last executing test programs: 2.854641012s ago: executing program 1 (id=2981): setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) (async, rerun: 64) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0xc3, 0x4) (async) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) r2 = syz_init_net_socket$llc(0x1a, 0x12f455d419948900, 0x0) recvfrom$llc(r2, &(0x7f00000000c0)=""/147, 0x93, 0x20, &(0x7f0000000180)={0x1a, 0x103, 0x2, 0x8, 0x7, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) (async) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x10, 0x3, {{0x17, 0x4, 0x2, 0x3e, 0x5c, 0x64, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x1c, 0x5a, 0x0, 0x1, [0x0, 0x1, 0x9, 0x100, 0x3, 0x7]}, @lsrr={0x83, 0x7, 0xa8, [@multicast2]}, @timestamp={0x44, 0x10, 0x91, 0x0, 0x0, [0x6, 0x1, 0xc000000]}, @generic={0x83, 0x11, "458eeb19928454fefc9a36a2b69685"}, @end]}}}}}) (rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4011) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000600)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400a1) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000780)=0x4, 0x4) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r5) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}}, 0x20000005) connect$llc(r0, &(0x7f0000000980)={0x1a, 0x1, 0x63, 0x40, 0x4, 0x0, @broadcast}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x210d40, 0x0) r10 = socket(0x1e, 0x6, 0x5) r11 = accept4$unix(r10, &(0x7f0000000a00)=@abs, &(0x7f0000000a80)=0x6e, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8982, &(0x7f0000000ac0)={0x6, 'rose0\x00', {0x9}, 0x3}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000b00)={'veth1_vlan\x00', @local}) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000001e00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000b80)={0x1218, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "96d2d669e1ed25d95f369b3366"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0xf9, 0x5b, "43a59649d82d6f539b6d3a0d7cf8885d1880d8e71242af26c2a86238f96517701ec5add21c4b450b8bebb9bd16e67e30995ea1d4c92b182b5ed3581f61a4fc421da1bbfd017887885f29b1cb42017b07546f8d797c59ff5ec20e2683e9b204a046323e58e02e8ff4f3e41de4bccd070b4bd8d961e6de88e7c431fb549c72c04ce6b452b5ce05d80ff0d403c6a005ba56607ce0566c61faebacb6891cf22c09bd7d6c5fbad197775a4913bee98b0394cf28e4724972097cb6328d18ae6528ed9ac456af5f4a82aa42a05a39da3b3a66595dd72d7830a16bb6d8755aaf6e70cb77bd938d921ed2b16d5da52dc4cb910ed9a9c055d49e"}, @NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "9b199d1a9096dff4723bd016bae998f727ab690f472ffb5480c7564dc345ef0004e57ac8574ac289fb353aff48d4122edf9ba2204050d99f616033fde001849b8af08166ec45a4e5899df0b8ba6677070e73de3e1f7341bce689cc9d142b2b34bedfe081ede31e40b7695da4df821581b3638a5d87e952ab777fbbb2537b355d4734faeba2acf07da0a7b7f30a8ca5dfd4cc4dd7ee35b8b44ba79237454470fdb7183491b5be620b837797b645f99b43cac278fd88e7d3e91ae56256f4e6738dafaa4f2b33cccfbbeb60ae943ee4bad0ca350051a757bcd684b0"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1218}, 0x1, 0x0, 0x0, 0x40}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e40)='svc_wake_up\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 2.662936805s ago: executing program 1 (id=2984): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000001280)=ANY=[@ANYBLOB="ffffffffffff1704b45adbca0800458c005c2bd065152fa29bc95f67e3bc3d2b600000000000019078ac1e0001ac1414aa05009078e00000e0410000000065000000110000ac1414aa0000000086ade129000000070aeb8f641216a03acd020fb0f6091577449f16b135ce5d1002083dd89f3e1808ba22608343867aceeae7c1d8b9fb2a2a3659ad13029aa01137edea464779a5f1197f9bb77c66f65198c7b559e3f3bef3f75f932a185d3fcb0f723422e99ec6d06cd25a52acb42015ff9c15975c96840ab271d67aaaf5fcd22ba5235b3e515f785c"], 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2abc0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'team0\x00', {0x81c}, 0x5}) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async, rerun: 32) preadv(r1, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000001180)) 2.532010559s ago: executing program 1 (id=2986): socket$netlink(0x10, 0x3, 0x1c) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.220109276s ago: executing program 4 (id=2989): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, 0x0) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.126267826s ago: executing program 2 (id=2990): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x14, 0x80800) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000600)="4ffa24f13ba15136adddb9bb5fd616235de93812fa02acf3cae93f1a00dc8093a2bceb9aef28978e66dd8bb4f7dbe3e21e1fb5ecd1314f4a68df39c16dab5b0fe885e476fdfc72476d3e502e9f7479c8ae40f2e839cff0f76e4eb2fe24f8873146ee67e3f5364d6c0071dc0e6d2630b76bd4e0bf4f13e9a94344acb389356e82abffa351bd61dd725d6990daa4c78d5ae5af6e9ae1157804665bc3188114bacde4b1af36b7d4652a776779645d0ded9a88baafbe66ec5021428c07e5a9ec60a85acc446c4f3eae722af31e0afed5315ea047f18f07ef3c47", 0xd8}, {&(0x7f0000000700)="27cc1bbd8768e4bc47a93dae235242effac8bb362e82113856736aeb647532329e40bc2b89e8b86f7d2e2a5c2c26946331a28c0cdffbb96ba34533e98268f3bb6149675c5dfc11dcbf711c7b1104f392c5a988cb", 0x54}, {&(0x7f0000000780)="097e633ba39579e032ea0d461d24da74f15463ad466a3194044f1faf08f7e77e05", 0x21}, {&(0x7f00000007c0)="d75b13d6f5640bed23d8d9bb095d6b18de7f5e9b297e48ef6aa258103cc798313bd11c450207a162df96aec63d5493a0b3b05b6e70dc649fea2dea1cd230cc353d96297dce7a59a2253db3cfe89f2f95486d812b30c063fe66decdd1cd9a3d35c94128176fbf492d0765bb1efdc01059a1d79a90b24faff0db11d4bb67e2d9257b5645caad75c083110b14cad298c605c1e94ec250df6094195e96db4d71afdeb0133137360e77fe047992c441a46c40b7ab44be656294a6296b646ab8adb4ce9f5063779f20061aa8b62145bcc3d9c6b1b6748bf38b5ce5bb87102752dcf3a118920d9cf18de8b778837f", 0xeb}, {&(0x7f0000000900)="48503267b3687eae458f35fe57d4da62b95850cf6667a0fe3f158758f10c6f40ab3b228438cc91543b211081c211ce045f180ba9699db6295ac8830d5e43ab2cef30bfa1afa7faf9e38544fdb564b30e85e2eb1c90952fdd87c0", 0x5a}], 0x5, &(0x7f0000000a00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0x17, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @remote, @empty]}, @timestamp={0x44, 0x24, 0x5f, 0x0, 0x2, [0xb, 0xc, 0x7, 0x10001, 0x7fffffff, 0x10000, 0xf, 0x4]}, @timestamp_prespec={0x44, 0xc, 0x86, 0x3, 0x6, [{@broadcast, 0x1}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}], 0xb8}, 0x20000080) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="9feb010018000000190000004c0000004c0000000b000000050000003d00000604000000030000000200000005000000080000000000000002000085090000000200000004000000020000000500000004000000030000000100000000000093040000000b000000fcffffff060000000100000000f0ffff018000000900000000000000f9ffffff080000000000000091cc0000010000000008000009000000060000000900000000000000006161302e6100002e5f00"], &(0x7f0000001cc0)=""/80, 0x6f, 0x50}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1e00000004000000f7ffffff0500000000000000", @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000005000000020000000600"/24, @ANYRES32=r6, @ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) connect$unix(r8, &(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000340), &(0x7f0000000400)=r9}, 0x20) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) socket(0x80000000000000a, 0x2, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r13, &(0x7f0000000040)=""/136, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f0000000c00)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x2, {0x80, 0x95, "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"}}, 0x1005) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) 2.079814414s ago: executing program 1 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0c0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) 2.037232439s ago: executing program 4 (id=2992): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x28, 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1.998219379s ago: executing program 1 (id=2993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000400)={0x2281, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e46f44959014c7"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001400)={r2, 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, r4, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3d, 0x33, @probe_request={{{}, {}, @device_b, @device_b, @random="48cc7b481812"}, @val, @void, @val={0x3, 0x1, 0x1}, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0x9}}, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 1.848061836s ago: executing program 3 (id=2994): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f0000000100)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x28040091) r1 = socket(0x18, 0x0, 0xc18895e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) accept(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000180)=0x80) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000980), 0xe) listen(r3, 0x0) ioctl$sock_SIOCINQ(r3, 0x5411, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 1.84274433s ago: executing program 0 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}}, 0x4000004) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) 1.759560712s ago: executing program 1 (id=2995): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="f51aa0cde5fed0b10299af974a461d711147ea192a7091a386936672a5ba1d158a7be686478865f9e43776a9e41c35523128a775803242de4780caec49002467b7703b851b66699aba3c0b99c8b98308b2f3b89ff7cdd62346ffdd5fc75f8f6197c0cfcbf00afa79f80c9e0c4237dcf251cbbf5553aafe1b5ec4d46b6b29d918d8d5c75254a3fd02eb82250def4ed0c4ca6e982adcdef30cec3c545a21ed05ce264c95807851ba35992505b689e2da29135111f679f80e", 0xb7}, {&(0x7f0000000100)="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", 0xff}], 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0xc3cf2000) close(r0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000240)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0xd33, 0x8}) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000002c0)={0x18, "7d74beaa6be59a098a57992fba25a6da418194d0a275ac7f893ca30fc779cb5a696e50746ebe258ce2f06d18b3dbaf9a69821f9886788d57fe0f982a10554d1dbb5a2dd94e75e62bb0d1bf3bf46de95471448173e2d12fd5a18025165c776392e588fd62a7366771e05ccd782668d2c7e814b9fcb10f39b4ca2ee1fc87974ff6"}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x44040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c4, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xced}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff0}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x557b700a}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1a}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x63}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xba}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x882) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000840)={0x0, 0x1000, 0x2, [0x200, 0xe]}, &(0x7f0000000880)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000008c0)={r6, 0x1000, "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"}, &(0x7f0000001900)=0x1008) ioctl$FITHAW(r0, 0xc0045878) preadv(r0, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/132, 0x84}, {&(0x7f0000002a00)=""/195, 0xc3}], 0x3, 0x5, 0xfad) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002b40)={r7, 0xf, 0x7f}, 0x8) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002b80)) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000002c80)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000002cc0)=0x9, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000003100)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000002d40)={0x350, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd50c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee8a}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "879525ac16356e0bb6c424ee1b0d2150a2578f8f28a232e0ec"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x166}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x7f}}}}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x5) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000003280)={0x9da3, 0x3, 0x3, 0x0, 0x0, [{{r0}, 0xa}, {{r4}, 0x7c}, {{r4}, 0xa1}]}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000003300)=0x1, 0x4) r8 = accept4(r0, 0x0, &(0x7f0000003340), 0x800) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000003380)={0x4}, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000033c0)) 1.721404971s ago: executing program 2 (id=2996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) 1.672095183s ago: executing program 4 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000900)={r1, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x6, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x1000, 0xa5, &(0x7f0000001740)="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", &(0x7f0000000100)=""/165, 0x4, 0x0, 0x1000, 0x38, &(0x7f0000002740)="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", &(0x7f00000001c0)="39123f25c4d66ed9b813b4771ad7686ba271907343139c2101df7c531087cb96e03641919d94643fd0cf4f3815aeb439accbc9a3642f72ef", 0x7, 0x0, 0x101}, 0x50) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000001700)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) 1.670707988s ago: executing program 3 (id=2998): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x1c, 0x2b, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x11f, 0x0, 0x0, @str='wpan1\x00'}]}, 0x1c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x1c, 0x2b, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x11f, 0x0, 0x0, @str='wpan1\x00'}]}, 0x1c}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async) 1.561478244s ago: executing program 0 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x8, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4010) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) r1 = socket(0xb, 0x4, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff5a, 0x9, 0x7, 0x4}, {0x400, 0x7, 0xf, 0xffffff01}, {0x7, 0x7, 0x34, 0xffffff34}]}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r1}) close(r3) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x140b, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x10) epoll_create1(0x80000) preadv(r1, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/37, 0x25}], 0x2, 0x5, 0x9) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000004c0)={@loopback, @dev, 0x0}, &(0x7f0000000500)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@deltfilter={0x68, 0x2d, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {0x6, 0x9}, {0xf, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bond_slave_0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2200, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000006c0)={0x1, 0x28, '\x00', 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000700)={0x800, 0x6, 0x9, 0x2d}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getrule={0x14, 0x22, 0x300, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40) socket$netlink(0x10, 0x3, 0x12) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x7800, 0x1f, 0x10000, 0x7, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x64, 0x0, 0x27, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, {[@cipso={0x86, 0x12, 0x2, [{0x7, 0xc, "c0970f8ec15ce1336dfb"}]}, @generic={0x89, 0xb, "bedd05ef29f010ff2f"}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x3}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @union={0x7, 0x6, 0x0, 0x5, 0x0, 0xa5d, [{0x2, 0x3}, {0x1, 0x0, 0x2}, {0x1, 0x5, 0x9}, {0xa, 0x2, 0x100}, {0xf, 0x1, 0x7}, {0xa, 0x0, 0x3971}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x13, 0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000a80)=""/32, 0xa7, 0x20, 0x0, 0x401, 0x10000}, 0x28) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0xc, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pK \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x81, 0xfffffffa, 0x5, 0x9182, 0xffffffffffffffff, 0x2, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x0, &(0x7f0000000840), &(0x7f0000000880)='syzkaller\x00', 0x5, 0x2, &(0x7f00000008c0)=""/2, 0x41000, 0x20, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000b00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x3, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[r8, r9, r10, 0x1, r11], &(0x7f0000000dc0)=[{0x5, 0x4, 0x9, 0x6}, {0x4, 0x3, 0xb, 0x9}, {0x1, 0x2, 0x10, 0x9}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x2, 0x2}, {0x5, 0x4, 0xb, 0xb}], 0x10, 0x7fffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x322560fb5c1bedaa, 0x0) recvfrom$packet(r3, &(0x7f0000000f40)=""/27, 0x1b, 0x2140, &(0x7f0000000f80)={0x11, 0xc, r6, 0x1, 0x3, 0x6, @multicast}, 0x14) r12 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000001300)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)={0x24c, 0x12, 0x100, 0x70bd2a, 0x25dfdbfc, {0xb, 0x0, 0x20, 0x40, {0x4e20, 0x4e20, [0x7, 0x200, 0x33e, 0x8], [0x1, 0x3, 0x5, 0x101], 0x0, [0x2, 0x7]}, 0x7, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x78, 0x1, "452d2328bbbe5e1f6b00e88a661fe82a27137764c4d76da02944fb6c6b787c3ea8b0d32872a875b2fa38901f18305037d4deaca1f7fbe84516819769046ea111fae93f796349d5074e15e93ccecd11aca44a9877a344b56521bcda92e7fae8bc006e4ea94758573723e16d712fb97cb1a7b16aeb"}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "7a7503b6b2a9d5ebb137abae86ee0f739fa9"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "9b51719069e9c806841ed3671f7c83df360dd9afae4edc703fc1bd6fca487cd208126906fa457217ea022904adf09fc38cdeafe839772c1e340f6f02d96068e0c1e18bb7c87878a890e75a292a83f5a17b79a91c3d9b43520c0266102a88df3a90fdb0f99e9067ce2ddffee8993b1ff94f60d6066a445282b015ee53ef8551141de02872f7adb20e22ba5e23480af7c830fc1db376c68e80b2fd54aee6774b714641986af209ca6da772da5b0a8bbc32f445"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "25675809205ef0d56be776d4e9a8ce614b5ff5d2ef9ba6f53b0dde934596485b778a5cee8a465a2b6068252f539cbf2ad1629b59231471de312c7dfd6bebc3e2aca3b652cb83d887e4a740357449f47dc732d73e1a03aa0d3d4840ba6d0b222f820cafd1f2f4348a9a2255d6cd05fedea1b73fd2b6abd2adba485472d231d93c8651ec723386a51a06c561ec357b1e1a711c85d9db227ff3ffcc95af4e9304805c9be0bba0f27f9b0430f4a39f1a09ce41"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) 1.508422936s ago: executing program 4 (id=3000): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x78}}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa0, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xf9c4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x40}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) (async) close(r2) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x78}}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa0, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xf9c4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x40}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) (async) 1.436129668s ago: executing program 2 (id=3001): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r3}, 0xc) 1.364144397s ago: executing program 0 (id=3002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) 1.350926312s ago: executing program 3 (id=3003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000001540)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e1c, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffdfffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x97d25a3fb5ef7f5f, 0x5, 0x0, 0x2}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x2, 0x9, 0x1, 0x57b, 0x394}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x5, &(0x7f0000000200)=""/5, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x10, 0x4d6e, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0x3, 0x1}, {0x2, 0x2, 0x1, 0xa}, {0x1, 0x1, 0x10000000, 0x2}, {0x3, 0x1, 0xb, 0xb}, {0x3, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x10, 0x4}, {0x1, 0x1, 0xf, 0x4}], 0x10, 0xd}, 0x94) mmap(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x2000009, 0x11, r4, 0x9b968000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000001000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x5000, 0x7345e704550deeb}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_MIIMON={0x38, 0x3, 0x3}]}}}]}, 0x44}}, 0x4) 1.208009779s ago: executing program 2 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000500)=""/111, 0x6f, 0x0, &(0x7f0000000580)=""/188, 0xbc}}, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x0, 0x8}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0xffffffffffffff23) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300), 0x8) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="84110000040000001c0012800b000100e6ba06bd656300e5b0e14a82db017f5a1d58addef22adf000c00028005000a0001000000273bfd77fca8ab794a2ed42d748a02258b5f147035ba39bca0d86c32071e66814f6b00eefcc220382c46"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x401c5820, &(0x7f0000000040)) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000080)}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x6}, 0x10002) 1.17034037s ago: executing program 4 (id=3006): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1800f749e3413b"], 0x18}}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.105702748s ago: executing program 0 (id=3007): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0xfe79, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r2, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xcf, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340), 0x8) 1.020149487s ago: executing program 3 (id=3008): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x7, &(0x7f0000000180)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 824.83944ms ago: executing program 3 (id=3009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) sendmmsg$inet6(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x11, 0xffffffffffffffff, 0x2830b000) 593.383257ms ago: executing program 0 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa0}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0020000000000000200012800b00010067656e647665000010000280040006000500030006000000"], 0x40}}, 0x0) 324.095863ms ago: executing program 3 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) socket$inet6(0xa, 0x4, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0x200, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8f, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 258.556218ms ago: executing program 0 (id=3012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x836e6742f28221a9}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmmsg(r3, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7002f9dbdf250100ff0008000300", @ANYRES32=r2, @ANYBLOB="0c00060003000000030000000c0006000300000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) socket$nl_generic(0x10, 0x3, 0x10) 254.98372ms ago: executing program 4 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000020f00000000000000010062c2028005001600060000000000200000000000"], 0x3c}}, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) r2 = socket(0xf, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x2}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "8ea0496a56b849d1"}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="4a877902a1c25cc1046c8fa87878e14efea89f5486ca10f2badd9b53adb23c021b6cefbfbbd843b5cbf4aa5f36132e7cd7000000008800"/66], 0x248}, 0x1, 0x0, 0x0, 0x4000010}, 0x8004) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a01"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 239.945736ms ago: executing program 2 (id=3014): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x75, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0x12, "7434954373561de584a7f25fb703c8c9"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x94) bind$phonet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)={0x84, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x81}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044080}, 0x40000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x60, 0x1411, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x42db1b05454d61c5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000811) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) 0s ago: executing program 2 (id=3015): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf251500000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00*\x00\f'], 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x854) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000000), 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r8 = accept4$unix(r1, &(0x7f0000001100), &(0x7f0000000040)=0x6e, 0x1800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000001080)={0x1, 'dvmrp0\x00', {}, 0xfffd}) kernel console output (not intermixed with test programs): ly 0 port 8472 - 0 [ 454.027049][T10670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.069725][T10675] sctp: [Deprecated]: syz.4.1324 (pid 10675) Use of int in maxseg socket option. [ 454.069725][T10675] Use struct sctp_assoc_value instead [ 454.127866][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.151995][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.276213][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.287188][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.330214][T10692] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 454.349946][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.362660][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.414154][T10694] bond6: (slave gretap1): making interface the new active one [ 454.423259][T10694] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 454.440855][T10692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.482251][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.490875][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.513611][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.522470][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.543942][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.552621][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.572724][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.582917][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.380929][T10733] __nla_validate_parse: 16 callbacks suppressed [ 455.380948][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 455.457065][T10737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 455.466682][T10733] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 455.531788][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'. [ 455.783403][T10745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1343'. [ 456.019775][T10761] netlink: 'syz.0.1346': attribute type 7 has an invalid length. [ 456.027656][T10761] netlink: 'syz.0.1346': attribute type 8 has an invalid length. [ 456.350926][T10770] veth11: entered allmulticast mode [ 456.573141][T10779] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 456.588153][T10780] netlink: 'syz.2.1352': attribute type 21 has an invalid length. [ 456.611895][T10780] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.691558][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 456.701140][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 456.880459][T10795] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 456.906244][T10795] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1354'. [ 456.965599][T10796] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1354'. [ 457.096297][T10801] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 457.319102][T10807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.363094][T10779] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 458.909584][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 459.004236][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 459.066496][T10849] syzkaller1: entered promiscuous mode [ 459.089883][T10849] syzkaller1: entered allmulticast mode [ 459.739058][ T9855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.747132][ T9855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.768455][ T6190] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.009122][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.583236][ T6062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.651845][T10925] validate_nla: 1 callbacks suppressed [ 460.651865][T10925] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 460.743828][T10925] team0: Port device dummy0 added [ 461.114126][T10934] __nla_validate_parse: 6 callbacks suppressed [ 461.114145][T10934] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1400'. [ 461.196631][T10936] nbd: must specify at least one socket [ 461.225821][T10938] netlink: 'syz.2.1402': attribute type 83 has an invalid length. [ 461.243366][T10934] bond7 (unregistering): Released all slaves [ 461.309047][T10934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1400'. [ 461.428778][T10942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 461.468952][T10952] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 462.044898][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 462.357370][T10999] tipc: Enabled bearer , priority 0 [ 462.413561][T10999] tipc: Disabling bearer [ 462.646639][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 462.656819][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1427'. [ 462.674568][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 462.707399][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1427'. [ 462.793500][T11025] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1426'. [ 462.941999][T11033] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.1432'. [ 462.988501][T11033] openvswitch: netlink: Message has 5 unknown bytes. [ 463.624753][T11063] tipc: Enabled bearer , priority 0 [ 463.639074][T11063] syzkaller0: entered promiscuous mode [ 463.644687][T11063] syzkaller0: entered allmulticast mode [ 463.778386][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.816870][T11063] tipc: Resetting bearer [ 463.848396][T11063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.856972][T11063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.944912][T11062] tipc: Resetting bearer [ 464.036836][T11062] tipc: Disabling bearer [ 464.275701][T11099] geneve2: entered promiscuous mode [ 464.294286][T11099] geneve2: entered allmulticast mode [ 464.304981][T11096] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 464.472230][T11104] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 464.482394][T11104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.494357][T11104] netlink: 'syz.2.1453': attribute type 29 has an invalid length. [ 464.593762][T11113] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 464.711563][T11113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 464.957605][T11125] vlan1: entered promiscuous mode [ 464.965675][T11125] team0: entered promiscuous mode [ 464.981561][T11125] team_slave_0: entered promiscuous mode [ 464.988546][T11125] team_slave_1: entered promiscuous mode [ 465.018378][T11125] geneve0: entered promiscuous mode [ 465.119398][T11131] bond0: entered promiscuous mode [ 465.140721][T11131] bond0: left promiscuous mode [ 465.389461][T11149] netlink: 'syz.2.1469': attribute type 9 has an invalid length. [ 465.415788][T11149] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 465.482877][T11149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.517515][T11149] bond7: (slave gretap2): making interface the new active one [ 465.528929][T11149] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 465.711214][T11163] erspan0: entered promiscuous mode [ 465.736314][T11163] erspan0: entered allmulticast mode [ 465.806816][T11177] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 466.103032][T11190] netlink: 'syz.0.1483': attribute type 3 has an invalid length. [ 466.353875][T11202] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 466.391067][T11205] tipc: Enabled bearer , priority 0 [ 466.419397][T11205] syzkaller0: entered promiscuous mode [ 466.439494][T11205] syzkaller0: entered allmulticast mode [ 466.674588][T11208] tipc: Resetting bearer [ 466.757705][T11198] tipc: Resetting bearer [ 466.764876][T11214] __nla_validate_parse: 13 callbacks suppressed [ 466.764895][T11214] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1491'. [ 466.809763][T11198] tipc: Disabling bearer [ 466.888726][T11214] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 467.074395][T11228] netlink: 'syz.1.1495': attribute type 11 has an invalid length. [ 467.107126][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1495'. [ 467.277039][T11238] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1499'. [ 467.357887][T11244] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 467.394127][T11244] bond4: entered promiscuous mode [ 467.400242][T11244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.514349][T11244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.546673][T11244] bond4: (slave bond5): making interface the new active one [ 467.554595][T11244] bond5: entered promiscuous mode [ 467.562964][T11244] bond4: (slave bond5): Enslaving as an active interface with an up link [ 467.572914][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 467.920666][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 468.208851][T11292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.279822][T11299] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1518'. [ 468.310942][T11296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1517'. [ 468.322241][T11296] openvswitch: netlink: Flow key attr not present in new flow. [ 468.690125][T11321] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1524'. [ 468.725948][T11325] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 468.781808][T11325] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 469.026128][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.048464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.258469][T11350] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 469.266272][T11350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1535'. [ 469.279630][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 469.296749][T11349] dvmrp0: entered allmulticast mode [ 469.397989][T11357] netlink: 'syz.0.1537': attribute type 11 has an invalid length. [ 470.017187][T11389] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.130349][T11391] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 470.413939][T11415] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.437201][T11415] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.786682][T11415] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.811745][T11415] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.825225][T11435] netlink: 'syz.2.1561': attribute type 16 has an invalid length. [ 470.949611][T11415] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.982854][T11440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.998232][T11415] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.096337][T11444] netlink: 'syz.2.1564': attribute type 26 has an invalid length. [ 471.109818][T11444] netlink: 'syz.2.1564': attribute type 26 has an invalid length. [ 471.143344][T11445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.177158][T11445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.177628][T11415] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.212305][T11415] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.263564][T11453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.300294][T11453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.323137][T11445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.426844][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.436365][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.459284][T11461] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20004 [ 471.508923][ T9859] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.528304][ T9859] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.538257][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.559302][ T9859] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.583842][ T9859] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.634978][T11467] lo: entered allmulticast mode [ 471.643154][ T9859] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.674856][ T9859] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.713128][T11471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.731901][T11416] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.757199][T11416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.877416][T11416] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.898195][T11416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.908480][T11479] __nla_validate_parse: 11 callbacks suppressed [ 471.908499][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 471.967045][T11416] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.990537][T11416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.995770][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 472.090700][T11416] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.116683][T11416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.305730][T11498] tipc: Enabled bearer , priority 0 [ 472.334086][T11496] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 472.432806][T11512] batadv0: entered promiscuous mode [ 472.448880][T11512] batadv0: entered allmulticast mode [ 472.827302][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 472.839982][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 472.870588][T11536] netlink: 'syz.2.1592': attribute type 11 has an invalid length. [ 472.879538][T11536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1592'. [ 473.015887][T11535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.205457][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 473.293582][T11568] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 473.311639][T11568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1600'. [ 473.419161][ T6062] tipc: Node number set to 3521538124 [ 473.760064][T11604] sit0: entered promiscuous mode [ 473.800293][T11604] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 473.828468][T11604] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1611'. [ 473.848817][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.895737][T11611] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 474.266172][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 474.317491][T11634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.336145][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1620'. [ 474.356536][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1620'. [ 474.758589][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.783390][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.837644][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.847214][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.872340][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.880710][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.904759][T11658] vlan2: entered allmulticast mode [ 474.910048][T11658] bridge0: entered allmulticast mode [ 474.915912][T11658] bridge4: port 1(vlan2) entered blocking state [ 474.923042][T11658] bridge4: port 1(vlan2) entered disabled state [ 474.932464][T11658] vlan2: entered promiscuous mode [ 474.937599][T11658] bridge0: entered promiscuous mode [ 474.977251][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.998492][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.213407][T11673] syzkaller0: entered promiscuous mode [ 475.235488][T11673] syzkaller0: entered allmulticast mode [ 475.254141][T11673] tipc: Enabled bearer , priority 0 [ 475.284094][T11673] tipc: Resetting bearer [ 475.301130][T11672] tipc: Resetting bearer [ 475.339770][T11672] tipc: Disabling bearer [ 476.213892][T11732] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 476.417005][T11744] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 476.805230][T11763] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 476.978379][T11770] pim6reg: left allmulticast mode [ 477.490628][T11808] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 477.531144][T11805] __nla_validate_parse: 9 callbacks suppressed [ 477.531163][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 477.625306][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1675'. [ 477.692045][T11808] gretap1: entered promiscuous mode [ 477.737703][T11808] bond5: (slave gretap1): making interface the new active one [ 477.769453][T11808] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 477.871285][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.879317][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.887318][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.895287][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.903330][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.911277][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.919217][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.927120][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.935068][T11827] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 478.131045][T11839] nftables ruleset with unbound chain [ 478.171707][T11835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1683'. [ 478.224133][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 478.547815][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 478.639146][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 478.806703][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 478.850242][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 478.862646][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 479.261904][T11887] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1699'. [ 479.381421][T11893] team0: No ports can be present during mode change [ 479.489473][T11901] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 480.165063][T11949] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 480.194582][T11949] netlink: 'syz.3.1718': attribute type 2 has an invalid length. [ 480.489344][T11971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.668946][T11968] "syz.1.1723" (11968) uses obsolete ecb(arc4) skcipher [ 480.750265][T11981] vlan0: entered allmulticast mode [ 480.768759][T11981] bond0: entered allmulticast mode [ 480.783700][T11981] bond_slave_0: entered allmulticast mode [ 480.799736][T11981] bond_slave_1: entered allmulticast mode [ 480.812892][T11981] team0: entered allmulticast mode [ 480.823625][T11981] team_slave_0: entered allmulticast mode [ 480.858344][T11992] netlink: 'syz.1.1729': attribute type 29 has an invalid length. [ 480.867283][T11992] netlink: 'syz.1.1729': attribute type 29 has an invalid length. [ 481.403978][T12009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.449127][T12009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.634505][T12009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.667603][T12009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.841214][T12009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.852415][T12009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.070018][T12009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.107119][T12009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.163548][T12060] netlink: 'syz.2.1748': attribute type 33 has an invalid length. [ 482.195173][T12066] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.205878][T12066] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.253195][T12071] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 482.290141][T12066] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.300651][T12066] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.366172][T12066] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.381445][T12066] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.430330][ T1123] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.439215][ T1123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.491271][T12066] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.506272][T12066] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.523287][ T1123] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.536658][ T1123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.550998][ T1123] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.562575][ T1123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.611334][ T1123] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.632075][ T1123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.730630][ T9847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.763854][ T9847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.816086][T12087] __nla_validate_parse: 17 callbacks suppressed [ 482.816105][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1757'. [ 482.860265][ T9847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.890554][ T9847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.909281][ T9847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.934672][ T9847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.945788][T12091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1757'. [ 482.957532][ T9847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.984448][ T9847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.063327][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1759'. [ 483.104583][T12105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.134721][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.185111][T12105] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.258751][T12116] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 483.265353][T12105] netlink: 'syz.0.1761': attribute type 2 has an invalid length. [ 483.288911][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 483.348348][T12105] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.507358][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 483.547922][T12125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1767'. [ 483.584550][T12127] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.597749][T12127] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.687765][T12127] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.698271][T12127] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.756548][T12127] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.767795][T12127] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.866664][T12127] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.882919][T12127] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.944586][T12141] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.956485][T12141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.990993][T12143] Driver unsupported XDP return value 0 on prog (id 439) dev N/A, expect packet loss! [ 484.023023][T12141] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.033498][T12141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.093074][T12141] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.141895][T12141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.281115][T12141] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.329370][T12141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.413116][T12148] team0: left allmulticast mode [ 484.425020][T12148] team_slave_0: left allmulticast mode [ 484.445507][T12148] team_slave_1: left allmulticast mode [ 484.474688][T12148] geneve0: left allmulticast mode [ 484.497205][T12148] team0: left promiscuous mode [ 484.506414][T12148] team_slave_0: left promiscuous mode [ 484.516804][T12148] team_slave_1: left promiscuous mode [ 484.522757][T12148] geneve0: left promiscuous mode [ 484.535056][T12148] bridge0: port 2(team0) entered disabled state [ 484.552619][T12148] bridge_slave_0: left allmulticast mode [ 484.572924][T12148] bridge_slave_0: left promiscuous mode [ 484.581928][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.671871][T12154] netlink: 'syz.2.1777': attribute type 4 has an invalid length. [ 485.409654][T12203] net_ratelimit: 46 callbacks suppressed [ 485.409675][T12203] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.859897][T12228] netlink: 'syz.2.1799': attribute type 6 has an invalid length. [ 486.326526][T12259] netlink: 'syz.1.1808': attribute type 5 has an invalid length. [ 486.347767][T12259] netlink: 'syz.1.1808': attribute type 6 has an invalid length. [ 486.813021][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.826090][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.851717][T12286] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 486.898326][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.936496][ T1123] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.948818][ T1123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.971645][ T9847] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.984658][ T9847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.006925][T12286] bond4: entered promiscuous mode [ 487.012724][T12286] bond4: entered allmulticast mode [ 487.027597][T12286] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.045831][ T1123] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.087447][ T1123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.262587][T12297] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 487.323933][T12297] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 487.340912][T12297] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 487.396103][T12301] tipc: New replicast peer: 255.255.255.255 [ 487.406284][T12301] tipc: Enabled bearer , priority 10 [ 487.450472][ T9859] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.476800][ T9859] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.504897][ T9847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.527403][ T9847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.609181][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.621743][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.666128][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.680185][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.780160][T12312] tipc: Enabled bearer , priority 0 [ 487.807540][T12311] tipc: Enabling of bearer rejected, already enabled [ 487.836148][T12316] __nla_validate_parse: 17 callbacks suppressed [ 487.836176][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 487.947488][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 487.957893][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 487.987234][T12320] bond0: entered promiscuous mode [ 488.041595][T12320] bond_slave_0: entered promiscuous mode [ 488.053800][T12320] bond_slave_1: entered promiscuous mode [ 488.060194][T12320] geneve1: entered promiscuous mode [ 488.065596][T12320] team0: entered promiscuous mode [ 488.076170][T12320] team_slave_1: entered promiscuous mode [ 488.083781][T12320] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 488.106342][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1825'. [ 488.124447][T12320] batadv_slave_1: entered promiscuous mode [ 488.159744][T12311] tipc: Disabling bearer [ 488.181103][ T5907] Bluetooth: hci4: command 0x0405 tx timeout [ 488.455165][T12353] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.471358][T12353] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.521286][T12353] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.546630][T12353] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.656977][T12365] openvswitch: netlink: IP tunnel TTL not specified. [ 488.695618][T12353] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.708668][T12353] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.806240][T12353] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.818867][ T5961] tipc: Node number set to 1671106960 [ 488.827651][T12353] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.941999][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 489.477352][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c4d800: rx timeout, send abort [ 489.761799][T12423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1856'. [ 489.771169][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 489.985716][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c4d800: abort rx timeout. Force session deactivation [ 490.367826][T12453] openvswitch: netlink: Key type 29 is not supported [ 490.535277][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 490.612841][T12460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.666715][T12460] bond1: (slave veth0_to_bond): Releasing active interface [ 490.692505][T12469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'. [ 490.723529][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 491.152587][T12494] lo speed is unknown, defaulting to 1000 [ 491.175807][T12494] lo speed is unknown, defaulting to 1000 [ 491.192271][T12494] lo speed is unknown, defaulting to 1000 [ 491.203258][T12497] netlink: 'syz.4.1879': attribute type 6 has an invalid length. [ 491.245881][T12494] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 491.462910][T12494] lo speed is unknown, defaulting to 1000 [ 491.490589][T12494] lo speed is unknown, defaulting to 1000 [ 491.547787][T12494] lo speed is unknown, defaulting to 1000 [ 491.606280][T12494] lo speed is unknown, defaulting to 1000 [ 491.658966][T12494] lo speed is unknown, defaulting to 1000 [ 491.678200][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.698832][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.771156][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.784201][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.839274][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.847609][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.859506][T12520] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 491.867458][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.877384][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.031032][T12528] tipc: Enabling of bearer rejected, already enabled [ 492.056231][T12528] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 492.064140][T12528] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 492.097110][T12528] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 492.144364][T12528] tipc: Resetting bearer [ 492.167886][T12537] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 492.381821][T12543] macvlan2: entered promiscuous mode [ 492.419771][T12543] macvlan2: entered allmulticast mode [ 492.440173][T12543] veth1_to_bond: entered promiscuous mode [ 492.452534][T12543] veth1_to_bond: entered allmulticast mode [ 492.452926][T12558] openvswitch: netlink: IPv4 tun info is not correct [ 492.463396][T12543] team0: Port device macvlan2 added [ 492.646309][T12558] syzkaller0: entered promiscuous mode [ 492.652582][T12558] syzkaller0: entered allmulticast mode [ 494.305948][T12575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.329514][T12584] __nla_validate_parse: 6 callbacks suppressed [ 494.329537][T12584] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.1902'. [ 494.349260][T12575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.382220][T12575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 494.544016][T12575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.570797][T12603] netlink: 'syz.0.1907': attribute type 11 has an invalid length. [ 494.579355][T12575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.591368][T12603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1907'. [ 494.602779][T12575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 494.664435][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 494.719903][T12609] netlink: 'syz.4.1909': attribute type 35 has an invalid length. [ 494.739198][T12611] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 494.751745][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1910'. [ 494.759475][T12611] netlink: 'syz.3.1908': attribute type 2 has an invalid length. [ 494.776031][T12615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1909'. [ 494.833503][T12575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.845756][T12575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.857868][T12575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 495.019864][T12624] sock: sock_set_timeout: `syz.2.1911' (pid 12624) tries to set negative timeout [ 495.053150][T12575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.066623][T12575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.081354][T12575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 495.231979][ T59] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.244209][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.253799][ T59] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 495.287764][ T59] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.296715][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.305747][ T59] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 495.330630][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.339293][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.358440][ T59] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 495.384315][ T9847] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.392911][ T9847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.405331][ T9847] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 495.910211][T12664] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 495.986177][T12664] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 496.086367][T12664] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 496.170785][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.187817][T12664] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 496.332509][ T9847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.368548][ T9847] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.368852][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 496.405930][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 496.417413][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 496.446047][ T9847] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.463350][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 496.483515][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 496.506152][ T9847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.636451][T12698] netlink: 'syz.3.1933': attribute type 8 has an invalid length. [ 498.637893][T12773] syzkaller0: entered promiscuous mode [ 498.649941][T12773] syzkaller0: entered allmulticast mode [ 500.880292][T12812] tipc: Enabled bearer , priority 0 [ 501.077543][T12816] syzkaller0: entered promiscuous mode [ 501.111780][T12816] syzkaller0: entered allmulticast mode [ 501.156109][T12823] tipc: Resetting bearer [ 501.196966][T12854] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.231989][T12809] tipc: Resetting bearer [ 501.625514][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949725][ T6191] tipc: Node number set to 3346512584 [ 502.775249][T12809] tipc: Disabling bearer [ 502.964410][T12870] tipc: Enabling of bearer rejected, failed to enable media [ 503.026439][T12870] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 503.064878][T12870] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.077097][T12876] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 503.093040][T12870] gretap2: entered promiscuous mode [ 503.099158][T12870] gretap2: entered allmulticast mode [ 503.104985][T12876] __nla_validate_parse: 4 callbacks suppressed [ 503.105003][T12876] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1974'. [ 503.130128][T12868] netlink: 'syz.1.1972': attribute type 5 has an invalid length. [ 503.222597][T12881] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1974'. [ 503.396137][T12890] tipc: Enabling of bearer rejected, failed to enable media [ 503.450236][T12890] netlink: 211664 bytes leftover after parsing attributes in process `syz.1.1980'. [ 503.485300][T12894] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 503.603726][T12894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 503.656172][T12898] veth11: entered promiscuous mode [ 503.682060][T12898] bond6: (slave veth11): Enslaving as an active interface with a down link [ 503.702502][T12907] syz_tun: left allmulticast mode [ 503.719534][T12907] syz_tun: left promiscuous mode [ 503.752599][T12907] bridge0: port 3(syz_tun) entered disabled state [ 503.793195][T12907] bond0: (slave team0): Releasing backup interface [ 503.842509][T12907] team0: left allmulticast mode [ 503.849349][T12916] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1987'. [ 503.858116][T12907] team_slave_0: left allmulticast mode [ 503.878932][T12916] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1987'. [ 503.889789][T12907] bridge_slave_0: left allmulticast mode [ 503.895955][T12907] bridge_slave_0: left promiscuous mode [ 503.953538][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.070889][T12907] bridge_slave_1: left allmulticast mode [ 504.088604][T12907] bridge_slave_1: left promiscuous mode [ 504.094571][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.195564][T12907] bond0: (slave bond_slave_0): Releasing backup interface [ 504.214739][T12940] netlink: 'syz.1.1993': attribute type 21 has an invalid length. [ 504.234524][T12907] bond_slave_0: left allmulticast mode [ 504.264260][T12907] bond0: (slave bond_slave_1): Releasing backup interface [ 504.285983][T12907] bond_slave_1: left allmulticast mode [ 504.311004][T12907] team0: Port device team_slave_0 removed [ 504.324065][T12907] bond2: (slave bridge1): Releasing active interface [ 504.353436][T12907] bond5: (slave geneve2): Releasing backup interface [ 504.383506][T12907] bond6: (slave gretap1): Releasing active interface [ 504.406077][T12907] bond7: (slave gretap2): Releasing active interface [ 504.439281][T12901] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 504.477801][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1993'. [ 504.491778][ T1123] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 504.524726][ T1123] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 504.544519][ T1123] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 504.556321][ T1123] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 504.783608][T12960] macvlan0: entered promiscuous mode [ 504.798437][T12960] macvlan0: entered allmulticast mode [ 505.085107][T12973] netlink: 'syz.0.2002': attribute type 2 has an invalid length. [ 505.104923][T12975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.662824][T13002] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 505.865197][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2016'. [ 506.327206][T13049] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 506.356108][T13049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2024'. [ 506.432277][T13053] veth0: entered promiscuous mode [ 506.805981][T13079] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2034'. [ 506.983119][T13085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2035'. [ 506.993522][T13085] openvswitch: netlink: Flow key attr not present in new flow. [ 507.181310][T13050] veth0: left promiscuous mode [ 507.183951][T13097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.259592][T13101] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 507.595498][T13123] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 507.750660][T13123] bond8 (unregistering): Released all slaves [ 507.762345][T13137] netlink: 'syz.3.2051': attribute type 17 has an invalid length. [ 507.839804][T13130] ip6tnl2: entered promiscuous mode [ 507.850483][T13130] ip6tnl2: entered allmulticast mode [ 508.023007][T13146] IPv6: sit2: Disabled Multicast RS [ 508.029540][T13146] sit2: entered allmulticast mode [ 508.260856][T13161] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 508.516585][T13171] __nla_validate_parse: 4 callbacks suppressed [ 508.516606][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2063'. [ 508.625210][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 508.728297][T13178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2065'. [ 508.803083][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 509.171137][T13205] netlink: 'syz.4.2070': attribute type 5 has an invalid length. [ 509.279178][T13210] ip6gre2: entered allmulticast mode [ 509.330759][T13212] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 [ 509.354464][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'. [ 509.375701][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2072'. [ 509.828437][T13227] sctp: [Deprecated]: syz.4.2079 (pid 13227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.828437][T13227] Use struct sctp_sack_info instead [ 509.865043][T13228] syzkaller1: entered promiscuous mode [ 509.870719][T13228] syzkaller1: entered allmulticast mode [ 509.880830][T13228] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2075'. [ 509.924193][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.936065][T13231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.122105][T13246] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2082'. [ 510.148807][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 510.403132][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2088'. [ 511.256332][T13297] IPVS: length: 8 != 1152 [ 511.624277][T13316] netlink: 'syz.4.2102': attribute type 4 has an invalid length. [ 511.640552][T13321] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 511.980352][T13341] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 512.176065][T13354] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 512.379598][T13374] netlink: 'syz.2.2115': attribute type 4 has an invalid length. [ 512.429172][T13374] netlink: 'syz.2.2115': attribute type 4 has an invalid length. [ 512.492947][T13364] lo speed is unknown, defaulting to 1000 [ 512.773658][T13391] batman_adv: batadv0: Adding interface: dummy0 [ 512.782438][T13391] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.813994][T13391] batman_adv: batadv0: Interface activated: dummy0 [ 512.881941][T13395] batadv0: mtu less than device minimum [ 512.889618][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.902254][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.914288][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.926374][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.938463][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.950484][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.962508][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.974513][T13395] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.722990][T13427] __nla_validate_parse: 12 callbacks suppressed [ 513.723013][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'. [ 513.750639][T13427] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2131'. [ 513.803128][T13436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2134'. [ 513.882561][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 513.892019][T13435] batman_adv: batadv0: Interface deactivated: dummy0 [ 513.960499][T13435] batman_adv: batadv0: Removing interface: dummy0 [ 514.191071][T13455] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 514.254214][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2139'. [ 515.107741][T13491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2148'. [ 515.147855][T13492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2148'. [ 515.590089][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2156'. [ 515.724076][T13529] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 515.774207][T13529] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 515.776144][T13537] veth1_to_bond: entered allmulticast mode [ 515.844149][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 515.976464][T13545] bond0: (slave bond_slave_1): Releasing backup interface [ 515.995893][T13545] bond_slave_1 (unregistering): left promiscuous mode [ 516.073044][T13545] veth1_to_bond (unregistering): left allmulticast mode [ 516.312824][ T9859] tipc: Subscription rejected, illegal request [ 516.346277][T13559] geneve3: entered promiscuous mode [ 516.358222][T13559] geneve3: entered allmulticast mode [ 516.461305][ T1123] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.487437][ T1123] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.508834][ T1123] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.532206][ T1123] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.688791][T13576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2169'. [ 516.809162][T13582] netlink: 'syz.0.2173': attribute type 8 has an invalid length. [ 516.989364][T13595] netlink: 'syz.0.2178': attribute type 2 has an invalid length. [ 517.018371][T13595] nbd: must specify a device to reconfigure [ 517.246324][T13605] netlink: 'syz.2.2182': attribute type 9 has an invalid length. [ 517.266997][T13606] netlink: 'syz.2.2182': attribute type 9 has an invalid length. [ 517.415421][T13613] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 517.504629][T13616] netlink: 'syz.4.2185': attribute type 21 has an invalid length. [ 517.618309][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.908941][T13637] tipc: Invalid UDP bearer configuration [ 517.909002][T13637] tipc: Enabling of bearer rejected, failed to enable media [ 518.043172][T13644] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 518.074819][T13644] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 518.090655][T13644] team0: Port device dummy0 removed [ 518.102786][T13644] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 518.473438][T13661] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 518.494116][T13661] net_ratelimit: 12 callbacks suppressed [ 518.494133][T13661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.223982][T13699] __nla_validate_parse: 8 callbacks suppressed [ 519.224003][T13699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2212'. [ 519.285068][T13701] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2213'. [ 519.305483][T13702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2212'. [ 519.561410][T13717] vlan2: entered promiscuous mode [ 519.566749][T13717] vlan2: entered allmulticast mode [ 519.579190][T13717] hsr_slave_1: entered allmulticast mode [ 519.660727][T13724] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.2216'. [ 519.675183][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2217'. [ 519.710843][T13724] openvswitch: netlink: Message has 5 unknown bytes. [ 519.977091][T13730] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.989716][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'. [ 520.003227][T13730] bond8: (slave bond9): making interface the new active one [ 520.012150][T13730] bond8: (slave bond9): Enslaving as an active interface with an up link [ 520.046812][T13730] veth0: entered promiscuous mode [ 520.062207][T13739] 8021q: adding VLAN 0 to HW filter on device bond8 [ 520.076983][T13733] tipc: New replicast peer: 255.255.255.255 [ 520.085474][T13733] tipc: Enabled bearer , priority 10 [ 520.225555][T13729] veth0: left promiscuous mode [ 520.547918][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 520.557892][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2232'. [ 520.687970][ T1123] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 520.698005][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 521.110065][T13813] FAULT_INJECTION: forcing a failure. [ 521.110065][T13813] name failslab, interval 1, probability 0, space 0, times 1 [ 521.171667][T13813] CPU: 0 UID: 0 PID: 13813 Comm: syz.3.2242 Not tainted syzkaller #0 PREEMPT(full) [ 521.171698][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.171716][T13813] Call Trace: [ 521.171724][T13813] [ 521.171733][T13813] dump_stack_lvl+0x189/0x250 [ 521.171765][T13813] ? __pfx____ratelimit+0x10/0x10 [ 521.171796][T13813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.171821][T13813] ? __pfx__printk+0x10/0x10 [ 521.171856][T13813] ? __pfx___might_resched+0x10/0x10 [ 521.171881][T13813] should_fail_ex+0x414/0x560 [ 521.171915][T13813] should_failslab+0xa8/0x100 [ 521.171947][T13813] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 521.171976][T13813] ? __alloc_skb+0x112/0x2d0 [ 521.172000][T13813] __alloc_skb+0x112/0x2d0 [ 521.172025][T13813] netlink_sendmsg+0x5c6/0xb30 [ 521.172055][T13813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.172079][T13813] ? aa_sock_msg_perm+0xf1/0x1d0 [ 521.172101][T13813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.172123][T13813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.172143][T13813] __sock_sendmsg+0x21c/0x270 [ 521.172174][T13813] ____sys_sendmsg+0x505/0x830 [ 521.172204][T13813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.172237][T13813] ? import_iovec+0x74/0xa0 [ 521.172265][T13813] ___sys_sendmsg+0x21f/0x2a0 [ 521.172290][T13813] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.172354][T13813] ? __fget_files+0x2a/0x420 [ 521.172390][T13813] ? __fget_files+0x3a0/0x420 [ 521.172433][T13813] __x64_sys_sendmsg+0x19b/0x260 [ 521.172458][T13813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.172492][T13813] ? __pfx_ksys_write+0x10/0x10 [ 521.172525][T13813] ? do_syscall_64+0xbe/0x3b0 [ 521.172549][T13813] do_syscall_64+0xfa/0x3b0 [ 521.172565][T13813] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.172594][T13813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.172614][T13813] ? clear_bhb_loop+0x60/0xb0 [ 521.172640][T13813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.172664][T13813] RIP: 0033:0x7ff9bfb8ebe9 [ 521.172683][T13813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.172700][T13813] RSP: 002b:00007ff9c0ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.172723][T13813] RAX: ffffffffffffffda RBX: 00007ff9bfdc6090 RCX: 00007ff9bfb8ebe9 [ 521.172738][T13813] RDX: 0000000020000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 521.172751][T13813] RBP: 00007ff9c0ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 521.172763][T13813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.172774][T13813] R13: 00007ff9bfdc6128 R14: 00007ff9bfdc6090 R15: 00007ffe450f2848 [ 521.172808][T13813] [ 521.607382][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2247'. [ 521.873408][T13838] validate_nla: 8 callbacks suppressed [ 521.873430][T13838] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 522.139685][ T981] lo speed is unknown, defaulting to 1000 [ 522.145687][ T981] syz2: Port: 1 Link DOWN [ 522.322226][T13857] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 522.426223][T13862] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 522.556625][T13870] netlink: 'syz.1.2264': attribute type 33 has an invalid length. [ 522.594819][T13878] netlink: 'syz.1.2264': attribute type 33 has an invalid length. [ 522.620691][T13879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.953533][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 523.097869][T13904] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 523.110223][T13904] bond10: (slave vcan0): Error -95 calling set_mac_address [ 524.190785][T13952] bridge0: port 1(vlan0) entered blocking state [ 524.203197][T13955] netlink: 'syz.4.2290': attribute type 8 has an invalid length. [ 524.214771][T13952] bridge0: port 1(vlan0) entered disabled state [ 524.230518][T13952] vlan0: entered allmulticast mode [ 524.235689][T13952] bridge0: entered allmulticast mode [ 524.276635][T13952] vlan0: left allmulticast mode [ 524.287473][T13952] bridge0: left allmulticast mode [ 524.299614][T13963] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 524.656192][T13983] netlink: 'syz.4.2298': attribute type 5 has an invalid length. [ 524.683628][T13988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.684160][T13983] __nla_validate_parse: 10 callbacks suppressed [ 524.684180][T13983] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2298'. [ 524.715977][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 524.931335][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 525.428275][T14035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2317'. [ 525.691917][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 525.712025][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 525.725041][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 526.146719][T14061] netlink: 'syz.2.2323': attribute type 83 has an invalid length. [ 526.315972][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2326'. [ 526.440600][T14075] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 526.564103][T14083] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 527.285344][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2338'. [ 527.464523][T14115] netlink: 'syz.4.2339': attribute type 2 has an invalid length. [ 527.587602][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'. [ 527.615032][T14120] netlink: 'syz.3.2341': attribute type 16 has an invalid length. [ 527.637419][T14127] macvlan3: entered allmulticast mode [ 527.644657][T14127] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 527.676133][T14131] netlink: 'syz.4.2345': attribute type 6 has an invalid length. [ 527.697139][T14120] dvmrp0: left allmulticast mode [ 527.853684][T14137] netlink: 'syz.0.2347': attribute type 1 has an invalid length. [ 527.944485][T14142] bond6: (slave gretap3): making interface the new active one [ 527.953090][T14142] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 528.172844][ T59] tipc: Subscription rejected, illegal request [ 528.551651][T14176] netlink: 'syz.1.2358': attribute type 7 has an invalid length. [ 528.572882][T14176] netlink: 'syz.1.2358': attribute type 8 has an invalid length. [ 528.769306][T14196] wg1: entered promiscuous mode [ 528.775630][T14196] wg1: entered allmulticast mode [ 529.183942][T14222] netlink: 'syz.3.2374': attribute type 2 has an invalid length. [ 529.382458][T14226] vlan3: entered promiscuous mode [ 529.387577][T14226] team0: entered promiscuous mode [ 529.394156][T14226] team_slave_0: entered promiscuous mode [ 529.422054][T14226] team_slave_1: entered promiscuous mode [ 529.428549][T14226] geneve0: entered promiscuous mode [ 530.015113][T14256] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 530.173568][T14258] netlink: 'syz.1.2388': attribute type 2 has an invalid length. [ 530.353819][T14276] __nla_validate_parse: 7 callbacks suppressed [ 530.353839][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2395'. [ 530.551227][T14281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2396'. [ 530.600816][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'. [ 530.838356][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2402'. [ 530.954089][T14310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.025441][T14310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.074817][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2409'. [ 531.280058][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2412'. [ 531.295437][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2412'. [ 531.504104][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2414'. [ 531.523808][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 531.738298][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 532.154716][T14373] tipc: Enabled bearer , priority 0 [ 532.162867][T14373] syzkaller0: entered promiscuous mode [ 532.184050][T14373] syzkaller0: entered allmulticast mode [ 532.309517][T14382] tipc: Resetting bearer [ 532.373997][T14371] tipc: Resetting bearer [ 532.404972][T14371] tipc: Disabling bearer [ 532.441306][T14391] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 532.719305][T14394] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 532.733621][T14400] lo speed is unknown, defaulting to 1000 [ 532.757279][T14402] vlan4: entered allmulticast mode [ 532.762742][T14402] hsr0: entered allmulticast mode [ 532.767941][T14402] hsr_slave_0: entered allmulticast mode [ 532.777482][T14402] hsr_slave_1: entered allmulticast mode [ 532.823457][T14394] sit0: entered promiscuous mode [ 532.834211][T14394] sit0: entered allmulticast mode [ 532.918241][T14405] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 533.056136][T14414] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 533.327155][T14430] netlink: 'syz.4.2446': attribute type 15 has an invalid length. [ 533.514099][T14438] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 533.556084][T14441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.629772][T14448] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 533.637083][T14448] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 533.710174][T14452] netlink: 'syz.1.2453': attribute type 6 has an invalid length. [ 533.742773][T14452] netlink: 'syz.1.2453': attribute type 6 has an invalid length. [ 533.947953][T14466] veth0_to_team: entered promiscuous mode [ 533.954318][T14466] veth0_to_team: entered allmulticast mode [ 534.206175][T14481] FAULT_INJECTION: forcing a failure. [ 534.206175][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 534.240660][T14481] CPU: 0 UID: 0 PID: 14481 Comm: syz.2.2463 Not tainted syzkaller #0 PREEMPT(full) [ 534.240688][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.240701][T14481] Call Trace: [ 534.240709][T14481] [ 534.240718][T14481] dump_stack_lvl+0x189/0x250 [ 534.240748][T14481] ? __pfx____ratelimit+0x10/0x10 [ 534.240780][T14481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.240804][T14481] ? __pfx__printk+0x10/0x10 [ 534.240839][T14481] ? __pfx___might_resched+0x10/0x10 [ 534.240865][T14481] should_fail_ex+0x414/0x560 [ 534.240898][T14481] should_failslab+0xa8/0x100 [ 534.240934][T14481] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 534.240964][T14481] ? __alloc_skb+0x112/0x2d0 [ 534.240988][T14481] __alloc_skb+0x112/0x2d0 [ 534.241011][T14481] netlink_sendmsg+0x5c6/0xb30 [ 534.241042][T14481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.241064][T14481] ? __lock_acquire+0xab9/0xd20 [ 534.241092][T14481] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.241114][T14481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.241136][T14481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.241157][T14481] __sock_sendmsg+0x21c/0x270 [ 534.241188][T14481] ____sys_sendmsg+0x505/0x830 [ 534.241218][T14481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.241251][T14481] ? import_iovec+0x74/0xa0 [ 534.241280][T14481] ___sys_sendmsg+0x21f/0x2a0 [ 534.241305][T14481] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.241376][T14481] ? __fget_files+0x2a/0x420 [ 534.241406][T14481] ? __fget_files+0x3a0/0x420 [ 534.241449][T14481] __x64_sys_sendmsg+0x19b/0x260 [ 534.241475][T14481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.241508][T14481] ? __pfx_ksys_write+0x10/0x10 [ 534.241532][T14481] ? rcu_is_watching+0x15/0xb0 [ 534.241559][T14481] ? do_syscall_64+0xbe/0x3b0 [ 534.241582][T14481] do_syscall_64+0xfa/0x3b0 [ 534.241599][T14481] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.241628][T14481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.241648][T14481] ? clear_bhb_loop+0x60/0xb0 [ 534.241674][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.241693][T14481] RIP: 0033:0x7fcaf778ebe9 [ 534.241711][T14481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.241728][T14481] RSP: 002b:00007fcaf59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.241750][T14481] RAX: ffffffffffffffda RBX: 00007fcaf79c5fa0 RCX: 00007fcaf778ebe9 [ 534.241765][T14481] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003 [ 534.241777][T14481] RBP: 00007fcaf59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.241790][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.241802][T14481] R13: 00007fcaf79c6038 R14: 00007fcaf79c5fa0 R15: 00007ffc08d8d598 [ 534.241835][T14481] [ 534.619233][T14486] netlink: 'syz.2.2465': attribute type 16 has an invalid length. [ 534.621987][T14484] macsec0: entered promiscuous mode [ 534.635455][T14484] macsec0: entered allmulticast mode [ 534.646943][T14484] veth1_macvtap: entered allmulticast mode [ 534.654941][T14484] bridge0: port 4(macsec0) entered blocking state [ 534.662196][T14484] bridge0: port 4(macsec0) entered disabled state [ 534.672983][T14484] bridge0: port 4(macsec0) entered blocking state [ 534.680811][T14484] bridge0: port 4(macsec0) entered forwarding state [ 534.693549][T14486] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 534.746844][T14492] netlink: 'syz.4.2466': attribute type 5 has an invalid length. [ 535.442682][T14537] __nla_validate_parse: 12 callbacks suppressed [ 535.442706][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 535.465298][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 536.114596][T14570] can: request_module (can-proto-3) failed. [ 536.252663][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'. [ 536.491532][T14595] FAULT_INJECTION: forcing a failure. [ 536.491532][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 536.527193][T14595] CPU: 1 UID: 0 PID: 14595 Comm: syz.4.2496 Not tainted syzkaller #0 PREEMPT(full) [ 536.527223][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.527237][T14595] Call Trace: [ 536.527245][T14595] [ 536.527254][T14595] dump_stack_lvl+0x189/0x250 [ 536.527284][T14595] ? __pfx____ratelimit+0x10/0x10 [ 536.527321][T14595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.527351][T14595] ? __pfx__printk+0x10/0x10 [ 536.527381][T14595] ? __might_fault+0xb0/0x130 [ 536.527422][T14595] should_fail_ex+0x414/0x560 [ 536.527456][T14595] _copy_from_iter+0x1de/0x1790 [ 536.527486][T14595] ? rcu_is_watching+0x15/0xb0 [ 536.527508][T14595] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 536.527539][T14595] ? __pfx__copy_from_iter+0x10/0x10 [ 536.527562][T14595] ? __build_skb_around+0x257/0x3e0 [ 536.527586][T14595] ? netlink_sendmsg+0x642/0xb30 [ 536.527604][T14595] ? skb_put+0x11b/0x210 [ 536.527627][T14595] netlink_sendmsg+0x6b2/0xb30 [ 536.527658][T14595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.527681][T14595] ? __lock_acquire+0xab9/0xd20 [ 536.527708][T14595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 536.527730][T14595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.527752][T14595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.527772][T14595] __sock_sendmsg+0x21c/0x270 [ 536.527805][T14595] ____sys_sendmsg+0x505/0x830 [ 536.527835][T14595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.527868][T14595] ? import_iovec+0x74/0xa0 [ 536.527896][T14595] ___sys_sendmsg+0x21f/0x2a0 [ 536.527921][T14595] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.527986][T14595] ? __fget_files+0x2a/0x420 [ 536.528015][T14595] ? __fget_files+0x3a0/0x420 [ 536.528056][T14595] __x64_sys_sendmsg+0x19b/0x260 [ 536.528081][T14595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.528114][T14595] ? __pfx_ksys_write+0x10/0x10 [ 536.528164][T14595] ? rcu_is_watching+0x15/0xb0 [ 536.528190][T14595] ? do_syscall_64+0xbe/0x3b0 [ 536.528213][T14595] do_syscall_64+0xfa/0x3b0 [ 536.528229][T14595] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.528259][T14595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.528279][T14595] ? clear_bhb_loop+0x60/0xb0 [ 536.528303][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.528323][T14595] RIP: 0033:0x7f4e20b8ebe9 [ 536.528342][T14595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.528359][T14595] RSP: 002b:00007f4e21ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.528381][T14595] RAX: ffffffffffffffda RBX: 00007f4e20dc5fa0 RCX: 00007f4e20b8ebe9 [ 536.528397][T14595] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003 [ 536.528410][T14595] RBP: 00007f4e21ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 536.528422][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.528434][T14595] R13: 00007f4e20dc6038 R14: 00007f4e20dc5fa0 R15: 00007ffff80630a8 [ 536.528468][T14595] [ 536.881375][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'. [ 537.136640][T14609] netlink: 'syz.4.2500': attribute type 12 has an invalid length. [ 537.142677][T14625] netlink: 'syz.2.2505': attribute type 21 has an invalid length. [ 537.152737][T14625] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2505'. [ 537.162554][T14625] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2505'. [ 537.441101][T14639] netlink: 'syz.3.2509': attribute type 16 has an invalid length. [ 537.453385][T14639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2509'. [ 537.492912][T14641] FAULT_INJECTION: forcing a failure. [ 537.492912][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 537.510683][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.2.2510 Not tainted syzkaller #0 PREEMPT(full) [ 537.510712][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.510724][T14641] Call Trace: [ 537.510733][T14641] [ 537.510741][T14641] dump_stack_lvl+0x189/0x250 [ 537.510772][T14641] ? __pfx____ratelimit+0x10/0x10 [ 537.510802][T14641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.510826][T14641] ? __pfx__printk+0x10/0x10 [ 537.510860][T14641] ? __pfx___might_resched+0x10/0x10 [ 537.510885][T14641] should_fail_ex+0x414/0x560 [ 537.510919][T14641] should_failslab+0xa8/0x100 [ 537.510951][T14641] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 537.510979][T14641] ? __alloc_skb+0x112/0x2d0 [ 537.510997][T14641] ? __pfx___mutex_trylock_common+0x10/0x10 [ 537.511025][T14641] __alloc_skb+0x112/0x2d0 [ 537.511049][T14641] netlink_dump+0x1b7/0xe90 [ 537.511086][T14641] ? __netlink_lookup+0xbd/0x810 [ 537.511111][T14641] ? __pfx_netlink_dump+0x10/0x10 [ 537.511148][T14641] ? __netlink_lookup+0x752/0x810 [ 537.511187][T14641] ? netlink_lookup+0x30/0x200 [ 537.511216][T14641] ? netlink_lookup+0x30/0x200 [ 537.511242][T14641] ? netlink_lookup+0x30/0x200 [ 537.511278][T14641] __netlink_dump_start+0x5cb/0x7e0 [ 537.511318][T14641] cttimeout_get_timeout+0x164/0x400 [ 537.511352][T14641] ? __pfx_cttimeout_get_timeout+0x10/0x10 [ 537.511379][T14641] ? __pfx_ctnl_timeout_dump+0x10/0x10 [ 537.511423][T14641] nfnetlink_rcv_msg+0xb4a/0x1130 [ 537.511452][T14641] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 537.511502][T14641] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.511567][T14641] ? is_bpf_text_address+0x26/0x2b0 [ 537.511617][T14641] netlink_rcv_skb+0x205/0x470 [ 537.511649][T14641] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.511680][T14641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.511724][T14641] ? bpf_lsm_capable+0x9/0x20 [ 537.511751][T14641] ? security_capable+0x7e/0x2e0 [ 537.511791][T14641] nfnetlink_rcv+0x26a/0x2520 [ 537.511818][T14641] ? is_bpf_text_address+0x26/0x2b0 [ 537.511850][T14641] ? kernel_text_address+0xa5/0xe0 [ 537.511878][T14641] ? __kernel_text_address+0xd/0x40 [ 537.511904][T14641] ? unwind_get_return_address+0x4d/0x90 [ 537.511926][T14641] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.511951][T14641] ? arch_stack_walk+0xfc/0x150 [ 537.511994][T14641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 537.512023][T14641] ? __lock_acquire+0xab9/0xd20 [ 537.512057][T14641] ? __lock_acquire+0xab9/0xd20 [ 537.512122][T14641] ? __lock_acquire+0xab9/0xd20 [ 537.512165][T14641] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.512203][T14641] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.512244][T14641] netlink_unicast+0x82c/0x9e0 [ 537.512283][T14641] ? __pfx_netlink_unicast+0x10/0x10 [ 537.512314][T14641] ? netlink_sendmsg+0x642/0xb30 [ 537.512339][T14641] netlink_sendmsg+0x805/0xb30 [ 537.512368][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.512389][T14641] ? __lock_acquire+0xab9/0xd20 [ 537.512414][T14641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.512435][T14641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.512456][T14641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.512476][T14641] __sock_sendmsg+0x21c/0x270 [ 537.512507][T14641] ____sys_sendmsg+0x505/0x830 [ 537.512535][T14641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.512566][T14641] ? import_iovec+0x74/0xa0 [ 537.512594][T14641] ___sys_sendmsg+0x21f/0x2a0 [ 537.512617][T14641] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.512683][T14641] ? __fget_files+0x2a/0x420 [ 537.512713][T14641] ? __fget_files+0x3a0/0x420 [ 537.512757][T14641] __x64_sys_sendmsg+0x19b/0x260 [ 537.512784][T14641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.512818][T14641] ? __pfx_ksys_write+0x10/0x10 [ 537.512843][T14641] ? rcu_is_watching+0x15/0xb0 [ 537.512869][T14641] ? do_syscall_64+0xbe/0x3b0 [ 537.512892][T14641] do_syscall_64+0xfa/0x3b0 [ 537.512909][T14641] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.512938][T14641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.512958][T14641] ? clear_bhb_loop+0x60/0xb0 [ 537.512984][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.513003][T14641] RIP: 0033:0x7fcaf778ebe9 [ 537.513022][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.513039][T14641] RSP: 002b:00007fcaf59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.513060][T14641] RAX: ffffffffffffffda RBX: 00007fcaf79c5fa0 RCX: 00007fcaf778ebe9 [ 537.513076][T14641] RDX: 0000000000008010 RSI: 0000200000000340 RDI: 0000000000000003 [ 537.513089][T14641] RBP: 00007fcaf59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.513102][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.513122][T14641] R13: 00007fcaf79c6038 R14: 00007fcaf79c5fa0 R15: 00007ffc08d8d598 [ 537.513157][T14641] [ 538.013313][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'. [ 538.117020][T14649] nbd: error processing sock list [ 538.147443][T14649] block nbd1: shutting down sockets [ 538.329396][T14668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2517'. [ 538.397740][T14668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2517'. [ 538.450543][T14673] dvmrp0: entered allmulticast mode [ 538.667400][T14689] validate_nla: 3 callbacks suppressed [ 538.667422][T14689] netlink: 'syz.1.2523': attribute type 10 has an invalid length. [ 538.701923][T14689] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 538.717144][T14689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 538.962578][T14706] tipc: New replicast peer: 255.255.255.255 [ 538.970018][T14706] tipc: Enabled bearer , priority 10 [ 539.201516][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.217370][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.228445][ T6210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.487745][T14741] Bluetooth: MGMT ver 1.23 [ 539.512076][T14743] netlink: 'syz.1.2542': attribute type 12 has an invalid length. [ 539.523426][T14744] netlink: 'syz.1.2542': attribute type 12 has an invalid length. [ 539.671816][T14752] netlink: 'syz.4.2544': attribute type 10 has an invalid length. [ 539.763946][T14756] netlink: 'syz.4.2546': attribute type 19 has an invalid length. [ 539.938438][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.951560][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.517383][T14805] __nla_validate_parse: 12 callbacks suppressed [ 540.517406][T14805] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2559'. [ 540.568680][T14810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2560'. [ 540.586075][T14805] nbd: illegal input index -8454144 [ 540.851604][T14823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2565'. [ 540.882172][T14824] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2565'. [ 541.467397][T14867] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2575'. [ 541.489378][T14868] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 541.745581][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2581'. [ 541.770969][T14894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2581'. [ 541.844812][T14889] syzkaller0: entered promiscuous mode [ 541.860659][T14889] syzkaller0: entered allmulticast mode [ 541.875699][T14898] tipc: Enabled bearer , priority 0 [ 542.565807][T14931] xt_socket: unknown flags 0x50 [ 542.988423][ T6200] tipc: Node number set to 4291315656 [ 543.378300][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.852734][T14888] tipc: Resetting bearer [ 543.939264][T14888] tipc: Disabling bearer [ 543.963055][T14934] xt_HMARK: proto mask must be zero with L3 mode [ 544.043627][T14941] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 544.175090][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 544.186009][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'. [ 544.222262][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'. [ 544.654796][T14977] tipc: Enabling of bearer rejected, media not registered [ 544.949736][T14991] netlink: 'syz.4.2615': attribute type 5 has an invalid length. [ 545.122190][T15005] netlink: 'syz.3.2618': attribute type 11 has an invalid length. [ 545.134871][T15005] netlink: 'syz.3.2618': attribute type 11 has an invalid length. [ 545.147334][T14999] netlink: 'syz.1.2617': attribute type 1 has an invalid length. [ 545.165409][T14999] netlink: 'syz.1.2617': attribute type 1 has an invalid length. [ 545.180633][T15006] netlink: 'syz.3.2618': attribute type 11 has an invalid length. [ 545.219278][T15006] netlink: 'syz.3.2618': attribute type 11 has an invalid length. [ 545.489368][ T9847] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 545.785370][T15041] __nla_validate_parse: 9 callbacks suppressed [ 545.785393][T15041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2623'. [ 546.079933][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 546.103759][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.485821][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2634'. [ 546.648529][T15090] 8021q: adding VLAN 0 to HW filter on device bond8 [ 546.660706][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 546.670217][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2640'. [ 546.687241][T15090] geneve3: entered promiscuous mode [ 546.692830][T15090] geneve3: entered allmulticast mode [ 546.713369][ T1123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.742876][ T1123] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.768779][T15097] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2642'. [ 546.770744][T15096] netlink: 'syz.2.2640': attribute type 7 has an invalid length. [ 546.781381][ T1123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.811962][ T1123] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.996751][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.034262][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 547.213731][T15121] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.229296][T15121] TC_ACT_REPEAT abuse ? [ 547.234379][ C1] TC_ACT_REPEAT abuse ? [ 547.287790][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2650'. [ 547.329750][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2650'. [ 547.369631][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2650'. [ 547.823115][T15154] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 547.968771][T15164] syzkaller0: entered promiscuous mode [ 547.984798][T15163] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 548.007621][T15164] syzkaller0: entered allmulticast mode [ 548.014972][T15163] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 548.026722][T15163] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 548.037012][T15164] tipc: Enabled bearer , priority 0 [ 548.117484][T15164] tipc: Resetting bearer [ 548.179799][T15164] tipc: Disabling bearer [ 549.149067][T15219] bridge_slave_1: mtu less than device minimum [ 549.163619][T15219] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 550.039027][T15253] netlink: 'syz.2.2691': attribute type 1 has an invalid length. [ 550.813950][T15293] netlink: 'syz.0.2704': attribute type 9 has an invalid length. [ 550.835658][T15293] __nla_validate_parse: 73 callbacks suppressed [ 550.835677][T15293] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2704'. [ 550.857282][T15286] syz_tun (unregistering): left allmulticast mode [ 550.896300][T15288] netlink: 'syz.0.2704': attribute type 9 has an invalid length. [ 550.905962][T15288] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2704'. [ 551.014631][ T30] audit: type=1107 audit(1756895453.780:7): pid=15295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 551.031686][T15298] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2707'. [ 551.233243][T15300] syzkaller0: entered promiscuous mode [ 551.258636][T15300] syzkaller0: entered allmulticast mode [ 551.273828][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2711'. [ 551.344235][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 551.411928][T15314] netlink: 'syz.2.2714': attribute type 2 has an invalid length. [ 551.447728][T15316] netlink: 'syz.3.2712': attribute type 8 has an invalid length. [ 551.507296][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2715'. [ 551.538223][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.694861][T15332] netlink: 'syz.2.2719': attribute type 2 has an invalid length. [ 553.595478][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2727'. [ 553.607711][T15365] netlink: 81 bytes leftover after parsing attributes in process `syz.1.2731'. [ 553.657374][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 553.755370][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 553.799017][T15372] batman_adv: batadv0: Adding interface: dummy0 [ 553.813750][T15372] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.852179][T15372] batman_adv: batadv0: Interface activated: dummy0 [ 553.927262][T15386] batadv0: mtu less than device minimum [ 553.938208][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.950261][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.962369][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.974383][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.986520][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 553.998561][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.010555][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.022792][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.034811][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 554.860450][T15427] geneve4: entered promiscuous mode [ 554.895964][T15427] geneve4: entered allmulticast mode [ 554.920116][ T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 554.952183][ T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 554.989065][ T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 554.997405][ T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 555.518698][T15450] netlink: 'syz.3.2757': attribute type 4 has an invalid length. [ 555.573277][T15458] netlink: 'syz.3.2757': attribute type 4 has an invalid length. [ 555.676966][T15461] ip6_vti0: entered promiscuous mode [ 555.740903][T15461] ip6_vti0: entered allmulticast mode [ 555.881146][T15459] lo speed is unknown, defaulting to 1000 [ 555.931155][ T9847] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.952019][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.967334][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.976013][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 555.986471][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 555.995398][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.111684][T15467] lo speed is unknown, defaulting to 1000 [ 556.240374][ T9847] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.346070][T15487] __nla_validate_parse: 8 callbacks suppressed [ 556.346090][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 556.384000][ T9847] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.507697][ T9847] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.007660][T15519] netlink: 'syz.4.2770': attribute type 23 has an invalid length. [ 557.830066][ T9847] bond0 (unregistering): Released all slaves [ 557.965564][ T9847] bond1 (unregistering): Released all slaves [ 557.982052][ T9847] bond2 (unregistering): Released all slaves [ 558.000034][ T9847] bond3 (unregistering): Released all slaves [ 558.018506][ T5907] Bluetooth: hci3: command tx timeout [ 558.125205][ T9847] bond4 (unregistering): Released all slaves [ 558.141271][ T9847] bond5 (unregistering): Released all slaves [ 558.253766][ T9847] bond6 (unregistering): Released all slaves [ 558.359199][ T9847] bond7 (unregistering): Released all slaves [ 558.467619][ T9847] bond8 (unregistering): Released all slaves [ 558.484078][T15467] chnl_net:caif_netlink_parms(): no params data found [ 558.689646][ T9847] tipc: Disabling bearer [ 558.720367][ T9847] tipc: Left network mode [ 558.839198][ T9847] IPVS: stopping backup sync thread 13354 ... [ 558.863078][T15548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2778'. [ 559.030166][T15467] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.037567][T15467] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.071088][T15467] bridge_slave_0: entered allmulticast mode [ 559.105396][T15467] bridge_slave_0: entered promiscuous mode [ 559.147510][T15467] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.162035][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.181772][T15467] bridge_slave_1: entered allmulticast mode [ 559.191024][T15467] bridge_slave_1: entered promiscuous mode [ 559.300290][T15467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.317086][T15467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.404557][T15467] team0: Port device team_slave_0 added [ 559.413207][T15467] team0: Port device team_slave_1 added [ 559.476668][T15467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.483811][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.510454][T15467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.531664][T15467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.539049][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.565511][T15467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.582248][ T9847] hsr_slave_0: left promiscuous mode [ 559.589570][ T9847] hsr_slave_1: left promiscuous mode [ 560.108291][ T5907] Bluetooth: hci3: command tx timeout [ 560.305210][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 560.560036][T15594] lo speed is unknown, defaulting to 1000 [ 560.733660][T15467] hsr_slave_0: entered promiscuous mode [ 560.748820][T15467] hsr_slave_1: entered promiscuous mode [ 560.983247][T15614] tipc: Enabling of bearer rejected, already enabled [ 561.019450][T15621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2796'. [ 561.029840][T15619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 561.046132][ T9847] IPVS: stop unused estimator thread 0... [ 561.077085][T15614] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 561.108301][T15614] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 561.214113][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 561.232586][T15626] IPVS: Scheduler module ip_vs_sip not found [ 561.245411][T15630] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.670790][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2802'. [ 562.021571][ T9859] wlan1: Trigger new scan to find an IBSS to join [ 562.030499][T15661] block nbd1: Unsupported socket: shutdown callout must be supported. [ 562.078954][T15661] net_ratelimit: 11 callbacks suppressed [ 562.078973][T15661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.157849][T15666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.178919][ T5907] Bluetooth: hci3: command tx timeout [ 562.219452][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'. [ 562.223918][T15467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 562.256264][T15670] netlink: 'syz.4.2810': attribute type 1 has an invalid length. [ 562.297312][T15670] netlink: 'syz.4.2810': attribute type 2 has an invalid length. [ 562.335048][T15467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 562.443623][T15467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 562.452324][T15670] netlink: 'syz.4.2810': attribute type 2 has an invalid length. [ 562.460837][T15670] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2810'. [ 562.480251][T15675] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2812'. [ 562.492903][T15467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.766483][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 562.841401][T15467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.881893][T15467] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.901138][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.908411][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.962008][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.969628][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.334651][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 563.560445][T15737] tap0: tun_chr_ioctl cmd 1074025678 [ 563.572460][T15737] tap0: group set to 0 [ 563.707374][T15467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.816171][T15467] veth0_vlan: entered promiscuous mode [ 563.837929][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 563.867109][T15467] veth1_vlan: entered promiscuous mode [ 563.875473][T15753] tipc: Enabled bearer , priority 0 [ 563.895093][T15753] syzkaller0: entered promiscuous mode [ 563.902148][T15753] syzkaller0: entered allmulticast mode [ 564.026239][T15753] tipc: Resetting bearer [ 564.055847][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 564.075482][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 564.102188][T15467] veth0_macvtap: entered promiscuous mode [ 564.137082][T15751] tipc: Resetting bearer [ 564.199771][T15751] tipc: Disabling bearer [ 564.233257][T15467] veth1_macvtap: entered promiscuous mode [ 564.259052][ T51] Bluetooth: hci3: command tx timeout [ 564.274902][T15765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'. [ 564.342608][T15467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.395640][T15467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.429672][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.444914][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.485443][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.543347][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.735172][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.773366][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.856890][ T9855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.866765][ T9855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.994007][ T9852] wlan1: Trigger new scan to find an IBSS to join [ 565.004043][T15806] netlink: 'syz.0.2847': attribute type 6 has an invalid length. [ 565.144721][T15811] sctp: Trying to GSO but underlying device doesn't support it. [ 565.365605][T15824] tipc: Enabled bearer , priority 10 [ 565.551880][T15834] lo speed is unknown, defaulting to 1000 [ 565.762231][T15840] wireguard: wg1: Could not create IPv4 socket [ 565.987370][T15852] sctp: [Deprecated]: syz.4.2866 (pid 15852) Use of int in maxseg socket option. [ 565.987370][T15852] Use struct sctp_assoc_value instead [ 565.999360][T15855] team0: Device vti0 is of different type [ 566.074357][T15852] lo: entered promiscuous mode [ 566.102774][T15852] tunl0: entered promiscuous mode [ 566.104164][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 566.114289][ T5907] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 566.169737][T15852] gre0: entered promiscuous mode [ 566.229697][T15852] gretap0: entered promiscuous mode [ 566.260247][T15852] erspan0: entered promiscuous mode [ 566.314574][T15867] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 566.338595][ T5907] Bluetooth: hci3: command tx timeout [ 566.352358][T15852] ip_vti0: entered promiscuous mode [ 566.983063][T15889] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 567.019926][T15889] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 567.128951][T15893] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 567.393716][T15916] __nla_validate_parse: 1 callbacks suppressed [ 567.393736][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2886'. [ 567.421809][T15916] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2886'. [ 567.422814][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2887'. [ 567.761200][T15914] team_slave_0: left promiscuous mode [ 567.802185][T15914] team0 (unregistering): Port device team_slave_0 removed [ 567.815513][T15914] team_slave_1: left promiscuous mode [ 567.837479][T15914] team0 (unregistering): Port device team_slave_1 removed [ 567.845478][T15914] geneve0: left promiscuous mode [ 567.860431][T15914] team0 (unregistering): Port device geneve0 removed [ 567.895241][T15936] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 568.038242][ T9852] wlan1: Trigger new scan to find an IBSS to join [ 568.133370][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 568.180311][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.277900][T15953] tipc: Failed to remove unknown binding: 66,1,1/3521538124:247170940/247170942 [ 568.317335][T15953] tipc: Failed to remove unknown binding: 66,1,1/3521538124:247170940/247170942 [ 568.449449][T15957] FAULT_INJECTION: forcing a failure. [ 568.449449][T15957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.486059][T15957] CPU: 0 UID: 0 PID: 15957 Comm: syz.4.2899 Not tainted syzkaller #0 PREEMPT(full) [ 568.486089][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.486102][T15957] Call Trace: [ 568.486110][T15957] [ 568.486119][T15957] dump_stack_lvl+0x189/0x250 [ 568.486155][T15957] ? __pfx____ratelimit+0x10/0x10 [ 568.486186][T15957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.486211][T15957] ? __pfx__printk+0x10/0x10 [ 568.486239][T15957] ? __might_fault+0xb0/0x130 [ 568.486280][T15957] should_fail_ex+0x414/0x560 [ 568.486313][T15957] _copy_from_user+0x2d/0xb0 [ 568.486338][T15957] do_sock_getsockopt+0x17d/0x450 [ 568.486363][T15957] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 568.486384][T15957] ? write_ibpb+0x30/0x40 [ 568.486401][T15957] ? __fget_files+0x3a0/0x420 [ 568.486430][T15957] ? __fget_files+0x2a/0x420 [ 568.486468][T15957] __x64_sys_getsockopt+0x1a5/0x250 [ 568.486488][T15957] ? write_ibpb+0x30/0x40 [ 568.486508][T15957] ? write_ibpb+0x30/0x40 [ 568.486530][T15957] do_syscall_64+0xfa/0x3b0 [ 568.486547][T15957] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.486575][T15957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.486595][T15957] ? clear_bhb_loop+0x60/0xb0 [ 568.486620][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.486639][T15957] RIP: 0033:0x7f4e20b8ebe9 [ 568.486658][T15957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.486675][T15957] RSP: 002b:00007f4e21ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 568.486704][T15957] RAX: ffffffffffffffda RBX: 00007f4e20dc5fa0 RCX: 00007f4e20b8ebe9 [ 568.486719][T15957] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 568.486731][T15957] RBP: 00007f4e21ab2090 R08: 0000200000000000 R09: 0000000000000000 [ 568.486744][T15957] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 568.486757][T15957] R13: 00007f4e20dc6038 R14: 00007f4e20dc5fa0 R15: 00007ffff80630a8 [ 568.486790][T15957] [ 568.788867][T15959] netlink: 'syz.1.2900': attribute type 32 has an invalid length. [ 568.902841][T15965] netlink: 'syz.1.2900': attribute type 6 has an invalid length. [ 568.911497][T15965] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2900'. [ 568.930556][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.946635][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.955468][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.963905][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.971794][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.075835][ T5897] bridge0: port 3(syz_tun) entered disabled state [ 569.106308][ T5897] syz_tun (unregistering): left allmulticast mode [ 569.115524][ T5897] syz_tun (unregistering): left promiscuous mode [ 569.151964][ T9855] wlan1: Creating new IBSS network, BSSID 86:8c:24:93:cf:e5 [ 569.156964][ T5897] bridge0: port 3(syz_tun) entered disabled state [ 569.245633][T15966] lo speed is unknown, defaulting to 1000 [ 569.431105][T15989] netlink: 'syz.3.2909': attribute type 11 has an invalid length. [ 569.497483][T15986] veth7: entered promiscuous mode [ 569.701340][T15996] FAULT_INJECTION: forcing a failure. [ 569.701340][T15996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.710407][T15966] chnl_net:caif_netlink_parms(): no params data found [ 569.729913][T15996] CPU: 1 UID: 0 PID: 15996 Comm: syz.2.2911 Not tainted syzkaller #0 PREEMPT(full) [ 569.729944][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.729957][T15996] Call Trace: [ 569.729965][T15996] [ 569.729974][T15996] dump_stack_lvl+0x189/0x250 [ 569.730004][T15996] ? __pfx____ratelimit+0x10/0x10 [ 569.730035][T15996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.730060][T15996] ? __pfx__printk+0x10/0x10 [ 569.730088][T15996] ? __might_fault+0xb0/0x130 [ 569.730129][T15996] should_fail_ex+0x414/0x560 [ 569.730162][T15996] _copy_from_user+0x2d/0xb0 [ 569.730187][T15996] sctp_getsockopt_event+0xb5/0x560 [ 569.730210][T15996] ? __pfx_sctp_getsockopt_event+0x10/0x10 [ 569.730241][T15996] sctp_getsockopt+0x248/0xb60 [ 569.730260][T15996] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 569.730293][T15996] do_sock_getsockopt+0x36f/0x450 [ 569.730320][T15996] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 569.730341][T15996] ? write_ibpb+0x30/0x40 [ 569.730358][T15996] ? __fget_files+0x3a0/0x420 [ 569.730389][T15996] ? __fget_files+0x2a/0x420 [ 569.730428][T15996] __x64_sys_getsockopt+0x1a5/0x250 [ 569.730449][T15996] ? write_ibpb+0x30/0x40 [ 569.730470][T15996] ? write_ibpb+0x30/0x40 [ 569.730492][T15996] do_syscall_64+0xfa/0x3b0 [ 569.730509][T15996] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.730538][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.730558][T15996] ? clear_bhb_loop+0x60/0xb0 [ 569.730584][T15996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.730603][T15996] RIP: 0033:0x7f16a9b8ebe9 [ 569.730623][T15996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.730640][T15996] RSP: 002b:00007f16aaa80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 569.730662][T15996] RAX: ffffffffffffffda RBX: 00007f16a9dc5fa0 RCX: 00007f16a9b8ebe9 [ 569.730677][T15996] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 569.730689][T15996] RBP: 00007f16aaa80090 R08: 0000200000000000 R09: 0000000000000000 [ 569.730703][T15996] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 569.730715][T15996] R13: 00007f16a9dc6038 R14: 00007f16a9dc5fa0 R15: 00007ffc33656e58 [ 569.730750][T15996] [ 569.979927][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.987417][T15998] batadv0: mtu less than device minimum [ 569.995428][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.007680][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.019699][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.031655][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.043505][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.055485][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.067410][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.079356][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.091297][T15998] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.118469][T15998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.127365][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.216913][T15998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.242739][T15998] batman_adv: batadv0: Interface deactivated: dummy0 [ 570.269166][T15998] batman_adv: batadv0: Removing interface: dummy0 [ 570.568284][T16025] netlink: 'syz.2.2916': attribute type 21 has an invalid length. [ 570.577196][T16025] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2916'. [ 570.652869][T15966] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.666611][T15966] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.684741][T15966] bridge_slave_0: entered allmulticast mode [ 570.704679][T15966] bridge_slave_0: entered promiscuous mode [ 570.746298][T15966] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.784796][T15966] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.803192][T16031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2919'. [ 570.823348][T15966] bridge_slave_1: entered allmulticast mode [ 570.848729][T15966] bridge_slave_1: entered promiscuous mode [ 570.965011][T15966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.984720][T16041] tipc: Enabling of bearer rejected, already enabled [ 570.989657][T16044] FAULT_INJECTION: forcing a failure. [ 570.989657][T16044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.998143][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2924'. [ 571.017021][T16044] CPU: 1 UID: 0 PID: 16044 Comm: syz.2.2923 Not tainted syzkaller #0 PREEMPT(full) [ 571.017048][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.017060][T16044] Call Trace: [ 571.017067][T16044] [ 571.017076][T16044] dump_stack_lvl+0x189/0x250 [ 571.017106][T16044] ? __pfx____ratelimit+0x10/0x10 [ 571.017134][T16044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.017157][T16044] ? __pfx__printk+0x10/0x10 [ 571.017199][T16044] should_fail_ex+0x414/0x560 [ 571.017232][T16044] _copy_to_user+0x31/0xb0 [ 571.017258][T16044] simple_read_from_buffer+0xe1/0x170 [ 571.017294][T16044] proc_fail_nth_read+0x1b3/0x220 [ 571.017321][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.017347][T16044] ? rw_verify_area+0x2a6/0x4d0 [ 571.017371][T16044] ? __lock_acquire+0xab9/0xd20 [ 571.017398][T16044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.017423][T16044] vfs_read+0x1fd/0xa30 [ 571.017447][T16044] ? fdget_pos+0x247/0x320 [ 571.017470][T16044] ? __pfx___mutex_lock+0x10/0x10 [ 571.017490][T16044] ? __pfx_vfs_read+0x10/0x10 [ 571.017517][T16044] ? __fget_files+0x2a/0x420 [ 571.017552][T16044] ? __fget_files+0x3a0/0x420 [ 571.017581][T16044] ? __fget_files+0x2a/0x420 [ 571.017621][T16044] ksys_read+0x145/0x250 [ 571.017651][T16044] ? __pfx_ksys_read+0x10/0x10 [ 571.017674][T16044] ? fput+0xa0/0xd0 [ 571.017700][T16044] ? do_syscall_64+0xbe/0x3b0 [ 571.017723][T16044] do_syscall_64+0xfa/0x3b0 [ 571.017740][T16044] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.017769][T16044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.017790][T16044] ? clear_bhb_loop+0x60/0xb0 [ 571.017823][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.017842][T16044] RIP: 0033:0x7f16a9b8d5fc [ 571.017861][T16044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.017878][T16044] RSP: 002b:00007f16aaa80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.017899][T16044] RAX: ffffffffffffffda RBX: 00007f16a9dc5fa0 RCX: 00007f16a9b8d5fc [ 571.017915][T16044] RDX: 000000000000000f RSI: 00007f16aaa800a0 RDI: 0000000000000005 [ 571.017927][T16044] RBP: 00007f16aaa80090 R08: 0000000000000000 R09: 0000000000000000 [ 571.017940][T16044] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 571.017951][T16044] R13: 00007f16a9dc6038 R14: 00007f16a9dc5fa0 R15: 00007ffc33656e58 [ 571.017983][T16044] [ 571.020965][T15966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.071715][ T51] Bluetooth: hci5: command tx timeout [ 571.236961][T16042] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 571.288880][T16042] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 571.325827][T16042] netlink: 'syz.3.2922': attribute type 5 has an invalid length. [ 571.340952][T16057] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 571.379302][T16057] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2927'. [ 571.388654][T16057] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 571.396515][T16042] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 571.408246][T16042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2922'. [ 571.482792][T15966] team0: Port device team_slave_0 added [ 571.505638][T15966] team0: Port device team_slave_1 added [ 571.582603][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 571.612842][ T6200] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 571.621547][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 571.701547][T15966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.718067][T15966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.818452][ T6203] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 571.818961][T15966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.870371][T15966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.877381][T15966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.955578][T15966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.144267][T15966] hsr_slave_0: entered promiscuous mode [ 572.156397][T15966] hsr_slave_1: entered promiscuous mode [ 572.176488][T15966] debugfs: 'hsr0' already exists in 'hsr' [ 572.183771][T15966] Cannot create hsr debugfs directory [ 572.386777][T16104] syzkaller0: entered allmulticast mode [ 572.444139][T16104] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.463901][T16104] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.498364][ T6203] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 572.685318][T16104] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.703959][T16104] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.757437][T16119] tipc: Enabling of bearer rejected, already enabled [ 572.793270][T16104] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.808278][T16104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.903435][T16104] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.913569][T16104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.052601][T16136] batadv_slave_0: entered promiscuous mode [ 573.077596][T15966] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.094961][T15966] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.302316][ T51] Bluetooth: hci5: command tx timeout [ 573.423185][T16148] __nla_validate_parse: 2 callbacks suppressed [ 573.423206][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 574.810431][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.819562][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.845167][T16135] batadv_slave_0: left promiscuous mode [ 574.864919][T15966] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.874947][T15966] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.947290][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.969944][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.075260][T15966] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.103956][T15966] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.127171][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.136730][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.176927][T15966] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.195029][T15966] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.272738][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.303437][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.362425][T16158] lo speed is unknown, defaulting to 1000 [ 575.378446][ T51] Bluetooth: hci5: command tx timeout [ 575.538797][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 575.677206][T16185] netlink: 'syz.2.2963': attribute type 30 has an invalid length. [ 575.825206][T15966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.851814][T15966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.934811][T15966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.967769][T15966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 576.151700][T16204] can: request_module (can-proto-0) failed. [ 576.222659][T16204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2966'. [ 576.291651][T15966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.343359][T15966] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.349270][T16224] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 576.374607][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.381970][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.447863][T16226] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 576.454357][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.462840][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.494240][T16224] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 576.519414][T16224] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 577.118793][T15966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.171849][T16261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.174260][T16264] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 577.239253][T15966] veth0_vlan: entered promiscuous mode [ 577.253597][T15966] veth1_vlan: entered promiscuous mode [ 577.317742][T16264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.345112][T16264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2979'. [ 577.444918][T15966] veth0_macvtap: entered promiscuous mode [ 577.461081][ T51] Bluetooth: hci5: command tx timeout [ 577.507371][T15966] veth1_macvtap: entered promiscuous mode [ 577.584145][T15966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.622158][T15966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.667247][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.670585][T16285] net_ratelimit: 30 callbacks suppressed [ 577.670609][T16285] openvswitch: netlink: IP tunnel dst address not specified [ 577.711806][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.739714][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.757200][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.757319][T16288] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2985'. [ 578.019981][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.058530][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.188736][T16309] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2991'. [ 578.189186][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.254733][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.418268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.620498][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 578.688239][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 579.150634][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 579.276740][T16356] tipc: Enabled bearer , priority 0 [ 579.297372][T16356] syzkaller0: entered promiscuous mode [ 579.335793][T16356] syzkaller0: entered allmulticast mode [ 579.371462][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 579.619239][T16355] tipc: Resetting bearer [ 579.715624][T16355] tipc: Disabling bearer [ 579.743469][T16373] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3010'. [ 579.771411][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'. [ 580.114590][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3013'. [ 580.204001][ T5907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.223080][T10000] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 580.235026][T10000] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 580.243471][T10000] CPU: 1 UID: 0 PID: 10000 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 580.253041][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.263128][T10000] RIP: 0010:klist_del+0x49/0x110 [ 580.268096][T10000] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 580.287719][T10000] RSP: 0018:ffffc9001ac17768 EFLAGS: 00010202 [ 580.293796][T10000] RAX: 000000000000000b RBX: ffff888073892460 RCX: ffff88806c969e00 [ 580.301774][T10000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 580.309753][T10000] RBP: ffffc9001ac17890 R08: ffff888075c9bd23 R09: 1ffff1100eb937a4 [ 580.317729][T10000] R10: dffffc0000000000 R11: ffffed100eb937a5 R12: dffffc0000000000 [ 580.325707][T10000] R13: 1ffff1100e71248c R14: 0000000000000000 R15: ffff888075036750 [ 580.333690][T10000] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 580.342625][T10000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.349216][T10000] CR2: 00007f89c8d04440 CR3: 00000000278be000 CR4: 00000000003526f0 [ 580.357196][T10000] Call Trace: [ 580.360481][T10000] [ 580.363417][T10000] device_del+0x280/0x8e0 [ 580.367754][T10000] ? _raw_spin_unlock_irq+0x2e/0x50 [ 580.372963][T10000] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 580.379036][T10000] ? __pfx_device_del+0x10/0x10 [ 580.383901][T10000] ? netdev_unregister_kobject+0x344/0x450 [ 580.389718][T10000] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 580.396151][T10000] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 580.402924][T10000] ? rtnl_net_dev_lock+0x257/0x2f0 [ 580.408067][T10000] unregister_netdevice_queue+0x33c/0x380 [ 580.413897][T10000] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 580.420152][T10000] ? rtnl_net_dev_lock+0x36/0x2f0 [ 580.425303][T10000] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 580.430429][T10000] unregister_netdev+0x1f/0x60 [ 580.435200][T10000] bnep_session+0x294d/0x2b40 [ 580.439889][T10000] ? rcu_is_watching+0x15/0xb0 [ 580.444660][T10000] ? trace_sched_exit_tp+0x36/0x110 [ 580.449869][T10000] ? __lock_acquire+0xab9/0xd20 [ 580.454741][T10000] ? __pfx_bnep_session+0x10/0x10 [ 580.459773][T10000] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 580.465681][T10000] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 580.472030][T10000] ? __pfx_woken_wake_function+0x10/0x10 [ 580.477685][T10000] ? __kthread_parkme+0x7b/0x200 [ 580.482650][T10000] ? __kthread_parkme+0x1a1/0x200 [ 580.487685][T10000] kthread+0x70e/0x8a0 [ 580.491790][T10000] ? __pfx_bnep_session+0x10/0x10 [ 580.496822][T10000] ? __pfx_kthread+0x10/0x10 [ 580.501427][T10000] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.506637][T10000] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.511848][T10000] ? __pfx_kthread+0x10/0x10 [ 580.516454][T10000] ret_from_fork+0x3f9/0x770 [ 580.521066][T10000] ? __pfx_ret_from_fork+0x10/0x10 [ 580.526187][T10000] ? __switch_to_asm+0x39/0x70 [ 580.530970][T10000] ? __switch_to_asm+0x33/0x70 [ 580.535743][T10000] ? __pfx_kthread+0x10/0x10 [ 580.540338][T10000] ret_from_fork_asm+0x1a/0x30 [ 580.545114][T10000] [ 580.548145][T10000] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 580.553406][T10000] ---[ end trace 0000000000000000 ]--- [ 580.588939][T10000] RIP: 0010:klist_del+0x49/0x110 [ 580.594066][T10000] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 580.622651][ T5907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.627787][T10000] RSP: 0018:ffffc9001ac17768 EFLAGS: 00010202 [ 580.635946][T10000] RAX: 000000000000000b RBX: ffff888073892460 RCX: ffff88806c969e00 [ 580.636260][ T5907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.651180][T10000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 580.651202][T10000] RBP: ffffc9001ac17890 R08: ffff888075c9bd23 R09: 1ffff1100eb937a4 [ 580.651220][T10000] R10: dffffc0000000000 R11: ffffed100eb937a5 R12: dffffc0000000000 [ 580.651236][T10000] R13: 1ffff1100e71248c R14: 0000000000000000 R15: ffff888075036750 [ 580.651252][T10000] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 580.651270][T10000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.651285][T10000] CR2: 00007f89c8c8ae9c CR3: 0000000021bc0000 CR4: 00000000003526f0 [ 580.651307][T10000] Kernel panic - not syncing: Fatal exception [ 580.651684][T10000] Kernel Offset: disabled