be5eba359d1f1e84347eb870d891561ad18df6460aaa49031fcb39b7b1e295800dfb5c2facd150e1ded462b056138e5d04a1220977eea6deb90e5c1f8fc28710d138f620843fa048280ebc977eaa754201df1854383705c103f2668cd7fe225ed05aaa09700a3e43abbb40d76cdb339731908873ae6737d3bc974cda44c50393ca087a17b6729cde276e065e3623221659ac321277c79e3f6b16a5f5e87d4354e1da461fdbf5a13b41ab89f6a59c0c47635dafacf3a5f4fca36395feb778fba0fbdce8fde203eb7d9dd579ce22efd5c3db4b1bf320d0ecce8c5ad333cc4b08c65f16782d625fd8054285bb11a6b92d1ebc946cd8061a02efd209f9a73a3839968d9b1c547449bd40dbc06ca9b0af91aa94f5ee3406dd4b686aca0ed4d1dac02834e2076aa6535536ae4f67f3f7562ad8fe2fc07836d7888905acd15db2323d4add42a9a0361d46642e01ae321f294cffe73a18257f962e7e387bcc5de5290808e5c9c309b1b28ce79f9ca55b9e94e19d91d64b499917cca98f49e9d802c6722b65366795cf506de12bd0f6a9cf679d0d2da3ffab86da0672c1ff1c8322770a5880dfac1abb4e63427963b9136bae6f2f4597e1d573554b8d8b0f2af6452122c8ee84cc49e2ee5f479a0e7d9f0a7545b34cfee660e64696362ae6431cabe3f2723f2248d3c08d6668dc51a55d19b6404beed135b041dc86c411827b658bc5cf30ec38ab692bc626cd2f81d3acdf8d837aeba2ca6f1faf558957bc36f8605ab575cb5c69fc9838178d9391e90f476344181a646d820cf55a6d3b9d643f0ba84a6f477fb74cb53de8129b6772b3dbe6ed8b7b4cc9ae4e8e3797a6bc146f9cdd620b5ea16fa5349e1a52ecf0ec94ef3b43e986dc1fddb3fab5acb2c954574e2414ff88ee05f82ae9f99b7df20a3ffb911386dc874fdf74763f16ef87f0867c56886e4623c473db37123e817e968b2d97b91c379933d441b11f6734dfe091119dfd4f89ef9151efb1a8e748cbd687d178c8646977087aa11ab20beee6e8c2540e191fcbb7169ce37314cd943134793fce0a5c2e7134c0ab6eccd18f82578dca5d0b322624f101b5f307d87fab8920f1981d329e8bd59f0f20b2da20b5809b15cb3e8f47c4a0ac730b1cf36ec17a59d8361e80c0d75f8add74f693e866d5b54a5039a32e8281dfd1d50aacf2e6bf0ae828c706f3b447cd56c81dca1c950ebcfc158d7b2687a13de80bdf03680365c51f2e87f6f13cd576827006752cebc5ce7faf6378cb9e46b621193153ec2abd4bad690d132f59564ccfb3730f485f4fcc7228ebe0d9763775fccada5d289dba0fafb9467fa85e49440a09a55aaa5ddc7bb435909ee60aa2e586cea8af03da3b8f25f32b8f25d5392a79bc5b283122a3e94e43a43daac10cc7cb1f0bedece590b829f11b46b3bb62ad76e9f5d6ccb0b456e04a268b3bca8bf01f0ea136353895b33c398c40ca080a7466f17082d7aa91ce5224610bc75ac5b88d6e685cd8ae548b106b8e8b8e2e3586e3193147d9a1de263ddaa85da319bb201833edc2f58dc3ff6b9a9c18845432d3ac68a92c2f7e5c4ad0b769b33f9f1d63837d853d5be031de3a8f80691de0f6b0dd3d8536cfaf0bc62fc4a443536b397dae9a0d9a1715eb1d31b3c77ddd391043bb8b866cf14069c8f3f7d85482d6a61b7ab7c60e66bb132ba36fb4573d93147604246271193d0d56dd11b4a51108038dd2246c824b96e2bbb7081f277af5d866d04c6b6b78683179a34ae2b46d2bcd54147347d92a3b629f7a61ca70c4eaa0814e0a35fb65dd7c0d0ea26f617a883f4dd499188755534be1fea9566e246faedda12e75d60615c9a741298906305b69ea260fe8b95ebe2263472a98ca72cfd576d33f6a5743b160a899297b4a3294cb190a07d6d5791e2b1df44826d6dee7da568ed5157d455d1b9e4c76ccb24d8565f8c6b44128c7b8af4de2ede9f83f153e2c844647b5f2dc8b47a9790ed83dbe8d79bbfa30e3f839f8e3fc4e45751ab2e606f2952de600eccb356d6b66f5f06f08e228c6287953b05b41e1cb0ecc08caa3fcd39871d29365780f4130dadaeedec0fc71e337da847f021c856518b5d1f67e860dd8a9996e1165526b2a70eab5c1ac097001a0578635b3eee2b05e021dc3688d078772802879f7e4c8565293f6fc609d5c18675e892fdd1bc6551207cfc3cc494779e3c2d521cef0178f484c68d745359c59dd89b03194ffaa7cb8aeeb6975d396813819ebf29770b6fb58339b8f979085ef2d473cd4699aa9b4603ef5a5324202ffde93863d650b681ac362916ad7e965200b4ab5eb1047d7d8c796ca47f9ccea474728c35977017243e9a15304ddbb9afca3205447579ba327f49d0663457082fd321a85d65036bea4abf88ed5d2fe4ad0682363d4dc36c00973fb4a3332b55ad1e257f7affb2c094b7e4e6b262e377a68d5cdc2d543b28ec1a9e8cbe58fae39f719f779804531d139a87c111b642d101b72b0af592e971632985e13c6156784f67e9197effea7d6bb04d0e8b3eee334dd85e94b4b95ab448cbd80370b6274c1be89708b8686ba3d8afa330fc341ae6db40c3f69c7ed85f836b6c332413e257207b555e1e1bb484a8d3115caa8cd8a46ee5a52555e9211e2817c1d2e3c10d5aabbda9314a8e1784d0915dab734e316db2b7733f6c22f53b4ce88f7c230388907eb0611608f92616150eef7e234321fdcd300a5e6f5ccce2c0b1e6c61287bb0faf543e6e1c4fff0b52e623721d18c4f7869c2bb28a0e4547ee57b8ad0693c61c3605dbd707f7328ad9ccbb170b02c0979abfaba00a6edee09e333ad53a952b28dc21ed89a4e2ced2b9da9e7a7495f4b987aeb12316264417026aec32f072256b24df183ad7a9e9bf28d2898bd2cb83e2dbd7fc251f331e072e5871d9b9cb0b28bb6b0295eb34ae6ec1f57ac5ef807d45809991dff8da30c1f4640cc298e595f87074d7a50cf2a58a079116c84ee4abe37125f3b8ba5d0ae08989f5ee93335c511c97e82dc5d335a78351563098ed96cee020a63c2f1c4b7cd6f10d59e737e3a80ceee5c65b5c236e2fd0af1df1775d4d2e574c653057f4cee19ffca616807c8a104ecfca87e6673c9744ea9ec08c90190284c80cb5b6f99a5255d67dc64138f4f570d48f89dbc4c7f42481ce5b842a181deab03a880c74b01652385f96a8d1640b0d4ce1387a86031f39486b23154edbf20e2732ff1d9c005103aa05aecc9e238da8560e891a922e62c1f3d9901f56d372a71656879a16e95767872dbffe21300001577624d1f3b2be123f233c9c43b2b5174830e9265d9a896082391ee9631cb71f102ae34bf7445c7c261e78dab796af9c7fcd38f56308b48d735329a45dfb4a5b3e72b8a4db7690d798812c8267aa2a7a2c9ce620877d725c55c7e6bf39b2b778295fa49ac0232b79210a8e021dbee9cfe4814434bba6d99b03d330d3ce7dc983b56b81e5db9da1f3fca732ef25eb6fb67324b3a9058f545816ce5fcde63bd7abb6139acc3aca2bb00049cbf7aeeaac69af40b17f1710af84a1a5d2e315a8c97f01b834ae228abe06d15ca3b8a59e95166bbb3d055c46b406005bf3de25fe30317c4381fe29efe77475c71d72c424bfb95ae11dce6280861a6ff96c563c8dd84d7e1e4dba25efb5127f92307f95bcf0aba261e503b292e6f9e879b968c51fd3a2a1ec12b8f9177427dbf7cf13a3eacb684327502763f9ae48ae16909e46dc76c8d6577621b58cda3e19451fad8639d246805da6d6ac09ce01b1514d38aa22152c0f17d1948e4873ed2244476405ba4b48572239d55bb488383bbaf023fa8e33c075f173e9bfc338f06451b8dbb640a2bd3c6fc88bc5652697e28fda8f40428358e339f7e85088e1aa89afbbf69cc75c7de8e52fe54810bb390ae880aea0bad9912f0b9dd5ed46e15ea1921c2f3143ff15e53210287c042abbace7dd1f42b6ed65e0f3a2a542f38a9fa4c0e783f82782f83d31fa7b987b44bef23c085667b9949448e3bde29556a408e8cb7d966f5a778988072ac26a3b42ee72153a01e4a1c93c8cdbdb6b06d2cc2f640b8f0743b72efbd4a00aafb84a1a1f2c89c36d3731932177cd41e256c5bba2223e36e771b8838c1e5ef28c0b0cf4616bd84340dd873a2abda52f99896a1b0e25eeee90eb603a5d5df93e2e2f17a9f527402eab81bcd95b723a6d3119b731ae56b495a7baaa2bb38eade7d7f27351ab448df615d7019be12ff414a301563cbe180f1142396abcaff4ca597f66c3e53672706ff5a8533f85dc8c7fef097389dd4398ea9e6d8a8abd12743f587cc7e2e432d266eaacfac7b5806717ecc51ef82663ded6020bb26d6189939ca734964ca16d048ecdbfcfd3380bd7fe3446c42b4407bd34b740132343d5fa63d4f345db46adbbaf933f38da7942bcb64d4c2942134b15cee0a07ab735f7cae038b2bad8cd8a58eab40573e9ab3f569f339ea0bf90e64afc8791f7eaed03959ba463dddf2a9c8e9573744a0601ab6b19177cc11f73f49c57d9fcce33dd8ba3a8e12c6f640387de56b3b0be02db4a6fb13746a43e84ecf654d2964c251d83c362d12bc800dfc5e652db843072010a04ce9c63ccb26af1633b7d4fa9481c3fd5cbc1acd057ee106647bc644f97ccc7c65fe7c8d9b0077bb9d474aff49c96a71662dba491abc59734bce42da04bffae855efe1cb4b84736eaad1d2b4eb7032549f2dd51ebb6dab63e6d16448e0a519a817cec301641d55028fa2a941b4dbb1d3bbd464502fd362d886cd57119a4524e72cf501bd4a37cd9c9eae0d63f4ebfab52e4335276e5eefb283510978edf97289a6f222b3d5a7d8e71dbe3db886c26dd39d238afe25eb2cdefa06441258b33d1c17731fb08e5c8f6192504cdecd38e09d62e8453beb092892f9e3c7bc60ac0b8670fafb4f99fc90f16e59a6bdfbad77b541f6a8260c36b0eb0638b03296e9ceac5a6b997e66a221efbcec39407bd9060fd91daa9582e1e4335a419048ad406c16e6f542bc7de7cdcfef7331c9facf4c506f58fff71cfd748aa65553189500fd115477c93d54002792cdc768e5853d9ac955c50726d60fcd42d00841ec72fe7f83aecf4338eaacee9c880a780013eff1bf300e2af154db346bf1da37ed3a029489d2ac6bacfdf41ce1726d95ffcd7b7c78dcb4c18feb9d54e3fb496db9df4cf26c33ea9514a9d48ccd12b41c304ef692bc541a4b878dec7811c3f9ab2aec077fedb6d18fcdb27656f01a6e1776468602e34966b76d64e9283a5ac643da865164bbf237aad95d2fba7570f3eb632fb028a989fc16a8cc62921facbeb0e548bf92d1b88bd0a42f1aab50b37f482ee17713286690a96771106b1b36e420e9b0968fc79140d9bc8cb22ba9b0fa1e738675fa96a509cc490cb665b33b1a7f11f7af763763e3b333ef5bbcd9c7cfba157a6d3d334e6724493b505e9cb0860a601595edd7b32c01d24d8526010aa4f2e67e36ebcc3fb98c48a7cbb353184e5f617cd05c57bdbc8bc601cc86d1a34cc981b6a473faa79cf58659477768bfc547aaafb863d258ce801d145f0c0fc5ddfe592a11a1819a09095072453863ae86fcfce558aeaa7b172baf94e2fef7c47d4b5ff69deb2bc22b21afa1154eedcd617fb1cb7b7d3fe85b1401a53275c6d8583a48c6811682ff275f19384cd23dd68a7cc95ca249cf9bbcbfec409549b", 0x1000, 0x8000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r6 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r8, &(0x7f0000000240), 0x0}, 0x20) sendfile(r6, r6, 0x0, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x4c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.013761418s ago: executing program 4 (id=6086): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x300000, 0xa024, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffd, 0x0, 0x0, @value=r0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x800, 0xac, &(0x7f00000001c0)=""/172, 0x41100, 0x33, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x14d8d, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r1, r1, r1], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 1.886353503s ago: executing program 0 (id=6087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500", @ANYRESDEC=r0], 0x108}}, 0x24040800) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x81, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2}) 1.76051389s ago: executing program 4 (id=6089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="fff00000000000001c00128009000100626f6e64000000000c000280080007"], 0x3c}}, 0x0) 1.48043712s ago: executing program 3 (id=6090): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x2b, 0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e886474375e2bf313d819202e8aa6e6d6d0127a334e72ac8b1c487c10235811ee627fb2dcebd62e07aa0ed08c6326ac4df5c2a525ad39d72f6da7eb61649f5ccce4ed6ee3d78c71e76277923f90976b4797995cf35191c95c497a34b91f8542f744c2f1b3ee1350672e201a4f9a13d61e6e2fd23987d70466641d78b3aba7bb33d70e9ccd3f07ad6d5f24ec7b36b738863cf8a94f1461b03ce29531b3e7b517fdfddf5193885cce4197037aee0dc65ab919e4f", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r3], 0x48) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r6, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 1.386526306s ago: executing program 4 (id=6091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x4, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) 1.334620685s ago: executing program 3 (id=6092): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) 1.053979332s ago: executing program 3 (id=6093): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x43}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 1.053696498s ago: executing program 4 (id=6094): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x60) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x4, 0x800, 0x200, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "c899cbee9dae2b1c5fb3564113310568d7eb675e27aefd77d33c3fd8763ab229714c917d5c5eee9708b58b800547735e7ca7fea3bfc5e1f503c6a3b33f25a579"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80) read(r0, &(0x7f0000000180)=""/253, 0xfd) 866.61828ms ago: executing program 3 (id=6095): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', @remote}) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000100)={0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281", 0x58}], 0x1, 0x0, 0x0, 0x4004844}], 0x1, 0x48840) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) accept(r0, 0x0, 0x0) 861.784373ms ago: executing program 0 (id=6096): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @default}, 0x1c) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000140)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="4790a58eb7e83d041e60da11ffd9c5629ff21ef72e59157d2d45a472697863e0afc84d09ee46e9a9019d2e3e56691e746cf300c34dac7dffc9e8863eafced67d49df8a3af1e5d078bee6b8bccb223b0b0040c0e6e11e40c1794c621495b9e4a6d7dab5cbbd38a1d09b0e15b6973a7d69463640661fafc53d041d404d9a4ad110fa0f492ba203", 0x86}, {&(0x7f0000000280)="413005ecf61cc1b1e3867838840d5f3cb842a5415a243efe6e7e249395f7e00e17ce5703dc593a2f8d97ed34a00ecc5cc7607673601bcf36da56ebeb77d4dc1ae7a1fa4264ce75b67bba66cb06a428610fd8bb6ebfb9368db302ac9f39a0b8fdee8a54328e29f79b9afe14cd1f0abdb9f2bc7f1d09", 0x75}, {&(0x7f0000000300)="880e6fbec71f96ca8c8809824f5e83837d1757300ef40746b228553d99756895ed55d09f3c3f4ad9623d208090bb8b0ef05f8b066762b701cfea6a2cf7f2803051378026023a5d57aaa002a0263ea36eef503ceabee830ae16153876bed6997c9cfc02e9e8d874fba97478be7b452668690266e029bbc879cb4c9c6a5361862589156290fffa771da01ef4bc5adf0b104ea5deccc632e9b2083fae4bca84eccf61c7ba6982161d4b187eab9fca2a4cadf05c00808bb75d91e2b2cd404d87398d9c0fad5180197268ea00502a79cbe517ab492271e054d6f8e11f7c9c7d0eaa6871", 0xe1}, {&(0x7f0000000400)="888a4d557ce8a9490dd8053d373f171a4fc40b2eeb9c6946590b8e0f9b4eae04bffafb188c60ac7430a4e8c6f6d5ba5e06438af1359fa5a3a2ded566abb2314d94b8a64cf7a2aea61c66059f506ad3233170ea3c0233f605087748c04e17ef", 0x5f}, {&(0x7f0000000480)="7ea19d1e35d713aa7fe08eef5acaf4ffc54b226ab8d3a6ac8634137d072427c30691892814113b20758c9b932a5bff6505b9a01cdef0225bf5efb673f1acc9d3bd65a80aa20588c7ce79254c630f0effc460a4decdc292d828ea9a8996c39d3ff0d06ac50bd086d684", 0x69}, {&(0x7f0000000500)="a9d8a9448f69ad2c13648371022762bb1a39225c526ca7984907beb7cd6fcd022f5c16be1e8fa8379b9bfb89c6f561d6eb26d8a9ca1829e60c73b93fc08defea099a6ce7c7069821", 0x48}, {&(0x7f0000000580)="4bd673bc5bd3ac122fd222fd42a0459f933a1ba689824e138c57c37902d40c90ffdac21de1c13233e25d72922fe1097117955121127e37f1bc1ab624b2106d6052f3b9a1fc0a0cc3ea6ed9c75665852e0012e3bf63e50e877622715d1d3b3f32658b07eefdae21e98ac951d42b", 0x6d}, {&(0x7f0000000600)="2930044c6aad15192f09b8b9de66ad87a4b662e26b33679a4a3f67f7c19d6eacae69e64e4179580e81d58c4f13379af708", 0x31}], 0x8, &(0x7f00000006c0)=[{0x50, 0x132, 0x2, "d77355abcdee07e5a33ccaa720522129923191b11e3f39de25eb8eaaaad96c2ac89b44f5ead51eb843029c6844dc578530932f578edbbead9df3"}, {0x68, 0x3a, 0x3, "c15bd358d731d6f7a50f2254a9538cb18a32e08443c0f32ebaf9c6d0bddc5e646fc1b4d4ca83eecdd820d62a53db026785f441c4c92c4dd87517850c4053a1870adb3e910ecc5f181b800722377106c23e12969ecdfb1e45"}], 0xb8}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0), 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000900)={r0, &(0x7f0000000800)='!\\#:#}}h\x14/^&\x00', 0x200, &(0x7f0000000840)={@_ha_fsid={[0xfffffffb]}, {0xf, 0xfff9, 0x9, 0x4}}, 0x1, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24008051) connect$rose(r0, &(0x7f0000000a80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000ac0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000b00)={"4a522204259e82859fd9a870f12cd2de", r6, 0x0, {0x5, 0x7fffffff}, {0xffffffff, 0x221}, 0x4, [0x3, 0x8000000000000000, 0x9, 0x2, 0x40, 0x1, 0x7, 0x1f9a0000000000, 0x9, 0x5, 0x3, 0x0, 0xfffffffffffff800, 0xb, 0x8, 0x80]}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000c00)={0x0, 0x63e5df1a, [0x7f, 0x2, 0x98fb, 0x6, 0x5, 0xfffffffffffffff7]}) getpeername$packet(r2, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80204000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)=@newqdisc={0xc0, 0x24, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2, 0xd}, {0x5, 0xd}, {0xfff2, 0xc}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffc0}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcf01}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x49d32097ff1f4a55}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e40)={'team0\x00'}) connect$netrom(r2, &(0x7f0000000e80)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000010c0)={{r5, &(0x7f0000000f00)='team0\x00', 0x8401, &(0x7f0000000f40)={@_ha_fsid={[0x1, 0x800]}, {0xc, 0x40, 0x4, 0xfdf9}}, 0x10000, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4}, {[0x3, 0xff, 0x400, 0x9]}, 0xfffff3de, 0xb7, &(0x7f0000001000)=""/183}) ioctl$SIOCRSSCAUSE(r8, 0x89e1, &(0x7f0000001140)=0x3) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x0) writev(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000001180)="edc50e46aa23073a9dda6c5112ba315d3e098e5a286674d7361b108beecfea995b0a35526425a87372e4f851a02a6b4b91e075dd3390c51c78c0cb87ad1619596abaea15443a0ba849bd09c492c1b9ddc46577719fd69c1e6b32ded8a05ee4346d7bc8b32eae04e71d3bae5e43feacfbae363a4bb163bc68507c58f6d4940dd3e81f93fa80028ad15e9a3d2e057187e7ab5ecb11e385c2ed4b7656085ff59febe62dd02b7fe8e5c38514eed8fc85bf16343a4008b2a08cb1d031dc38547d8a19", 0xc0}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="d662ad992b6bd278a5e5908403a4218b64f5c6a581cd5f149178a49e7c65f3a68c8b6b8762464f74fac2faccdb18ad200e37e32e664ff3353f06", 0x3a}, {&(0x7f0000002280)="3ec8a3d69b45ea2b4abd314a2c53409cd431494d4f897e9c5ba1c5c7f8ec415ae42414303f1d85f182f9ea329ebca35b3577515d633ba8ca9fb5bf8cd3d289b60c14488165e0f28e5b428b6c6d27bafa9f", 0x51}], 0x4) recvmmsg(r5, &(0x7f0000008340)=[{{&(0x7f0000002340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002580)=[{&(0x7f00000023c0)=""/124, 0x7c}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002480)=""/58, 0x3a}, {&(0x7f00000024c0)=""/136, 0x88}], 0x4, &(0x7f00000025c0)=""/3, 0x3}}, {{&(0x7f0000002600)=@isdn, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/167, 0xa7}, {&(0x7f0000002840)=""/42, 0x2a}], 0x3, &(0x7f00000028c0)=""/227, 0xe3}, 0x6}, {{&(0x7f00000029c0)=@qipcrtr, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)=""/104, 0x68}, {&(0x7f0000002ac0)=""/78, 0x4e}], 0x2, &(0x7f0000002b80)=""/29, 0x1d}, 0x1}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/14, 0xe}, {&(0x7f0000002c80)=""/97, 0x61}], 0x2, &(0x7f0000002d40)=""/68, 0x44}, 0x2}, {{&(0x7f0000002dc0), 0x80, &(0x7f0000003f40)=[{&(0x7f0000002e40)=""/22, 0x16}, {&(0x7f0000002e80)=""/40, 0x28}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/101, 0x65}], 0x4, &(0x7f0000003f80)=""/34, 0x22}, 0x32a}, {{&(0x7f0000003fc0)=@hci, 0x80, &(0x7f0000004440)=[{&(0x7f0000004040)=""/151, 0x97}, {&(0x7f0000004100)=""/194, 0xc2}, {&(0x7f0000004200)=""/7, 0x7}, {&(0x7f0000004240)=""/70, 0x46}, {&(0x7f00000042c0)=""/197, 0xc5}, {&(0x7f00000043c0)=""/108, 0x6c}], 0x6, &(0x7f00000044c0)=""/204, 0xcc}, 0x4}, {{&(0x7f00000045c0)=@l2, 0x80, &(0x7f0000005940)=[{&(0x7f0000004640)=""/187, 0xbb}, {&(0x7f0000004700)=""/243, 0xf3}, {&(0x7f0000004800)=""/181, 0xb5}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/86, 0x56}], 0x5, &(0x7f00000059c0)=""/141, 0x8d}, 0x1}, {{&(0x7f0000005a80)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000005b00)=""/49, 0x31}, {&(0x7f0000005b40)=""/194, 0xc2}, {&(0x7f0000005c40)=""/30, 0x1e}, {&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/213, 0xd5}, {&(0x7f0000006d80)=""/60, 0x3c}, {&(0x7f0000006dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000007e40)=""/19, 0x13}, 0x10000000}, {{&(0x7f0000007e80)=@alg, 0x80, &(0x7f0000008240)=[{&(0x7f0000007f00)=""/130, 0x82}, {&(0x7f0000007fc0)=""/180, 0xb4}, {&(0x7f0000008080)=""/87, 0x57}, {&(0x7f0000008100)=""/112, 0x70}, {&(0x7f0000008180)=""/141, 0x8d}], 0x5, &(0x7f00000082c0)=""/66, 0x42}, 0x8}], 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000008800)={&(0x7f0000008580)={0x10, 0x0, 0x0, 0x1f211ae2416a6839}, 0xc, &(0x7f00000087c0)={&(0x7f00000085c0)={0x1c8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000001, 0x23}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1a0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x174, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x170, 0x84, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x687a}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="661e4ec7cfc43e3f9b0eca92"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bd05f1a4dc58"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1a636ed35254"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xc36a}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xe6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x66}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x50d}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x9efa}, @NL80211_BAND_LC={0x8, 0x5, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000011) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000008840)=""/4096, &(0x7f0000009840)=0x1000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000098c0), 0x4) 689.337848ms ago: executing program 1 (id=6097): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000000c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @typedef={0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3f, 0xfffffffffffffe85}, 0x28) 461.686658ms ago: executing program 3 (id=6098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0xe) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x220008e8}, 0x10) 447.392314ms ago: executing program 1 (id=6099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000015000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 205.314272ms ago: executing program 1 (id=6100): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x1000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x3, 0x80005, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 35.62898ms ago: executing program 3 (id=6101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="597969549a638672f7d77a4ad000000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2512000000080006000000000018000180140002006272696467655f736c6176655f310000"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 0s ago: executing program 4 (id=6102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): 8][T22868] ? clear_bhb_loop+0x40/0x90 [ 646.523006][T22868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.523030][T22868] RIP: 0033:0x7f44e699c799 [ 646.523053][T22868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.523073][T22868] RSP: 002b:00007f44e7823028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.523107][T22868] RAX: ffffffffffffffda RBX: 00007f44e6c15fa0 RCX: 00007f44e699c799 [ 646.523125][T22868] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 646.523140][T22868] RBP: 00007f44e6a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 646.523155][T22868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.523169][T22868] R13: 00007f44e6c16038 R14: 00007f44e6c15fa0 R15: 00007ffc20933db8 [ 646.523207][T22868] [ 646.997861][T22863] syz_tun: left allmulticast mode [ 647.043170][T22880] netlink: 'syz.0.4733': attribute type 1 has an invalid length. [ 647.051317][T22880] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4733'. [ 647.147307][T22884] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4735'. [ 647.160096][T22884] bridge_slave_1: default FDB implementation only supports local addresses [ 647.263333][T22893] FAULT_INJECTION: forcing a failure. [ 647.263333][T22893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.306030][T22895] netlink: 'syz.0.4738': attribute type 1 has an invalid length. [ 647.314094][T22893] CPU: 0 UID: 0 PID: 22893 Comm: syz.2.4737 Not tainted syzkaller #0 PREEMPT(full) [ 647.314125][T22893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.314138][T22893] Call Trace: [ 647.314146][T22893] [ 647.314156][T22893] dump_stack_lvl+0xe8/0x150 [ 647.314196][T22893] should_fail_ex+0x412/0x560 [ 647.314227][T22893] _copy_from_user+0x2d/0xb0 [ 647.314261][T22893] __sys_bpf+0x229/0x950 [ 647.314347][T22893] ? __pfx___sys_bpf+0x10/0x10 [ 647.314397][T22893] ? ksys_write+0x242/0x270 [ 647.314423][T22893] ? __pfx_ksys_write+0x10/0x10 [ 647.314454][T22893] __x64_sys_bpf+0x7c/0x90 [ 647.314484][T22893] do_syscall_64+0x14d/0xf80 [ 647.314505][T22893] ? trace_irq_disable+0x3b/0x150 [ 647.314537][T22893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.314560][T22893] ? clear_bhb_loop+0x40/0x90 [ 647.314588][T22893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.314611][T22893] RIP: 0033:0x7f3d6d79c799 [ 647.314632][T22893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.314652][T22893] RSP: 002b:00007f3d6e594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.314675][T22893] RAX: ffffffffffffffda RBX: 00007f3d6da15fa0 RCX: 00007f3d6d79c799 [ 647.314689][T22893] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 647.314703][T22893] RBP: 00007f3d6e594090 R08: 0000000000000000 R09: 0000000000000000 [ 647.314716][T22893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.314728][T22893] R13: 00007f3d6da16038 R14: 00007f3d6da15fa0 R15: 00007ffc94ae22e8 [ 647.314761][T22893] [ 647.744875][T22915] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 647.757094][T22915] CPU: 0 UID: 0 PID: 22915 Comm: syz.2.4746 Not tainted syzkaller #0 PREEMPT(full) [ 647.757126][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.757142][T22915] Call Trace: [ 647.757151][T22915] [ 647.757163][T22915] dump_stack_lvl+0xe8/0x150 [ 647.757203][T22915] sysfs_warn_dup+0x8e/0xa0 [ 647.757236][T22915] sysfs_do_create_link_sd+0xc0/0x110 [ 647.757271][T22915] device_add_class_symlinks+0x1cf/0x240 [ 647.757313][T22915] device_add+0x475/0xb70 [ 647.757354][T22915] wiphy_register+0x1d73/0x2d50 [ 647.757404][T22915] ? __pfx_wiphy_register+0x10/0x10 [ 647.757435][T22915] ? __pfx_netdev_run_todo+0x10/0x10 [ 647.757459][T22915] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 647.757494][T22915] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 647.757538][T22915] ieee80211_register_hw+0x3571/0x4220 [ 647.757580][T22915] ? ieee80211_register_hw+0x1461/0x4220 [ 647.757617][T22915] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 647.757659][T22915] ? __hrtimer_setup+0x181/0x200 [ 647.757690][T22915] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 647.757721][T22915] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 647.757788][T22915] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 647.757821][T22915] ? kstrndup+0xbf/0x160 [ 647.757861][T22915] hwsim_new_radio_nl+0xf35/0x1bd0 [ 647.757925][T22915] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 647.757973][T22915] ? rcu_is_watching+0x15/0xb0 [ 647.758015][T22915] ? trace_kmalloc+0x2a/0x110 [ 647.758050][T22915] ? __nla_parse+0x40/0x60 [ 647.758085][T22915] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 647.758133][T22915] genl_family_rcv_msg_doit+0x22a/0x330 [ 647.758177][T22915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 647.758229][T22915] ? bpf_lsm_capable+0x9/0x20 [ 647.758258][T22915] ? security_capable+0x7e/0x2c0 [ 647.758292][T22915] genl_rcv_msg+0x61c/0x7a0 [ 647.758334][T22915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.758368][T22915] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 647.758406][T22915] ? __lock_acquire+0x6b5/0x2cf0 [ 647.758450][T22915] netlink_rcv_skb+0x232/0x4b0 [ 647.758480][T22915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.758517][T22915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.758568][T22915] ? down_read+0x272/0x2e0 [ 647.758591][T22915] ? genl_rcv+0xd/0x40 [ 647.758626][T22915] genl_rcv+0x28/0x40 [ 647.758658][T22915] netlink_unicast+0x80f/0x9b0 [ 647.758694][T22915] ? __pfx_netlink_unicast+0x10/0x10 [ 647.758718][T22915] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 647.758745][T22915] ? netlink_sendmsg+0x650/0xb40 [ 647.758772][T22915] ? skb_put+0x11b/0x210 [ 647.758808][T22915] netlink_sendmsg+0x813/0xb40 [ 647.758849][T22915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.758882][T22915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 647.758912][T22915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.758939][T22915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.758966][T22915] ____sys_sendmsg+0xa68/0xad0 [ 647.758998][T22915] ? futex_unqueue+0x211/0x240 [ 647.759043][T22915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.759089][T22915] ? import_iovec+0x73/0xa0 [ 647.759126][T22915] ___sys_sendmsg+0x2a5/0x360 [ 647.759168][T22915] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.759211][T22915] ? futex_wait+0x29a/0x380 [ 647.759277][T22915] ? __fget_files+0x2a/0x420 [ 647.759309][T22915] ? __fget_files+0x3a0/0x420 [ 647.759354][T22915] __x64_sys_sendmsg+0x1bd/0x2a0 [ 647.759392][T22915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.759438][T22915] ? rcu_is_watching+0x15/0xb0 [ 647.759485][T22915] do_syscall_64+0x14d/0xf80 [ 647.759506][T22915] ? trace_irq_disable+0x3b/0x150 [ 647.759539][T22915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.759564][T22915] ? clear_bhb_loop+0x40/0x90 [ 647.759592][T22915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.759615][T22915] RIP: 0033:0x7f3d6d79c799 [ 647.759638][T22915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.759659][T22915] RSP: 002b:00007f3d6e594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.759685][T22915] RAX: ffffffffffffffda RBX: 00007f3d6da15fa0 RCX: 00007f3d6d79c799 [ 647.759703][T22915] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 647.759718][T22915] RBP: 00007f3d6d832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 647.759733][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.759747][T22915] R13: 00007f3d6da16038 R14: 00007f3d6da15fa0 R15: 00007ffc94ae22e8 [ 647.759787][T22915] [ 648.213357][T11107] net_ratelimit: 80 callbacks suppressed [ 648.213380][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.227132][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.351745][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.374920][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.548627][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 648.598939][T22937] FAULT_INJECTION: forcing a failure. [ 648.598939][T22937] name failslab, interval 1, probability 0, space 0, times 0 [ 648.600390][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.613216][T22937] CPU: 0 UID: 0 PID: 22937 Comm: syz.2.4750 Not tainted syzkaller #0 PREEMPT(full) [ 648.613314][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.613368][T22937] Call Trace: [ 648.613394][T22937] [ 648.613439][T22937] dump_stack_lvl+0xe8/0x150 [ 648.613568][T22937] should_fail_ex+0x412/0x560 [ 648.613690][T22937] should_failslab+0xa8/0x100 [ 648.613789][T22937] __kmalloc_noprof+0xe8/0x760 [ 648.613858][T22937] ? bpf_test_init+0x9f/0x150 [ 648.613921][T22937] ? kstrtouint+0x6e/0xe0 [ 648.614004][T22937] bpf_test_init+0x9f/0x150 [ 648.614095][T22937] bpf_prog_test_run_xdp+0x529/0x1160 [ 648.614225][T22937] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 648.614326][T22937] ? __fget_files+0x2a/0x420 [ 648.614448][T22937] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 648.614530][T22937] bpf_prog_test_run+0x2c7/0x340 [ 648.614609][T22937] __sys_bpf+0x643/0x950 [ 648.614712][T22937] ? __pfx___sys_bpf+0x10/0x10 [ 648.614866][T22937] ? ksys_write+0x242/0x270 [ 648.614930][T22937] ? __pfx_ksys_write+0x10/0x10 [ 648.615054][T22937] __x64_sys_bpf+0x7c/0x90 [ 648.615163][T22937] do_syscall_64+0x14d/0xf80 [ 648.615233][T22937] ? trace_irq_disable+0x3b/0x150 [ 648.615329][T22937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.615398][T22937] ? clear_bhb_loop+0x40/0x90 [ 648.615487][T22937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.615557][T22937] RIP: 0033:0x7f3d6d79c799 [ 648.615626][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.615684][T22937] RSP: 002b:00007f3d6e594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.615754][T22937] RAX: ffffffffffffffda RBX: 00007f3d6da15fa0 RCX: 00007f3d6d79c799 [ 648.615800][T22937] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 648.615844][T22937] RBP: 00007f3d6e594090 R08: 0000000000000000 R09: 0000000000000000 [ 648.615888][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.615930][T22937] R13: 00007f3d6da16038 R14: 00007f3d6da15fa0 R15: 00007ffc94ae22e8 [ 648.616034][T22937] [ 648.734373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 648.839603][ C0] lec:lec_tx_timeout: lec0 [ 648.910526][T22941] __nla_validate_parse: 1 callbacks suppressed [ 648.910549][T22941] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4751'. [ 648.932097][T22943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4752'. [ 649.014487][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.026084][T22948] bond0: entered promiscuous mode [ 649.047735][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.075624][T22948] batadv0: entered promiscuous mode [ 649.077526][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.107764][T22948] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 649.117384][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.127832][T22948] hsr1: entered promiscuous mode [ 649.132868][T22948] hsr1: entered allmulticast mode [ 649.139363][T22948] bond0: entered allmulticast mode [ 649.144955][T22948] batadv0: entered allmulticast mode [ 649.150888][T22948] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 649.160785][T22948] bond0: left promiscuous mode [ 649.181249][T22948] batadv0: left promiscuous mode [ 649.281218][T22963] netlink: 'syz.4.4761': attribute type 9 has an invalid length. [ 649.351069][T22968] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4762'. [ 649.369341][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'. [ 649.389914][T22968] chnl_net:caif_netlink_parms(): no params data found [ 649.459750][T22969] syzkaller0: entered promiscuous mode [ 649.469225][T22969] syzkaller0: entered allmulticast mode [ 649.748493][T22985] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4767'. [ 649.753294][T22987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4768'. [ 649.781499][T22985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4767'. [ 649.791278][T22985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4767'. [ 649.802162][T22989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4767'. [ 649.908490][T22993] FAULT_INJECTION: forcing a failure. [ 649.908490][T22993] name failslab, interval 1, probability 0, space 0, times 0 [ 649.926075][T22993] CPU: 1 UID: 0 PID: 22993 Comm: syz.2.4770 Not tainted syzkaller #0 PREEMPT(full) [ 649.926106][T22993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.926121][T22993] Call Trace: [ 649.926130][T22993] [ 649.926141][T22993] dump_stack_lvl+0xe8/0x150 [ 649.926177][T22993] should_fail_ex+0x412/0x560 [ 649.926210][T22993] should_failslab+0xa8/0x100 [ 649.926239][T22993] __kvmalloc_node_noprof+0x178/0x8a0 [ 649.926266][T22993] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 649.926381][T22993] alloc_netdev_mqs+0x8a6/0x11b0 [ 649.926413][T22993] rtnl_create_link+0x31f/0xd70 [ 649.926480][T22993] rtnl_newlink_create+0x277/0xb70 [ 649.926535][T22993] ? __pfx___nla_validate_parse+0x10/0x10 [ 649.926576][T22993] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 649.926612][T22993] ? __pfx___mutex_lock+0x10/0x10 [ 649.926646][T22993] ? full_name_hash+0x92/0xe0 [ 649.926682][T22993] rtnl_newlink+0x1666/0x1be0 [ 649.926728][T22993] ? __pfx_rtnl_newlink+0x10/0x10 [ 649.926754][T22993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.926827][T22993] ? kasan_quarantine_put+0xbb/0x1f0 [ 649.926850][T22993] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.926888][T22993] ? kmem_cache_free+0x187/0x630 [ 649.926910][T22993] ? nlmon_xmit+0xb0/0x100 [ 649.927003][T22993] ? __lock_acquire+0x6b5/0x2cf0 [ 649.927041][T22993] ? __local_bh_enable_ip+0xd0/0x130 [ 649.927072][T22993] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.927105][T22993] ? __dev_queue_xmit+0x277/0x3890 [ 649.927150][T22993] ? __local_bh_enable_ip+0xd0/0x130 [ 649.927175][T22993] ? __dev_queue_xmit+0x277/0x3890 [ 649.927223][T22993] ? __pfx_rtnl_newlink+0x10/0x10 [ 649.927251][T22993] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 649.927283][T22993] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 649.927311][T22993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.927337][T22993] ? ref_tracker_free+0x693/0x840 [ 649.927393][T22993] ? __copy_skb_header+0xa3/0x4a0 [ 649.927428][T22993] ? __pfx_ref_tracker_free+0x10/0x10 [ 649.927468][T22993] netlink_rcv_skb+0x232/0x4b0 [ 649.927497][T22993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.927528][T22993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.927567][T22993] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.927602][T22993] netlink_unicast+0x80f/0x9b0 [ 649.927636][T22993] ? __pfx_netlink_unicast+0x10/0x10 [ 649.927662][T22993] ? netlink_sendmsg+0x650/0xb40 [ 649.927688][T22993] ? skb_put+0x11b/0x210 [ 649.927722][T22993] netlink_sendmsg+0x813/0xb40 [ 649.927760][T22993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.927792][T22993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.927828][T22993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.927853][T22993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.927879][T22993] ____sys_sendmsg+0xa68/0xad0 [ 649.927921][T22993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.927963][T22993] ? import_iovec+0x73/0xa0 [ 649.927998][T22993] ___sys_sendmsg+0x2a5/0x360 [ 649.928037][T22993] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.928109][T22993] ? __fget_files+0x2a/0x420 [ 649.928139][T22993] ? __fget_files+0x3a0/0x420 [ 649.928180][T22993] __x64_sys_sendmsg+0x1bd/0x2a0 [ 649.928217][T22993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.928260][T22993] ? __pfx_ksys_write+0x10/0x10 [ 649.928296][T22993] do_syscall_64+0x14d/0xf80 [ 649.928317][T22993] ? trace_irq_disable+0x3b/0x150 [ 649.928348][T22993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.928370][T22993] ? clear_bhb_loop+0x40/0x90 [ 649.928395][T22993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.928417][T22993] RIP: 0033:0x7f3d6d79c799 [ 649.928438][T22993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.928456][T22993] RSP: 002b:00007f3d6e594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.928479][T22993] RAX: ffffffffffffffda RBX: 00007f3d6da15fa0 RCX: 00007f3d6d79c799 [ 649.928497][T22993] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 649.928511][T22993] RBP: 00007f3d6e594090 R08: 0000000000000000 R09: 0000000000000000 [ 649.928525][T22993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.928539][T22993] R13: 00007f3d6da16038 R14: 00007f3d6da15fa0 R15: 00007ffc94ae22e8 [ 649.928574][T22993] [ 650.042549][T22998] netlink: 'syz.4.4772': attribute type 11 has an invalid length. [ 650.543943][T23008] netlink: 'syz.4.4775': attribute type 1 has an invalid length. [ 650.575135][T23010] netlink: 'syz.2.4773': attribute type 10 has an invalid length. [ 650.602345][T23011] syzkaller0: entered promiscuous mode [ 650.610693][T23011] syzkaller0: entered allmulticast mode [ 650.630543][T23008] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 650.643055][T23008] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 650.671155][T23008] bond3: (slave ip6gre1): making interface the new active one [ 650.679736][T23008] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 650.792526][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4778'. [ 650.992238][T23036] netlink: 'syz.0.4784': attribute type 1 has an invalid length. [ 651.464647][T23056] bond0: entered promiscuous mode [ 651.470357][T23056] bond_slave_0: entered promiscuous mode [ 651.481465][T23056] bond_slave_1: entered promiscuous mode [ 651.499158][T23056] batadv0: entered promiscuous mode [ 651.508238][T23056] hsr1: entered promiscuous mode [ 651.513534][T23056] hsr1: entered allmulticast mode [ 651.521063][T23056] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 651.540935][T23056] bond0: left promiscuous mode [ 651.546320][T23056] bond_slave_0: left promiscuous mode [ 651.552083][T23056] bond_slave_1: left promiscuous mode [ 651.561391][T23056] batadv0: left promiscuous mode [ 651.812121][T23068] netlink: 'syz.0.4793': attribute type 1 has an invalid length. [ 651.859549][T23068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.898011][T23074] syzkaller1: entered allmulticast mode [ 652.043773][T23083] netlink: 'syz.4.4796': attribute type 1 has an invalid length. [ 653.234517][T13552] net_ratelimit: 120 callbacks suppressed [ 653.234542][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.258336][T23101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.268450][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.294410][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.314503][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.326642][T23101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.355088][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.380068][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.404509][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.434381][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.454403][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 653.484489][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.803084][T23100] netlink: 'syz.2.4800': attribute type 3 has an invalid length. [ 654.825602][T23100] __nla_validate_parse: 16 callbacks suppressed [ 654.825628][T23100] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4800'. [ 655.167849][T23107] syzkaller0: entered promiscuous mode [ 655.177534][T23107] syzkaller0: entered allmulticast mode [ 657.661438][T23140] netlink: 'syz.2.4811': attribute type 13 has an invalid length. [ 657.824641][T23149] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4814'. [ 658.254648][T13552] net_ratelimit: 218 callbacks suppressed [ 658.254673][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.288502][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.314788][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.334333][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.365840][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.398761][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.436077][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.464415][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.486826][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 658.514778][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 661.134081][T23182] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 661.338519][T23193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4825'. [ 661.451122][T23203] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 661.525900][T23208] netlink: 'syz.0.4829': attribute type 1 has an invalid length. [ 661.629824][T23213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4830'. [ 663.284853][T11105] net_ratelimit: 171 callbacks suppressed [ 663.284873][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.298471][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 663.414447][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.422254][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 663.534414][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.542447][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 663.654625][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.662671][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 663.776600][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 663.784598][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.304715][ T12] net_ratelimit: 80 callbacks suppressed [ 668.304745][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 668.318759][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.434497][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 668.445550][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.565277][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 668.578201][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.694521][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 668.702717][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.814446][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 668.823943][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 673.354421][T11105] net_ratelimit: 80 callbacks suppressed [ 673.354446][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 673.368047][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 673.484482][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 673.492262][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 673.604565][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 673.614794][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 673.724435][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 673.732487][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 673.845620][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 673.854140][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 678.384433][T11107] net_ratelimit: 80 callbacks suppressed [ 678.384458][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 678.398107][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 678.514425][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 678.522239][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 678.634514][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 678.642327][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 678.754459][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 678.764926][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 678.874400][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 678.882205][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.414470][T11105] net_ratelimit: 80 callbacks suppressed [ 683.414497][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 683.429862][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.546031][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 683.555013][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.674572][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 683.682380][ T1325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.804675][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 683.812492][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.924586][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 683.933380][ T1325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 685.280818][T23262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4846'. [ 686.124948][T23311] xt_TCPMSS: Only works on TCP SYN packets [ 686.196477][T23316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'. [ 686.207698][T23315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'. [ 686.421006][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4865'. [ 686.475229][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4867'. [ 686.658807][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 687.020657][T23362] syzkaller0: entered promiscuous mode [ 687.029942][T23362] syzkaller0: entered allmulticast mode [ 688.434369][T13552] net_ratelimit: 118 callbacks suppressed [ 688.434394][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.464335][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.494443][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.524513][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.544365][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.574371][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.604457][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.625389][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.644729][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 688.674412][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 690.257198][T23381] netlink: 'syz.4.4882': attribute type 3 has an invalid length. [ 691.776385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.786797][ C0] lec:lec_tx_timeout: lec0 [ 692.417431][T23384] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.4883'. [ 692.444926][T23393] bond0: (slave bridge0): Releasing backup interface [ 692.456141][T23393] bridge0: left allmulticast mode [ 692.461560][T23393] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.487256][T23393] bridge_slave_1: left allmulticast mode [ 692.495146][T23393] bridge_slave_1: left promiscuous mode [ 692.501025][T23393] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.529453][T23393] bond0: (slave bond_slave_0): Releasing backup interface [ 692.561380][T23393] bond_slave_0: left allmulticast mode [ 692.588157][T23393] bond0: (slave bond_slave_1): Releasing backup interface [ 692.599630][T23393] bond_slave_1: left allmulticast mode [ 692.621373][T23393] team0: Port device team_slave_0 removed [ 692.652540][T23393] team0: Port device team_slave_1 removed [ 692.667806][T23393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.686288][T23393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.728040][T23409] netlink: 'syz.2.4889': attribute type 3 has an invalid length. [ 692.759750][T23409] lo: Caught tx_queue_len zero misconfig [ 693.226547][T23436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4895'. [ 693.226695][T23435] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 693.480924][ T6347] net_ratelimit: 216 callbacks suppressed [ 693.480950][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.524997][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 693.652444][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.690128][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.724635][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.732545][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 693.905357][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.937281][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.964305][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 693.996610][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 694.623324][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4919'. [ 694.904633][T23522] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4923'. [ 694.984069][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4924'. [ 695.508844][T23557] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 695.831932][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4938'. [ 696.562318][T23604] syzkaller0: entered promiscuous mode [ 696.568501][T23604] syzkaller0: entered allmulticast mode [ 696.570557][T23611] netlink: 'syz.3.4951': attribute type 33 has an invalid length. [ 696.585217][T23610] netlink: 'syz.3.4951': attribute type 33 has an invalid length. [ 696.593599][T23610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4951'. [ 696.612273][T23611] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4951'. [ 696.631304][T23613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4951'. [ 697.320684][T23646] sch_fq: defrate 0 ignored. [ 697.494797][T23657] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4968'. [ 698.091130][T23688] syzkaller0: entered promiscuous mode [ 698.115006][T23688] syzkaller0: entered allmulticast mode [ 698.226091][T23693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4980'. [ 698.236059][T23695] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4981'. [ 698.302080][T23695] sit2: entered promiscuous mode [ 698.345081][T23695] sit2: entered allmulticast mode [ 698.356545][T23700] netlink: 'syz.1.4983': attribute type 64 has an invalid length. [ 698.408735][T23706] netlink: 'syz.1.4983': attribute type 64 has an invalid length. [ 698.494620][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4986'. [ 698.542374][ T6354] net_ratelimit: 113 callbacks suppressed [ 698.542401][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.577841][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4986'. [ 698.646195][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.674829][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.726229][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.745164][T23713] syzkaller0: entered promiscuous mode [ 698.757710][T23713] syzkaller0: entered allmulticast mode [ 698.775774][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.787274][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 698.945462][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 698.969966][T23726] rdma_op ffff8880575bc1f0 conn xmit_rdma 0000000000000000 [ 698.974412][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.037112][T23726] rdma_op ffff88805dff39f0 conn xmit_rdma 0000000000000000 [ 699.105071][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 699.113245][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.173151][T23734] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 699.428986][T23749] syz_tun: entered allmulticast mode [ 700.006729][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'. [ 700.075615][T23790] netlink: 'syz.3.5009': attribute type 23 has an invalid length. [ 700.108475][T23787] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5010'. [ 700.178976][T23787] syzkaller1: entered promiscuous mode [ 700.186487][T23787] syzkaller1: entered allmulticast mode [ 700.255892][T23787] x_tables: duplicate underflow at hook 1 [ 700.288567][T23794] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5013'. [ 700.413266][T23799] netlink: 'syz.0.5014': attribute type 1 has an invalid length. [ 700.450689][T23799] netlink: 'syz.0.5014': attribute type 3 has an invalid length. [ 700.481770][T23799] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5014'. [ 700.502391][T23799] NCSI netlink: No device for ifindex 813332851 [ 700.578538][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5020'. [ 700.595507][T23802] syzkaller0: entered promiscuous mode [ 700.602913][T23802] syzkaller0: entered allmulticast mode [ 700.619747][T23802] netlink: 'syz.3.5017': attribute type 12 has an invalid length. [ 700.989625][T23841] FAULT_INJECTION: forcing a failure. [ 700.989625][T23841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.003134][T23841] CPU: 1 UID: 0 PID: 23841 Comm: syz.0.5027 Not tainted syzkaller #0 PREEMPT(full) [ 701.003164][T23841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.003178][T23841] Call Trace: [ 701.003187][T23841] [ 701.003196][T23841] dump_stack_lvl+0xe8/0x150 [ 701.003234][T23841] should_fail_ex+0x412/0x560 [ 701.003267][T23841] _copy_from_user+0x2d/0xb0 [ 701.003300][T23841] __sys_bpf+0x229/0x950 [ 701.003336][T23841] ? __pfx___sys_bpf+0x10/0x10 [ 701.003385][T23841] ? ksys_write+0x242/0x270 [ 701.003411][T23841] ? __pfx_ksys_write+0x10/0x10 [ 701.003442][T23841] __x64_sys_bpf+0x7c/0x90 [ 701.003473][T23841] do_syscall_64+0x14d/0xf80 [ 701.003494][T23841] ? trace_irq_disable+0x3b/0x150 [ 701.003525][T23841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.003548][T23841] ? clear_bhb_loop+0x40/0x90 [ 701.003576][T23841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.003598][T23841] RIP: 0033:0x7fb1ded9c799 [ 701.003620][T23841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.003640][T23841] RSP: 002b:00007fb1dfd00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.003664][T23841] RAX: ffffffffffffffda RBX: 00007fb1df015fa0 RCX: 00007fb1ded9c799 [ 701.003681][T23841] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 701.003695][T23841] RBP: 00007fb1dfd00090 R08: 0000000000000000 R09: 0000000000000000 [ 701.003709][T23841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.003723][T23841] R13: 00007fb1df016038 R14: 00007fb1df015fa0 R15: 00007fff51b9b3d8 [ 701.003757][T23841] [ 701.200707][T23839] syzkaller0: entered promiscuous mode [ 701.209006][T23839] syzkaller0: entered allmulticast mode [ 701.221741][T23839] tipc: Enabled bearer , priority 0 [ 701.233290][T23838] tipc: Resetting bearer [ 701.254742][T23838] tipc: Disabling bearer [ 701.692094][T23871] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 702.026396][T23895] x_tables: duplicate underflow at hook 2 [ 702.143007][T23900] ip6tnl0: Caught tx_queue_len zero misconfig [ 702.825026][T23925] __nla_validate_parse: 2 callbacks suppressed [ 702.825050][T23925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5053'. [ 702.986363][T23928] netlink: 'syz.4.5054': attribute type 4 has an invalid length. [ 703.554269][ T12] net_ratelimit: 98 callbacks suppressed [ 703.554293][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.624472][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.674960][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.734351][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.824402][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.873896][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.914413][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.954340][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 703.984623][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 704.024340][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 704.497966][ T5898] IPVS: starting estimator thread 0... [ 704.594422][T23963] IPVS: using max 29 ests per chain, 69600 per kthread [ 704.594874][T23965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5062'. [ 704.721454][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 705.001534][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 705.185373][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'. [ 705.265078][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'. [ 705.292290][T24004] netlink: 'syz.2.5073': attribute type 1 has an invalid length. [ 705.441952][T24010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 705.541568][T24014] IPVS: length: 95 != 8 [ 705.593802][T24017] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5076'. [ 705.761901][T24033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5080'. [ 705.823431][T24036] netlink: 'syz.2.5081': attribute type 9 has an invalid length. [ 706.049251][T24048] syz_tun: left allmulticast mode [ 706.065564][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5086'. [ 706.676697][T24086] x_tables: duplicate underflow at hook 2 [ 706.837476][T24101] syz_tun: entered allmulticast mode [ 707.096956][T24112] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 707.147521][T24115] syzkaller1: entered promiscuous mode [ 707.153076][T24115] syzkaller1: entered allmulticast mode [ 707.214969][T24115] syzkaller0: entered promiscuous mode [ 707.220538][T24115] syzkaller0: entered allmulticast mode [ 707.874049][T24153] __nla_validate_parse: 4 callbacks suppressed [ 707.874076][T24153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5115'. [ 708.050520][ T9278] lec:lec_start_xmit: lec0:No lecd attached [ 708.480899][T24179] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5124'. [ 708.544305][T24179] netlink: 'syz.2.5124': attribute type 9 has an invalid length. [ 708.575209][T13552] net_ratelimit: 127 callbacks suppressed [ 708.575232][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.643957][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 708.806927][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.847501][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5125'. [ 708.865024][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.014311][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 709.022124][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.135051][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5130'. [ 709.184417][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 709.200904][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.335005][T24226] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 709.365636][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 709.384364][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.896476][T24249] netlink: 'syz.2.5138': attribute type 1 has an invalid length. [ 709.919625][T24249] netlink: 'syz.2.5138': attribute type 2 has an invalid length. [ 709.938841][T24249] netlink: 'syz.2.5138': attribute type 1 has an invalid length. [ 710.201829][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5142'. [ 710.323825][T24277] "syz.0.5146" (24277) uses obsolete ecb(arc4) skcipher [ 710.332887][T24266] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 710.386829][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'. [ 710.401797][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'. [ 710.414683][T24266] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.426653][T24266] gretap5: entered promiscuous mode [ 710.439170][T24266] gretap5: entered allmulticast mode [ 710.516471][T24281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5147'. [ 710.553873][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5147'. [ 710.584365][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'. [ 713.584358][ T1325] net_ratelimit: 164 callbacks suppressed [ 713.584383][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.618758][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.644483][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.664455][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.685679][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.714305][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.754319][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.764301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 713.772414][ C0] lec:lec_tx_timeout: lec0 [ 713.778538][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.804433][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.824673][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 714.116667][T24332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 714.168361][T24332] netlink: 'syz.0.5157': attribute type 4 has an invalid length. [ 714.209963][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5157'. [ 714.298349][T24335] netlink: 'syz.4.5160': attribute type 83 has an invalid length. [ 714.505436][T24347] FAULT_INJECTION: forcing a failure. [ 714.505436][T24347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.569893][T24347] CPU: 0 UID: 0 PID: 24347 Comm: syz.0.5163 Not tainted syzkaller #0 PREEMPT(full) [ 714.569926][T24347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.569941][T24347] Call Trace: [ 714.569950][T24347] [ 714.569961][T24347] dump_stack_lvl+0xe8/0x150 [ 714.570004][T24347] should_fail_ex+0x412/0x560 [ 714.570037][T24347] _copy_to_user+0x31/0xb0 [ 714.570074][T24347] simple_read_from_buffer+0xe1/0x170 [ 714.570110][T24347] proc_fail_nth_read+0x1bb/0x230 [ 714.570144][T24347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 714.570178][T24347] ? rw_verify_area+0x2a6/0x4d0 [ 714.570200][T24347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 714.570231][T24347] vfs_read+0x20c/0xa70 [ 714.570251][T24347] ? fdget_pos+0x246/0x320 [ 714.570288][T24347] ? __pfx___mutex_lock+0x10/0x10 [ 714.570313][T24347] ? __pfx_vfs_read+0x10/0x10 [ 714.570336][T24347] ? __fget_files+0x2a/0x420 [ 714.570371][T24347] ? __fget_files+0x3a0/0x420 [ 714.570401][T24347] ? __fget_files+0x2a/0x420 [ 714.570443][T24347] ksys_read+0x150/0x270 [ 714.570468][T24347] ? __pfx_ksys_read+0x10/0x10 [ 714.570503][T24347] do_syscall_64+0x14d/0xf80 [ 714.570524][T24347] ? trace_irq_disable+0x3b/0x150 [ 714.570561][T24347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.570582][T24347] ? clear_bhb_loop+0x40/0x90 [ 714.570614][T24347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.570636][T24347] RIP: 0033:0x7fb1ded5cfce [ 714.570657][T24347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 714.570677][T24347] RSP: 002b:00007fb1dfcfffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 714.570702][T24347] RAX: ffffffffffffffda RBX: 00007fb1dfd006c0 RCX: 00007fb1ded5cfce [ 714.570719][T24347] RDX: 000000000000000f RSI: 00007fb1dfd000a0 RDI: 0000000000000003 [ 714.570733][T24347] RBP: 00007fb1dfd00090 R08: 0000000000000000 R09: 0000000000000000 [ 714.570747][T24347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.570761][T24347] R13: 00007fb1df016038 R14: 00007fb1df015fa0 R15: 00007fff51b9b3d8 [ 714.570797][T24347] [ 714.902227][T24361] netlink: 'syz.0.5166': attribute type 1 has an invalid length. [ 714.961019][T24361] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5166'. [ 714.979180][T24349] netlink: 'syz.4.5165': attribute type 16 has an invalid length. [ 714.991852][T24349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5165'. [ 715.015717][T24348] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5164'. [ 715.030013][T24350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5164'. [ 715.087536][T24366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5167'. [ 715.357112][T24378] syzkaller0: entered promiscuous mode [ 715.362660][T24378] syzkaller0: entered allmulticast mode [ 715.746300][T24393] x_tables: duplicate underflow at hook 1 [ 715.815520][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5173'. [ 718.594597][ T1325] net_ratelimit: 187 callbacks suppressed [ 718.594621][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.619059][ T1325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 718.746710][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.764332][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 718.838494][T24421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5180'. [ 718.884398][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.954433][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.994342][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.144590][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 719.154046][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.277411][T24443] sctp: [Deprecated]: syz.4.5186 (pid 24443) Use of int in max_burst socket option deprecated. [ 719.277411][T24443] Use struct sctp_assoc_value instead [ 719.334383][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 719.928118][T24468] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 719.936417][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5191'. [ 719.995772][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'. [ 720.051853][T24477] netlink: 'syz.4.5190': attribute type 4 has an invalid length. [ 722.350166][T24472] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 722.367256][T24472] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5191'. [ 722.458196][T24489] netlink: 'syz.2.5192': attribute type 27 has an invalid length. [ 722.671349][T24498] netlink: 'syz.1.5195': attribute type 1 has an invalid length. [ 722.689444][T24503] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.5197'. [ 722.718193][T24498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 722.723531][T24503] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.5197'. [ 723.242578][T24531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5206'. [ 723.318593][T24537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5207'. [ 723.336894][T24537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5207'. [ 723.559416][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'. [ 723.694391][ T6340] net_ratelimit: 157 callbacks suppressed [ 723.694417][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.728617][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 723.865538][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.873741][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 723.985752][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 724.002860][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.134288][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 724.166365][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 724.175495][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.295560][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.384839][T24561] __nla_validate_parse: 3 callbacks suppressed [ 726.384862][T24561] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5213'. [ 726.692474][T24578] syzkaller0: entered promiscuous mode [ 726.704410][T24578] syzkaller0: entered allmulticast mode [ 726.776084][T24578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5217'. [ 727.751008][T24636] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 727.791017][T24636] netlink: 'syz.4.5233': attribute type 3 has an invalid length. [ 727.804440][T24636] netlink: 'syz.4.5233': attribute type 7 has an invalid length. [ 727.828501][T24636] netlink: 'syz.4.5233': attribute type 8 has an invalid length. [ 727.838346][T24641] netlink: 'syz.3.5231': attribute type 1 has an invalid length. [ 727.871832][T24636] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5233'. [ 727.953859][T24636] NCSI netlink: No device for ifindex 131092 [ 727.984941][T24640] netlink: 'syz.3.5231': attribute type 1 has an invalid length. [ 727.998713][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5235'. [ 728.011560][T24640] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5231'. [ 728.101524][T24641] bond7: entered promiscuous mode [ 728.137637][T24641] bond7: entered allmulticast mode [ 728.148186][T24641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 728.195084][T24652] batman_adv: batadv0: Removing interface: netdevsim0 [ 728.351439][T24660] bond5 (unregistering): Released all slaves [ 728.420292][T24667] xt_hashlimit: invalid rate [ 728.635552][T24674] netlink: 'syz.3.5239': attribute type 11 has an invalid length. [ 728.643621][T24674] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5239'. [ 728.685277][T24676] IPv6: sit1: Disabled Multicast RS [ 728.745723][T11105] net_ratelimit: 110 callbacks suppressed [ 728.745746][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.794379][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 728.823316][T24688] netlink: 'syz.0.5245': attribute type 4 has an invalid length. [ 728.861481][T24674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5239'. [ 728.874666][T24688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5245'. [ 728.893909][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 728.940396][T24688] .`: renamed from bond0 (while UP) [ 728.954460][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.984487][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 729.007855][T24693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5247'. [ 729.054325][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 729.073295][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 729.200481][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 729.217965][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 729.384651][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 729.414734][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 729.509473][T24713] netlink: 'syz.4.5249': attribute type 1 has an invalid length. [ 731.580465][ T30] audit: type=1804 audit(1772511840.252:4): pid=24813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5275" name="/newroot/421/cgroup.controllers" dev="tmpfs" ino=2159 res=1 errno=0 [ 731.633479][ T30] audit: type=1800 audit(1772511840.252:5): pid=24813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5275" name="cgroup.controllers" dev="tmpfs" ino=2159 res=0 errno=0 [ 731.741252][T24817] __nla_validate_parse: 46 callbacks suppressed [ 731.741277][T24817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'. [ 733.754326][ T6347] net_ratelimit: 80 callbacks suppressed [ 733.754373][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.800606][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 733.934391][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.943270][T11105] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 733.989880][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5283'. [ 734.084146][T24850] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 734.097314][T24849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5287'. [ 734.133009][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5283'. [ 734.144265][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.152317][T24849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5287'. [ 734.172331][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 734.202198][T24849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5287'. [ 734.217472][T24853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.312092][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.355684][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 734.363879][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 734.457256][T24864] virt_wifi0 speed is unknown, defaulting to 1000 [ 734.468941][T24866] syzkaller0: entered promiscuous mode [ 734.479300][T24866] syzkaller0: entered allmulticast mode [ 734.620735][T24868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5289'. [ 734.868961][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5296'. [ 735.009658][T24885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5298'. [ 735.039022][T24889] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5299'. [ 735.803593][T24925] netlink: 'syz.1.5310': attribute type 1 has an invalid length. [ 736.344663][T24958] bond1: (slave lo): Releasing backup interface [ 736.374993][T24958] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 736.449533][T24958] team0: Port device dummy0 removed [ 736.498076][T24958] .`: (slave bond_slave_0): Releasing backup interface [ 736.527928][T24958] bond_slave_0: left allmulticast mode [ 736.551142][T24958] .`: (slave bond_slave_1): Releasing backup interface [ 736.561081][T24958] bond_slave_1: left allmulticast mode [ 736.593206][T24958] team0: Port device team_slave_0 removed [ 736.660430][T24958] team0: Port device team_slave_1 removed [ 736.706133][T24958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.727476][T24958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.756411][T24958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.775929][T24958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.346995][T25001] __nla_validate_parse: 4 callbacks suppressed [ 737.347016][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'. [ 737.494446][T25010] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 737.563361][T25001] bond5: option xmit_hash_policy: invalid value (64) [ 737.658397][T25001] bond5 (unregistering): Released all slaves [ 738.794313][ T1325] net_ratelimit: 116 callbacks suppressed [ 738.794335][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.849737][ T1325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 738.994287][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.034306][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.076141][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.117541][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.154555][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.194670][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.225561][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 739.264699][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 741.953121][T25111] tipc: Enabling of bearer rejected, media not registered [ 742.003213][T25112] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5352'. [ 742.734436][T25144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5361'. [ 743.207798][T25157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5365'. [ 743.814390][ T6354] net_ratelimit: 170 callbacks suppressed [ 743.814416][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.864969][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.884555][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.905471][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.934305][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.956675][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 743.984567][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.015927][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.044457][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 744.074426][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 745.611812][T25162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5366'. [ 745.722798][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5367'. [ 745.757891][T25165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5367'. [ 745.978052][T25176] bond0: entered promiscuous mode [ 745.986865][T25176] batadv0: entered promiscuous mode [ 745.994079][T25176] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 746.009789][T25176] hsr1: entered promiscuous mode [ 746.025882][T25176] hsr1: entered allmulticast mode [ 746.039023][T25176] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 746.048741][T25176] bond0: left promiscuous mode [ 746.055359][T25176] batadv0: left promiscuous mode [ 746.182432][T25183] pim6reg1: entered promiscuous mode [ 746.209008][T25183] pim6reg1: entered allmulticast mode [ 746.609860][T25205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5380'. [ 746.798240][T25218] bond0: entered promiscuous mode [ 746.828630][T25218] batadv0: entered promiscuous mode [ 746.870212][T25218] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 746.903346][T25218] hsr1: entered promiscuous mode [ 746.943567][T25218] hsr1: entered allmulticast mode [ 746.999359][T25218] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 747.022152][T25230] nbd: couldn't find a device at index 1 [ 747.059856][T25218] bond0: left promiscuous mode [ 747.082523][T25218] batadv0: left promiscuous mode [ 747.261254][T25236] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5389'. [ 747.639849][T25261] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5397'. [ 747.645131][T25260] bond0: Error: Cannot enslave bond to itself. [ 747.721932][T25268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5400'. [ 747.944896][T25272] bond0: entered promiscuous mode [ 747.952236][T25272] batadv0: entered promiscuous mode [ 747.971114][T25272] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 747.982483][T25272] hsr1: entered promiscuous mode [ 747.988973][T25272] hsr1: entered allmulticast mode [ 747.997005][T25272] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 748.010476][T25272] bond0: left promiscuous mode [ 748.018085][T25272] batadv0: left promiscuous mode [ 748.045750][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5403'. [ 748.079382][T25284] netlink: 'syz.0.5406': attribute type 1 has an invalid length. [ 748.102961][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 748.113723][T25276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5403'. [ 748.125971][T25284] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5406'. [ 748.133632][T25280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5403'. [ 748.144384][T25284] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5406'. [ 748.172483][T25285] netlink: 'syz.1.5405': attribute type 1 has an invalid length. [ 748.185907][T25284] netlink: 'syz.0.5406': attribute type 1 has an invalid length. [ 748.195103][T25284] netlink: 'syz.0.5406': attribute type 8 has an invalid length. [ 748.205596][T25284] netlink: 582 bytes leftover after parsing attributes in process `syz.0.5406'. [ 748.219686][T25285] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5405'. [ 748.707861][T25312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5413'. [ 748.714703][T25314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 748.775540][T25304] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5412'. [ 748.796826][T11107] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.824913][T11107] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.841354][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.852091][ T1325] net_ratelimit: 165 callbacks suppressed [ 748.852113][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 748.880733][ T1325] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.965106][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.014460][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.078101][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.115078][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.127557][T25332] netlink: 'syz.3.5417': attribute type 64 has an invalid length. [ 749.164369][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.204414][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.245120][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.300133][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 749.335192][ T1325] bond2: (slave bridge2): link status up again after 0 ms [ 749.514479][ T5928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 751.007605][T25413] syzkaller0: entered promiscuous mode [ 751.015543][T25413] syzkaller0: entered allmulticast mode [ 751.152310][T25436] netlink: 'syz.2.5442': attribute type 10 has an invalid length. [ 751.521441][T25458] netlink: 'syz.3.5446': attribute type 1 has an invalid length. [ 753.296940][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 753.754429][T25436] syz_tun: entered promiscuous mode [ 753.764248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.774128][ C0] lec:lec_tx_timeout: lec0 [ 753.779656][T25436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 753.790059][T25458] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 753.791532][T25460] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 753.866178][T25463] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 753.874785][ T6340] net_ratelimit: 186 callbacks suppressed [ 753.874843][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 753.927167][ T6354] bond2: (slave bridge2): failed to get link speed/duplex [ 753.974284][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 754.040171][T25479] __nla_validate_parse: 5 callbacks suppressed [ 754.040195][T25479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5449'. [ 754.105014][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.145366][T25475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.170948][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.186042][T25479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5449'. [ 754.198370][ T6340] bond2: (slave bridge2): failed to get link speed/duplex [ 754.208718][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 754.237390][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 754.302242][T25490] netlink: 'syz.2.5453': attribute type 5 has an invalid length. [ 754.338123][ T6354] bond2: (slave bridge2): failed to get link speed/duplex [ 754.719220][T25513] netlink: 'syz.4.5459': attribute type 9 has an invalid length. [ 754.780915][T25513] netlink: 'syz.4.5459': attribute type 11 has an invalid length. [ 754.827339][T25513] netlink: 'syz.4.5459': attribute type 12 has an invalid length. [ 754.846173][T25513] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5459'. [ 754.878691][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5459'. [ 756.808949][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5476'. [ 758.529310][T25608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5483'. [ 758.716571][T25616] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5489'. [ 758.917546][T25628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 758.966442][ T1325] net_ratelimit: 196 callbacks suppressed [ 758.966469][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.050692][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.104711][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.158218][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.204502][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.255303][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.304614][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.345471][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.384378][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.408639][T25643] netlink: 4596 bytes leftover after parsing attributes in process `syz.3.5496'. [ 759.419524][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 759.805649][T25648] netlink: 'syz.1.5498': attribute type 31 has an invalid length. [ 759.909484][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5501'. [ 759.976020][T25654] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5501'. [ 760.014649][T25654] netlink: 'syz.2.5501': attribute type 2 has an invalid length. [ 760.042240][T25655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5499'. [ 760.180788][T25669] netlink: 'syz.3.5502': attribute type 1 has an invalid length. [ 760.232983][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5502'. [ 760.243231][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5502'. [ 760.273491][T25669] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5502'. [ 760.997242][T25713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5520'. [ 761.217641][T25729] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 761.496223][T25753] vlan0: renamed from geneve1 (while UP) [ 761.546023][T25751] xt_TPROXY: Can be used only with -p tcp or -p udp [ 761.627094][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 761.640505][T25762] block nbd0: Unsupported socket: should be TCP or UNIX. [ 761.665578][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 761.736837][T25766] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:12 [ 762.174486][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 762.197064][T25788] tipc: Started in network mode [ 762.204222][T25788] tipc: Node identity 5a33432ade84, cluster identity 4711 [ 762.212429][T25788] tipc: Enabled bearer , priority 0 [ 762.265928][T25791] syzkaller0: entered promiscuous mode [ 762.292301][T25791] syzkaller0: entered allmulticast mode [ 762.353482][T25794] nbd: illegal input index -8454144 [ 762.359810][T25795] nbd: illegal input index -8454144 [ 762.492686][T25804] tipc: Resetting bearer [ 762.547526][T25807] netlink: 'syz.3.5553': attribute type 21 has an invalid length. [ 762.561621][T25807] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.578229][T25807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.585599][T25807] IPv6: NLM_F_CREATE should be set when creating new route [ 762.593056][T25807] IPv6: NLM_F_CREATE should be set when creating new route [ 762.600463][T25807] IPv6: NLM_F_CREATE should be set when creating new route [ 762.615267][T25811] netlink: 'syz.3.5553': attribute type 1 has an invalid length. [ 762.640674][T25811] netlink: 'syz.3.5553': attribute type 1 has an invalid length. [ 762.679909][T25811] netlink: 'syz.3.5553': attribute type 8 has an invalid length. [ 762.848047][T25821] netlink: 'syz.2.5557': attribute type 2 has an invalid length. [ 762.918529][T25827] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 763.003990][T25787] tipc: Resetting bearer [ 763.067605][T25787] tipc: Disabling bearer [ 763.104065][T25835] netlink: 'syz.2.5562': attribute type 21 has an invalid length. [ 763.144798][T25836] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 763.533164][T25860] bond0: (slave syz_tun): Releasing backup interface [ 763.835325][T25874] bond8: option lp_interval: invalid value (0) [ 763.842635][T25874] bond8: option lp_interval: allowed values 1 - 2147483647 [ 763.958501][T25874] bond8 (unregistering): Released all slaves [ 763.977470][T13552] net_ratelimit: 148 callbacks suppressed [ 763.977495][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.044542][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.084863][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.144498][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.204945][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.238087][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.275177][ T6340] bond2: (slave bridge2): failed to get link speed/duplex [ 764.374541][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.406730][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 764.448838][T25898] can: request_module (can-proto-0) failed. [ 764.458057][T11107] bond2: (slave bridge2): failed to get link speed/duplex [ 764.479612][T25905] __nla_validate_parse: 12 callbacks suppressed [ 764.479636][T25905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5581'. [ 764.870569][T25920] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5588'. [ 765.079672][T25936] xt_hashlimit: invalid interval [ 765.132836][T25938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5594'. [ 765.272788][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 765.306114][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5598'. [ 765.328790][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5595'. [ 765.351890][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5598'. [ 765.373508][T25956] tipc: Enabling of bearer rejected, failed to enable media [ 765.662129][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5603'. [ 765.712078][T25973] netlink: 'syz.2.5602': attribute type 1 has an invalid length. [ 765.951525][T25979] netlink: 'syz.4.5604': attribute type 3 has an invalid length. [ 765.970637][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5607'. [ 765.982310][T25985] netlink: 62 bytes leftover after parsing attributes in process `syz.1.5605'. [ 766.207706][T25998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.229631][T25998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.272044][T26000] netlink: 'syz.1.5612': attribute type 1 has an invalid length. [ 766.362311][T26005] syzkaller0: entered promiscuous mode [ 766.387224][T26005] syzkaller0: entered allmulticast mode [ 766.730731][T26023] x_tables: duplicate underflow at hook 2 [ 767.074117][T26037] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 767.263806][T26051] x_tables: duplicate underflow at hook 1 [ 767.698413][T26077] hsr_slave_0: left promiscuous mode [ 768.984469][ T6340] net_ratelimit: 143 callbacks suppressed [ 768.984495][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.035729][T11107] bond2: (slave bridge2): failed to get link speed/duplex [ 769.051373][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.155513][ T6340] bond2: (slave bridge2): failed to get link speed/duplex [ 769.198529][T26150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 769.254421][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.264087][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.316631][T11107] bond2: (slave bridge2): failed to get link speed/duplex [ 769.394712][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 769.419338][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.456635][T26155] siw: device registration error -23 [ 769.464421][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 769.729307][T26161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.793393][T26161] bond0: (slave rose0): Enslaving as an active interface with an up link [ 770.230314][T26187] bond0: entered promiscuous mode [ 770.239589][T26187] batadv0: entered promiscuous mode [ 770.284053][T26187] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 770.344345][T26187] hsr1: entered promiscuous mode [ 770.370459][T26201] __nla_validate_parse: 9 callbacks suppressed [ 770.370481][T26201] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5662'. [ 770.394906][T26187] hsr1: entered allmulticast mode [ 770.406354][T26187] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 770.464887][T26187] bond0: left promiscuous mode [ 770.537354][T26187] batadv0: left promiscuous mode [ 770.679159][T26202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5665'. [ 770.720799][T26202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5665'. [ 770.900413][T26233] x_tables: unsorted entry at hook 1 [ 770.933894][T26233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5672'. [ 770.997686][T26239] x_tables: unsorted entry at hook 1 [ 771.018018][T26233] : entered promiscuous mode [ 771.248311][T26246] netlink: 'syz.1.5673': attribute type 11 has an invalid length. [ 771.801571][T26265] can: request_module (can-proto-3) failed. [ 772.012973][ T9278] lec:lec_start_xmit: lec0:No lecd attached [ 772.175356][T26292] netlink: 'syz.3.5687': attribute type 16 has an invalid length. [ 772.191432][T26293] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5686'. [ 772.205943][T26292] netlink: 'syz.3.5687': attribute type 17 has an invalid length. [ 772.225529][T26293] netem: invalid attributes len -24 [ 772.233091][T26293] netem: change failed [ 772.266194][T26293] netlink: 186440 bytes leftover after parsing attributes in process `syz.2.5686'. [ 772.506092][T26305] nbd: must specify at least one socket [ 772.531630][ T5830] block nbd0: Receive control failed (result -107) [ 772.561345][T26305] block nbd0: reconnected socket [ 772.837668][T26323] netlink: 'syz.2.5694': attribute type 24 has an invalid length. [ 773.507840][T26354] tap0: tun_chr_ioctl cmd 1074025676 [ 773.522566][T26354] tap0: owner set to 0 [ 773.558008][T26353] tap0: tun_chr_ioctl cmd 1074025677 [ 773.624585][T26353] tap0: linktype set to 259 [ 773.646176][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5704'. [ 774.055029][T13552] net_ratelimit: 141 callbacks suppressed [ 774.055055][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.086141][T11105] bond2: (slave bridge2): failed to get link speed/duplex [ 774.126095][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.171462][ T6340] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 774.190536][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5710'. [ 774.234991][T13552] bond2: (slave bridge2): failed to get link speed/duplex [ 774.257883][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5710'. [ 774.288602][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.298833][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 774.402990][T13552] bond2: (slave bridge2): failed to get link speed/duplex [ 774.456650][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 774.457415][T26396] netlink: 'syz.1.5715': attribute type 1 has an invalid length. [ 774.481957][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5715'. [ 774.505117][T26397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.581808][T26456] __nla_validate_parse: 1 callbacks suppressed [ 775.581834][T26456] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5730'. [ 775.846644][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5736'. [ 775.881196][T26480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5737'. [ 776.094571][ T30] audit: type=1800 audit(1772511884.762:6): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.198322][ T30] audit: type=1800 audit(1772511884.762:7): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.331879][ T30] audit: type=1800 audit(1772511884.762:8): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.435112][ T30] audit: type=1800 audit(1772511884.762:9): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.549036][T26513] netlink: 'syz.3.5746': attribute type 33 has an invalid length. [ 776.576075][ T30] audit: type=1800 audit(1772511884.762:10): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.605156][ T30] audit: type=1800 audit(1772511884.762:11): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.681598][T26524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5746'. [ 776.707482][ T30] audit: type=1800 audit(1772511884.762:12): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.791249][ T30] audit: type=1800 audit(1772511884.762:13): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.958113][ T30] audit: type=1800 audit(1772511884.762:14): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 776.991932][ T30] audit: type=1800 audit(1772511884.762:15): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5741" name="memory.events" dev="tmpfs" ino=2512 res=0 errno=0 [ 777.377202][T26558] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5752'. [ 777.770360][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 777.781672][ C0] lec:lec_tx_timeout: lec0 [ 778.809780][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.086939][T11105] net_ratelimit: 170 callbacks suppressed [ 779.086964][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.129184][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.156572][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.184844][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.210733][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.237423][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.267209][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.297353][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.330191][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 779.359360][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 780.026026][T26563] batman_adv: batadv0: Removing interface: netdevsim0 [ 781.101097][T26608] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 781.145822][T26608] bond5 (unregistering): Released all slaves [ 781.169242][T26621] netlink: 'syz.0.5767': attribute type 1 has an invalid length. [ 781.187723][T26621] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5767'. [ 781.499330][T26639] netlink: 'syz.4.5773': attribute type 2 has an invalid length. [ 781.524938][T26639] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5773'. [ 781.600404][T26644] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 781.875807][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 781.904326][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5778'. [ 782.047445][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5779'. [ 782.067330][T26629] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 782.078571][T26629] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 782.107052][T26662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5779'. [ 782.130390][T26662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5779'. [ 782.365374][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5783'. [ 782.572561][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 782.587235][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 782.601714][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 782.620039][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 782.636234][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 782.765589][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 782.780269][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 782.794910][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 782.810025][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 782.823624][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 784.095134][ T6343] net_ratelimit: 192 callbacks suppressed [ 784.095160][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.125142][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.155954][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.185079][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.216387][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.245205][ T6343] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.266025][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.295008][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.331128][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.354344][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 784.885468][ T5830] Bluetooth: hci0: command tx timeout [ 785.176360][T26697] nbd1: detected capacity change from 0 to 63 [ 785.189981][T26704] block nbd1: NBD_DISCONNECT [ 785.198214][T26690] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 785.208717][T26690] syzkaller1: linktype set to 823 [ 785.224008][T26704] block nbd1: Disconnected due to user request. [ 785.242796][T26704] block nbd1: shutting down sockets [ 785.300027][ C0] blk_print_req_error: 138 callbacks suppressed [ 785.300055][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.316753][ C0] buffer_io_error: 138 callbacks suppressed [ 785.316774][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 785.330645][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.341033][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 785.349158][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.359354][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 785.367974][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.378667][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 785.390421][T26579] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.412690][T26579] Buffer I/O error on dev nbd1, logical block 0, async page read [ 785.466863][ T29] syzkaller1: tun_net_xmit 90 [ 785.480438][T26579] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.538613][T26718] netlink: 'syz.0.5785': attribute type 8 has an invalid length. [ 785.550430][T26579] Buffer I/O error on dev nbd1, logical block 1, async page read [ 785.560844][T26720] xt_hashlimit: size too large, truncated to 1048576 [ 785.577038][T26579] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.602834][T26579] Buffer I/O error on dev nbd1, logical block 2, async page read [ 785.626713][T26685] virt_wifi0 speed is unknown, defaulting to 1000 [ 785.645056][T26579] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.695732][T26579] Buffer I/O error on dev nbd1, logical block 3, async page read [ 785.744390][T26579] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.787644][T26579] Buffer I/O error on dev nbd1, logical block 0, async page read [ 785.831967][T26579] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 785.897684][T26579] Buffer I/O error on dev nbd1, logical block 1, async page read [ 785.947345][T26579] ldm_validate_partition_table(): Disk read failed. [ 786.007251][T26579] Dev nbd1: unable to read RDB block 0 [ 786.075292][T26579] nbd1: unable to read partition table [ 786.116536][T26731] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5789'. [ 786.147562][T16184] syz_tun (unregistering): left allmulticast mode [ 786.181544][T26579] ldm_validate_partition_table(): Disk read failed. [ 786.210569][T26579] Dev nbd1: unable to read RDB block 0 [ 786.235337][T26579] nbd1: unable to read partition table [ 786.385322][T26733] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 786.392081][T26742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5792'. [ 786.442542][T26743] xt_ipcomp: unknown flags 1D [ 786.614660][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 786.686223][T26733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.835909][T26738] bond0: (slave veth11): Enslaving as an active interface with a down link [ 786.920031][ T6354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.944549][ T6354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.966931][ T5830] Bluetooth: hci0: command tx timeout [ 787.052660][T26759] netlink: 'syz.2.5796': attribute type 15 has an invalid length. [ 787.136541][T26770] tipc: Enabled bearer , priority 0 [ 787.318738][ T6354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.335688][ T6354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.355592][T26767] tipc: Resetting bearer [ 787.374116][T26787] netlink: 'syz.2.5798': attribute type 1 has an invalid length. [ 787.413802][T26771] syzkaller0: entered promiscuous mode [ 787.422657][T26771] syzkaller0: entered allmulticast mode [ 787.429413][T26782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5798'. [ 787.443004][T26781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5798'. [ 787.456116][T26785] bridge0: entered allmulticast mode [ 787.479857][ T6354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.494620][ T6354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.516761][T26788] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5800'. [ 787.543563][T26762] tipc: Resetting bearer [ 787.568608][T26762] tipc: Disabling bearer [ 787.768817][ T6354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.797553][ T6354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.240262][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.252388][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.299395][T26685] chnl_net:caif_netlink_parms(): no params data found [ 788.502214][T11107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.530985][T26838] syzkaller0: entered allmulticast mode [ 788.788824][T26848] netlink: 'syz.1.5812': attribute type 21 has an invalid length. [ 788.801144][ T49] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.833669][T26848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5812'. [ 789.046595][ T5830] Bluetooth: hci0: command tx timeout [ 789.115272][T11107] net_ratelimit: 192 callbacks suppressed [ 789.115296][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.199637][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.227647][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.270676][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.305237][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.336277][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.374910][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.405619][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.431363][T26881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 789.444556][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.446044][T26881] netlink: 'syz.0.5819': attribute type 1 has an invalid length. [ 789.465601][T26881] netlink: 'syz.0.5819': attribute type 1 has an invalid length. [ 789.474848][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 789.483656][T26881] netlink: 'syz.0.5819': attribute type 2 has an invalid length. [ 789.497093][T26881] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5819'. [ 789.511593][T26882] x_tables: duplicate underflow at hook 1 [ 789.720004][ T6354] bond2 (unregistering): (slave bridge2): Removing an active aggregator [ 789.730741][ T6354] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 789.742164][ T6354] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - ea:4a:e9:d0:f9:09 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 789.768736][ T6354] bridge2 (unregistering): left promiscuous mode [ 789.776373][ T6354] bridge2 (unregistering): left allmulticast mode [ 789.829151][ T6354] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 789.842819][ T6354] bridge3 (unregistering): left promiscuous mode [ 789.855166][ T6354] bridge3 (unregistering): left allmulticast mode [ 789.910222][ T6354] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 789.950670][ T6354] bond1 (unregistering): Released all slaves [ 789.968044][ T6354] bond0 (unregistering): Released all slaves [ 789.988177][ T6354] bond2 (unregistering): Released all slaves [ 790.010875][ T6354] bond3 (unregistering): Released all slaves [ 790.030082][ T6354] bond4 (unregistering): Released all slaves [ 790.049283][ T6354] bond5 (unregistering): Released all slaves [ 790.071500][ T6354] bond6 (unregistering): (slave veth1): Releasing active interface [ 790.086257][ T6354] bond6 (unregistering): Released all slaves [ 790.104276][ T6354] bond7 (unregistering): Released all slaves [ 790.134533][T26685] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.142954][T26685] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.150793][T26685] bridge_slave_0: entered allmulticast mode [ 790.161129][T26685] bridge_slave_0: entered promiscuous mode [ 790.171821][T26685] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.180987][T26685] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.191556][T26685] bridge_slave_1: entered allmulticast mode [ 790.203695][T26685] bridge_slave_1: entered promiscuous mode [ 790.481735][ T6354] : left promiscuous mode [ 790.537421][T26685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.568040][T26685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.679812][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 790.720312][T26903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5826'. [ 790.750831][T26685] team0: Port device team_slave_0 added [ 790.788268][T26685] team0: Port device team_slave_1 added [ 790.889992][T26685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.918289][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.985636][T26685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.078810][T26685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.097578][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.124907][ T5830] Bluetooth: hci0: command tx timeout [ 791.149966][T26685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.177424][T26918] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 791.440524][T26685] hsr_slave_0: entered promiscuous mode [ 791.473519][T26685] hsr_slave_1: entered promiscuous mode [ 791.485713][T26930] __nla_validate_parse: 3 callbacks suppressed [ 791.485736][T26930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5832'. [ 791.563911][T26930] bond0: Caught tx_queue_len zero misconfig [ 791.585016][T26930] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5832'. [ 791.637187][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 791.654687][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 791.720184][T26940] netlink: 'syz.1.5836': attribute type 1 has an invalid length. [ 791.753510][T26940] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5836'. [ 791.819378][T26943] netlink: 'syz.4.5837': attribute type 9 has an invalid length. [ 792.276878][T26971] netlink: 'syz.1.5842': attribute type 1 has an invalid length. [ 792.472415][T26971] bond6: entered promiscuous mode [ 792.478515][T26971] bond6: entered allmulticast mode [ 792.488316][T26971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.666895][T26979] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 792.849957][T27001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5848'. [ 793.023036][T27010] netlink: 'syz.0.5853': attribute type 1 has an invalid length. [ 793.183867][ T6354] vcan0 (unregistering): left allmulticast mode [ 793.294039][T27005] vlan2: entered allmulticast mode [ 793.299568][T27005] bridge6: entered allmulticast mode [ 793.331273][T27009] bridge6: port 1(veth5) entered blocking state [ 793.340578][T27009] bridge6: port 1(veth5) entered disabled state [ 793.347628][T27009] veth5: entered allmulticast mode [ 793.355551][T27009] veth5: entered promiscuous mode [ 793.424279][T27020] netlink: 'syz.2.5855': attribute type 8 has an invalid length. [ 793.465654][T26685] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.547431][ T6354] IPVS: stop unused estimator thread 0... [ 793.569106][T26685] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.650892][T26685] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.730282][T26685] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.769623][T27025] netlink: 'syz.1.5857': attribute type 4 has an invalid length. [ 793.790022][T27025] netlink: 'syz.1.5857': attribute type 4 has an invalid length. [ 794.154931][ T6354] net_ratelimit: 182 callbacks suppressed [ 794.154956][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.170817][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 794.284946][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.292918][T11107] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 794.405015][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.415458][ T6354] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 794.534808][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.542754][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 794.654845][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 794.662939][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 795.812383][T26996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.832812][T26685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 795.948244][T26685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 795.988468][T26685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 796.061874][T26685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 796.220394][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 796.302248][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5868'. [ 796.453320][T27070] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5869'. [ 796.479376][T26685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.560962][T26685] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.596410][T13552] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.607006][T13552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.698250][T13552] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.705729][T13552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.299730][T26685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.345585][T27111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.417633][T27111] netlink: 'syz.0.5881': attribute type 83 has an invalid length. [ 797.489436][T26685] veth0_vlan: entered promiscuous mode [ 797.536344][T26685] veth1_vlan: entered promiscuous mode [ 797.661716][T27117] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 797.690819][T27117] bond5 (unregistering): Released all slaves [ 797.877838][T26685] veth0_macvtap: entered promiscuous mode [ 797.937272][T26685] veth1_macvtap: entered promiscuous mode [ 798.021382][T26685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.091287][T26685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.210791][T11107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.298934][T11107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.336705][T11107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.369161][T11107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.799210][T13552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.847077][T13552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.048359][T27176] netlink: 484 bytes leftover after parsing attributes in process `syz.4.5895'. [ 799.090115][T27174] netlink: 'syz.2.5896': attribute type 3 has an invalid length. [ 799.118730][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.137255][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.162881][T27179] tipc: New replicast peer: 255.255.255.255 [ 799.191001][T27179] tipc: Enabled bearer , priority 10 [ 799.266453][ T49] net_ratelimit: 133 callbacks suppressed [ 799.266494][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.297420][T27181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5897'. [ 799.306907][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 799.434965][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.485490][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.537867][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.581734][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.616230][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.627686][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 799.793615][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 799.850924][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 800.076911][T27217] netlink: 'syz.1.5907': attribute type 1 has an invalid length. [ 800.304418][T13889] tipc: Node number set to 2226602794 [ 800.520614][T27243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5914'. [ 800.682010][T27252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5915'. [ 800.963863][T27270] nbd: must specify an index to disconnect [ 801.045157][T27252] syz_tun (unregistering): left allmulticast mode [ 801.408637][T27285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5924'. [ 801.498444][T27285] veth0_to_team: entered promiscuous mode [ 801.538228][T27285] vlan0: entered promiscuous mode [ 801.573789][T27285] hsr1: entered promiscuous mode [ 801.694454][T27294] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 801.792452][ T5826] IPVS: starting estimator thread 0... [ 801.912276][T27302] IPVS: using max 31 ests per chain, 74400 per kthread [ 802.199337][T27330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5937'. [ 802.234973][T27330] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5937'. [ 802.252563][T27330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5937'. [ 802.728840][T27362] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5944'. [ 802.777691][T27359] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5944'. [ 803.053328][T27377] ipt_REJECT: TCP_RESET invalid for non-tcp [ 803.116917][T27379] chnl_net:caif_netlink_parms(): no params data found [ 803.197807][T27382] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 803.292965][T27382] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 803.728144][T27415] syzkaller0: entered promiscuous mode [ 803.761622][T27415] syzkaller0: entered allmulticast mode [ 804.274589][T13552] net_ratelimit: 116 callbacks suppressed [ 804.274615][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.307674][T27449] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 804.309728][T27442] netlink: 'syz.4.5964': attribute type 1 has an invalid length. [ 804.354995][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.414389][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.449609][T27442] bond5: entered promiscuous mode [ 804.455875][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.466945][T27442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 804.474339][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.494875][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.502668][T13552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 804.627141][T27442] bond5: (slave bridge5): making interface the new active one [ 804.655662][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.709340][T27442] bridge5: entered promiscuous mode [ 804.715315][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.734581][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 804.809129][T27442] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 804.915399][T27478] tipc: Enabling of bearer rejected, media not registered [ 805.220109][T27492] __nla_validate_parse: 4 callbacks suppressed [ 805.220130][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 805.291511][T27495] netlink: 'syz.0.5976': attribute type 1 has an invalid length. [ 805.314083][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 805.486559][T27495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 805.537829][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5981'. [ 805.595874][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5978'. [ 806.422451][T27552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5991'. [ 806.454763][T27552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5991'. [ 806.479426][T27556] netlink: 'syz.3.5992': attribute type 178 has an invalid length. [ 806.621535][T27566] x_tables: duplicate underflow at hook 2 [ 806.661551][T27567] x_tables: duplicate underflow at hook 2 [ 807.009995][T27585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6000'. [ 807.157739][T27590] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6001'. [ 807.171753][T27590] netlink: 'syz.0.6001': attribute type 22 has an invalid length. [ 807.199297][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6001'. [ 807.232765][T27590] netlink: 'syz.0.6001': attribute type 22 has an invalid length. [ 807.267278][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6001'. [ 807.431666][T27598] netlink: 'syz.4.6006': attribute type 1 has an invalid length. [ 807.446223][T27598] netlink: 'syz.4.6006': attribute type 2 has an invalid length. [ 807.511038][T27598] netlink: 'syz.4.6006': attribute type 2 has an invalid length. [ 807.537467][T27598] netlink: 'syz.4.6006': attribute type 2 has an invalid length. [ 808.185959][T27626] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 808.227511][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 808.250301][T27631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 808.268159][T27631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 808.277826][T27631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 808.288003][T27631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.399604][T27628] virt_wifi0 speed is unknown, defaulting to 1000 [ 808.955873][T16556] syz_tun (unregistering): left allmulticast mode [ 808.973846][ T5830] Bluetooth: hci0: command tx timeout [ 809.230448][T27660] Cannot find add_set index 0 as target [ 809.366550][ T49] net_ratelimit: 100 callbacks suppressed [ 809.366575][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.439715][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.496922][ T49] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.537406][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 809.543929][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 809.677247][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.735799][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.829737][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.864862][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.894627][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 809.930567][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 810.165640][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.236525][T27628] chnl_net:caif_netlink_parms(): no params data found [ 810.324408][ T5830] Bluetooth: hci5: command tx timeout [ 810.492855][T27628] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.514450][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.530578][T27628] bridge_slave_0: entered allmulticast mode [ 810.547116][T27628] bridge_slave_0: entered promiscuous mode [ 810.597354][T27628] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.622931][T27720] __nla_validate_parse: 6 callbacks suppressed [ 810.623890][T27720] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6035'. [ 810.665098][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.687616][T27628] bridge_slave_1: entered allmulticast mode [ 810.714425][T27628] bridge_slave_1: entered promiscuous mode [ 810.868368][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6039'. [ 810.942058][T27628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.986002][T27737] IPVS: length: 255 != 24 [ 811.056678][T27628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.317807][T27628] team0: Port device team_slave_0 added [ 811.343238][T27749] FAULT_INJECTION: forcing a failure. [ 811.343238][T27749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.389988][T27749] CPU: 1 UID: 0 PID: 27749 Comm: syz.4.6044 Not tainted syzkaller #0 PREEMPT(full) [ 811.390017][T27749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.390031][T27749] Call Trace: [ 811.390039][T27749] [ 811.390048][T27749] dump_stack_lvl+0xe8/0x150 [ 811.390086][T27749] should_fail_ex+0x412/0x560 [ 811.390117][T27749] _copy_from_user+0x2d/0xb0 [ 811.390147][T27749] ___sys_sendmsg+0x1c6/0x360 [ 811.390187][T27749] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.390249][T27749] ? __fget_files+0x2a/0x420 [ 811.390278][T27749] ? __fget_files+0x3a0/0x420 [ 811.390314][T27749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 811.390348][T27749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.390393][T27749] ? __pfx_ksys_write+0x10/0x10 [ 811.390426][T27749] do_syscall_64+0x14d/0xf80 [ 811.390450][T27749] ? trace_irq_disable+0x3b/0x150 [ 811.390479][T27749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.390501][T27749] ? clear_bhb_loop+0x40/0x90 [ 811.390525][T27749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.390545][T27749] RIP: 0033:0x7f44e699c799 [ 811.390565][T27749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.390583][T27749] RSP: 002b:00007f44e7823028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.390606][T27749] RAX: ffffffffffffffda RBX: 00007f44e6c15fa0 RCX: 00007f44e699c799 [ 811.390620][T27749] RDX: 0000000000000080 RSI: 00002000000021c0 RDI: 0000000000000003 [ 811.390692][T27749] RBP: 00007f44e7823090 R08: 0000000000000000 R09: 0000000000000000 [ 811.390705][T27749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.390717][T27749] R13: 00007f44e6c16038 R14: 00007f44e6c15fa0 R15: 00007ffc20933db8 [ 811.390750][T27749] [ 811.843246][T27761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 812.405825][ T5830] Bluetooth: hci5: command tx timeout [ 814.176643][T27628] team0: Port device team_slave_1 added [ 814.210798][T27628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.234360][T27628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.275138][T27628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.288326][T27762] tipc: Enabling of bearer rejected, failed to enable media [ 814.337201][T27628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.375554][T27628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.419218][T27628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.444412][ T6340] net_ratelimit: 176 callbacks suppressed [ 814.444438][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.486314][ T5830] Bluetooth: hci5: command tx timeout [ 814.504463][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.614567][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.614601][T27628] hsr_slave_0: entered promiscuous mode [ 814.634717][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.662529][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.688446][T27628] hsr_slave_1: entered promiscuous mode [ 814.708172][T27628] debugfs: 'hsr0' already exists in 'hsr' [ 814.724190][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 814.726621][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.734776][ C0] lec:lec_tx_timeout: lec0 [ 814.759386][T27628] Cannot create hsr debugfs directory [ 814.856816][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.914947][ T6340] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.951253][T27783] netlink: 'syz.4.6053': attribute type 1 has an invalid length. [ 814.960207][T11105] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 814.964368][T27783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6053'. [ 815.016176][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 815.528869][T27817] netlink: 'syz.3.6061': attribute type 1 has an invalid length. [ 815.537529][T27817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6061'. [ 815.557595][T27628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.581680][T27628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.710641][T27816] team0: Device ip6gre1 is of different type [ 815.818939][T27826] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6063'. [ 815.982697][T27628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.003706][T27628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.158495][T27836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6064'. [ 816.216791][T27628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.245966][T27628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.329838][T27846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6068'. [ 816.403071][T27628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.419419][T27628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.485470][T27846] netlink: 'syz.3.6068': attribute type 83 has an invalid length. [ 816.575055][ T5830] Bluetooth: hci5: command tx timeout [ 816.770730][T27628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 816.825729][T27628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 816.871625][T27628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 816.927128][T27862] bond0: entered promiscuous mode [ 816.947948][T27862] bond_slave_0: entered promiscuous mode [ 816.968467][T27862] bond_slave_1: entered promiscuous mode [ 816.987502][T27862] batadv0: entered promiscuous mode [ 816.995635][T27862] debugfs: 'hsr1' already exists in 'hsr' [ 817.001905][T27862] Cannot create hsr debugfs directory [ 817.015776][T27862] hsr1: entered promiscuous mode [ 817.022518][T27862] hsr1: entered allmulticast mode [ 817.030381][T27862] bond0: entered allmulticast mode [ 817.039108][T27862] bond_slave_0: entered allmulticast mode [ 817.056598][T27862] bond_slave_1: entered allmulticast mode [ 817.062574][T27862] batadv0: entered allmulticast mode [ 817.070957][T27862] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 817.084295][T27862] bond0: left promiscuous mode [ 817.090661][T27862] bond_slave_0: left promiscuous mode [ 817.098473][T27862] bond_slave_1: left promiscuous mode [ 817.106515][T27862] batadv0: left promiscuous mode [ 817.153315][T27628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 817.223444][T27879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6075'. [ 817.436702][T27893] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 817.472623][T27895] macvlan0: entered promiscuous mode [ 817.708198][T27628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.744490][T27904] netlink: 'syz.0.6080': attribute type 5 has an invalid length. [ 817.833980][T27902] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 817.865308][T27628] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.906108][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.915295][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.951145][T13552] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.960935][T13552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.648349][T27926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6087'. [ 818.685975][T27929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6088'. [ 818.725105][T27926] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6087'. [ 818.830064][T27935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.248099][T27628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.419057][T27628] veth0_vlan: entered promiscuous mode [ 819.474338][T11107] net_ratelimit: 149 callbacks suppressed [ 819.474361][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.498087][T27628] veth1_vlan: entered promiscuous mode [ 819.541474][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6094'. [ 819.545368][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.624697][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.665145][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.678184][T27628] veth0_macvtap: entered promiscuous mode [ 819.704865][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.715659][T27957] netlink: 'syz.3.6095': attribute type 29 has an invalid length. [ 819.727725][T27957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6095'. [ 819.741493][T27628] veth1_macvtap: entered promiscuous mode [ 819.749635][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.776413][ T1325] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.805299][ T6354] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.837668][T27628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.851236][T13552] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.885670][T11107] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 819.907709][T27628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.952072][T11107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.987583][T11107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.028960][T11107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.057257][T11107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.348336][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.368421][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.486069][T27960] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 820.504157][T27960] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 820.514345][T27960] CPU: 0 UID: 0 PID: 27960 Comm: syz.0.6096 Not tainted syzkaller #0 PREEMPT(full) [ 820.527267][T27960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.540066][T27960] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 820.546022][T27960] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 29 30 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 820.571833][T27960] RSP: 0018:ffffc90005e478e8 EFLAGS: 00010207 [ 820.579680][T27960] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 820.589345][T27960] RDX: ffffc9000e5f2000 RSI: 00000000000001e2 RDI: 00000000000001e3 [ 820.599730][T27960] RBP: ffff88802c7b6a00 R08: ffff888039e9bc80 R09: 0000000000000008 [ 820.608622][T27960] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000 [ 820.619336][T27960] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000bc8f3c [ 820.629174][T27960] FS: 00007fb1dfcdf6c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 820.640674][T27960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.648285][T27960] CR2: 0000200000002580 CR3: 000000007b7d0000 CR4: 00000000003526f0 [ 820.658431][T27960] Call Trace: [ 820.665222][T27960] [ 820.668352][T27960] ? __alloc_skb+0x4e5/0x7d0 [ 820.674611][T27960] ? skb_put+0x11b/0x210 [ 820.680910][T27960] rose_write_internal+0x1256/0x1b60 [ 820.686546][T27960] ? lockdep_hardirqs_on+0x7a/0x110 [ 820.693984][T27960] ? __pfx_rose_write_internal+0x10/0x10 [ 820.700494][T27960] ? timer_delete+0x245/0x340 [ 820.707490][T27960] rose_release+0x25b/0x510 [ 820.712962][T27960] sock_close+0xc3/0x240 [ 820.717953][T27960] ? __pfx_sock_close+0x10/0x10 [ 820.723388][T27960] __fput+0x44f/0xa70 [ 820.728709][T27960] task_work_run+0x1d9/0x270 [ 820.733442][T27960] ? __pfx_task_work_run+0x10/0x10 [ 820.738693][T27960] ? task_work_add+0x395/0x440 [ 820.743766][T27960] ? __pfx_task_work_add+0x10/0x10 [ 820.749401][T27960] get_signal+0x11eb/0x1330 [ 820.756148][T27960] arch_do_signal_or_restart+0xbc/0x830 [ 820.762003][T27960] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 820.769987][T27960] exit_to_user_mode_loop+0x86/0x480 [ 820.776474][T27960] ? rcu_is_watching+0x15/0xb0 [ 820.783140][T27960] do_syscall_64+0x32d/0xf80 [ 820.788672][T27960] ? trace_irq_disable+0x3b/0x150 [ 820.794529][T27960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.802264][T27960] ? clear_bhb_loop+0x40/0x90 [ 820.808129][T27960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.814077][T27960] RIP: 0033:0x7fb1ded9c799 [ 820.819344][T27960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.841528][T27960] RSP: 002b:00007fb1dfcdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 820.854618][T27960] RAX: 0000000000000000 RBX: 00007fb1df016090 RCX: 00007fb1ded9c799 [ 820.865186][T27960] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000004 [ 820.874127][T27960] RBP: 00007fb1dee32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 820.883371][T27960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.892780][T27960] R13: 00007fb1df016128 R14: 00007fb1df016090 R15: 00007fff51b9b3d8 [ 820.903331][T27960] [ 820.907517][T27960] Modules linked in: [ 820.913674][T27960] ---[ end trace 0000000000000000 ]--- [ 820.926822][ T6340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.940827][ T6340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.005303][T27960] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 821.018540][T27960] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 29 30 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 821.085596][T27960] RSP: 0018:ffffc90005e478e8 EFLAGS: 00010207 [ 821.093371][T27960] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 821.106800][T27960] RDX: ffffc9000e5f2000 RSI: 00000000000001e2 RDI: 00000000000001e3 [ 821.117293][T27960] RBP: ffff88802c7b6a00 R08: ffff888039e9bc80 R09: 0000000000000008 [ 821.130160][T27960] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000 [ 821.141082][T27960] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000bc8f3c [ 821.152866][T27960] FS: 00007fb1dfcdf6c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 821.168157][T27960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.178620][T27960] CR2: 00007f656ffea4b8 CR3: 000000007b7d0000 CR4: 00000000003526f0 [ 821.189437][T27960] Kernel panic - not syncing: Fatal exception [ 821.196512][T27960] Kernel Offset: disabled [ 821.201981][T27960] Rebooting in 86400 seconds..