last executing test programs: 3.206018196s ago: executing program 1 (id=1556): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/138, 0x2000, 0x1800, 0x6, 0x1}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xa, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 2.963946816s ago: executing program 3 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x2f0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001fc0)={0x0, 0x80}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000002040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x400000, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000001f80)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10404240}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) clock_gettime(0x5, &(0x7f0000000000)) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000000d00)=""/4078, 0xfee}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000a00)=""/213, 0xd5}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000180)=""/173, 0xad}], 0x8, 0x0, 0x5c}, 0x10182) 2.828470994s ago: executing program 0 (id=1561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x5, 0x6, 0x5, 0x8, 0x200, 0x5, 0xfffffff9, 0x4}}}}]}, 0x58}}, 0xc0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 64) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) 2.800386081s ago: executing program 1 (id=1562): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000480), 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2, 0x7ff, 0xc}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(r1) 2.765860761s ago: executing program 3 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x9ee}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7fffffffffffffff}, {0xc}}]}, 0xd0}}, 0x40000) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1b}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060}, 0x20000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000c0}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4040028}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x400, 0x76}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20008005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@gettclass={0x24, 0x2a, 0x400, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xfff1, 0x8}, {0xb, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x74e6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fffffff, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0xbf1bc4da8003c45b) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d80)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000e80)=0xe8) sendmsg$nl_xfrm(r10, &(0x7f0000001140)={&(0x7f0000000d40), 0xc, &(0x7f0000001100)={&(0x7f0000000ec0)=@acquire={0x22c, 0x17, 0x2, 0x70bd28, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x4d3, 0x3c}, @in=@multicast2, {@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0xb, 0x4e24, 0x6, 0x2, 0x80, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x4e21, 0x1000, 0x4e20, 0x81, 0xa, 0x0, 0x20, 0x5c, 0x0, r11}, {0x1, 0x5, 0x9, 0x7ff, 0xe, 0x7f, 0x2, 0xd4}, {0x8, 0x7, 0x5, 0x4}, 0x10000, 0x6e6bba, 0x0, 0x0, 0x1, 0x3}, 0x6, 0x6, 0x9, 0x70bd26}, [@lastused={0xc}, @algo_auth={0xa9, 0x1, {{'sha256-avx\x00'}, 0x308, "dd10ff744572ecd00a0d379e94a81f476040734eea867eb44926d3331460b009a6a2cad6c347a2066336c83927d31b24086fc75b482cc3b00f30ecbb39b0ce31bc39dcbcb80ffcbfd6b23eccab3d320f1e377d2993e1aeb7762243d95b0eec45be"}}, @coaddr={0x14, 0xe, @in=@empty}, @policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xa}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20044041}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000011c0)={'lo\x00', 0xed55}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000012c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001300)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r12, &(0x7f0000001540)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x5c, r13, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004810) 2.713926897s ago: executing program 2 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{}, {0x3, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0xc, 0x0, 0x1}}, {{0x3}, {0x2, 0x1}}], 0x40) syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00f401001514848b4df791efd680a4b0071d331037cd6612d2b5c9b53c88d1b262ce6415bd5a087351ba8f215230d0c5eb8a3ff8ef36fe5204693928a3f5372b7b92d902e5752fa0e71119d0d21d56b667b179fec44d054265a7aeb85bc20e1d83b0646aa6025bf7c3060ef735ff48b1ff2209e9cf89009b54f3f34b60d0089df05e4305561f6ffe3a97c5", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2517000000440006803c000400676b6d286165732900000000000000000000000000000000000000000000000014000000bf1dddca2049e38b2f49083c278c97edd08cd4e8040005"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4014) 2.679270117s ago: executing program 0 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="117e05454e12cf49d7fcc00ef6800e82dd30684475d948ded43d02361195d849ee5ec86122734267b8eeb63f2e55062aa8a9def826c9237a64d8553ec26d4f681e71033b620d34d202343a36d7e414bf67f391b600867e2f1d3532c81b612d3e94935ce3d5281426a5abd3ce36478b535aaf40541964d7d379035c04f3073d193e3aa9fdc4435bab0514a4c48206dc1176b3b8cce5f1a276a2b21dc3033bd503058552b2236bed192423984ac963f0ffbfe86b95b3c69a686706b1098d91fbe31999881502e425e0e02e5a30a18586f4ea500e138f3f1510e7f1439957f3a0963c7b55b522c32233e0", @ANYRES16=r2, @ANYBLOB="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"], 0x260}, 0x1, 0x0, 0x0, 0x40801}, 0x4000081) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) 2.628308586s ago: executing program 3 (id=1566): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.581847245s ago: executing program 1 (id=1567): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}}}}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @empty}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @empty}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0xe, r1, 0x33}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000540)="0b5e9c0fef97b78ef8f87958d00e21355ed6d1bdabf8850d1a87be67c5a160c46919265fb41e4e43fe4cae8ae3cde406954e93e8a469a2d5d037e7c67089eb478c266eb22fa27749e5acf076610e0f42eb869f6c07ad58648217ec51047680685aa56bf4dcbcf44252c2f7eb64702fb6565f8e88b4fb6e4762ef0a60648aa51fe465711d8a70203004561154374791efec81334aff", 0x95}, {&(0x7f0000000300)="e05c0d1e148bfedb32a415", 0xb}], 0x2, 0x0, 0x0, 0x8000}, 0x4000084) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x800) getpeername$packet(r4, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x6, 0x9, 0x3, 0xa}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r11, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x40) socket(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r14, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) 2.496237001s ago: executing program 2 (id=1568): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000400000006000000ffffffff00000000", @ANYRES32=0x1, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003000000dfda377c67d9914cfa6f00"/33], 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="babd0000000000000000000000000000000b37abdfbc0e92d09f7b0d1cc512c2b2896ba8377b400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000004000"/28], 0x50) 2.476158748s ago: executing program 1 (id=1569): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.414113898s ago: executing program 4 (id=1570): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) 2.413683447s ago: executing program 0 (id=1571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xb4, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8c}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x874c8455725ed668}, 0x200488c8) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) 2.382662802s ago: executing program 4 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) splice(r0, &(0x7f0000000000)=0x9, r0, &(0x7f0000000040)=0x5, 0x0, 0x4) 2.336645814s ago: executing program 2 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0xfffffffffffffe2d, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, 0x3, 0x7, 0x107, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc41}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x60}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000005) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x1d4d045b, 0xffffffffffffffff, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7749, 0x7fffffff, 0xffff6019, 0x800, r1, 0xd, '\x00', 0x0, r2, 0x0, 0x0, 0x2, 0x3}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001a800800028004"], 0x34}, 0x1, 0x2}, 0x0) 2.257857486s ago: executing program 4 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f7c7ced72c81ee29023f2a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) (async) 2.213308566s ago: executing program 4 (id=1575): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@dellinkprop={0x40, 0x6d, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x800, 0x4280}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0xffffffff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3d045}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 2.173428171s ago: executing program 0 (id=1576): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x3, 0x0, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="050003"], 0x28}}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x291}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8004) 2.173026535s ago: executing program 2 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xcb, &(0x7f0000000680)=""/203, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r8, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000002200)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r11, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0b, 0xfac05]}]]}, 0x38}}, 0x4000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x48, 0x18, 0x1, 0x12]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x6, 0x4}, {0x4}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a843500140600000000000004"], 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r14 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x200000000, 0x40000000007, 0x20000a0de, 0x2, 0x2, 0x200000003, 0x4000000000400}, {0x5}, 0x4, 0x400, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.941990244s ago: executing program 3 (id=1578): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x7f, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.853841898s ago: executing program 1 (id=1579): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB="680200000005010400000000000000000000000054020100"/40], 0x268}}, 0x0) getsockname(r0, 0x0, &(0x7f0000000ac0)) 1.823506132s ago: executing program 2 (id=1580): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) (async) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) 1.761905233s ago: executing program 4 (id=1581): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x0, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x5, 0x3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x0, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x5, 0x3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) 1.758911361s ago: executing program 0 (id=1582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x8}]}, 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg2\x00'}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0xffffff0d}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x38, r4, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x20000000) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x7c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x41, 0x2a, [@link_id={0x65, 0x12, {@random="ed0564e1e55e", @device_b, @broadcast}}, @link_id={0x65, 0x12, {@random="7fe8316c8681", @device_a, @broadcast}}, @mic={0x8c, 0x10, {0x96, "fd88c63cbbe8", @short="7d7ad3d5328e4067"}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="167bbae2e71fffdf9184232efefc57c2062d2a773ed67e05a00b"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/1052]}, 0x494) sendmmsg$alg(r8, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20044881) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x20007}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x148, 0x0, &(0x7f0000000740)="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", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/131}], 0xfffffffffffffeef}, 0x2020) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x30}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.652659261s ago: executing program 4 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) write$tun(r0, &(0x7f0000000b40)={@void, @val={0x3, 0x1, 0x101, 0x8000, 0x9}, @ipv6=@icmpv6={0x9, 0x6, "51278d", 0x12ba, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@fragment={0x2b, 0x0, 0x2d, 0x0, 0x0, 0x6, 0x66}, @dstopts={0x2b, 0x12, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x6, [0xffffffff7fffffff, 0x3, 0x6]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x23, 0xa3, [0x9]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "7997a6e5c27678ee2bbd15ab9c9209ce29e7c57b4f9f336da72edf689fa09ab08eabb74d7da2eef1185bda7f77e4805963294c48238d78566eeea6a42bdf215921f00e6778f822e8c22d693c06"}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x22, 0x1a, "48b805fd1cc556fc55aac1bceca5a35e122ea4a2b1e4b16162774947cf996bd06b33187c883519b70e04dbe15f2724f1828cb3d4abdf05937e128051c16a8e0c1aa97634e0bff96f6f04c0aa75c766bec858409ba1fc7227e22999e31a4c96f455681c7f7b346a5826111abe9ef7cdb33b632a30187b8687c0367119d2da9d6308b423e6f070751ecd948718023cee236f51305a07fa28fd1082d941cc14c09ddda522526097a736a9785c66377e9e4526da0992afe33638610c61b7d913f26be529bc078bd25f91b09f9595a4993c0661"}, {0x5, 0xb, "9094ec0927dd42df1af92fbeb4ebc6edc16e625601119261de64b0ae1e641c0a065feda8f070496e5c031f9a3eedd64cd4a7ba31221a4e1eb8105e4f8dd786f684b54ec990d22afda0c5ef0549dc32033681315d98a4ef4f2b"}, {0x0, 0x1c, "6cd6062081b588436de794e02f775e1e825e1356ac82c9058aca93c7ec4e05380b3eda4cbd6d88afadbea63133106d9de160d120641504bf43cd9dc55cb71ab1481123435140a9c130708a65e4e3a495b29d6941c3416006ef1ce2b92d5a112e1e70c66d69e4a4d67c93d18bacab023ddd5da5b39c3fad434b608b631ce0835b59e0a923366d10d560366eddde9482e614666b021e0cd8cf2e42fe238e5ce4830f6527fafaa8f4f42e1e56a2df51cd7dae7e123a72490ab18c10324e0f7b30a57322e6381a7df54886e45631b6d289e18db296a1ac45b01f685f752c71aebb2c"}, {0x1f, 0x200, "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"}]}}}}, 0x12ec) 1.647079212s ago: executing program 2 (id=1584): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x9], [0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x401}]}}]}, 0xb0}}, 0x48004) 1.55371241s ago: executing program 1 (id=1585): r0 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0xa, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES8=r0, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000640000002503000000000000080026006c090000"], 0x80}}, 0x14) sendmsg$sock(r0, &(0x7f0000002440)={&(0x7f00000010c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(echainiv(morus640),sha224-asm)\x00'}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001140)="c34c2f19b6d4050ec63c8862e546268719bcb19f6b8944ad06f73e1b37ecac2f3f547def581ea139ee236c8caef592777c25e8cc367e46c55698356114ae75a5927d9827543e127a9c381f9d45e657ca4c9f49ca89f63191207b2e21a68fcd5a3c4553faca4a284bdfeaf29f5fe993d060c5b0d61bad002eefad794f98ec124bc3992a47b0dc3547fe21006af9d8fb6fe581c9a0d71f2198c8f1736f9c4a699e6911498dec7791e4f8c967c2e5a8", 0xae}, {&(0x7f0000001200)="ea6922a44550ef137a7eed2537662be04c39e69820fe5737d4e8cdc1c1eab6a0c5aa257597ac0a9879be2306490448f01f345052e7191ea5103c0a2a", 0x3c}, {&(0x7f0000001240)="06a757638f7a6d26272ec8472613c773d5d942b5f10d3ea8daab6053ed27fa425ebf0541e04366670879cb4122e9f337a5d824d2b90c0fb31cb7d48e5c11dd2958837b68c1f5d1775d3e501eecea468b15fde65383c04718d0c829e04a6b4c482626c0ce5ecc8837b917b2ac78557e7f7c3eff0865cf456b2f60e4d81eed0e3b2e8d1270e666f015349de6a1a5862df6b061b5e0f74fddeeb3bb0b292aec05b1981dc5712f7bb95b465a160be3890758e4202cb319c4f219c181c41639a0ee02bc1e94558ce6f7e6e682cc25821637a63fab6968ae1a2d15ceef77a62f2a1e72549964d2f4155d44e11d5ce34b27f34057f1c4259383edd8652e960905186dfe684bef2314f557dc1393f805fc0eb419950372480ceda1c236d2636295c6f15fedbee441943e3c392d466531542058ac8a268c6a1232c193e7e0d16fb930395f30e7f1ea6fa3ec5de1c1f95ff3e5d701e9bf45f4b86a1c7aa828e02b9132208b9dbee3a3da3cba0ca5f570364abc1a0f94554077a264da4e74427997f39fdc983c2ede6b92a97d4b636d7c1cc4ca1d4e8fac7c6b8e88a0df38a12a949638fea91b992dec5f3d153386e91c20d7a091972e30451aaf41f6559466f85cf23b5354f72eeab5aa4a551295f0a36aa607fa2a4810185e9fb432d6d1d9212c0e16e6986cef818516ae481cc2473e0f934176e20b7ee114af2a5c5c65e18756bb4697d9c121929b44b41bb5c9d99d32546fb7d610b1d9db9aa6d950a57a56deaef176f004ff25168d5cdcb53db5bf889afbf1d2ac27a47c619295730e161427f23fd6f871344b0201bf3c590da604d7b8be78297e653744d189c2916d1ecc235f05afdda94122d56e259044a8706f063e58a6f665df74d4b119e594b706495e5e45fe78ce9a9621ba09cce2c740839c80e7d7827060009877a15d990337fcd92da1f376d20b143e606000fe1d89bf167fddc314a701ecb1ada756e5fbafc9668b23e9b7beefffa3e63779af6c461271b170bbd092f6374f85efb6857379c8c158b54229b75b80ffc590ca6674b77bc7b23c0c97f922cf78d4f49cfcd8ce7069fb98f30f00d1f011906886a2b67ced6adfc39e7cf9eed4ab5f37cedd378ef0d7d3427273f4a40765c2918dc0d372a0d8f4e697b59c6d67d430bb72aba5b45cefb3b96d456b10f99991bed677906bf95f4fe67f2eea3659de86ee98a288a3b009f025bde1756e884c392965d5256624c831131f45e11c892fc210e8c7160bd305cd30b894b449210812ed5312db1d379e7eb6f1899e5b04a9537b9cb4c399af3dcdba460769624b703b63ff3e5bfc97efbe05a3dc3517ffcca97ddaa826fdb45049a06961d28aa5c7ee67b3fbdb6ce61422a5337e0cff66a208c186eef2e6dd06108e08f7fe7161c9f9033b19f3f0958d8b7603d2d634c70f87656f03079e4c11ffb0e52830270e2fb6e92723e5f4ef480a8d30213f45ec9f5286be1a08afd8dfa6321796aae4a37ff6b54a63cedaf896dece6dbb840d03a619f4685e99f59eafefdb7e04a51df37e8279d835f3e4c4ef312a9b79c44d25a8c4ed1a3c5817c1b5a6e6bf414f7cd19e93a1a4617b25d60479a7fccd934e4a22f2137a0b507b45d2b9a80423440732178c9fc6267dd6946d00be0264bb59c6829ba8616128ef4429dd54ae63bde95e066890d5aa5ac77168fb46e4c56da0a61cfafef56d5c2820f6f46ee24d1e58ec6ef239c183189604f3a9ef96cf40465e57e0d3fc6a0125cb4459211e0218a32020abd5a34e2e75825eede7117858ff09d96b569d3f51efc9c32f7fecd5ddea73277087638c8cc7b5ccefc3c48c2a1dd8bbd60ccf23d3af5b7a6bf444ef113fe9d3d7cc362a611b20894f6102aa8de234296fad3abedd979b514b21f72517050cc837e35bdc1614bc51ebfc7377267596c7721f75b003644ec08824399c4bb45eb5114a90d1b84582a1784462b92f232831d6617fdbf06bfda947eb1bf1729ab30cb380d34d7ef05439b8515ea091acdb63d2fe4b6bdbd9c648276e046d74b5f35741721ff1cd224f94105d82999917c8e4f500325d4d0bd1618eb8275934f5eddf4660d41bd381f1520914b3c469a788af7fdb01d88eec9cd12361834b18614f714533e5d78839c349fb4baabc5d1d4d749c488967e7ddb34f1934ef7adaa370453c6a95f83be8de87c8d35c21ecddb71ca54a308a8a4018fe6c58249717cfe5c7238908ab90b9c37d209f7251ee78e1f2945dba28103f2230185859011beeac2d2daac72dae732427c74ff4ce59de15942ea6e6627a6326bc02d124a49e35a44db19a435aa4f2ac584db84679e13754b13ccf659980902529d390db0d9dd3a31fe620c44db6e802db78b4a69ffe7541cd001cdf6d421da04415365503be842a5eddaa333e4f9fc8f772c3e7c9bb995eb7455cae78098ed8f57acf9ed1166bb65b859962ad83240f4a088a86bba87e17e0f3c06c24971853abfb0e37f8cc9cbe144f45017eaf235a9d9025c63fa5dfe4eb1aa6950ec7cd63a19ea9af68a6bb24b60472f2e42f5946af95fdfa5c1b80bf6a4332d7f2215cdfd2f6ab207a7ad94caa5667cd49218f34c1ee032765de7527c69a1ff40ad05bfe1d9f3fa18bf50e998dc738ace89e939e101829d0b10125c71784cae9181c773653a6b324d1b8cd06851b9133722a302f157fc75e4ec277f17b5980be1609ff6d184c92a758b8ca0a2b7d73fac6b5a119758ad63a68f0d1fd12cc21dea1e452394efd6fd9bda50b3e78b05cf8f682fe6e8b4089ae7c78554c9d7e535a37a29d60501cab5f327d194f6f02d52e66bd8c2f513add89cdf53f9c8dbd0575521980cd5636247cf9555b8acb60c60dea15ec520cfc59aec9a4a80090139ab1dd58766b810b95933af49836265d39976231166173fe2143497f6f9f19b737d040ef00bad468bd572e52086006ca174dab7312aee8e6a9708a210288cb8558405c35bd605723724f40c72de76cfa7ff77d4393a5f96949fcfea9428336d5509f94c652e2b74507a3ab54716a04821ac22501fbfffe2702d511af70eaabd04b1bbdb3422e9c6ea45e751ea73e1405622b4fcfcd7d8eb7bfe395d09abc9e89389b0b06d7d131cde3d856579cff2abc934f8d140979019df13d339cba9f6c1f96bf7359a9ba715c642d4db11da2fd37c1aeff2a4ef6ad096224406ad2cb8b3f676eaef6e3b503e115eb26a1985e83ad81532b3b1c5c450bddc37b6e96288be73f344f07b5306843525d6d4ecf06de3b47d8007d206dde44f35e4ed453507b820cb2a1f10a0bdb439df359b436ca25b319e55465fe4bc35fee78ffad6ae953c6363ce4c4c7bda9f71ea23c27e017d81187d6f07f8f5af17de9b1f41fac1801128f8ebf4aa73443a318b1a3bacdf887a8c834ceed0c0178b43f64bf2c14dcae365a0ce481e0cdf5aa477c50eafb1b40139d943c4de7041c9f950a3deb456dd934fa6cfcaacdea1ccd584bd9a4692783d735213a9ea4e8e95a9e95d97b1eb384f4a6ac6c044b5d20b4c1c3f600a240bbfe5209e9a389bf3a38bab3efc5a298fc7ef6d7b8fe98664340b0badd0b74fd48fe3a2e234f105840da1c7ddbf79eaa2aa48c23387e756a5ab5e49b6987ad0fd9e8e036b74e764070f1f1cfd6c29b6c8531957e7a9edd718989a326dc6823c25250b172702e215b46b9cc6be89851c3872b296cfed5335581e7dce8cd5a3835491ad42151d016d3ba03a6e846e428702b72c2642e66eb1065861124a68d56d2763baaf2c0d5ab1b3364e66231125ae6afbf790924cfa7e16a350c6eb6c88d1aa7c6840580f630c9b49f1ad29e5273c6a19854facafaae3f288eeed6d16ad2b167592c77b08f50c65466ca57f41c289ffcd476c9e78d815b2df1fe49e94be623369eb7cbad67044a84228ad27267ea4e10071910bc2bd2262dde9730d29704b79e5eaa45a7857c261d0223468b77c71387819a4534fb21422524b273d477f7c867bef4193841f776074bf317372326192e70a7548f6009e89dd51f3f80f36598a447df94a9c9948a7aecaee490ae33af02babf5f6953e4253d5ba4f30c81f7d471097e55a81a3179605fab57576483c41d894f242807017e160d60133616eb06ac724ac2e14fd4c95559e55ff8f9ddd15582ed4be4cae1875ed058401768dd809ac9a4ce6e221b6b4159ad0b1c20b1e0e0dd0369c947b4d9c0d34156fa7e6a4bd8286f447959549fbc1140e3f57d83d3c3f7e7ebc157c493696c186d12c114af48c50945b7f48ef9106c55be76fd27955a90ab9b4d8e35f9f4cc9fdabd6d832b61ae9c565da430efc5c3e8d51b1704ddec98cba6f0757099f4764efdebf49e4beabda2d5e4d9e30b9dc3b98ceff32b7bbc0d6a601e839e182bc80fea18d964e117807990f7191f432158890e04238c61179a1f9793412fd7ca2ba78bef05ac7cad3de8e3af7aab24ff5ad87feaaa2c2279fe2db7d31d858b2e45fa14de04745cacfebf06729f48717008dd37d6d282703841f1c560bec15e53f87fc1c81cbc2f2206f55d7a062627402b3b41d9682b65abc336a2a3a1789d521d417b665456fbfbb5fe553ae01b6fdd66bc883b22ef95bd9a8d9eab656aba26cd36e6704c50fa0e6ee9a8c16d72f8f850cf497f6ca8c46ec2ce2d155ed6f92e1cdb0b860318cf5bdf962b927d57ea990e9e3e2d303424c3b6a866510be3587eb499ba3fedc96b36180f7b36403cc4ffbecd421913949a1f61878a62653410fc9c0da3d8d517611973d918c722ce233bb59b8152032774e8319136bcc93f4d22b9885ba508da2ac0c1dfc61d10674ddaee713202b61834fd48821dded1bcd149b2cdadf6e17394e06e1865f8ca948cd7225d3138051ea2cc53524f667c87e5478f485d2a3c6a27b818d69a8ef5493b4a01dc1070fbcbbee9e2665fb05e2b6383e51e47c2d03d9d6e2a18debdd51ad9fcfe7598dfe91874844ad9275c3b5f327d3d7af29e26299b08085d6fee7f2ec0130b2d2fdf4e1da57cfcbace72a2f4d1c85090e6b15cec438e12903d5030c91752dc27f72c38e4f9ac5e486072475718bdda6599bc987c0d4d33fb22c0a5aba06abe978f38c3c18d621e04d1d3fbd4a531172bdf042ec3dc6029a63e7ff15f447d525a84a1ff6b71f2c40f26a6fd1cc2efda9059efd52e89228588eedaecb805100b8ea473aae5c6c28b68cf3c8da95cc328ec5d27a10203f1a01d67f6c2dc5a95023ebca1225d2fa24bce36e997e3bf55e60d750a9ce7362346e44a6886bfa83ed09e4c81b79e82c2d7af6adbbdcc1467f28dcb151c7879fbd2c516d95c832bbd5c6409f2eff2b79b9be1ebfb4261491ef613549c5346c57244504cc7a4adcf3b5a7450c4219762ddf9cdbe2eafde82b893ccf64b9b7d40ab725934d498ca35fd0391694eddc19806c4b533dec8cd1c3593578e4c8233dfaeabb483418db6347e7962a0bcab2d3aa8dbd1a6872a60d16ea0a508db88bdd0fb4cc6c53e46f3cdf60061ab4cadf3329e2e56bc9d56ea8e61585ee188b9cfc65189efa1a4fee7b5d18e18bd8a24faf23fcbebd9f9bd4536b9aac5ce913d151cdfd2079e107852a91b906a0570bb3c2164792b80cc2bd2d9f6a2a51692b88376a37b639659b8ba1e75f16860793211d068b47ca013a8d3e262c62c43555be25e44a19ecd7a430aa603d92490822e5075c17ef0a4e7962dcddd8b095beb6583d225b301dab690cf386c7c274b59bbf61318c593b7c84f8af45f83b89f8c2f484f7ab4935bb378eb298495a43cf1175a672212d10a9300fc4d1b1b4b543a", 0x1000}, {&(0x7f0000002240)="c21fa27308f9a2c91baa2b377864f7b82a87d310bfa1c03372f86c00c7e6473642054ac026b6ea74dc9bd08456f92d3a", 0x30}, {&(0x7f0000002280)="38683318bb1e86e6130739f081452e6ba6ec676d3d6a89508a196c", 0x1b}], 0x5, &(0x7f0000002340)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9935}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xade}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xd8}, 0x8090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r9, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x5, 0x0, {{0x1f, 0x4, 0x0, 0x6, 0x7c, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x44, 0x3, 0x2, [{@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0x1}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x3c, 0xfd, 0x3, 0x5, [{@private=0xa010101, 0x5}, {@empty, 0x1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@broadcast, 0x3}, {@empty, 0x2}, {@multicast1, 0x5f8c}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@empty}, &(0x7f0000000280)=0x14) 1.552114392s ago: executing program 3 (id=1586): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) (async) write(r0, &(0x7f00000001c0)="1800000016005f0227ffffff95127032046dd136f00fffff", 0x18) 1.457673293s ago: executing program 3 (id=1587): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={r3, 0x2}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r9, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) 0s ago: executing program 0 (id=1588): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00fe800000005ca0a3fa000000000000bbac1414bb000000000000000000000000000000e7"], 0x38}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="021304020900000027bd7000fedb934b05001100320000000a004e2200000004fe80000000000000000000f0000000bb0300000000000000010016004e240000010015004e230000"], 0x48}}, 0x4001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 67.905625][ T5812] cgroup: Unknown subsys name 'net' [ 68.036587][ T5812] cgroup: Unknown subsys name 'cpuset' [ 68.045447][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.460027][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.324615][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.331048][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.957438][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.981823][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.990036][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.998444][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.006289][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.014521][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.022783][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.033024][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.063809][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.071897][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.072760][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.094728][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.095139][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.114369][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.116720][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.127590][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.131319][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.136810][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.142503][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.150446][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.161216][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.166394][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.171520][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.182176][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.188029][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.895310][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 72.949921][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.988239][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 73.008276][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.106322][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.199824][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.207884][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.215745][ T5822] bridge_slave_0: entered allmulticast mode [ 73.222784][ T5822] bridge_slave_0: entered promiscuous mode [ 73.255017][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.262173][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.269604][ T5822] bridge_slave_1: entered allmulticast mode [ 73.276553][ T5822] bridge_slave_1: entered promiscuous mode [ 73.400177][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.407718][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.415400][ T5829] bridge_slave_0: entered allmulticast mode [ 73.422395][ T5829] bridge_slave_0: entered promiscuous mode [ 73.432813][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.442177][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.449945][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.457183][ T5823] bridge_slave_0: entered allmulticast mode [ 73.464208][ T5823] bridge_slave_0: entered promiscuous mode [ 73.481747][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.489123][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.496447][ T5835] bridge_slave_0: entered allmulticast mode [ 73.504002][ T5835] bridge_slave_0: entered promiscuous mode [ 73.512452][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.520104][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.527721][ T5829] bridge_slave_1: entered allmulticast mode [ 73.534805][ T5829] bridge_slave_1: entered promiscuous mode [ 73.543514][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.552739][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.560258][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.567572][ T5823] bridge_slave_1: entered allmulticast mode [ 73.574968][ T5823] bridge_slave_1: entered promiscuous mode [ 73.582028][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.589278][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.596440][ T5831] bridge_slave_0: entered allmulticast mode [ 73.603428][ T5831] bridge_slave_0: entered promiscuous mode [ 73.610763][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.618124][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.625330][ T5835] bridge_slave_1: entered allmulticast mode [ 73.632244][ T5835] bridge_slave_1: entered promiscuous mode [ 73.680274][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.687878][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.695149][ T5831] bridge_slave_1: entered allmulticast mode [ 73.702104][ T5831] bridge_slave_1: entered promiscuous mode [ 73.742847][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.779370][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.790887][ T5822] team0: Port device team_slave_0 added [ 73.800152][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.822108][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.834048][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.844845][ T5822] team0: Port device team_slave_1 added [ 73.862341][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.874633][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.954224][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.975524][ T5829] team0: Port device team_slave_0 added [ 73.983145][ T5835] team0: Port device team_slave_0 added [ 73.990874][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.997845][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.024252][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.037399][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.044906][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.071283][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.084198][ T5823] team0: Port device team_slave_0 added [ 74.108361][ T5829] team0: Port device team_slave_1 added [ 74.116145][ T5835] team0: Port device team_slave_1 added [ 74.123636][ T5823] team0: Port device team_slave_1 added [ 74.194215][ T5843] Bluetooth: hci3: command tx timeout [ 74.194465][ T5145] Bluetooth: hci1: command tx timeout [ 74.206554][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.213741][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.239648][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.252286][ T5831] team0: Port device team_slave_0 added [ 74.273440][ T5145] Bluetooth: hci4: command tx timeout [ 74.273452][ T51] Bluetooth: hci2: command tx timeout [ 74.273766][ T5843] Bluetooth: hci0: command tx timeout [ 74.292236][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.299361][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.325746][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.337454][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.344478][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.370565][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.383611][ T5831] team0: Port device team_slave_1 added [ 74.397045][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.404024][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.429962][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.451976][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.459058][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.485109][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.528784][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.535813][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.562246][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.574284][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.581235][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.607492][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.624955][ T5822] hsr_slave_0: entered promiscuous mode [ 74.631296][ T5822] hsr_slave_1: entered promiscuous mode [ 74.654527][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.661628][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.687581][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.752611][ T5823] hsr_slave_0: entered promiscuous mode [ 74.759126][ T5823] hsr_slave_1: entered promiscuous mode [ 74.765486][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 74.771264][ T5823] Cannot create hsr debugfs directory [ 74.816432][ T5835] hsr_slave_0: entered promiscuous mode [ 74.822908][ T5835] hsr_slave_1: entered promiscuous mode [ 74.829427][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 74.835221][ T5835] Cannot create hsr debugfs directory [ 74.869001][ T5829] hsr_slave_0: entered promiscuous mode [ 74.875982][ T5829] hsr_slave_1: entered promiscuous mode [ 74.881973][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.887758][ T5829] Cannot create hsr debugfs directory [ 74.996569][ T5831] hsr_slave_0: entered promiscuous mode [ 75.002814][ T5831] hsr_slave_1: entered promiscuous mode [ 75.009058][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 75.014834][ T5831] Cannot create hsr debugfs directory [ 75.451912][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.464267][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.484622][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.504615][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.548651][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.566575][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.599426][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.610186][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.660827][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.673058][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.682948][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.695891][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.824315][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.854655][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.886982][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.915321][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.945751][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.005665][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.027863][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.042649][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.057434][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.069969][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.077266][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.106867][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.114147][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.126332][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.133608][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.142159][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.155775][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.185135][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.215232][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.222351][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.233397][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.240723][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.254256][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.261381][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.273703][ T5843] Bluetooth: hci1: command tx timeout [ 76.293528][ T5843] Bluetooth: hci3: command tx timeout [ 76.297276][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.306063][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.353474][ T5843] Bluetooth: hci0: command tx timeout [ 76.353532][ T5145] Bluetooth: hci2: command tx timeout [ 76.358902][ T5843] Bluetooth: hci4: command tx timeout [ 76.450527][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.515136][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.683916][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.736817][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.744030][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.757102][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.764333][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.882215][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.899818][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.938881][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.948333][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.999729][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.006904][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.040217][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.047478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.066272][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.171464][ T5822] veth0_vlan: entered promiscuous mode [ 77.216878][ T5835] veth0_vlan: entered promiscuous mode [ 77.242984][ T5822] veth1_vlan: entered promiscuous mode [ 77.277353][ T5835] veth1_vlan: entered promiscuous mode [ 77.401839][ T5835] veth0_macvtap: entered promiscuous mode [ 77.417353][ T5822] veth0_macvtap: entered promiscuous mode [ 77.465951][ T5822] veth1_macvtap: entered promiscuous mode [ 77.478562][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.489187][ T5835] veth1_macvtap: entered promiscuous mode [ 77.561940][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.611666][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.627831][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.661740][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.676817][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.684981][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.694400][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727030][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736440][ T1006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745638][ T1006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754925][ T1006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.767863][ T5829] veth0_vlan: entered promiscuous mode [ 77.778637][ T2898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826571][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.836455][ T5829] veth1_vlan: entered promiscuous mode [ 77.898125][ T5823] veth0_vlan: entered promiscuous mode [ 77.938749][ T5823] veth1_vlan: entered promiscuous mode [ 77.990159][ T5829] veth0_macvtap: entered promiscuous mode [ 78.001395][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.010643][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.036487][ T5829] veth1_macvtap: entered promiscuous mode [ 78.061488][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070249][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.079480][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.107914][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.118275][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.130488][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.140177][ T5831] veth0_vlan: entered promiscuous mode [ 78.175114][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.183821][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.193105][ T5831] veth1_vlan: entered promiscuous mode [ 78.209717][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.220878][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.244264][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.257892][ T5823] veth0_macvtap: entered promiscuous mode [ 78.282359][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.285320][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334953][ T5823] veth1_macvtap: entered promiscuous mode [ 78.363932][ T5843] Bluetooth: hci3: command tx timeout [ 78.369372][ T5843] Bluetooth: hci1: command tx timeout [ 78.392947][ T5831] veth0_macvtap: entered promiscuous mode [ 78.433552][ T5843] Bluetooth: hci4: command tx timeout [ 78.439040][ T51] Bluetooth: hci2: command tx timeout [ 78.439052][ T5145] Bluetooth: hci0: command tx timeout [ 78.468057][ T5831] veth1_macvtap: entered promiscuous mode [ 78.491979][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.537934][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.566275][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.581220][ T5948] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 78.607706][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.616818][ T5948] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'. [ 78.625848][ T5951] Zero length message leads to an empty skb [ 78.704189][ T5948] `: renamed from bond0 (while UP) [ 78.746425][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.775103][ T1006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775690][ T5953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.791719][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.814540][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.830076][ T1006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.848868][ T5953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.855143][ T1006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.889453][ T1006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.902912][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.982536][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.018895][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.137979][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.150494][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.227462][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.263632][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.271480][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.354462][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.377766][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.526027][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.557628][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.687050][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.714877][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.017946][ T5994] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 80.033208][ T5999] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.056522][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.058248][ T5997] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.18'. [ 80.073698][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.438163][ T5843] Bluetooth: hci1: command tx timeout [ 80.445052][ T51] Bluetooth: hci3: command tx timeout [ 80.513718][ T5843] Bluetooth: hci0: command tx timeout [ 80.519166][ T5843] Bluetooth: hci4: command tx timeout [ 80.526758][ T51] Bluetooth: hci2: command tx timeout [ 80.600518][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 80.910709][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 81.292774][ T6046] netlink: 'syz.0.33': attribute type 5 has an invalid length. [ 81.312521][ T6046] netlink: 140 bytes leftover after parsing attributes in process `syz.0.33'. [ 81.465232][ T6054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.37'. [ 81.834501][ T6070] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 81.849291][ T6070] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 82.136985][ T6086] FAULT_INJECTION: forcing a failure. [ 82.136985][ T6086] name failslab, interval 1, probability 0, space 0, times 1 [ 82.158660][ T6087] vxlan0: entered promiscuous mode [ 82.166714][ T6087] vxlan0: entered allmulticast mode [ 82.172025][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.4.47 Not tainted syzkaller #0 PREEMPT(full) [ 82.172047][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.172063][ T6086] Call Trace: [ 82.172070][ T6086] [ 82.172078][ T6086] dump_stack_lvl+0x189/0x250 [ 82.172108][ T6086] ? __pfx____ratelimit+0x10/0x10 [ 82.172131][ T6086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.172149][ T6086] ? __pfx__printk+0x10/0x10 [ 82.172169][ T6086] ? __pfx___might_resched+0x10/0x10 [ 82.172193][ T6086] ? fs_reclaim_acquire+0x7d/0x100 [ 82.172219][ T6086] should_fail_ex+0x414/0x560 [ 82.172243][ T6086] should_failslab+0xa8/0x100 [ 82.172265][ T6086] __kmalloc_noprof+0xcb/0x4f0 [ 82.172283][ T6086] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 82.172307][ T6086] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 82.172334][ T6086] genl_family_rcv_msg_doit+0xb8/0x300 [ 82.172359][ T6086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 82.172385][ T6086] ? apparmor_capable+0x137/0x1b0 [ 82.172411][ T6086] ? bpf_lsm_capable+0x9/0x20 [ 82.172428][ T6086] ? security_capable+0x7e/0x2e0 [ 82.172454][ T6086] genl_rcv_msg+0x60e/0x790 [ 82.172479][ T6086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.172494][ T6086] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 82.172513][ T6086] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 82.172527][ T6086] ? __pfx_nl80211_post_doit+0x10/0x10 [ 82.172549][ T6086] ? __asan_memcpy+0x40/0x70 [ 82.172572][ T6086] ? __pfx_ref_tracker_free+0x10/0x10 [ 82.172599][ T6086] netlink_rcv_skb+0x205/0x470 [ 82.172618][ T6086] ? __lock_acquire+0xab9/0xd20 [ 82.172641][ T6086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.172659][ T6086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.172702][ T6086] ? down_read+0x1ad/0x2e0 [ 82.172723][ T6086] genl_rcv+0x28/0x40 [ 82.172738][ T6086] netlink_unicast+0x82f/0x9e0 [ 82.172766][ T6086] ? __pfx_netlink_unicast+0x10/0x10 [ 82.172783][ T6086] ? netlink_sendmsg+0x642/0xb30 [ 82.172806][ T6086] ? skb_put+0x11b/0x210 [ 82.172832][ T6086] netlink_sendmsg+0x805/0xb30 [ 82.172864][ T6086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.172889][ T6086] ? aa_sock_msg_perm+0xf1/0x1d0 [ 82.172912][ T6086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 82.172933][ T6086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.172956][ T6086] __sock_sendmsg+0x21c/0x270 [ 82.172978][ T6086] ____sys_sendmsg+0x505/0x830 [ 82.173008][ T6086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.173049][ T6086] ? import_iovec+0x74/0xa0 [ 82.173075][ T6086] ___sys_sendmsg+0x21f/0x2a0 [ 82.173101][ T6086] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.173164][ T6086] ? __fget_files+0x2a/0x420 [ 82.173183][ T6086] ? __fget_files+0x3a0/0x420 [ 82.173214][ T6086] __x64_sys_sendmsg+0x19b/0x260 [ 82.173240][ T6086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.173269][ T6086] ? __pfx_ksys_write+0x10/0x10 [ 82.173290][ T6086] ? do_syscall_64+0xbe/0xfa0 [ 82.173314][ T6086] do_syscall_64+0xfa/0xfa0 [ 82.173334][ T6086] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.173356][ T6086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.173372][ T6086] ? clear_bhb_loop+0x60/0xb0 [ 82.173392][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.173408][ T6086] RIP: 0033:0x7f2d37b8eec9 [ 82.173429][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.173443][ T6086] RSP: 002b:00007f2d38985038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.173462][ T6086] RAX: ffffffffffffffda RBX: 00007f2d37de5fa0 RCX: 00007f2d37b8eec9 [ 82.173474][ T6086] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 82.173483][ T6086] RBP: 00007f2d38985090 R08: 0000000000000000 R09: 0000000000000000 [ 82.173493][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.173502][ T6086] R13: 00007f2d37de6038 R14: 00007f2d37de5fa0 R15: 00007ffc8dd52bf8 [ 82.173531][ T6086] [ 82.668428][ T6098] raw_sendmsg: syz.1.48 forgot to set AF_INET. Fix it! [ 82.690236][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.719430][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.731296][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.745447][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.972801][ T6106] veth3: entered promiscuous mode [ 83.212886][ T6122] 8021q: VLANs not supported on ip_vti0 [ 83.306787][ T6127] ip6gre1: entered allmulticast mode [ 83.392344][ T6130] bond1: entered promiscuous mode [ 83.399657][ T6130] bond1: entered allmulticast mode [ 83.406002][ T6130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.561852][ T6141] vlan2: entered promiscuous mode [ 83.573796][ T6141] bridge0: entered promiscuous mode [ 83.591132][ T6142] FAULT_INJECTION: forcing a failure. [ 83.591132][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 83.608957][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.3.62 Not tainted syzkaller #0 PREEMPT(full) [ 83.608981][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.608990][ T6142] Call Trace: [ 83.608997][ T6142] [ 83.609005][ T6142] dump_stack_lvl+0x189/0x250 [ 83.609027][ T6142] ? __pfx____ratelimit+0x10/0x10 [ 83.609050][ T6142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.609065][ T6142] ? __pfx__printk+0x10/0x10 [ 83.609088][ T6142] ? __pfx___might_resched+0x10/0x10 [ 83.609116][ T6142] should_fail_ex+0x414/0x560 [ 83.609139][ T6142] should_failslab+0xa8/0x100 [ 83.609163][ T6142] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 83.609181][ T6142] ? __alloc_skb+0x112/0x2d0 [ 83.609206][ T6142] __alloc_skb+0x112/0x2d0 [ 83.609228][ T6142] nl80211_tx_mgmt+0x9cd/0xdf0 [ 83.609252][ T6142] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 83.609269][ T6142] ? __pfx___mutex_lock+0x10/0x10 [ 83.609302][ T6142] ? nl80211_pre_doit+0x4f1/0x930 [ 83.609327][ T6142] genl_family_rcv_msg_doit+0x215/0x300 [ 83.609352][ T6142] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 83.609382][ T6142] ? bpf_lsm_capable+0x9/0x20 [ 83.609396][ T6142] ? security_capable+0x7e/0x2e0 [ 83.609422][ T6142] genl_rcv_msg+0x60e/0x790 [ 83.609444][ T6142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.609459][ T6142] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 83.609477][ T6142] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 83.609491][ T6142] ? __pfx_nl80211_post_doit+0x10/0x10 [ 83.609512][ T6142] ? __asan_memcpy+0x40/0x70 [ 83.609534][ T6142] ? __pfx_ref_tracker_free+0x10/0x10 [ 83.609559][ T6142] netlink_rcv_skb+0x205/0x470 [ 83.609577][ T6142] ? __lock_acquire+0xab9/0xd20 [ 83.609600][ T6142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 83.609618][ T6142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.609658][ T6142] ? down_read+0x1ad/0x2e0 [ 83.609678][ T6142] genl_rcv+0x28/0x40 [ 83.609692][ T6142] netlink_unicast+0x82f/0x9e0 [ 83.609722][ T6142] ? __pfx_netlink_unicast+0x10/0x10 [ 83.609744][ T6142] ? netlink_sendmsg+0x642/0xb30 [ 83.609761][ T6142] ? skb_put+0x11b/0x210 [ 83.609786][ T6142] netlink_sendmsg+0x805/0xb30 [ 83.609817][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.609842][ T6142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 83.609866][ T6142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.609887][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.609914][ T6142] __sock_sendmsg+0x21c/0x270 [ 83.609936][ T6142] ____sys_sendmsg+0x505/0x830 [ 83.609965][ T6142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.609998][ T6142] ? import_iovec+0x74/0xa0 [ 83.610024][ T6142] ___sys_sendmsg+0x21f/0x2a0 [ 83.610050][ T6142] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.610112][ T6142] ? __fget_files+0x2a/0x420 [ 83.610131][ T6142] ? __fget_files+0x3a0/0x420 [ 83.610162][ T6142] __x64_sys_sendmsg+0x19b/0x260 [ 83.610188][ T6142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 83.610221][ T6142] ? __pfx_ksys_write+0x10/0x10 [ 83.610243][ T6142] ? do_syscall_64+0xbe/0xfa0 [ 83.610269][ T6142] do_syscall_64+0xfa/0xfa0 [ 83.610290][ T6142] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.610310][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.610324][ T6142] ? clear_bhb_loop+0x60/0xb0 [ 83.610345][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.610361][ T6142] RIP: 0033:0x7fc18478eec9 [ 83.610377][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.610390][ T6142] RSP: 002b:00007fc1855ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.610409][ T6142] RAX: ffffffffffffffda RBX: 00007fc1849e5fa0 RCX: 00007fc18478eec9 [ 83.610422][ T6142] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 83.610432][ T6142] RBP: 00007fc1855ad090 R08: 0000000000000000 R09: 0000000000000000 [ 83.610442][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.610452][ T6142] R13: 00007fc1849e6038 R14: 00007fc1849e5fa0 R15: 00007ffe649086f8 [ 83.610484][ T6142] [ 83.618017][ T6144] veth1_macvtap: left promiscuous mode [ 83.882148][ T6151] sctp: [Deprecated]: syz.2.67 (pid 6151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.882148][ T6151] Use struct sctp_sack_info instead [ 84.053961][ T6158] __nla_validate_parse: 3 callbacks suppressed [ 84.053978][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 84.448398][ T6180] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 84.568079][ T6182] netlink: 232 bytes leftover after parsing attributes in process `syz.2.73'. [ 84.582719][ C1] Unknown status report in ack skb [ 84.586884][ T6182] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 84.597591][ T981] IPVS: starting estimator thread 0... [ 84.604520][ T6176] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 84.638735][ T6176] veth3: entered promiscuous mode [ 84.686237][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 84.713441][ T6196] IPVS: using max 27 ests per chain, 64800 per kthread [ 84.739112][ T6197] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.784456][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.793532][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.844631][ T6180] vlan2: entered allmulticast mode [ 84.861421][ T6180] veth1_to_hsr: entered allmulticast mode [ 85.036428][ T6211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.286756][ T6225] team0: Port device geneve2 added [ 85.307177][ T6228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.455672][ T6228] bond1 (unregistering): Released all slaves [ 85.520381][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 86.142523][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 86.354168][ T5145] Bluetooth: hci4: command tx timeout [ 86.666140][ T6311] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 86.681855][ T10] cfg80211: failed to load regulatory.db [ 86.961969][ T6319] tipc: Started in network mode [ 86.968717][ T6319] tipc: Node identity f64553ee4def, cluster identity 4711 [ 86.986063][ T6319] tipc: Enabled bearer , priority 0 [ 86.997439][ T6324] syzkaller1: entered promiscuous mode [ 87.008410][ T6324] syzkaller1: entered allmulticast mode [ 87.036826][ T6322] syzkaller0: entered promiscuous mode [ 87.044372][ T6322] syzkaller0: entered allmulticast mode [ 87.065400][ T6332] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.126422][ T6293] tipc: Resetting bearer [ 87.173551][ T6291] tipc: Resetting bearer [ 87.228839][ T6291] tipc: Disabling bearer [ 87.453721][ T6345] Illegal XDP return value 4294967274 on prog (id 22) dev N/A, expect packet loss! [ 87.585729][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 87.604340][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 87.809823][ T6374] netlink: 'syz.3.123': attribute type 8 has an invalid length. [ 87.951457][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 87.984663][ T6381] tipc: Enabled bearer , priority 0 [ 88.041956][ T6378] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 88.055065][ T10] IPVS: starting estimator thread 0... [ 88.107493][ T6393] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 88.120842][ T6396] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 88.140304][ T6382] syzkaller0: entered promiscuous mode [ 88.146374][ T6382] syzkaller0: entered allmulticast mode [ 88.152651][ T6382] tipc: Resetting bearer [ 88.162675][ T6384] veth0_macvtap: left promiscuous mode [ 88.177120][ T6390] IPVS: using max 30 ests per chain, 72000 per kthread [ 88.212493][ T6377] tipc: Resetting bearer [ 88.410121][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'. [ 89.054249][ T10] tipc: Node number set to 3148501998 [ 89.266587][ T6377] tipc: Disabling bearer [ 89.386428][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.400412][ T6425] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 89.409100][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.618902][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 89.663956][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 89.711613][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 89.759064][ T1006] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.804179][ T1006] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.812939][ T1006] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.838545][ T1006] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.214954][ T6518] tipc: Started in network mode [ 91.219866][ T6518] tipc: Node identity c648f2c195d3, cluster identity 4711 [ 91.262188][ T6518] tipc: Enabled bearer , priority 0 [ 91.283096][ T6522] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 91.321567][ T6525] syzkaller0: entered promiscuous mode [ 91.327502][ T6525] syzkaller0: entered allmulticast mode [ 91.334167][ T6525] tipc: Resetting bearer [ 91.444822][ T6527] netlink: 'syz.4.157': attribute type 39 has an invalid length. [ 91.456498][ T2921] tipc: Resetting bearer [ 91.509711][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 91.518927][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 91.528633][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 91.552206][ T6536] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 91.563846][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 91.584289][ T6517] tipc: Resetting bearer [ 92.283546][ T5896] tipc: Node number set to 1402729153 [ 92.320335][ T6533] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 92.482756][ T6517] tipc: Disabling bearer [ 92.491671][ T6536] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 92.789549][ T6562] netlink: 68 bytes leftover after parsing attributes in process `syz.4.166'. [ 93.449647][ T6609] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 93.557082][ T5145] Bluetooth: hci0: command 0x0401 tx timeout [ 93.812452][ T6622] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 93.829235][ T6622] netlink: 'syz.3.178': attribute type 2 has an invalid length. [ 93.896539][ T6626] netlink: 'syz.2.179': attribute type 10 has an invalid length. [ 93.896539][ T6628] netlink: 'syz.2.179': attribute type 10 has an invalid length. [ 93.954250][ T6626] team0: Port device dummy0 added [ 94.383787][ T6642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.435175][ T6657] __nla_validate_parse: 8 callbacks suppressed [ 94.435192][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 94.471534][ T6649] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 94.490318][ T6649] netlink: 'syz.3.187': attribute type 11 has an invalid length. [ 94.500426][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.191'. [ 94.508986][ T6649] netlink: 'syz.3.187': attribute type 5 has an invalid length. [ 94.849380][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 94.991598][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 95.936362][ T6744] netlink: 80 bytes leftover after parsing attributes in process `syz.2.215'. [ 95.954290][ T6747] ieee802154 phy1 wpan1: encryption failed: -90 [ 95.961332][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 95.986718][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 95.996600][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 96.030252][ T6743] trusted_key: syz.0.216 sent an empty control message without MSG_MORE. [ 96.034265][ T6749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.076888][ T6743] netlink: 216 bytes leftover after parsing attributes in process `syz.0.216'. [ 96.087348][ T6743] NCSI netlink: No device for ifindex 813332851 [ 96.281121][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 96.546888][ T6786] netlink: 'syz.3.227': attribute type 11 has an invalid length. [ 96.554989][ T6786] netlink: 'syz.3.227': attribute type 11 has an invalid length. [ 96.581275][ T6786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.227'. [ 96.960997][ T6809] validate_nla: 5 callbacks suppressed [ 96.961015][ T6809] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 96.995628][ T6809] netlink: 'syz.4.232': attribute type 2 has an invalid length. [ 97.164953][ T6818] netlink: 'syz.2.235': attribute type 10 has an invalid length. [ 97.174065][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.179647][ T6820] syz.4.237: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.182751][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.231993][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.239237][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.247692][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.254891][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.263945][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(full) [ 97.263970][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.263981][ T6820] Call Trace: [ 97.263989][ T6820] [ 97.263997][ T6820] dump_stack_lvl+0x189/0x250 [ 97.264025][ T6820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.264045][ T6820] ? __pfx__printk+0x10/0x10 [ 97.264063][ T6820] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.264085][ T6820] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.264108][ T6820] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 97.264132][ T6820] warn_alloc+0x214/0x310 [ 97.264156][ T6820] ? stack_depot_save_flags+0x40/0x860 [ 97.264178][ T6820] ? __pfx_warn_alloc+0x10/0x10 [ 97.264201][ T6820] ? kasan_save_track+0x4f/0x80 [ 97.264219][ T6820] ? xskq_create+0x56/0x170 [ 97.264242][ T6820] ? xsk_init_queue+0xb0/0x110 [ 97.264262][ T6820] ? xsk_setsockopt+0x4dc/0x8d0 [ 97.264282][ T6820] ? do_sock_setsockopt+0x179/0x1b0 [ 97.264304][ T6820] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 97.264324][ T6820] ? do_syscall_64+0xfa/0xfa0 [ 97.264347][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.264373][ T6820] __vmalloc_node_range_noprof+0x125/0x12f0 [ 97.264426][ T6820] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.264454][ T6820] ? __kasan_kmalloc+0x93/0xb0 [ 97.264476][ T6820] vmalloc_user_noprof+0xad/0xf0 [ 97.264496][ T6820] ? xskq_create+0xbf/0x170 [ 97.264520][ T6820] xskq_create+0xbf/0x170 [ 97.264546][ T6820] xsk_init_queue+0xb0/0x110 [ 97.264571][ T6820] xsk_setsockopt+0x4dc/0x8d0 [ 97.264596][ T6820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.264621][ T6820] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.264644][ T6820] ? aa_sock_opt_perm+0xff/0x1b0 [ 97.264669][ T6820] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 97.264691][ T6820] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.264714][ T6820] do_sock_setsockopt+0x179/0x1b0 [ 97.264742][ T6820] __x64_sys_setsockopt+0x13f/0x1b0 [ 97.264771][ T6820] do_syscall_64+0xfa/0xfa0 [ 97.264796][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.264812][ T6820] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.264829][ T6820] ? clear_bhb_loop+0x60/0xb0 [ 97.264851][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.264868][ T6820] RIP: 0033:0x7f2d37b8eec9 [ 97.264884][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.264904][ T6820] RSP: 002b:00007f2d38985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.264923][ T6820] RAX: ffffffffffffffda RBX: 00007f2d37de5fa0 RCX: 00007f2d37b8eec9 [ 97.264939][ T6820] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 97.264950][ T6820] RBP: 00007f2d37c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 97.264960][ T6820] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.264971][ T6820] R13: 00007f2d37de6038 R14: 00007f2d37de5fa0 R15: 00007ffc8dd52bf8 [ 97.265004][ T6820] [ 97.265087][ T6820] Mem-Info: [ 97.300103][ T6818] `: (slave bridge0): Enslaving as an active interface with an up link [ 97.347407][ T6820] active_anon:5189 inactive_anon:0 isolated_anon:0 [ 97.347407][ T6820] active_file:2564 inactive_file:39878 isolated_file:0 [ 97.347407][ T6820] unevictable:768 dirty:411 writeback:0 [ 97.347407][ T6820] slab_reclaimable:10424 slab_unreclaimable:94361 [ 97.347407][ T6820] mapped:28978 shmem:1358 pagetables:1003 [ 97.347407][ T6820] sec_pagetables:0 bounce:0 [ 97.347407][ T6820] kernel_misc_reclaimable:0 [ 97.347407][ T6820] free:1331195 free_pcp:17540 free_cma:0 [ 97.635111][ T6820] Node 0 active_anon:20856kB inactive_anon:0kB active_file:10256kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116112kB dirty:1636kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11752kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.668611][ T6820] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.742451][ T6820] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.801422][ T6820] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 97.850503][ T6820] Node 0 DMA32 free:1424296kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20780kB inactive_anon:0kB active_file:10256kB inactive_file:157492kB unevictable:1536kB writepending:1628kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:45832kB local_pcp:21252kB free_cma:0kB [ 97.884099][ T6820] lowmem_reserve[]: 0 0 1 1 1 [ 97.888853][ T6820] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 97.919418][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 97.924940][ T6820] Node 1 Normal free:3887816kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:8320kB free_cma:0kB [ 97.962348][ T6820] lowmem_reserve[]: 0 0 0 0 0 [ 97.967255][ T6820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.995409][ T6820] Node 0 DMA32: 1471*4kB (UME) 666*8kB (UME) 169*16kB (UME) 273*32kB (UME) 47*64kB (UME) 18*128kB (UME) 15*256kB (ME) 10*512kB (UME) 3*1024kB (UME) 6*2048kB (M) 335*4096kB (M) = 1424444kB [ 98.055798][ T6820] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 98.098802][ T6820] Node 1 Normal: 212*4kB (UME) 51*8kB (UME) 50*16kB (UME) 58*32kB (UME) 22*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3887816kB [ 98.159430][ T6820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.197769][ T6820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.207308][ T6856] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 98.275288][ T6820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.341239][ T6820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.377580][ T6874] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 98.384317][ T6820] 43797 total pagecache pages [ 98.389928][ T6820] 0 pages in swap cache [ 98.413328][ T6820] Free swap = 124996kB [ 98.420032][ T6820] Total swap = 124996kB [ 98.428102][ T6874] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 98.432701][ T6820] 2097051 pages RAM [ 98.451815][ T6820] 0 pages HighMem/MovableOnly [ 98.462870][ T6820] 424452 pages reserved [ 98.476187][ T6820] 0 pages cma reserved [ 98.846512][ T6898] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 98.864268][ T6900] IPVS: set_ctl: invalid protocol: 2 172.20.20.11:21 [ 98.924483][ T6901] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 98.962228][ T6901] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 98.986780][ T6901] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 99.212714][ T6918] vlan2: entered allmulticast mode [ 99.234016][ T6918] gretap0: entered allmulticast mode [ 99.398864][ T6939] netlink: 'syz.2.270': attribute type 33 has an invalid length. [ 99.515151][ T6939] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 99.552071][ T6939] bond0 (unregistering): Released all slaves [ 99.626518][ T6956] tipc: Trying to set illegal importance in message [ 99.890228][ T6971] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 99.910265][ T6971] __nla_validate_parse: 51 callbacks suppressed [ 99.910284][ T6971] netlink: 216 bytes leftover after parsing attributes in process `syz.3.279'. [ 100.050405][ T6982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.284'. [ 100.061619][ T6984] netlink: 'syz.0.284': attribute type 21 has an invalid length. [ 100.133145][ T6980] netlink: 81 bytes leftover after parsing attributes in process `syz.1.282'. [ 100.144958][ T6984] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 100.180302][ T6989] netlink: 14 bytes leftover after parsing attributes in process `syz.4.286'. [ 100.343895][ T7003] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.350590][ T7003] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.438020][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 100.506422][ T6989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.556169][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 100.565240][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 100.576087][ T6989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.602106][ T6989] bond0 (unregistering): Released all slaves [ 100.681532][ T7019] "syz.1.291" (7019) uses obsolete ecb(arc4) skcipher [ 101.012662][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 101.052110][ T7044] pimreg3: entered allmulticast mode [ 101.060519][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 101.201673][ T7058] x_tables: duplicate underflow at hook 1 [ 101.296021][ T7065] tipc: Enabling of bearer rejected, media not registered [ 101.452835][ T7080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.625010][ T7084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.310'. [ 102.256886][ T7120] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 102.378903][ T7127] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.390154][ T7127] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 102.490086][ T7120] gretap1: entered promiscuous mode [ 102.508600][ T7120] gretap1: entered allmulticast mode [ 102.526876][ T7120] bond0: (slave gretap1): making interface the new active one [ 102.571003][ T7120] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 102.678748][ T7143] syzkaller0: entered promiscuous mode [ 102.726819][ T7143] syzkaller0: entered allmulticast mode [ 103.443030][ T7185] bridge_slave_0: left allmulticast mode [ 103.467222][ T7185] bridge_slave_0: left promiscuous mode [ 103.483410][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.528165][ T7185] bridge_slave_1: left allmulticast mode [ 103.535138][ T7185] bridge_slave_1: left promiscuous mode [ 103.556221][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.587321][ T7185] bond0: (slave bond_slave_0): Releasing backup interface [ 103.608096][ T7185] bond0: (slave bond_slave_1): Releasing backup interface [ 103.637662][ T7185] team0: Port device team_slave_0 removed [ 103.654732][ T7185] team0: Port device team_slave_1 removed [ 103.666908][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.689069][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.714731][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.728006][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.737044][ T7185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.780429][ T7188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.808463][ T7190] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 103.905915][ T7199] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 104.033386][ T5145] Bluetooth: hci0: command 0x0401 tx timeout [ 104.302487][ T7235] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 104.437144][ T7235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.702941][ T7266] Bluetooth: MGMT ver 1.23 [ 104.830094][ T7270] 8021q: VLANs not supported on ip_vti0 [ 105.351360][ T7292] __nla_validate_parse: 14 callbacks suppressed [ 105.351384][ T7292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.372'. [ 105.437998][ T7291] can: request_module (can-proto-0) failed. [ 105.464362][ T7303] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.472852][ T7303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.480321][ T7303] IPv6: NLM_F_CREATE should be set when creating new route [ 105.665372][ T30] audit: type=1800 audit(1759867599.407:2): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 105.665774][ T7315] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 105.710925][ T7315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 105.728891][ T7323] tunl0: entered allmulticast mode [ 105.739317][ T7315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 105.924160][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 105.940387][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 106.083961][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 106.100686][ T7342] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 106.196188][ T7342] netlink: 14 bytes leftover after parsing attributes in process `syz.1.389'. [ 106.768162][ T7380] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 106.777748][ T7380] netlink: 'syz.0.399': attribute type 2 has an invalid length. [ 106.843159][ T7342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.861300][ T7342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.889553][ T7342] bond0 (unregistering): Released all slaves [ 107.082632][ T7387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.174109][ T7396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.405'. [ 107.179010][ T7398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.405'. [ 107.217134][ T7392] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 107.219309][ T7402] pim6reg1: entered promiscuous mode [ 107.257495][ T7402] pim6reg1: entered allmulticast mode [ 107.278285][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.403'. [ 107.317062][ T7406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.403'. [ 107.489860][ T7416] netlink: 'syz.1.409': attribute type 33 has an invalid length. [ 107.701468][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 107.808364][ T7438] netlink: 'syz.4.416': attribute type 10 has an invalid length. [ 107.881442][ T7438] team0: Port device geneve0 added [ 108.048270][ T7446] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 108.054982][ T7448] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 108.197928][ T7452] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 108.406165][ T7454] syzkaller1: entered promiscuous mode [ 108.423391][ T7454] syzkaller1: entered allmulticast mode [ 108.577386][ T7465] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 109.196078][ T7504] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 109.207056][ T7504] dummy0: entered promiscuous mode [ 109.225801][ T7504] bridge0: port 3(dummy0) entered blocking state [ 109.232338][ T7504] bridge0: port 3(dummy0) entered disabled state [ 109.240879][ T7504] dummy0: entered allmulticast mode [ 109.266974][ T7504] bridge0: port 3(dummy0) entered blocking state [ 109.273503][ T7504] bridge0: port 3(dummy0) entered forwarding state [ 110.334408][ T7559] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.345765][ T7559] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 110.424166][ T7562] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 110.456488][ T7568] macvlan3: entered promiscuous mode [ 110.461817][ T7568] macvlan3: entered allmulticast mode [ 110.509342][ T7568] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 110.556898][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.582532][ T7572] vlan2: entered promiscuous mode [ 110.594049][ T7572] bond0: entered promiscuous mode [ 110.599463][ T7562] __nla_validate_parse: 11 callbacks suppressed [ 110.599478][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 110.615703][ T7572] vlan2: entered allmulticast mode [ 110.624719][ T7572] bond0: entered allmulticast mode [ 110.655454][ T7575] veth0: entered promiscuous mode [ 110.674810][ T7579] bond0: (slave gretap1): making interface the new active one [ 110.686319][ T7579] gretap1: entered promiscuous mode [ 110.692781][ T7579] gretap1: entered allmulticast mode [ 110.702559][ T7579] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 110.711596][ T7574] veth0: left promiscuous mode [ 110.775273][ T7590] netlink: 'syz.4.464': attribute type 12 has an invalid length. [ 110.785032][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'. [ 110.830243][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 110.843108][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.464'. [ 110.885263][ T7596] netlink: 696 bytes leftover after parsing attributes in process `syz.1.466'. [ 111.028683][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 111.157463][ T7606] delete_channel: no stack [ 111.190854][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 111.227430][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 112.150510][ T7611] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 112.159297][ T7611] netlink: 228 bytes leftover after parsing attributes in process `syz.4.474'. [ 112.256674][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 112.385839][ T7664] IPv6: sit1: Disabled Multicast RS [ 112.392118][ T7664] sit1: entered allmulticast mode [ 112.780713][ T7690] netlink: 'syz.1.493': attribute type 29 has an invalid length. [ 112.801631][ T7690] netlink: 'syz.1.493': attribute type 29 has an invalid length. [ 112.877348][ T7698] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 112.910453][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.078499][ T7706] tipc: Failed to remove unknown binding: 66,1,1/3148501998:911922816/911922818 [ 113.178892][ T7716] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.192969][ T7716] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 113.406842][ T2921] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.439276][ T2921] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.468174][ T2921] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.483612][ T7730] tipc: Enabled bearer , priority 0 [ 113.491644][ T7730] syzkaller0: entered promiscuous mode [ 113.498060][ T7730] syzkaller0: entered allmulticast mode [ 113.508411][ T7730] tipc: Resetting bearer [ 113.520569][ T2921] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.590584][ T7739] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 113.775277][ T7750] veth0: mtu less than device minimum [ 113.809499][ T7728] tipc: Resetting bearer [ 113.855542][ T7728] tipc: Disabling bearer [ 114.546568][ T7797] gretap0: entered promiscuous mode [ 114.585411][ T7797] 0{X: renamed from gretap0 [ 114.619164][ T7797] 0{X: left promiscuous mode [ 114.647789][ T7797] 0{X: entered allmulticast mode [ 114.675743][ T7797] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 115.103527][ T7828] tipc: Started in network mode [ 115.116663][ T7828] tipc: Node identity 2e11ed7e6d98, cluster identity 4711 [ 115.141203][ T7828] tipc: Enabled bearer , priority 0 [ 115.164605][ T7831] syzkaller0: entered promiscuous mode [ 115.177543][ T7831] syzkaller0: entered allmulticast mode [ 115.200418][ T7828] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 115.297644][ T7828] tipc: Resetting bearer [ 115.348052][ T7827] tipc: Resetting bearer [ 115.376027][ T7849] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 115.403206][ T7827] tipc: Disabling bearer [ 115.416518][ T7845] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 115.424297][ T7854] delete_channel: no stack [ 115.588846][ T7858] vxlan0: left promiscuous mode [ 115.643730][ T7862] __nla_validate_parse: 17 callbacks suppressed [ 115.643747][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 115.886977][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 115.921324][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 116.018521][ T7893] netlink: 'syz.4.548': attribute type 83 has an invalid length. [ 116.201409][ T7905] bridge0: port 1(ipvlan2) entered blocking state [ 116.211960][ T7905] bridge0: port 1(ipvlan2) entered disabled state [ 116.219936][ T7905] ipvlan2: entered allmulticast mode [ 116.233112][ T7905] bridge0: entered allmulticast mode [ 116.242620][ T7905] ipvlan2: left allmulticast mode [ 116.247821][ T7905] bridge0: left allmulticast mode [ 116.522471][ T7921] netlink: 'syz.3.557': attribute type 11 has an invalid length. [ 116.831115][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 116.957995][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 117.017797][ T7957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.565'. [ 117.035570][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 117.048949][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 117.107165][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.567'. [ 117.204114][ T7972] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 117.274410][ T7972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.357561][ T7977] bond3: (slave veth5): Enslaving as an active interface with a down link [ 117.386126][ T7972] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 117.507415][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 118.750360][ T8068] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 118.761611][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.769571][ T8068] bridge_slave_1: left allmulticast mode [ 118.790160][ T8068] bridge_slave_1: left promiscuous mode [ 118.802871][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.827613][ T8068] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 119.173052][ T8087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.613147][ T8113] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 119.622356][ T8102] team_slave_0: entered promiscuous mode [ 119.628233][ T8102] team_slave_1: entered promiscuous mode [ 119.634024][ T8102] geneve2: entered promiscuous mode [ 119.639415][ T8102] geneve0: entered promiscuous mode [ 119.644857][ T8113] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 119.695284][ T8102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.748929][ T8103] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 119.846183][ T8126] tipc: New replicast peer: 255.255.255.255 [ 119.878582][ T8126] tipc: Enabled bearer , priority 10 [ 119.977405][ T8133] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 120.394720][ T8154] veth5: entered promiscuous mode [ 120.403781][ T8154] veth5: entered allmulticast mode [ 120.993489][ T10] tipc: Node number set to 1133112702 [ 121.185562][ T8209] xt_l2tp: missing protocol rule (udp|l2tpip) [ 121.381243][ T8220] netlink: 'syz.4.643': attribute type 4 has an invalid length. [ 121.456263][ T8226] __nla_validate_parse: 49 callbacks suppressed [ 121.456279][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 121.468651][ T8219] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 121.499423][ T8226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.646'. [ 121.510953][ T8219] bond3 (unregistering): Released all slaves [ 121.516571][ T8231] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 121.536100][ T6805] IPVS: starting estimator thread 0... [ 121.542465][ T8231] IPVS: fo: FWM 3 0x00000003 - no destination available [ 121.579281][ T8226] gretap2: entered promiscuous mode [ 121.604633][ T8226] gretap2: entered allmulticast mode [ 121.643348][ T8232] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.016041][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 122.029890][ T8255] netlink: 364 bytes leftover after parsing attributes in process `syz.1.652'. [ 122.049265][ T8255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.652'. [ 122.113915][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 122.149343][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.656'. [ 122.176991][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 122.416539][ T8272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.424852][ T8272] batadv_slave_1: entered promiscuous mode [ 122.430823][ T8272] batadv_slave_1: entered allmulticast mode [ 122.522553][ T8277] tipc: Started in network mode [ 122.550324][ T8277] tipc: Node identity daa0526f6d92, cluster identity 4711 [ 122.573076][ T8277] tipc: Enabled bearer , priority 0 [ 122.644442][ T8277] syzkaller0: entered promiscuous mode [ 122.657373][ T8277] syzkaller0: entered allmulticast mode [ 122.676067][ T8277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.888000][ T8294] tipc: Resetting bearer [ 122.931583][ T8276] tipc: Resetting bearer [ 122.984714][ T8276] tipc: Disabling bearer [ 123.422659][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 123.434237][ T8326] delete_channel: no stack [ 123.442670][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 123.511819][ T8325] delete_channel: no stack [ 123.785781][ T8346] netlink: 'syz.4.677': attribute type 1 has an invalid length. [ 124.478450][ T8384] netlink: 'syz.4.690': attribute type 8 has an invalid length. [ 124.488187][ T8385] bridge_slave_1 (unregistering): left allmulticast mode [ 124.503736][ T8385] bridge_slave_1 (unregistering): left promiscuous mode [ 124.522693][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.612747][ T8390] xfrm1: entered promiscuous mode [ 124.623385][ T8390] xfrm1: entered allmulticast mode [ 125.093892][ T8407] syzkaller1: entered promiscuous mode [ 125.109687][ T8407] syzkaller1: entered allmulticast mode [ 125.224788][ T8422] bond2: option xmit_hash_policy: invalid value (64) [ 125.247389][ T8422] bond2 (unregistering): Released all slaves [ 125.357831][ T8430] tipc: Started in network mode [ 125.362762][ T8430] tipc: Node identity 5ad7f531de6, cluster identity 4711 [ 125.403476][ T8430] tipc: Enabled bearer , priority 0 [ 125.422118][ T8434] syzkaller0: entered promiscuous mode [ 125.453634][ T8434] syzkaller0: entered allmulticast mode [ 125.479670][ T8430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.480461][ T8439] openvswitch: netlink: Unknown key attributes 2 [ 125.500084][ T8432] openvswitch: netlink: Unknown key attributes 2 [ 125.579321][ T8434] tipc: Resetting bearer [ 125.623957][ T8429] tipc: Resetting bearer [ 125.727698][ T8429] tipc: Disabling bearer [ 126.015390][ T8472] netlink: 'syz.2.710': attribute type 7 has an invalid length. [ 126.466682][ T8500] __nla_validate_parse: 13 callbacks suppressed [ 126.466699][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 126.596577][ T8504] netlink: 'syz.2.723': attribute type 4 has an invalid length. [ 126.712845][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 126.858240][ T8519] netlink: 'syz.1.728': attribute type 12 has an invalid length. [ 126.861105][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 126.876237][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 126.895932][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 126.917081][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.956978][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.977124][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 126.989209][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.997996][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.096638][ T8529] netlink: 6 bytes leftover after parsing attributes in process `syz.2.731'. [ 127.100464][ T8538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.105819][ T8529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.144027][ T8536] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.300897][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 127.352236][ T8545] netlink: 'syz.3.735': attribute type 2 has an invalid length. [ 127.557452][ T8562] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 127.676687][ T8569] netlink: 'syz.0.743': attribute type 30 has an invalid length. [ 127.791330][ T8573] sctp: [Deprecated]: syz.3.745 (pid 8573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.791330][ T8573] Use struct sctp_sack_info instead [ 127.842663][ T8578] netlink: 96 bytes leftover after parsing attributes in process `syz.2.747'. [ 127.990915][ T8584] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 128.210068][ T8600] gretap0: entered promiscuous mode [ 128.216516][ T8600] vlan3: entered promiscuous mode [ 128.256070][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 128.545892][ T8610] netlink: 'syz.0.758': attribute type 16 has an invalid length. [ 128.577744][ T8610] netlink: 'syz.0.758': attribute type 17 has an invalid length. [ 128.622976][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.630318][ T8610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.689318][ T8610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.616023][ T8651] netlink: 'syz.0.770': attribute type 75 has an invalid length. [ 129.890112][ T8661] bridge2: entered promiscuous mode [ 129.895456][ T8661] bridge2: entered allmulticast mode [ 130.279485][ T8678] delete_channel: no stack [ 130.485076][ T8686] netlink: 'syz.1.780': attribute type 12 has an invalid length. [ 130.517598][ T8686] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 131.006632][ T8720] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 131.041278][ T8719] dvmrp1: entered allmulticast mode [ 131.494144][ T8744] bridge3: port 1(veth3) entered blocking state [ 131.510074][ T8744] bridge3: port 1(veth3) entered disabled state [ 131.532713][ T8744] veth3: entered allmulticast mode [ 131.541464][ T8744] veth3: entered promiscuous mode [ 131.569481][ T8754] __nla_validate_parse: 8 callbacks suppressed [ 131.569497][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'. [ 131.573766][ T8750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.802'. [ 131.630937][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 131.645364][ T8745] bridge3: port 2(veth5) entered blocking state [ 131.652446][ T8745] bridge3: port 2(veth5) entered disabled state [ 131.659813][ T8745] veth5: entered allmulticast mode [ 131.673681][ T8745] veth5: entered promiscuous mode [ 131.695536][ T8748] bridge3: port 3(veth7) entered blocking state [ 131.702004][ T8748] bridge3: port 3(veth7) entered disabled state [ 131.708791][ T8748] veth7: entered allmulticast mode [ 131.715468][ T8748] veth7: entered promiscuous mode [ 132.060645][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 132.118022][ T8766] syzkaller0: entered promiscuous mode [ 132.134165][ T8766] syzkaller0: entered allmulticast mode [ 132.200260][ T8782] xt_l2tp: invalid flags combination: 0 [ 132.291540][ T8786] netlink: 'syz.3.816': attribute type 5 has an invalid length. [ 133.105121][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 133.858119][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.894908][ T8807] bond0: (slave rose0): Enslaving as an active interface with an up link [ 133.938914][ T8811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.820'. [ 133.950473][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.820'. [ 133.990642][ T8811] netlink: 'syz.3.820': attribute type 1 has an invalid length. [ 134.008522][ T8811] netlink: 228 bytes leftover after parsing attributes in process `syz.3.820'. [ 134.126610][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 134.194097][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.822'. [ 134.236128][ T8826] tipc: Enabled bearer , priority 0 [ 134.337451][ T8826] tipc: Disabling bearer [ 134.738523][ T8863] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 134.973756][ T30] audit: type=1800 audit(1759867628.677:3): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.843" name="memory.events" dev="tmpfs" ino=891 res=0 errno=0 [ 135.319327][ T8898] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.514509][ T8911] netlink: 'syz.1.852': attribute type 3 has an invalid length. [ 135.536851][ T8911] netlink: 'syz.1.852': attribute type 2 has an invalid length. [ 135.963444][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.573816][ T8947] vlan3: entered promiscuous mode [ 136.579171][ T8947] bond2: entered promiscuous mode [ 136.596665][ T8947] vlan3: entered allmulticast mode [ 136.601944][ T8947] bond2: entered allmulticast mode [ 136.615778][ T8954] vlan3: entered promiscuous mode [ 136.621412][ T8954] bridge0: entered promiscuous mode [ 136.648270][ T8950] bond2: (slave geneve3): refused to change device type [ 136.679692][ T8952] __nla_validate_parse: 12 callbacks suppressed [ 136.679710][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 136.817545][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 136.827767][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 137.029867][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 137.042012][ T8974] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 137.166284][ T8985] bond3: (slave gretap2): making interface the new active one [ 137.194434][ T8985] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 137.298455][ T8990] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 137.307046][ T8993] tipc: Enabled bearer , priority 0 [ 137.315682][ T8991] syzkaller0: entered promiscuous mode [ 137.357364][ T8991] syzkaller0: entered allmulticast mode [ 137.437155][ T8991] tipc: Resetting bearer [ 137.452175][ T8995] delete_channel: no stack [ 137.457508][ T8991] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 137.472109][ T8991] netlink: 'syz.3.878': attribute type 3 has an invalid length. [ 137.480528][ T8991] netlink: 'syz.3.878': attribute type 235 has an invalid length. [ 137.569874][ T8988] tipc: Resetting bearer [ 137.590244][ T8988] tipc: Disabling bearer [ 138.635933][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 138.734154][ T9011] netlink: 7 bytes leftover after parsing attributes in process `syz.1.882'. [ 138.907365][ T9027] netlink: 'syz.2.886': attribute type 11 has an invalid length. [ 138.916692][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.2.886'. [ 139.080454][ T9029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.887'. [ 139.124256][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 139.164064][ T9036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.888'. [ 139.380937][ T9052] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 139.536132][ T9061] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.547404][ T9061] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 139.649948][ T9052] vlan4: entered allmulticast mode [ 139.671491][ T9052] bridge0: entered allmulticast mode [ 139.696437][ T9052] bridge0: entered promiscuous mode [ 139.714137][ T9052] bridge0: left promiscuous mode [ 139.722784][ T9052] bond4: (slave vlan4): making interface the new active one [ 139.748782][ T9052] bridge0: entered promiscuous mode [ 139.760740][ T9052] bond4: (slave vlan4): Enslaving as an active interface with an up link [ 139.775798][ T9071] tipc: Enabled bearer , priority 0 [ 139.799091][ T9077] FAULT_INJECTION: forcing a failure. [ 139.799091][ T9077] name failslab, interval 1, probability 0, space 0, times 0 [ 139.843142][ T9077] CPU: 1 UID: 0 PID: 9077 Comm: syz.3.903 Not tainted syzkaller #0 PREEMPT(full) [ 139.843166][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.843176][ T9077] Call Trace: [ 139.843182][ T9077] [ 139.843190][ T9077] dump_stack_lvl+0x189/0x250 [ 139.843216][ T9077] ? __pfx____ratelimit+0x10/0x10 [ 139.843238][ T9077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.843255][ T9077] ? __pfx__printk+0x10/0x10 [ 139.843274][ T9077] ? __pfx___might_resched+0x10/0x10 [ 139.843297][ T9077] ? fs_reclaim_acquire+0x7d/0x100 [ 139.843322][ T9077] should_fail_ex+0x414/0x560 [ 139.843344][ T9077] should_failslab+0xa8/0x100 [ 139.843366][ T9077] __kmalloc_noprof+0xcb/0x4f0 [ 139.843383][ T9077] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 139.843407][ T9077] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 139.843433][ T9077] genl_family_rcv_msg_doit+0xb8/0x300 [ 139.843457][ T9077] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.843482][ T9077] ? apparmor_capable+0x137/0x1b0 [ 139.843508][ T9077] ? bpf_lsm_capable+0x9/0x20 [ 139.843525][ T9077] ? security_capable+0x7e/0x2e0 [ 139.843552][ T9077] genl_rcv_msg+0x60e/0x790 [ 139.843574][ T9077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.843590][ T9077] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 139.843615][ T9077] ? __asan_memcpy+0x40/0x70 [ 139.843637][ T9077] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.843662][ T9077] netlink_rcv_skb+0x205/0x470 [ 139.843681][ T9077] ? __lock_acquire+0xab9/0xd20 [ 139.843704][ T9077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.843721][ T9077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.843762][ T9077] ? down_read+0x1ad/0x2e0 [ 139.843783][ T9077] genl_rcv+0x28/0x40 [ 139.843798][ T9077] netlink_unicast+0x82f/0x9e0 [ 139.843833][ T9077] ? __pfx_netlink_unicast+0x10/0x10 [ 139.843854][ T9077] ? netlink_sendmsg+0x642/0xb30 [ 139.843873][ T9077] ? skb_put+0x11b/0x210 [ 139.843899][ T9077] netlink_sendmsg+0x805/0xb30 [ 139.843931][ T9077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.843955][ T9077] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.843979][ T9077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.844000][ T9077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.844021][ T9077] __sock_sendmsg+0x21c/0x270 [ 139.844044][ T9077] ____sys_sendmsg+0x505/0x830 [ 139.844073][ T9077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.844107][ T9077] ? import_iovec+0x74/0xa0 [ 139.844133][ T9077] ___sys_sendmsg+0x21f/0x2a0 [ 139.844158][ T9077] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.844222][ T9077] ? __fget_files+0x2a/0x420 [ 139.844241][ T9077] ? __fget_files+0x3a0/0x420 [ 139.844270][ T9077] __x64_sys_sendmsg+0x19b/0x260 [ 139.844296][ T9077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.844329][ T9077] ? __pfx_ksys_write+0x10/0x10 [ 139.844351][ T9077] ? do_syscall_64+0xbe/0xfa0 [ 139.844377][ T9077] do_syscall_64+0xfa/0xfa0 [ 139.844397][ T9077] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.844419][ T9077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.844433][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 139.844453][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.844469][ T9077] RIP: 0033:0x7fc18478eec9 [ 139.844485][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.844506][ T9077] RSP: 002b:00007fc1855ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.844530][ T9077] RAX: ffffffffffffffda RBX: 00007fc1849e5fa0 RCX: 00007fc18478eec9 [ 139.844541][ T9077] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 139.844551][ T9077] RBP: 00007fc1855ad090 R08: 0000000000000000 R09: 0000000000000000 [ 139.844561][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.844570][ T9077] R13: 00007fc1849e6038 R14: 00007fc1849e5fa0 R15: 00007ffe649086f8 [ 139.844601][ T9077] [ 139.894099][ T9067] syzkaller0: entered promiscuous mode [ 140.066413][ T9086] Bluetooth: MGMT ver 1.23 [ 140.083834][ T9067] syzkaller0: entered allmulticast mode [ 140.236415][ T9067] tipc: Resetting bearer [ 140.330603][ T3497] tipc: Resetting bearer [ 140.382964][ T9062] tipc: Resetting bearer [ 141.435092][ T9062] tipc: Disabling bearer [ 141.928509][ T9137] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 142.314691][ T9160] lo: entered allmulticast mode [ 142.365916][ T9164] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 142.436774][ T9164] bond3: entered promiscuous mode [ 142.443816][ T9164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.478096][ T9175] __nla_validate_parse: 6 callbacks suppressed [ 142.478113][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 142.540083][ T9176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'. [ 142.632192][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 142.810115][ T9188] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 142.937032][ T9207] netlink: 'syz.4.942': attribute type 58 has an invalid length. [ 142.946935][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 143.279859][ T9219] netlink: 516 bytes leftover after parsing attributes in process `syz.1.945'. [ 143.464885][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 143.719864][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'. [ 143.912839][ T9249] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 144.028242][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.954'. [ 144.058158][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 144.266793][ T9268] team0: Device geneve2 is up. Set it down before adding it as a team port [ 144.359343][ T9274] tipc: Enabled bearer , priority 0 [ 144.390847][ T9274] syzkaller0: entered promiscuous mode [ 144.404112][ T9274] syzkaller0: entered allmulticast mode [ 144.547149][ T9289] veth0_to_team: entered promiscuous mode [ 144.583445][ T9289] veth0_to_team: entered allmulticast mode [ 144.669825][ T9274] netlink: 'syz.4.959': attribute type 1 has an invalid length. [ 144.728561][ T9274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 144.768886][ T9285] tipc: Resetting bearer [ 144.791380][ T9294] tipc: Enabled bearer , priority 0 [ 144.799315][ T9294] syzkaller0: entered promiscuous mode [ 144.808088][ T9294] syzkaller0: entered allmulticast mode [ 144.823024][ T9294] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.863187][ T9294] tipc: Resetting bearer [ 144.937420][ T9293] tipc: Resetting bearer [ 144.968154][ T9293] tipc: Disabling bearer [ 144.983978][ T9273] tipc: Resetting bearer [ 145.004883][ T9273] tipc: Disabling bearer [ 145.125330][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 145.540562][ T9337] tipc: Enabled bearer , priority 0 [ 145.591755][ T9337] syzkaller0: entered promiscuous mode [ 145.600443][ T9337] syzkaller0: entered allmulticast mode [ 145.614440][ T9337] tipc: Resetting bearer [ 145.649539][ T9336] tipc: Resetting bearer [ 146.653531][ T5876] tipc: Node number set to 3073528431 [ 146.837123][ T9336] tipc: Disabling bearer [ 147.593721][ T9399] __nla_validate_parse: 7 callbacks suppressed [ 147.593740][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 147.632563][ T9399] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 147.645529][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 147.662454][ T9405] tipc: Enabling of bearer rejected, failed to enable media [ 147.728102][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 147.786548][ T9404] bond2: option xmit_hash_policy: invalid value (64) [ 147.815591][ T9404] bond2 (unregistering): Released all slaves [ 148.048962][ T9424] tc_dump_action: action bad kind [ 148.066604][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 148.188817][ T9432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.523108][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 148.537574][ T9445] tipc: Enabled bearer , priority 0 [ 148.545321][ T9445] syzkaller0: entered promiscuous mode [ 148.561097][ T9445] syzkaller0: entered allmulticast mode [ 148.656858][ T9445] tipc: Resetting bearer [ 148.679877][ T9443] tipc: Resetting bearer [ 148.747982][ T9443] tipc: Disabling bearer [ 148.788605][ T9463] bridge0: Device is already in use. [ 148.805625][ T9463] netlink: 'syz.2.1020': attribute type 2 has an invalid length. [ 148.825791][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 148.825848][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 148.845655][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 148.861475][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 148.980553][ T9473] syzkaller0: entered promiscuous mode [ 149.042383][ T9473] syzkaller0: entered allmulticast mode [ 149.067881][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 149.205294][ T9485] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 149.312028][ T9490] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 149.624724][ T9509] Cannot find add_set index 65532 as target [ 149.670602][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.673850][ T9517] x_tables: ip_tables: udp match: only valid for protocol 17 [ 149.865381][ T9521] bond3: Unable to set up delay as MII monitoring is disabled [ 149.929046][ T9521] bond3 (unregistering): Released all slaves [ 150.059145][ T9538] pimreg: entered allmulticast mode [ 150.353424][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 150.605382][ T9577] netlink: 'syz.1.1055': attribute type 83 has an invalid length. [ 150.859442][ T9583] netlink: 'syz.1.1056': attribute type 1 has an invalid length. [ 151.028139][ T9593] gretap0: entered promiscuous mode [ 151.035763][ T9593] vlan0: entered promiscuous mode [ 151.147277][ T9600] team0: Cannot enslave team device to itself [ 151.535303][ T9625] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20002 [ 151.699468][ T9634] lo: entered allmulticast mode [ 151.728015][ T9634] lo: left allmulticast mode [ 151.816239][ T9639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.835815][ T9639] bridge0: port 3(bond5) entered blocking state [ 151.846890][ T9639] bridge0: port 3(bond5) entered disabled state [ 151.854131][ T9639] bond5: entered allmulticast mode [ 151.861866][ T9639] bond5: entered promiscuous mode [ 151.875403][ T9639] bridge0: port 3(bond5) entered blocking state [ 151.881810][ T9639] bridge0: port 3(bond5) entered forwarding state [ 152.087060][ T1006] bridge0: port 3(bond5) entered disabled state [ 152.572787][ T9685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 152.604814][ T9685] gretap1: entered promiscuous mode [ 152.609101][ T9688] netlink: 'syz.4.1090': attribute type 26 has an invalid length. [ 152.610173][ T9685] gretap1: entered allmulticast mode [ 152.638001][ T9688] __nla_validate_parse: 16 callbacks suppressed [ 152.638018][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 152.730605][ T9696] tipc: Enabled bearer , priority 0 [ 152.807002][ T9695] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 152.831365][ T9706] sctp: [Deprecated]: syz.3.1094 (pid 9706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.831365][ T9706] Use struct sctp_sack_info instead [ 152.851084][ T9695] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1090'. [ 152.886005][ T9706] sctp: [Deprecated]: syz.3.1094 (pid 9706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.886005][ T9706] Use struct sctp_sack_info instead [ 152.972803][ T9696] tipc: Disabling bearer [ 153.051389][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 153.054605][ T9713] : renamed from hsr0 (while UP) [ 153.260787][ T9729] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1100'. [ 153.381873][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 153.411484][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'. [ 153.446877][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 153.456505][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'. [ 153.881130][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 153.906481][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 153.975649][ T9763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.014274][ T9772] netlink: 'syz.1.1108': attribute type 6 has an invalid length. [ 154.022167][ T9772] netlink: 'syz.1.1108': attribute type 5 has an invalid length. [ 154.249723][ T9783] netlink: 'syz.2.1112': attribute type 5 has an invalid length. [ 154.331791][ T9780] pimreg: entered allmulticast mode [ 154.385094][ T9786] tipc: Enabled bearer , priority 0 [ 154.392595][ T9786] syzkaller0: entered promiscuous mode [ 154.398143][ T9786] syzkaller0: entered allmulticast mode [ 154.503854][ T9786] tipc: Resetting bearer [ 154.527586][ T9785] tipc: Resetting bearer [ 154.571787][ T9785] tipc: Disabling bearer [ 154.847879][ T9806] team0: Device gtp0 is of different type [ 155.457699][ T9840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 155.563805][ T6803] IPVS: starting estimator thread 0... [ 155.794220][ T9845] IPVS: using max 32 ests per chain, 76800 per kthread [ 156.351720][ T9878] Bluetooth: MGMT ver 1.23 [ 156.371510][ T9878] Bluetooth: hci1: too big key_count value 32778 [ 156.652404][ T9905] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.711560][ T9910] geneve2: entered promiscuous mode [ 156.717041][ T9910] geneve2: entered allmulticast mode [ 156.742031][ T3497] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 156.774990][ T3497] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 156.788894][ T3497] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 156.829780][ T3497] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.086155][ T9922] macvtap1: entered promiscuous mode [ 157.097465][ T9922] vlan0: entered promiscuous mode [ 157.109171][ T9937] netlink: 'syz.2.1164': attribute type 16 has an invalid length. [ 157.109721][ T9922] macvtap1: entered allmulticast mode [ 157.139158][ T9922] vlan0: entered allmulticast mode [ 157.143883][ T9937] netlink: 'syz.2.1164': attribute type 3 has an invalid length. [ 157.160611][ T9922] veth0_vlan: entered allmulticast mode [ 157.209810][ T9928] macvtap2: entered promiscuous mode [ 157.215677][ T9928] macvtap2: entered allmulticast mode [ 157.332829][ T9943] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 157.378872][ T9949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.456660][ T9949] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.939861][ T9978] __nla_validate_parse: 15 callbacks suppressed [ 157.939879][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 157.994701][ T9973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.013875][ T9973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.050026][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 158.127976][ T9985] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1182'. [ 158.221785][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 158.309119][ T9973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.319932][ T9973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.336977][ T9990] netlink: 'syz.0.1184': attribute type 1 has an invalid length. [ 158.446278][ T9973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.468884][ T9973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.492893][ T9998] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1186'. [ 158.523666][ T9997] tipc: Enabled bearer , priority 0 [ 158.531278][ T9997] syzkaller0: entered promiscuous mode [ 158.542658][ T9997] syzkaller0: entered allmulticast mode [ 158.600851][ T9973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.611552][ T9973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.628683][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 158.644336][ T9998] nbd: must specify at least one socket [ 158.650766][ T9997] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 158.670425][ T9997] tipc: Resetting bearer [ 158.717045][ T9996] tipc: Resetting bearer [ 158.761611][ T9996] tipc: Disabling bearer [ 158.786644][T10004] netlink: 5648 bytes leftover after parsing attributes in process `syz.3.1189'. [ 158.905203][T10010] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 158.923821][ T3497] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.942293][ T3497] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.943667][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1192'. [ 158.966201][ T3497] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.975832][ T3497] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.004060][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1192'. [ 159.058319][ T3497] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.094084][ T3497] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.146151][ T3497] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.185952][ T3497] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.264244][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 159.607115][T10055] ip6erspan0: entered promiscuous mode [ 159.612627][T10055] ip6erspan0: entered allmulticast mode [ 160.580908][T10109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.032729][T10140] ip6t_rpfilter: unknown options [ 161.585116][T10174] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 161.623495][T10176] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 161.828545][T10181] netlink: 'syz.2.1239': attribute type 83 has an invalid length. [ 162.075553][T10203] netlink: 'syz.0.1244': attribute type 19 has an invalid length. [ 162.136654][T10198] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 162.370966][T10217] bridge0: port 3(dummy0) entered disabled state [ 162.377621][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.385450][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.444654][T10217] team_slave_0: left promiscuous mode [ 162.450404][T10217] team_slave_1: left promiscuous mode [ 162.456614][T10217] geneve2: left promiscuous mode [ 162.461883][T10217] geneve0: left promiscuous mode [ 162.478791][T10217] dummy0: left allmulticast mode [ 162.485868][T10217] dummy0: left promiscuous mode [ 162.493378][T10217] bridge0: port 3(dummy0) entered disabled state [ 162.528037][T10217] bridge_slave_0: left allmulticast mode [ 162.534233][T10217] bridge_slave_0: left promiscuous mode [ 162.540066][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.556806][T10217] bridge_slave_1: left allmulticast mode [ 162.562647][T10217] bridge_slave_1: left promiscuous mode [ 162.569599][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.584906][T10217] veth0_to_team: left promiscuous mode [ 162.590495][T10217] veth0_to_team: left allmulticast mode [ 162.599711][T10217] team0: Port device team_slave_0 removed [ 162.611811][T10217] team0: Port device team_slave_1 removed [ 162.621308][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.631225][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.643034][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.654838][T10217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.670211][T10217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.957869][T10254] netlink: 'syz.3.1257': attribute type 3 has an invalid length. [ 163.063778][T10256] __nla_validate_parse: 12 callbacks suppressed [ 163.063797][T10256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1259'. [ 163.243482][T10267] syzkaller1: entered promiscuous mode [ 163.249009][T10267] syzkaller1: entered allmulticast mode [ 163.332323][T10281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1267'. [ 163.392522][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.400299][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.442789][T10288] tipc: Enabled bearer , priority 0 [ 163.500692][T10284] tipc: Disabling bearer [ 163.535998][T10288] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 163.582729][T10288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.667471][T10284] bond2: (slave veth3): Enslaving as an active interface with a down link [ 163.748313][T10288] veth5: entered promiscuous mode [ 163.757820][T10288] bond2: (slave veth5): Enslaving as an active interface with a down link [ 163.775179][T10304] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 163.783172][T10304] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 163.789369][T10284] vlan4: entered allmulticast mode [ 163.790959][T10304] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1274'. [ 163.846458][T10284] bond2: entered allmulticast mode [ 163.876143][T10284] bond2: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 164.086185][T10328] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 164.344514][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 164.443877][T10362] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 164.590191][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1293'. [ 164.954876][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 164.969189][T10403] syzkaller1: entered promiscuous mode [ 164.975234][T10403] syzkaller1: entered allmulticast mode [ 164.986685][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 165.025858][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1298'. [ 165.036392][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 165.167239][T10415] team0: Port device team_slave_1 removed [ 165.238698][T10424] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1304'. [ 165.422728][T10430] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.507610][T10446] tipc: Enabled bearer , priority 0 [ 165.525350][T10446] syzkaller0: entered promiscuous mode [ 165.530887][T10446] syzkaller0: entered allmulticast mode [ 165.563025][T10445] tipc: Resetting bearer [ 165.587184][T10445] tipc: Disabling bearer [ 165.763880][T10460] : renamed from veth1_vlan (while UP) [ 166.238814][T10506] xt_l2tp: missing protocol rule (udp|l2tpip) [ 166.656318][T10535] validate_nla: 3 callbacks suppressed [ 166.656338][T10535] netlink: 'syz.2.1338': attribute type 5 has an invalid length. [ 166.670067][T10535] netlink: 'syz.2.1338': attribute type 6 has an invalid length. [ 166.993678][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 167.110094][T10559] block nbd4: not configured, cannot reconfigure [ 168.053782][T10563] tipc: Enabled bearer , priority 0 [ 168.088927][T10566] syzkaller0: entered promiscuous mode [ 168.107020][T10566] syzkaller0: entered allmulticast mode [ 168.267883][T10572] tipc: Resetting bearer [ 168.335165][T10594] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 168.387603][T10594] netlink: 'syz.0.1351': attribute type 2 has an invalid length. [ 168.415958][T10572] tipc: Disabling bearer [ 168.438292][T10594] __nla_validate_parse: 14 callbacks suppressed [ 168.438310][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 168.586907][T10607] tipc: Enabled bearer , priority 0 [ 168.627718][T10607] syzkaller0: entered promiscuous mode [ 168.640916][T10607] syzkaller0: entered allmulticast mode [ 168.670341][T10607] tipc: Resetting bearer [ 168.691056][T10606] tipc: Resetting bearer [ 168.717431][T10606] tipc: Disabling bearer [ 168.733130][T10614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1357'. [ 168.756170][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.765141][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.790724][ T6804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.852795][T10618] syzkaller0: entered promiscuous mode [ 168.858431][T10618] syzkaller0: entered allmulticast mode [ 169.078985][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 169.189058][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 169.232961][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 169.273457][ T6804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.363471][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 169.874399][ T6804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.327881][T10654] macvtap2: entered promiscuous mode [ 170.334729][T10654] macvtap2: entered allmulticast mode [ 170.395109][T10660] macvtap2: entered promiscuous mode [ 170.417967][T10660] macvtap2: entered allmulticast mode [ 170.632131][T10680] vxcan1: entered allmulticast mode [ 170.859499][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 170.995673][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 171.042199][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.050333][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.058278][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.066212][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.074175][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.082092][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.090055][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.097990][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.105927][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.113834][T10699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 171.150125][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 171.424347][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1382'. [ 171.460288][T10721] netlink: 'syz.4.1386': attribute type 21 has an invalid length. [ 171.470383][T10718] team0: Device ip6gre1 is of different type [ 171.480955][T10722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1385'. [ 171.893833][T10752] clip:clip_setentry: non-CLIP VCC [ 172.189696][T10788] netlink: 'syz.1.1402': attribute type 3 has an invalid length. [ 172.425925][T10800] ksmbd: Unknown IPC event: 3, ignore. [ 172.499417][T10800] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 172.513565][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.794200][T10821] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 180.123518][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.198773][ T1298] net_ratelimit: 44 callbacks suppressed [ 194.198793][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.833342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.274013][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 196.280085][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 196.282679][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 197.250786][T10846] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 197.490653][T10846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.561477][T10852] bond3: (slave geneve3): making interface the new active one [ 197.572492][T10852] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 197.878815][T10896] __nla_validate_parse: 11 callbacks suppressed [ 197.878832][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 197.937545][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 198.878088][T10881] 8021q: VLANs not supported on lo [ 198.976333][T10898] vlan1: entered allmulticast mode [ 198.981494][T10898] hsr0: entered allmulticast mode [ 198.989368][T10898] hsr_slave_0: entered allmulticast mode [ 198.995225][T10898] hsr_slave_1: entered allmulticast mode [ 199.032937][T10903] tipc: Enabled bearer , priority 0 [ 199.052876][T10902] tipc: Enabling of bearer rejected, already enabled [ 199.075459][T10903] syzkaller0: entered promiscuous mode [ 199.080963][T10903] syzkaller0: entered allmulticast mode [ 199.236318][T10902] tipc: Resetting bearer [ 199.277854][T10902] tipc: Disabling bearer [ 199.391218][T10936] netlink: 'syz.3.1444': attribute type 10 has an invalid length. [ 199.499117][T10936] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 199.660027][T10953] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.739615][T10959] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1450'. [ 200.088023][T10985] sch_fq: defrate 0 ignored. [ 200.215866][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 200.289832][T10995] netlink: 'syz.4.1459': attribute type 27 has an invalid length. [ 200.411093][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 200.421642][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 200.437619][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 200.488708][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 200.537783][T11016] tipc: Enabled bearer , priority 0 [ 200.554029][T11016] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 200.561027][T11018] vxcan1: tx address claim with different name [ 200.570859][T11016] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 200.581264][T11016] tipc: Resetting bearer [ 200.590929][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 200.608137][T11016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.635298][T11024] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 200.686996][T11027] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1471'. [ 200.705894][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 200.719902][T11024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.269339][T11056] tipc: Cannot configure node identity twice [ 201.291639][T11064] tipc: Enabled bearer , priority 10 [ 201.547739][T11078] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.563841][ T6805] tipc: Node number set to 2226648369 [ 202.975295][T11174] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 202.992578][T11174] bond4 (unregistering): Released all slaves [ 203.592044][T11229] __nla_validate_parse: 7 callbacks suppressed [ 203.592064][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 203.616044][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 203.753640][T11242] netlink: 'syz.0.1534': attribute type 62 has an invalid length. [ 203.762788][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 203.831289][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 204.082291][T11266] "syz.3.1544" (11266) uses obsolete ecb(arc4) skcipher [ 204.173444][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1544'. [ 204.438480][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 204.579005][T11292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.622005][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1552'. [ 204.646865][T11298] veth1_to_bond: entered allmulticast mode [ 204.650296][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 204.795130][T11300] veth1_to_bond (unregistering): left allmulticast mode [ 204.887735][T11308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 204.908237][T11308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 205.192701][T11327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.493158][T11347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1573'. [ 205.626220][T11358] netlink: 'syz.4.1575': attribute type 9 has an invalid length. [ 205.983464][T11378] IPv4: Oversized IP packet from 127.202.26.0 [ 206.046148][T11383] tipc: Enabling of bearer rejected, already enabled [ 206.200366][T11398] netlink: 'syz.1.1585': attribute type 3 has an invalid length. [ 207.710438][ C0] hrtimer: interrupt took 1406236933 ns [ 222.993385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.233364][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.283144][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 332.290147][ C1] rcu: 0-...!: (1 GPs behind) idle=a6e4/1/0x4000000000000000 softirq=40751/40756 fqs=4 [ 332.300725][ C1] rcu: (detected by 1, t=10502 jiffies, g=30757, q=772 ncpus=2) [ 332.308456][ C1] Sending NMI from CPU 1 to CPUs 0: [ 332.308499][ C0] NMI backtrace for cpu 0 [ 332.308519][ C0] CPU: 0 UID: 0 PID: 11396 Comm: syz.4.1583 Not tainted syzkaller #0 PREEMPT(full) [ 332.308556][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.308575][ C0] RIP: 0010:kasan_check_range+0x50/0x2c0 [ 332.308608][ C0] Code: 49 b9 00 00 00 00 00 80 ff ff eb 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff f3 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 <49> 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 [ 332.308621][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00000002 [ 332.308635][ C0] RAX: 00000000ffffff01 RBX: ffff8880296a22e8 RCX: ffffffff819d07c1 [ 332.308647][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007be0 [ 332.308657][ C0] RBP: ffffc90000007c60 R08: ffffc90000007be4 R09: ffff800000000000 [ 332.308669][ C0] R10: dffffc0000000000 R11: ffffed10052d445e R12: ffff8880296a22f8 [ 332.308680][ C0] R13: ffff8880296a22f0 R14: 1ffff110052d445f R15: 1ffff110052d445e [ 332.308691][ C0] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 332.308704][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.308714][ C0] CR2: 00007f01bfdb3ad8 CR3: 0000000072be8000 CR4: 00000000003526f0 [ 332.308728][ C0] Call Trace: [ 332.308736][ C0] [ 332.308746][ C0] do_raw_spin_lock+0x121/0x290 [ 332.308766][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 332.308790][ C0] advance_sched+0xc4/0xc90 [ 332.308812][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.308831][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.308855][ C0] ? __pfx_advance_sched+0x10/0x10 [ 332.308873][ C0] __hrtimer_run_queues+0x529/0xc60 [ 332.308893][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 332.308922][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 332.308941][ C0] ? read_tsc+0x9/0x20 [ 332.308964][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 332.308999][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 332.309016][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 332.309037][ C0] [ 332.309042][ C0] [ 332.309048][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.309065][ C0] RIP: 0010:lock_acquire+0xcd/0x360 [ 332.309084][ C0] Code: 0f 85 eb 00 00 00 65 48 8b 04 25 08 50 8e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 <4c> 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 54 20 7f 8d e8 [ 332.309095][ C0] RSP: 0018:ffffc900033d72b0 EFLAGS: 00000246 [ 332.309109][ C0] RAX: ffff888051eabc80 RBX: 0000000000000000 RCX: 04f9adee163d8900 [ 332.309120][ C0] RDX: 0000000000000000 RSI: ffffffff822ef514 RDI: 1ffffffff1c2752c [ 332.309130][ C0] RBP: ffffffff822ef4f7 R08: 0000000000000000 R09: 0000000000000000 [ 332.309140][ C0] R10: dffffc0000000000 R11: fffff9400039f171 R12: 0000000000000002 [ 332.309150][ C0] R13: ffffffff8e13a960 R14: 0000000000000000 R15: 0000000000000000 [ 332.309162][ C0] ? page_table_check_clear+0x187/0x700 [ 332.309181][ C0] ? page_table_check_clear+0x1a4/0x700 [ 332.309201][ C0] ? pfn_valid+0xba/0x490 [ 332.309217][ C0] ? pfn_valid+0xba/0x490 [ 332.309232][ C0] ? page_table_check_clear+0x187/0x700 [ 332.309249][ C0] page_table_check_clear+0x1a4/0x700 [ 332.309264][ C0] ? page_table_check_clear+0x187/0x700 [ 332.309279][ C0] ? vm_normal_page+0xb7/0x210 [ 332.309299][ C0] unmap_page_range+0x3445/0x4370 [ 332.309344][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 332.309367][ C0] ? mas_find+0xb0e/0xd30 [ 332.309385][ C0] ? unmap_vmas+0x144/0x580 [ 332.309405][ C0] unmap_vmas+0x399/0x580 [ 332.309429][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 332.309460][ C0] exit_mmap+0x248/0xb50 [ 332.309476][ C0] ? uprobe_clear_state+0x20f/0x290 [ 332.309498][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 332.309512][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 332.309534][ C0] ? __pfx_exit_aio+0x10/0x10 [ 332.309557][ C0] ? uprobe_clear_state+0x27c/0x290 [ 332.309585][ C0] __mmput+0x118/0x430 [ 332.309606][ C0] exit_mm+0x1da/0x2c0 [ 332.309625][ C0] ? __pfx_exit_mm+0x10/0x10 [ 332.309643][ C0] ? rcu_is_watching+0x15/0xb0 [ 332.309660][ C0] do_exit+0x648/0x2300 [ 332.309679][ C0] ? do_raw_spin_lock+0x121/0x290 [ 332.309697][ C0] ? __pfx_do_exit+0x10/0x10 [ 332.309722][ C0] do_group_exit+0x21c/0x2d0 [ 332.309739][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.309760][ C0] get_signal+0x1285/0x1340 [ 332.309792][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 332.309813][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.309842][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 332.309864][ C0] exit_to_user_mode_loop+0x72/0x110 [ 332.309884][ C0] do_syscall_64+0x2bd/0xfa0 [ 332.309904][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.309923][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309938][ C0] ? clear_bhb_loop+0x60/0xb0 [ 332.309955][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309970][ C0] RIP: 0033:0x7f2d37b8eec9 [ 332.309986][ C0] Code: Unable to access opcode bytes at 0x7f2d37b8ee9f. [ 332.309995][ C0] RSP: 002b:00007ffc8dd52d58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 332.310010][ C0] RAX: 0000000000000000 RBX: 00007f2d37de7da0 RCX: 00007f2d37b8eec9 [ 332.310021][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 332.310031][ C0] RBP: 00007f2d37de7da0 R08: 0000000000000000 R09: 000000038dd5304f [ 332.310041][ C0] R10: 000000000003fdc0 R11: 0000000000000246 R12: 00000000000328a4 [ 332.310051][ C0] R13: 00007f2d37de6090 R14: ffffffffffffffff R15: 00007ffc8dd52e70 [ 332.310073][ C0] [ 332.310485][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g30757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 332.858187][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.868153][ C1] rcu: RCU grace-period kthread stack dump: [ 332.874030][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 332.887514][ C1] Call Trace: [ 332.890784][ C1] [ 332.893717][ C1] __schedule+0x1798/0x4cc0 [ 332.898250][ C1] ? __lock_acquire+0xab9/0xd20 [ 332.903101][ C1] ? __pfx___schedule+0x10/0x10 [ 332.907966][ C1] ? schedule+0x91/0x360 [ 332.912210][ C1] schedule+0x165/0x360 [ 332.916365][ C1] schedule_timeout+0x12b/0x270 [ 332.921212][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 332.926579][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 332.932470][ C1] ? __pfx_process_timeout+0x10/0x10 [ 332.937761][ C1] ? prepare_to_swait_event+0x341/0x380 [ 332.943310][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 332.948175][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 332.954327][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 332.959606][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 332.964814][ C1] ? finish_swait+0xcd/0x1f0 [ 332.969402][ C1] rcu_gp_kthread+0x99/0x390 [ 332.973993][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.979190][ C1] ? __kthread_parkme+0x7b/0x200 [ 332.984119][ C1] ? __kthread_parkme+0x1a1/0x200 [ 332.989142][ C1] kthread+0x711/0x8a0 [ 332.993208][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.998403][ C1] ? __pfx_kthread+0x10/0x10 [ 333.002993][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.008187][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.013383][ C1] ? __pfx_kthread+0x10/0x10 [ 333.017971][ C1] ret_from_fork+0x4b9/0x870 [ 333.022568][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 333.027687][ C1] ? __switch_to_asm+0x39/0x70 [ 333.032445][ C1] ? __switch_to_asm+0x33/0x70 [ 333.037205][ C1] ? __pfx_kthread+0x10/0x10 [ 333.041792][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.046569][ C1] [ 333.049581][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 333.055971][ C1] CPU: 1 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 333.065424][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.075469][ C1] RIP: 0010:smp_call_function_many_cond+0xd38/0x12d0 [ 333.082146][ C1] Code: 89 ee 83 e6 01 31 ff e8 a6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 51 6f 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 35 6f 0b 00 eb e4 44 [ 333.101747][ C1] RSP: 0018:ffffc9000403f340 EFLAGS: 00000293 [ 333.107810][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8349 RCX: ffff88802dbc0000 [ 333.115774][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 333.123737][ C1] RBP: ffffc9000403f4c0 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 333.131705][ C1] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffff8880b8641a48 [ 333.139676][ C1] R13: dffffc0000000000 R14: ffff8880b873b200 R15: 0000000000000000 [ 333.147648][ C1] FS: 0000000000000000(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 333.156567][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.163144][ C1] CR2: 00007f6169bb3ad8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 333.171114][ C1] Call Trace: [ 333.174501][ C1] [ 333.177433][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 333.182647][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 333.188983][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.193741][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 333.198931][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 333.204048][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 333.209163][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 333.214360][ C1] ? free_pgd_range+0x144b/0x14c0 [ 333.219383][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 333.224936][ C1] tlb_flush_mmu+0x1a7/0x680 [ 333.229532][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 333.234122][ C1] ? free_pgd_range+0x144b/0x14c0 [ 333.239146][ C1] free_ldt_pgtables+0x17b/0x320 [ 333.244087][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 333.249558][ C1] ? down_read+0x1ad/0x2e0 [ 333.253969][ C1] exit_mmap+0x17c/0xb50 [ 333.258209][ C1] ? uprobe_clear_state+0x20f/0x290 [ 333.263409][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 333.268165][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 333.273808][ C1] ? __pfx_exit_aio+0x10/0x10 [ 333.278500][ C1] ? uprobe_clear_state+0x27c/0x290 [ 333.283704][ C1] __mmput+0x118/0x430 [ 333.287774][ C1] exit_mm+0x1da/0x2c0 [ 333.291843][ C1] ? __pfx_exit_mm+0x10/0x10 [ 333.296423][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 333.301887][ C1] ? rcu_is_watching+0x15/0xb0 [ 333.306647][ C1] do_exit+0x648/0x2300 [ 333.310803][ C1] ? do_raw_spin_lock+0x121/0x290 [ 333.315824][ C1] ? __pfx_do_exit+0x10/0x10 [ 333.320425][ C1] do_group_exit+0x21c/0x2d0 [ 333.325029][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.330228][ C1] get_signal+0x1285/0x1340 [ 333.334752][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 333.340299][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 333.345583][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.351757][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 333.357220][ C1] exit_to_user_mode_loop+0x72/0x110 [ 333.362501][ C1] do_syscall_64+0x2bd/0xfa0 [ 333.367090][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.372290][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.378352][ C1] ? clear_bhb_loop+0x60/0xb0 [ 333.383029][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.388915][ C1] RIP: 0033:0x7f01bfb84fd3 [ 333.393321][ C1] Code: Unable to access opcode bytes at 0x7f01bfb84fa9. [ 333.400328][ C1] RSP: 002b:00007fff29474618 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 333.408740][ C1] RAX: fffffffffffffe00 RBX: 00000000000016cb RCX: 00007f01bfb84fd3 [ 333.416704][ C1] RDX: 0000000040000000 RSI: 00007fff2947462c RDI: 00000000ffffffff [ 333.424670][ C1] RBP: 00007fff2947462c R08: 0000000000000000 R09: 0000000000000000 [ 333.432634][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 333.440595][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 333.448577][ C1] [ 333.455878][ C1] Dead loop on virtual device ip6_vti0, fix it urgently!