last executing test programs: 6.160760094s ago: executing program 0 (id=7521): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x0, 0x3, {{0x5, 0x4, 0x3, 0x2e, 0x14, 0x67, 0x0, 0x3, 0x0, 0x0, @empty, @empty}}}}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r2, r3, 0x0, 0xffffffff000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091117f000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, 0x8) 5.479481993s ago: executing program 0 (id=7528): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1e}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r5, 0x1, 0x27, &(0x7f00000009c0)=""/197, &(0x7f0000000980)=0xc5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000540)={{r1}, "42475f144f77ccc29b8a0baa0cdd0532f06e7cd9ec3ffa0ed7feb75fd4cc2aa312ec07f6ec5499ceeec2328195136edb360d3459e224cbdaa87627438cf85ff9845c37212988363ba0c756ce9d3a8fa84cf12aedc0007a0d77c814f5da1572d3f883cda838f2404c78b6b9b38f04e705a2e0da7f7761c2476eb187602c7315ec05fce71a07dd012aded481f7a09c8b05a6e7d989f51d52b7b6a954dfa4adb069ae103b2e88d3e2275dcb106da4afd70ae71094bcd1b135665f17e2eef4604e7acb22db911e77e67fde77c5eb1c602f4ef39794f92f980d7a8e38f1fbce440bb1b0713e777be85aa0e4f60328d1003790491da312c5174785b3aacc110c7013a75510f88dc3ea2cb78dfa9aacefa32e326bd4b3bf00ffb6ff2664b457c39730956e79008232ca227fc134aabef26dd0b02b957842c2818a3e25977523cb3a94bfbb7f20d9ba3d9a200119418990083fb67b3d4e6e85bf792b82e762c0bbc5084f424570bc07a406e33099d5542b254d7d9b1318001d757f63625e6fdff925b8fd046b9a93ac71fc7ac720f4a47b9216b566f486301d67c45b5498ab7c48e3538bf565fb148456b3eea9f820ff0635324b4e6fc3908a7c5250783f8957d2b5fbe396e0368e34ec5b3511a519281f044ca3fea20ba10341ef9b04b94b11902863e1a67bdb7c6b3572501aa4773bd1b534de6f429299d52fcbcf32bd5f45a62d8374e7cafdfd584db30a9fd8008aafc6730b7713b77add30f681f4e37f08066c13027b8bfafd1112a6a0407bf36bbea8670b2bc11472ab29958ca3d3135be0d211d94a4f3dd684932e6f1fbe69bcc28ff4bb9bedd89587d256bbe92fdd75e3a07081fedb529de6518215b68e926e9dc0f8f9bdbe1e5cfb02b3dde2e8f9aa2056c9606aa3090454b6446d2694df05f36700ef0a38c47cb7774ca4f1ee64819dda8b9b119e16afb954a26523aa6748b7d78b9f7c2052bc14fe642ab6beeefb1479082acf1c17fb83cbc8ca0631f2195bb9bb9dc37060aef0f634c9e79906459c35f0519fe6bc127e056bce6f85b0ebad1c2d0ac97f05d099bdec29f96e831ce9811fe3efab711b6db856299a432b04f47e376b847c87cfae8eb3122282c6f4eafd413e2d52a4d5f1c3afd5f9b9cf9c6936ba079a0f8429951e8c35d83276c1afc959177c6938905a06ca7983a7fbe45c17625af6ee6102eecb19e219ebcf752cd6364acc947a9c80b38ae3b684dccd1811d2dc56b19a539d9c50a87a6ae55506ce566772be4151271d8175128ca6eb17f107f4f6e2e5cb86dff569059bb7ab3f8827bc6e2a127fba52984dbe3278f589dc9106d95f0c9b6f3280254c856b220ec027cee5eddc5a601ae195c48c121a2062f6a33ee71c3471022f2a297511ec3e14b6bf085e030c1fec71fceadb3e81d7b3ea57452616da794361c0671b02f8cf01a7236fc59389274dac96211a6e89511bcd6d52b23bfc97bf08cf68249afebaf062cd4bbb0bbbbc09c4c5b83baae6f936a13fe039f4a816e15fb38e44cb5fc4cc176183768bef5e076ea7d9506d4877e4a8c8590e030ebf26d5fc37e2eda211df8b4a25f4ebba4fa1d6b8ba1a757f3b9fe1ae5d830e57cc77357ec6358ce23a2c144d6750aeab65433c90236dd6a4fd6dda81288730ed7bbcaa254825e787bd28ca514333b96a5eb44e14276e587a3a3444c3aa47c09a51100d817d9ca75b95fa5e8fe12bfcf2ecf14736b3dff308e307bae58d0449d85c14f8c47dbd363370eac2604647ec71ebb67055be097b05533f03c1f8cddabb836c9162ea4e5ddc5c624efbf55bd6d02e1ca8846ace63bad05ba12444c281a8878c776254101583025a469c8969aebfc75f8a0e015b3df6b8768e253dab69fbb2f0d2ab5ebf80471bea8840259d4c73ae82afce393e30797cf2d7e1e1884725ad4b3168165d6c56ca96c79773cb2970c6164f6f3f62e7e120494a10c7acc39a4803b3f83a810f607c7cde0e010159001b7b4c2e3796d2f618f533ae5ceb7a44caf27815c2992f856d578456eb61188bf345362dcc4309449f2083c140a535a73577966800f7e38450717e105724e4414edbf3c3055969c06d67d6b4417b7e9a8f3c99c2a09935fad73a6e2ca3ce5671f5de890a5024a84e2577deb8432c137250e11f75f176b5bb8d7bfc72ec0b4d950d1bb94f956343e7b8ed69275b02f74502ae42f509d5f1727bf7298711211de2c369213cef672b36e5f9fd8484a69e1fc2f68ab38412477b0a6f35968341b889e723edbd879d4057fa0541ce663c77c6b60f4216e93c37ff7a241647a675116e7259e1528384e6be7297041949afc7c12fcfe5b894da61a1d2831696ccd26880a30cc86c33e56809971dbcbe48f5a970e17a2fda7202f697c33057b625e8dbd94c3999526530e1a66a1620de65ef6fd8b1c8426d0fbae51b232b6aa9b52c5f85480c30518376761e243120db94667bb0b8835abaf9923ca4ec81b53d05f027e4ddcbcdbc2f773d3367b1bc97b4d4bbd12d9f03d13038ab6677efc922ebfc9772269ff547e349f0efefd23ea6b9ada69ea51b9d37ec3cbfd8e1177d4b5258f4e3364ae4f5d4fdded47935ddb68b5bf979f6bc2d9ef9269b9c20a75944cb70178ad6324c48bd00189bbb0d302e645efd3cf57985d80be4799dba480137293d0ca5e25e94ade44df6075b1c485a09271d99fbeabc36639808e918b8348e83f86e8f20badde613d2d0191760a8544235cd1a7176b8272bb42d83f31f5ee25b946857f291496918a27c72899a11383f6c0e89247da1b0afd187ab3d31ad93a98f6036ee003882d0f69c06646d3b325579c6a788fc056bd292d6f39b024021dded66972c04b19151cb8955991f3012298034f1d656e190565ffdab8aec08a7f8cc5faf1763ccd0143a7c4a87fbb10ac721a3cdeabd07f63ec7ce41616de395ca9deff47a99dea39155fc2c40b7ccbfc6d1f28320cf0c858f0af7b60fe8628085e2ccee577fc67ec2a274c013fe609c71dfe2676bf5a83dbe72bba616b77f1d3ab1f30a57afc91a3b4fcb318b23705c3921820f5424539e82d6bf71ff84a35a7b260ae1031c27ab9e8ecfede2163cb83422173086aa6e62f95b4ddb884df72c96fabeb53e5e333fc46b0c278935edc51fd25a1f6734a733a550a2f696a0e1b7ad50db81e306d025359690f943424bf74371509005d4b8cd5d31986e897b030704bdfa69b4516839503a9b6e1057c18816865d48125cde249447634d85f0d655fa0459802a70a846c1380667c1aacb6d9767a410775ad1dc8afa55a075f1a4673627a7ecd91a0e8b6cb5e6f373814977fc464ea778d454d836cdf9e9aef5f5d1afeeb5cf4fee8c3cfdcc3d5f67cb7f165540b4fa8e5b51f7b76e09ecb0dd214c9908510907613c8c86af62aa78545d39cbe0509926f5e6b557fa28ad49086ec3b42e04b85a391a289c61ab39a7dc3b2fb574a0019d31bb20d1392aef953c5a08294cacee63d2f32b6211f609e9b97c5c8b9336b42ec3363f243d09c6708b6c17022c783c7dfce28c809b57fd13dffbebdfcbead66c9f3c33be3d80a8b278d0cfefb200714ae3bacc9f2d4ab0ce32cf453dd1d86be06c7893ed7dbe8f8d6f3a1d1c7fde50d95bc5f7c711b9ece8972816c2098e7dfecc20581848e444996f3e75fcf79d9211b0dda1d32600ba0eb123fae1fccf30e8de85e11d43a881f5b3a2266562de7aac2966a5a4c0229309de081e51e4df8c26307fe29cfa77c74c6f7377e3b4f0cc5e5a2b663134b990e761e7e96e3cd53bc70e577b5355f0c3175bea28d7bad4ca330498770b5426686415c83594a7b1258867beaa329317ba22095dc0118263f88064af7ec346f93eeef6d9cce70bb417e30b0fb29e1db70dc069d6b60d7f9e8e63f8de718ef06f94eae1e8a638843bcc61d09a6562400d5782b63a7612eaadedf2934adac28d2a62beee3105f207e3861cb845b428ed09d3fdc65f6640fc8616c913ac3cfff9a548c47b3459ef779e4685808e6a476907508dc94fd6669d8a7183cef155eea8422886e56682e64d87a367ca7d3ad26c958a3512b928b7db6683815117d61cb9b1b9d9b73cb9adc3aaf0d68b4efbec070da883df340223ab6509fccf76401ba261397217dd0adf87c568262f37b66087d42e828cc91e101528af55d599c3313948644561d3e66f25614d9f88ddcf45053dd45e5ae777234976011314a3bb766ff37f85a220b201c57cf154d25b67eccc32a91c0f4272d53815bb782098966100c82f621ea2a1965e19c4834aad366cb69db89d59a49dd43d3d96057cf936c60e7ab534bde5f0ebb3eb4a1eadb31c13ed7cc09f19f75a529ef546590fe3a8c51ef6f28c7922ebf976b0b5d9ff53d17908c016d43192378568b41c42670d0f069f671a3088b52ea15173f610c002af936f50f4a057b45534e7bed18621961c681d1c64bc0557f6f98f4646f0f9e50554da493e2913d459388c14844c9c82150ca6f4f53facf6f60cb12963d61d278e89ffe6faa8b08dda027d1ad61803d00bdd6041e2e0a686aa1adf45118edbb7b706d9bb3d17e88739494da00d76052d828f679847b36678395c03d59d3192f73fb6ee373feef81a0367f192db4c80388d9ba55d1a0b04f9b0afab74dccad09cebeb52c4e08b4d477a5b6b284dc91cc1b98b931f02ce658f38448662c5fdc4272bcadec89cbf917df7724eab6cafce2b77620d2b6ab678e6df6606b6d95268c181c67d2cb75b6330306a970413adb871e1c1e89daaf7bcd8cbbbc13516edddcc704f14f6e9d16afec7194e3f66895b9ac53cbdd20fe3d15da65c176edb89ccd5be0971f0192a1b6c98f380a6105a9d35e4fefa230db95d6dc4d0d7d29905db06ca7e14f781bf8e835c939622ac32c7731637cb276de00e337327892081a0963ea37773ea77f59ace3d858063c763a6b2d371b89394f454a134fdf43d7799c5001a899c101c27e8699be4c10dd26ca8d313e21727aa57cc03f98b2c59b80a8336981470d4dfa6d4220ac5d75acab26493cd2533b609415e34b69fbdb8c7d5a6eb07bec8677d5cb5dcb282bb8776daa1809d9bbe5d4d3edf447ebdef40003e0a35184495b7487af8ebbb187bc22ef9eaff23828eac8ed5fd04c78e845c885d5aeede985ea03a039b59ad08f9573b93e613937ec9c92aa6b65aea7b04995d143d77aeb2b87e7128da2baf45525ec7eb6d749bddff637c934d06650fa3357f10ad6eaeedbe10f73f4c94f32c84f3150112ea0d6ae62e270974bd25ae078c336d3477068588c0c7c49464675be65ba6a336b2a6c193d7a77d4d90c8cdccc753c048ab06aebaf6bca8c8aedac011788a131bda0dc17e914fc91dde754d0e25e3f094375c12c912cf5be4a60576a60272bcdb8f14f95653b5852c7f3cea0be9e9a56a1b9aa7e071cef1c8987e033fcb2fcd03287a6f57101be4d4ef38b65858b908d2e0368cd3fe4c4658e3ab704fca8c807698d1bea1afc34c73a99a668c588cfe96d6ea75466e38dc1d776032b6d125a41f147a71b7616e9f93d49e336bbf5400ba12de71466688bc24aecd392770482c3fb4dabcdd2335ea0eb991b6fb2bb12facef3b180ab7bedfc47d71fd13b7e238828f2f978b6908b3171750b4619be0f2cd833a2160cf0092083cd674ed6d168e08f9b3c45797a399223bc17fc9c1e47279f5bc17b1ad02c3e9e5844873dc22f0f62da900d1c8b01a168d7fb192ab7d651ae65821b8ff50dd4c7a720c6fbb57ab63aa6e283a36f2de8e58cd8f9728a208fa7f06"}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xffffffffffffffcb}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x23, 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1e}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x28) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_buf(r5, 0x1, 0x27, &(0x7f00000009c0)=""/197, &(0x7f0000000980)=0xc5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000540)={{r1}, "42475f144f77ccc29b8a0baa0cdd0532f06e7cd9ec3ffa0ed7feb75fd4cc2aa312ec07f6ec5499ceeec2328195136edb360d3459e224cbdaa87627438cf85ff9845c37212988363ba0c756ce9d3a8fa84cf12aedc0007a0d77c814f5da1572d3f883cda838f2404c78b6b9b38f04e705a2e0da7f7761c2476eb187602c7315ec05fce71a07dd012aded481f7a09c8b05a6e7d989f51d52b7b6a954dfa4adb069ae103b2e88d3e2275dcb106da4afd70ae71094bcd1b135665f17e2eef4604e7acb22db911e77e67fde77c5eb1c602f4ef39794f92f980d7a8e38f1fbce440bb1b0713e777be85aa0e4f60328d1003790491da312c5174785b3aacc110c7013a75510f88dc3ea2cb78dfa9aacefa32e326bd4b3bf00ffb6ff2664b457c39730956e79008232ca227fc134aabef26dd0b02b957842c2818a3e25977523cb3a94bfbb7f20d9ba3d9a200119418990083fb67b3d4e6e85bf792b82e762c0bbc5084f424570bc07a406e33099d5542b254d7d9b1318001d757f63625e6fdff925b8fd046b9a93ac71fc7ac720f4a47b9216b566f486301d67c45b5498ab7c48e3538bf565fb148456b3eea9f820ff0635324b4e6fc3908a7c5250783f8957d2b5fbe396e0368e34ec5b3511a519281f044ca3fea20ba10341ef9b04b94b11902863e1a67bdb7c6b3572501aa4773bd1b534de6f429299d52fcbcf32bd5f45a62d8374e7cafdfd584db30a9fd8008aafc6730b7713b77add30f681f4e37f08066c13027b8bfafd1112a6a0407bf36bbea8670b2bc11472ab29958ca3d3135be0d211d94a4f3dd684932e6f1fbe69bcc28ff4bb9bedd89587d256bbe92fdd75e3a07081fedb529de6518215b68e926e9dc0f8f9bdbe1e5cfb02b3dde2e8f9aa2056c9606aa3090454b6446d2694df05f36700ef0a38c47cb7774ca4f1ee64819dda8b9b119e16afb954a26523aa6748b7d78b9f7c2052bc14fe642ab6beeefb1479082acf1c17fb83cbc8ca0631f2195bb9bb9dc37060aef0f634c9e79906459c35f0519fe6bc127e056bce6f85b0ebad1c2d0ac97f05d099bdec29f96e831ce9811fe3efab711b6db856299a432b04f47e376b847c87cfae8eb3122282c6f4eafd413e2d52a4d5f1c3afd5f9b9cf9c6936ba079a0f8429951e8c35d83276c1afc959177c6938905a06ca7983a7fbe45c17625af6ee6102eecb19e219ebcf752cd6364acc947a9c80b38ae3b684dccd1811d2dc56b19a539d9c50a87a6ae55506ce566772be4151271d8175128ca6eb17f107f4f6e2e5cb86dff569059bb7ab3f8827bc6e2a127fba52984dbe3278f589dc9106d95f0c9b6f3280254c856b220ec027cee5eddc5a601ae195c48c121a2062f6a33ee71c3471022f2a297511ec3e14b6bf085e030c1fec71fceadb3e81d7b3ea57452616da794361c0671b02f8cf01a7236fc59389274dac96211a6e89511bcd6d52b23bfc97bf08cf68249afebaf062cd4bbb0bbbbc09c4c5b83baae6f936a13fe039f4a816e15fb38e44cb5fc4cc176183768bef5e076ea7d9506d4877e4a8c8590e030ebf26d5fc37e2eda211df8b4a25f4ebba4fa1d6b8ba1a757f3b9fe1ae5d830e57cc77357ec6358ce23a2c144d6750aeab65433c90236dd6a4fd6dda81288730ed7bbcaa254825e787bd28ca514333b96a5eb44e14276e587a3a3444c3aa47c09a51100d817d9ca75b95fa5e8fe12bfcf2ecf14736b3dff308e307bae58d0449d85c14f8c47dbd363370eac2604647ec71ebb67055be097b05533f03c1f8cddabb836c9162ea4e5ddc5c624efbf55bd6d02e1ca8846ace63bad05ba12444c281a8878c776254101583025a469c8969aebfc75f8a0e015b3df6b8768e253dab69fbb2f0d2ab5ebf80471bea8840259d4c73ae82afce393e30797cf2d7e1e1884725ad4b3168165d6c56ca96c79773cb2970c6164f6f3f62e7e120494a10c7acc39a4803b3f83a810f607c7cde0e010159001b7b4c2e3796d2f618f533ae5ceb7a44caf27815c2992f856d578456eb61188bf345362dcc4309449f2083c140a535a73577966800f7e38450717e105724e4414edbf3c3055969c06d67d6b4417b7e9a8f3c99c2a09935fad73a6e2ca3ce5671f5de890a5024a84e2577deb8432c137250e11f75f176b5bb8d7bfc72ec0b4d950d1bb94f956343e7b8ed69275b02f74502ae42f509d5f1727bf7298711211de2c369213cef672b36e5f9fd8484a69e1fc2f68ab38412477b0a6f35968341b889e723edbd879d4057fa0541ce663c77c6b60f4216e93c37ff7a241647a675116e7259e1528384e6be7297041949afc7c12fcfe5b894da61a1d2831696ccd26880a30cc86c33e56809971dbcbe48f5a970e17a2fda7202f697c33057b625e8dbd94c3999526530e1a66a1620de65ef6fd8b1c8426d0fbae51b232b6aa9b52c5f85480c30518376761e243120db94667bb0b8835abaf9923ca4ec81b53d05f027e4ddcbcdbc2f773d3367b1bc97b4d4bbd12d9f03d13038ab6677efc922ebfc9772269ff547e349f0efefd23ea6b9ada69ea51b9d37ec3cbfd8e1177d4b5258f4e3364ae4f5d4fdded47935ddb68b5bf979f6bc2d9ef9269b9c20a75944cb70178ad6324c48bd00189bbb0d302e645efd3cf57985d80be4799dba480137293d0ca5e25e94ade44df6075b1c485a09271d99fbeabc36639808e918b8348e83f86e8f20badde613d2d0191760a8544235cd1a7176b8272bb42d83f31f5ee25b946857f291496918a27c72899a11383f6c0e89247da1b0afd187ab3d31ad93a98f6036ee003882d0f69c06646d3b325579c6a788fc056bd292d6f39b024021dded66972c04b19151cb8955991f3012298034f1d656e190565ffdab8aec08a7f8cc5faf1763ccd0143a7c4a87fbb10ac721a3cdeabd07f63ec7ce41616de395ca9deff47a99dea39155fc2c40b7ccbfc6d1f28320cf0c858f0af7b60fe8628085e2ccee577fc67ec2a274c013fe609c71dfe2676bf5a83dbe72bba616b77f1d3ab1f30a57afc91a3b4fcb318b23705c3921820f5424539e82d6bf71ff84a35a7b260ae1031c27ab9e8ecfede2163cb83422173086aa6e62f95b4ddb884df72c96fabeb53e5e333fc46b0c278935edc51fd25a1f6734a733a550a2f696a0e1b7ad50db81e306d025359690f943424bf74371509005d4b8cd5d31986e897b030704bdfa69b4516839503a9b6e1057c18816865d48125cde249447634d85f0d655fa0459802a70a846c1380667c1aacb6d9767a410775ad1dc8afa55a075f1a4673627a7ecd91a0e8b6cb5e6f373814977fc464ea778d454d836cdf9e9aef5f5d1afeeb5cf4fee8c3cfdcc3d5f67cb7f165540b4fa8e5b51f7b76e09ecb0dd214c9908510907613c8c86af62aa78545d39cbe0509926f5e6b557fa28ad49086ec3b42e04b85a391a289c61ab39a7dc3b2fb574a0019d31bb20d1392aef953c5a08294cacee63d2f32b6211f609e9b97c5c8b9336b42ec3363f243d09c6708b6c17022c783c7dfce28c809b57fd13dffbebdfcbead66c9f3c33be3d80a8b278d0cfefb200714ae3bacc9f2d4ab0ce32cf453dd1d86be06c7893ed7dbe8f8d6f3a1d1c7fde50d95bc5f7c711b9ece8972816c2098e7dfecc20581848e444996f3e75fcf79d9211b0dda1d32600ba0eb123fae1fccf30e8de85e11d43a881f5b3a2266562de7aac2966a5a4c0229309de081e51e4df8c26307fe29cfa77c74c6f7377e3b4f0cc5e5a2b663134b990e761e7e96e3cd53bc70e577b5355f0c3175bea28d7bad4ca330498770b5426686415c83594a7b1258867beaa329317ba22095dc0118263f88064af7ec346f93eeef6d9cce70bb417e30b0fb29e1db70dc069d6b60d7f9e8e63f8de718ef06f94eae1e8a638843bcc61d09a6562400d5782b63a7612eaadedf2934adac28d2a62beee3105f207e3861cb845b428ed09d3fdc65f6640fc8616c913ac3cfff9a548c47b3459ef779e4685808e6a476907508dc94fd6669d8a7183cef155eea8422886e56682e64d87a367ca7d3ad26c958a3512b928b7db6683815117d61cb9b1b9d9b73cb9adc3aaf0d68b4efbec070da883df340223ab6509fccf76401ba261397217dd0adf87c568262f37b66087d42e828cc91e101528af55d599c3313948644561d3e66f25614d9f88ddcf45053dd45e5ae777234976011314a3bb766ff37f85a220b201c57cf154d25b67eccc32a91c0f4272d53815bb782098966100c82f621ea2a1965e19c4834aad366cb69db89d59a49dd43d3d96057cf936c60e7ab534bde5f0ebb3eb4a1eadb31c13ed7cc09f19f75a529ef546590fe3a8c51ef6f28c7922ebf976b0b5d9ff53d17908c016d43192378568b41c42670d0f069f671a3088b52ea15173f610c002af936f50f4a057b45534e7bed18621961c681d1c64bc0557f6f98f4646f0f9e50554da493e2913d459388c14844c9c82150ca6f4f53facf6f60cb12963d61d278e89ffe6faa8b08dda027d1ad61803d00bdd6041e2e0a686aa1adf45118edbb7b706d9bb3d17e88739494da00d76052d828f679847b36678395c03d59d3192f73fb6ee373feef81a0367f192db4c80388d9ba55d1a0b04f9b0afab74dccad09cebeb52c4e08b4d477a5b6b284dc91cc1b98b931f02ce658f38448662c5fdc4272bcadec89cbf917df7724eab6cafce2b77620d2b6ab678e6df6606b6d95268c181c67d2cb75b6330306a970413adb871e1c1e89daaf7bcd8cbbbc13516edddcc704f14f6e9d16afec7194e3f66895b9ac53cbdd20fe3d15da65c176edb89ccd5be0971f0192a1b6c98f380a6105a9d35e4fefa230db95d6dc4d0d7d29905db06ca7e14f781bf8e835c939622ac32c7731637cb276de00e337327892081a0963ea37773ea77f59ace3d858063c763a6b2d371b89394f454a134fdf43d7799c5001a899c101c27e8699be4c10dd26ca8d313e21727aa57cc03f98b2c59b80a8336981470d4dfa6d4220ac5d75acab26493cd2533b609415e34b69fbdb8c7d5a6eb07bec8677d5cb5dcb282bb8776daa1809d9bbe5d4d3edf447ebdef40003e0a35184495b7487af8ebbb187bc22ef9eaff23828eac8ed5fd04c78e845c885d5aeede985ea03a039b59ad08f9573b93e613937ec9c92aa6b65aea7b04995d143d77aeb2b87e7128da2baf45525ec7eb6d749bddff637c934d06650fa3357f10ad6eaeedbe10f73f4c94f32c84f3150112ea0d6ae62e270974bd25ae078c336d3477068588c0c7c49464675be65ba6a336b2a6c193d7a77d4d90c8cdccc753c048ab06aebaf6bca8c8aedac011788a131bda0dc17e914fc91dde754d0e25e3f094375c12c912cf5be4a60576a60272bcdb8f14f95653b5852c7f3cea0be9e9a56a1b9aa7e071cef1c8987e033fcb2fcd03287a6f57101be4d4ef38b65858b908d2e0368cd3fe4c4658e3ab704fca8c807698d1bea1afc34c73a99a668c588cfe96d6ea75466e38dc1d776032b6d125a41f147a71b7616e9f93d49e336bbf5400ba12de71466688bc24aecd392770482c3fb4dabcdd2335ea0eb991b6fb2bb12facef3b180ab7bedfc47d71fd13b7e238828f2f978b6908b3171750b4619be0f2cd833a2160cf0092083cd674ed6d168e08f9b3c45797a399223bc17fc9c1e47279f5bc17b1ad02c3e9e5844873dc22f0f62da900d1c8b01a168d7fb192ab7d651ae65821b8ff50dd4c7a720c6fbb57ab63aa6e283a36f2de8e58cd8f9728a208fa7f06"}) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xffffffffffffffcb}, 0x1f00) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) 4.874283467s ago: executing program 0 (id=7534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007e4000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700"/320]) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) socket$inet6(0xa, 0x80000, 0x2) 3.759804469s ago: executing program 0 (id=7542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x93, "d6e7b88c19b57931066b0bcea1f52db5587284a24c17ed253c7530e11c2c329501aebe09e2df16b18cc27db3dad9ddd871adfbd8ba8ace77cd26da00897aed7bddef2e50941565fd52041484b07687e25108c5814fa570bf758377118a067f3b771ade5a8d88f4e42549ab12ef2b3869a842d1f89955f302254fed88c44f342e884b0ecafafb6ad7a96ec6feecf64e91834b4a"}, &(0x7f0000000280)=0x9b) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x10001, @loopback}}}, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) socket(0x10, 0x809, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x0, 0x0, @ipv4, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000004fff5000000000000000000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 2.816326796s ago: executing program 4 (id=7545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000030000000000e60000000000050002000000000007000000000000001840000002000000000000000100"/64], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="6700010004000000"], 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)=ANY=[@ANYBLOB], 0x28}}, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r6, 0x0, 0x0, 0x0) sendto(r9, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1.808334719s ago: executing program 2 (id=7553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500300005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b5030200000000008500000088000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.787023128s ago: executing program 0 (id=7554): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000440)='%+\x00', 0x80400, &(0x7f0000000480)={@_ha_fsid={[0x6, 0x4]}, {0x35, 0x8, 0x4, 0x7}}, 0xe, &(0x7f00000004c0), &(0x7f0000000500)=0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400000}, 0x8) socket(0x29, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11) sendto$inet(r4, &(0x7f0000000180)="8b643e", 0xfffffffffffffdfd, 0x101, 0x0, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 1.698766677s ago: executing program 2 (id=7555): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x25a5, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffea4, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4001041) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xca, &(0x7f0000000340)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x9, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @loopback, {[@cipso={0x86, 0x80, 0x0, [{0x0, 0x12, "00fb52e6e7a95e7ec800100000000000"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x12, "6131a3187d5196c1efb84b7023c1254f"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c56d"}]}]}}}}}}}, 0x0) syz_emit_ethernet(0xca, 0x0, 0x0) recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/187, 0xbb}], 0x1}, 0x2002) 1.574930543s ago: executing program 4 (id=7556): r0 = socket(0x2, 0x3, 0xff) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 1.473528579s ago: executing program 4 (id=7559): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.335761105s ago: executing program 3 (id=7561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e810cf782db44fd5617ec403ce69b0d12", 0x19}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r4}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 1.335063739s ago: executing program 4 (id=7562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="00000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028006000200300000001400350065727370616e30000000000000000000"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b41300002c0007012bbd7000ffdbdf25047c0000080001800400dd809813038014008400000000000000000000000000000000017f1303"], 0x13b4}}, 0xc010) 1.248385816s ago: executing program 1 (id=7563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900100001a000100feffffff0001000000000000000000000000ffffe0000002fc010000000000009016ed8723b056e0c53429f32801000f7a00000000010001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/328], 0x190}}, 0x844) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r8, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={&(0x7f00000006c0)="cd62aa1a2c5cd7ecb03d9bb63e4b46e147db694de1af077daaf1529c86be71d45c050474f11ea3a0e31d31de6d74cb0f43658ce4656debc0bf128d3b9d75d6c72380d245b48fb12507d40b0819269b21efc58a61e4f37d246b230dbb08ba2b5f3fc4", 0x62}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000002240)=ANY=[], 0x6a) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast}, 0xc) 1.241081842s ago: executing program 4 (id=7564): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) unshare(0x8040480) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x804) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\b', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400200001000a004e200000000320010000000000000000000000000002080000001400020002004e22e00000020000000000000000"], 0x60}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2e4, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7851b0eb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8bbdea63087b8a6d77afda39fa41a24921020e12c222e31ec7e855"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "acaca7e4b0e1ffd03e525324ae0fa88ddcb1b288f51371"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "a8b79397d8147a896803e5888e9b1f06cf0622b6295a4389e692562b5180c528f7358f08d0d8a5be56f5613ddc655ed1f5e3962ea4fe018738ec460513a0cd076b40e47629daa0f00eea061ac6016e2b537f3880407e"}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a5e9315}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.192438106s ago: executing program 3 (id=7565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085003f0005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000005d93000000000000b5030200000000008500000088000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.111789879s ago: executing program 1 (id=7566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x50, r1, 0x1, 0xfffffffe, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000005700)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000001000)=""/172, 0xac}, {&(0x7f0000000080)=""/161, 0xa1}, {0x0}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/79, 0x4f}], 0xc}, 0x32120) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x7fffffff, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)={0x3, "0000d4"}, 0x4) syz_emit_ethernet(0x2ee, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100420086dd63beb91402b406ffff0100000000000000000000000078896553ab1e0001fc0200000000000000000000000000003a20000000000000c910fc00000000000000000000000000000100c86b02cf0ae3545412a3149fd5137172916cdbae7106802edaaace920056afe059ee30822d831abedd29b34cf459a5b4963eb5d13a8ab84833a8fcf217b49cf2663a02139e9bd6abd4d643cc2029f5e67c1ec443d5397da911b262dc086d3902e8e437f96842685dbbaea7d7bfe01eb0abd502f5fb107ca730b6021779bf3199d8928da9554995a126804158ae396616fd8ae06d0cb53078bed27f3921c6d2b336b718afabda0323aeb4816286e621d6beb7fc3b332c80b6944d4ed1fd183212c477a751f6648f0f33040107c910fe8000000000000000000000000000bbc91000000000000000000000ffffffffffff000000000087000439660000003c1e000000000000c910fe8000000000000000000000000000aa07dc074941956a17212fad1d2e7c6c0ee5048beaf44e50191f92325d9802a8164985a23472a9344babb6a27d36d8b9e5cb53ce7537ce6ac216a1cd2c572444d44aa6bba2307920ebb31fcb4e12a77bedb037505c54b040ce52c5b702555b1015acc04ab6907560c1f44db4e18dcd756d78725e5bf40c453d5b5bf5abd814e6e628d3ca97db7563858fcc9146f2b6ce3602a4817ab36018106e6ed188c97d4c07cdc5dab489f52e7a6e9c9d16f43e7b9830b80e3928e099038c6c348cb19c3fbe5a830d3f84f115b066020b44c7de25d471bb2b75d5a0d41dd14d18f2efe008000720640000004e244e22a599c6b6bea38a169eff964f437fd2304c311c75b659b770e66f9e", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="d001008090787fff051600000004000003ff00000008000000000000000701010104020204000001a3b7646779a3532b5e9394236468cca22b6e82883d2d2664017ce1f0cff782748d23254ed1618edd21905ffb3985a9f8cc6e8b9bbf12a4bd15001bcec3748d380a6b6b2868df848e52fbeebb43451555eaa741ee4ae39ef75e2eab24804efff3fcacb49a189d4532"], 0x0) 1.027421915s ago: executing program 3 (id=7567): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x2a0, 0x194, 0x194, 0x2a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1}, {0x3, 0x3, 0x2}, {0x2, 0x3, 0x5}, 0x200, 0x4}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], @ipv4=@broadcast, [0xff, 0xffffff00, 0x0, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv6=@local, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 0x4, 0x9, 0x33, 0x4e20, 0x4e23, 0x4e20, 0x4e20, 0x440, 0x200}, 0x2, 0x410, 0x4e23, 0x4e23, 0x4e20, 0x4e22}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xf0, 0xe}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0xfffffffd, @mcast2, 0x8}}, 0xd, 0xf6, 0x9, 0x5, 0x7fff}, &(0x7f00000001c0)=0x98) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) unshare(0x20000400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) 1.015836586s ago: executing program 4 (id=7568): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0xffff}, {0x8}}}, 0x24}}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000000d00)={0x66c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4f28}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1c7b}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x40, 0x7f, 0x0, 0xe79b}, {0x267, 0x0, 0x7, 0x401}, {0x1d0, 0x33, 0x8, 0xfffffe80}, {0xfff, 0xdf, 0x1, 0x518}, {0x6, 0x3, 0x0, 0x2aa2}, {0x3, 0x1, 0x7, 0xffff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x66c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ff0800000000000000000000850000002a000000955d581a01000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r8 = socket(0x14, 0x2, 0x4) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000400)=""/40, &(0x7f0000000440)=0x28) sendmsg$kcm(r8, 0x0, 0x801) ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @empty, 0x0}, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x41}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000}, 0x94) 956.440802ms ago: executing program 3 (id=7569): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0xf0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8e2d0ad", 0xd9}, {&(0x7f00000002c0)="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", 0x2eb}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0x0, 0x1, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x0, 0x0, 0x4, 0xb}, 0x50) 892.292359ms ago: executing program 1 (id=7570): r0 = socket(0xb, 0x80000, 0xfffffffa) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 841.476615ms ago: executing program 1 (id=7571): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(camellia-asm)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}}, 0x20040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000", 0x3) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/152, 0x98}], 0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getaddr={0x14, 0x16, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20040000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) 798.677093ms ago: executing program 3 (id=7572): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40280d5}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x21, 0x0, 0x4008040}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0) 739.454281ms ago: executing program 0 (id=7573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000740)) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r4 = epoll_create(0x4) r5 = socket(0x28, 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000280)={0x30000010}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="baff55da5b430ec9b1ad7b"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffdcc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x841) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x1d8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x1b4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x10, 0x5a8, 0x0, 0x8, 0x3ff, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x2, 0xf800, 0xab3, 0x2, 0x0, 0xfffffffa, 0x5}}, {0xe, 0x2, [0xffff, 0xc2, 0x5, 0xdf, 0x8]}}, {{0x1c, 0x1, {0x9, 0x26, 0x2, 0x1, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x8, 0x484, 0x8, 0x8, 0xf]}}, {{0x1c, 0x1, {0xad, 0x8, 0x9, 0xc0, 0x0, 0xfffff11d, 0x6, 0x5}}, {0xe, 0x2, [0x2, 0x5, 0x200, 0xe968, 0x8]}}, {{0x1c, 0x1, {0xd6, 0x8, 0x9, 0x8000, 0xe22c58c5574fc830, 0xfffffffb, 0x47, 0x7}}, {0x12, 0x2, [0x3, 0x2, 0x80, 0x7, 0x6, 0x401, 0xa]}}, {{0x1c, 0x1, {0x0, 0x9, 0x9, 0xffffffff, 0x0, 0xff, 0x3ff, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x401, 0x56, 0x7, 0x3]}}, {{0x1c, 0x1, {0xc, 0x7d, 0x80, 0xf114, 0x0, 0x8, 0x80, 0x6}}, {0x10, 0x2, [0x6, 0x6, 0xfff8, 0x1000, 0x40, 0x546]}}, {{0x1c, 0x1, {0x2, 0xff, 0x5, 0x7, 0x2, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x2, 0x2, 0x1]}}, {{0x1c, 0x1, {0xd5, 0x3, 0xc32, 0x800, 0x0, 0x1cc5, 0x101, 0x2}}, {0x8, 0x2, [0x9506, 0x0]}}, {{0x1c, 0x1, {0x7, 0x10, 0x61, 0x3, 0x1, 0x1000, 0xb, 0x9}}, {0x16, 0x2, [0x6, 0x8, 0xff, 0x0, 0xf, 0x8, 0x2, 0x3, 0xffff]}}]}]}, 0x1d8}}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f00000002c0), &(0x7f0000000440)=r8}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) 676.449223ms ago: executing program 2 (id=7574): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f02bb3b472a0c9b72ab25399cd956c07dead6a93690", 0x1c}]}, 0x8804) 440.87973ms ago: executing program 2 (id=7575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e810cf782db44fd5617ec403ce69b0d12", 0x19}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r4}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 402.164568ms ago: executing program 3 (id=7576): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x23, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x2c}}, 0x4c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1e"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xfffffffc}, 0x10) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$inet6(r7, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0xffffffaa}], 0x3, 0x0, 0x0, 0x600}}], 0x2, 0x44051) sendmsg$nl_route_sched(r4, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020605000000000000020000000900020073797a32000000000500010007000000050005000a0000b2a8bf2c1ef5847c30001400114000000000080012400000ffff15000300686173683a69702c706f72"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000002e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x20008890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="4db20200001a0500140003006e657464657673696d300000000000000c00168008000180"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 216.245964ms ago: executing program 2 (id=7577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 194.229315ms ago: executing program 1 (id=7578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000008000000000000000000000000000a0030"], 0xb8}}, 0x4000) 333.702µs ago: executing program 2 (id=7579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0x773, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x90e}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 0s ago: executing program 1 (id=7580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r4, r6, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) kernel console output (not intermixed with test programs): 25730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6198'. [ 756.557008][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6197'. [ 756.634188][T25735] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 756.645161][T25727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6197'. [ 756.709803][T11017] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 756.826256][T25739] netlink: 'syz.4.6201': attribute type 1 has an invalid length. [ 756.861340][T25739] bond13: entered promiscuous mode [ 756.871781][T25739] 8021q: adding VLAN 0 to HW filter on device bond13 [ 756.912119][T25739] bond13: (slave ipvlan14): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 756.925502][T25739] bond13: (slave ipvlan14): The slave device specified does not support setting the MAC address [ 756.936599][T25739] bond13: (slave ipvlan14): Setting fail_over_mac to active for active-backup mode [ 757.208991][T25589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 757.278983][T25753] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 757.326365][T25756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6208'. [ 757.339732][ T5161] Bluetooth: hci2: command tx timeout [ 757.392308][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.401817][T25589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 757.415110][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.438505][T25589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 757.474803][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.503477][T25589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 757.518490][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.926251][T25589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.011637][T25789] ip6tnl2: entered allmulticast mode [ 758.041164][T25589] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.076519][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.083784][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.140122][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.147534][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.583380][T25589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.690009][T25802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6223'. [ 758.705390][T25589] veth0_vlan: entered promiscuous mode [ 758.716416][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6223'. [ 758.721664][T25589] veth1_vlan: entered promiscuous mode [ 758.754843][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6225'. [ 758.791747][T25589] veth0_macvtap: entered promiscuous mode [ 758.825381][T25589] veth1_macvtap: entered promiscuous mode [ 758.884359][T25589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.893586][T25819] netlink: 'syz.1.6226': attribute type 13 has an invalid length. [ 758.920862][T25589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.960805][ T8028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.001160][ T8028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.033587][ T8028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.062708][ T8028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.148663][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 759.225891][T25827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6228'. [ 759.360179][ T8028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.404904][ T8028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.419721][ T5161] Bluetooth: hci2: command tx timeout [ 759.594473][ T8030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.639118][ T8030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.739660][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 759.927735][T25858] gretap0: entered promiscuous mode [ 760.124882][T25863] xt_hashlimit: size too large, truncated to 1048576 [ 760.140940][T25863] xt_hashlimit: max too large, truncated to 1048576 [ 760.244097][T25863] ipt_REJECT: TCP_RESET invalid for non-tcp [ 760.306393][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6238'. [ 760.572855][T19032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 760.585554][T19032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.599893][T19032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.610328][T19032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.621138][T19032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 760.912756][T25886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6243'. [ 761.056731][T25889] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6243'. [ 761.095614][T25890] No such timeout policy "syz0" [ 761.449015][T25900] No such timeout policy "syz0" [ 761.478590][T25875] lo speed is unknown, defaulting to 1000 [ 761.726300][T25904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6250'. [ 761.766822][T25904] netlink: 'syz.2.6250': attribute type 7 has an invalid length. [ 761.785646][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6251'. [ 762.048469][T25896] lo speed is unknown, defaulting to 1000 [ 762.248356][T25875] chnl_net:caif_netlink_parms(): no params data found [ 762.292633][T25919] netlink: 'syz.0.6254': attribute type 13 has an invalid length. [ 762.428099][T25919] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.436024][T25919] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.602432][T25935] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 762.605753][T25919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.625818][T25919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.702321][T19032] Bluetooth: hci0: command tx timeout [ 762.900238][ T8030] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.924004][ T8030] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.042927][ T8030] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.071684][ T8030] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.242728][ T8030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.402882][ T8020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.683182][ T8030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.898068][T25875] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.926771][T25875] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.949671][T25875] bridge_slave_0: entered allmulticast mode [ 763.967007][T25875] bridge_slave_0: entered promiscuous mode [ 764.028039][T25875] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.042446][T25875] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.060187][T25875] bridge_slave_1: entered allmulticast mode [ 764.082285][T25875] bridge_slave_1: entered promiscuous mode [ 764.124615][ T8030] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.208743][ T8024] bridge_slave_1: left allmulticast mode [ 764.229906][ T8024] bridge_slave_1: left promiscuous mode [ 764.249657][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.272838][ T8024] bridge_slave_0: left allmulticast mode [ 764.279050][ T8024] bridge_slave_0: left promiscuous mode [ 764.290226][T25971] xt_hashlimit: size too large, truncated to 1048576 [ 764.290875][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.297250][T25971] xt_hashlimit: max too large, truncated to 1048576 [ 764.375949][T25971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 764.382617][T25973] __nla_validate_parse: 5 callbacks suppressed [ 764.382641][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 764.477347][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6268'. [ 764.593595][T25976] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6268'. [ 764.625686][ T8024] erspan0 (unregistering): left promiscuous mode [ 764.633376][T25978] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 764.661080][ T8024] bond9 (unregistering): (slave erspan1): Releasing active interface [ 764.670312][ T8024] erspan1 (unregistering): left promiscuous mode [ 764.707836][ T8024] gretap0 (unregistering): left promiscuous mode [ 764.780321][T19032] Bluetooth: hci0: command tx timeout [ 764.966375][ T8024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.976967][ T8024] bond0 (unregistering): Released all slaves [ 764.988062][ T8024] bond1 (unregistering): Released all slaves [ 765.005031][ T8024] bond2 (unregistering): (slave veth3): Releasing backup interface [ 765.020064][ T8024] bond2 (unregistering): Released all slaves [ 765.036785][ T8024] bond3 (unregistering): Released all slaves [ 765.051474][ T8024] bond4 (unregistering): Released all slaves [ 765.066847][ T8024] bond5 (unregistering): Released all slaves [ 765.092859][ T8024] bond6 (unregistering): (slave batadv1): Releasing active interface [ 765.110304][ T8024] bond6 (unregistering): Released all slaves [ 765.126045][ T8024] bond7 (unregistering): Released all slaves [ 765.141281][ T8024] bond8 (unregistering): Released all slaves [ 765.158297][ T8024] bond9 (unregistering): Released all slaves [ 765.176013][ T8024] bond10 (unregistering): Released all slaves [ 765.197794][ T8024] bond11 (unregistering): Released all slaves [ 765.223869][ T8024] bond12 (unregistering): Released all slaves [ 765.238998][ T8024] bond13 (unregistering): Released all slaves [ 765.265328][T25875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.283565][T25875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.508345][ T8024] : left promiscuous mode [ 765.566231][T25875] team0: Port device team_slave_0 added [ 765.608784][T25875] team0: Port device team_slave_1 added [ 765.777778][T25982] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6271'. [ 765.815015][T25987] netlink: 'syz.1.6272': attribute type 27 has an invalid length. [ 765.817099][T25875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.896574][T25875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.012365][T25875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.081820][T25987] ip6tnl1: left allmulticast mode [ 766.090982][T25987] ip6tnl2: left allmulticast mode [ 766.576013][T25988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.609902][T25988] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.725017][T25988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.824420][T25875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.860214][T19032] Bluetooth: hci0: command tx timeout [ 766.869589][T25875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.959386][T26023] netlink: 'syz.3.6276': attribute type 13 has an invalid length. [ 767.011188][T25875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.179476][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 767.307167][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6279'. [ 767.358552][T26036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6279'. [ 767.473233][T26038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6279'. [ 767.502094][T26040] No such timeout policy "syz0" [ 767.574094][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 767.762040][T26044] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 767.860718][T25875] hsr_slave_0: entered promiscuous mode [ 767.869009][T25875] hsr_slave_1: entered promiscuous mode [ 767.878883][T25875] debugfs: 'hsr0' already exists in 'hsr' [ 767.899378][T25875] Cannot create hsr debugfs directory [ 768.110746][T26054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6284'. [ 768.206075][T26057] tipc: Invalid UDP bearer configuration [ 768.206149][T26057] tipc: Enabling of bearer rejected, failed to enable media [ 768.355383][T26061] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 768.914865][T25875] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.939730][T19032] Bluetooth: hci0: command tx timeout [ 769.136227][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6290'. [ 769.208104][ T8024] hsr_slave_0: left promiscuous mode [ 769.222349][T26081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6290'. [ 769.236779][ T8024] hsr_slave_1: left promiscuous mode [ 769.251921][ T8024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.845023][T26094] netlink: 'syz.3.6294': attribute type 13 has an invalid length. [ 770.124975][ T8024] team0 (unregistering): Port device team_slave_1 removed [ 770.163489][ T8024] team0 (unregistering): Port device team_slave_0 removed [ 770.377608][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 770.450805][T25875] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.756747][T26113] xt_hashlimit: size too large, truncated to 1048576 [ 770.791458][T26113] xt_hashlimit: max too large, truncated to 1048576 [ 770.802808][T26115] No such timeout policy "syz0" [ 770.815855][T25875] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.855502][T26113] ipt_REJECT: TCP_RESET invalid for non-tcp [ 770.962729][T26122] FAULT_INJECTION: forcing a failure. [ 770.962729][T26122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.018301][T26122] CPU: 1 UID: 0 PID: 26122 Comm: syz.2.6300 Not tainted syzkaller #0 PREEMPT(full) [ 771.018331][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.018343][T26122] Call Trace: [ 771.018352][T26122] [ 771.018361][T26122] dump_stack_lvl+0xe8/0x150 [ 771.018400][T26122] should_fail_ex+0x412/0x560 [ 771.018438][T26122] _copy_from_user+0x2d/0xb0 [ 771.018464][T26122] ___sys_recvmsg+0x175/0x590 [ 771.018495][T26122] ? __pfx____sys_recvmsg+0x10/0x10 [ 771.018526][T26122] ? __fget_files+0x2a/0x420 [ 771.018581][T26122] do_recvmmsg+0x334/0x800 [ 771.018616][T26122] ? __pfx_do_recvmmsg+0x10/0x10 [ 771.018654][T26122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 771.018699][T26122] __x64_sys_recvmmsg+0x198/0x250 [ 771.018725][T26122] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 771.018756][T26122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.018778][T26122] do_syscall_64+0x15f/0xf80 [ 771.018804][T26122] ? trace_irq_disable+0x3b/0x140 [ 771.018832][T26122] ? clear_bhb_loop+0x40/0x90 [ 771.018858][T26122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.018879][T26122] RIP: 0033:0x7ffac7d9cdd9 [ 771.018900][T26122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.018919][T26122] RSP: 002b:00007ffac8cc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 771.018941][T26122] RAX: ffffffffffffffda RBX: 00007ffac8015fa0 RCX: 00007ffac7d9cdd9 [ 771.018957][T26122] RDX: 040000000000021a RSI: 0000200000002b00 RDI: 0000000000000003 [ 771.018972][T26122] RBP: 00007ffac8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 771.018985][T26122] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 771.018998][T26122] R13: 00007ffac8016038 R14: 00007ffac8015fa0 R15: 00007ffef18b5268 [ 771.019032][T26122] [ 771.327072][T25875] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.404132][T26126] netlink: 'syz.3.6301': attribute type 13 has an invalid length. [ 771.767332][T26116] lec:lec_atm_close: lec0: Shut down! [ 772.170049][T25875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 772.222081][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.259732][T25875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.287035][T26153] __nla_validate_parse: 1 callbacks suppressed [ 772.287057][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6305'. [ 772.382864][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6305'. [ 772.389632][T26140] sctp: [Deprecated]: syz.2.6302 (pid 26140) Use of int in max_burst socket option. [ 772.389632][T26140] Use struct sctp_assoc_value instead [ 772.494497][T26162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6305'. [ 772.624951][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.646349][T25875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.715997][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.734635][T25875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.778569][T25875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.191536][T26182] netlink: 'syz.1.6310': attribute type 13 has an invalid length. [ 773.220484][T25875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.647835][T25875] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.716628][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.724828][ T8020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.781671][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.788926][ T8020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.360138][T26214] No such timeout policy "syz0" [ 774.582851][T26223] ip6tnl1: entered allmulticast mode [ 774.598407][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 774.647133][T26225] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6318'. [ 774.667373][T25875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.811581][ T8020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.837453][ T8020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.846187][T11005] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 774.958074][T26242] sctp: [Deprecated]: syz.0.6319 (pid 26242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 774.958074][T26242] Use struct sctp_sack_info instead [ 775.021051][ T8030] bridge_slave_1: left allmulticast mode [ 775.043148][ T8030] bridge_slave_1: left promiscuous mode [ 775.058839][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.068715][T11006] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.095976][ T8030] bridge_slave_0: left allmulticast mode [ 775.109119][ T8030] bridge_slave_0: left promiscuous mode [ 775.133468][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.160162][ T8030] dvmrp1: left allmulticast mode [ 775.431998][T11002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.607876][T26271] sctp: [Deprecated]: syz.1.6324 (pid 26271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.607876][T26271] Use struct sctp_sack_info instead [ 775.612966][T26266] can: request_module (can-proto-3) failed. [ 775.762255][ T8030] erspan0 (unregistering): left promiscuous mode [ 775.801620][ T8030] gretap0 (unregistering): left promiscuous mode [ 775.841432][ T8030] bond9 (unregistering): (slave gretap1): Releasing active interface [ 775.972560][ T8030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.988041][ T8030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.000362][ T8030] bond0 (unregistering): Released all slaves [ 776.012315][ T8030] bond1 (unregistering): Released all slaves [ 776.029719][ T8030] bond2 (unregistering): Released all slaves [ 776.045461][ T8030] bond3 (unregistering): Released all slaves [ 776.064163][ T8030] bond4 (unregistering): Released all slaves [ 776.087296][ T8030] bond5 (unregistering): Released all slaves [ 776.103602][ T8030] bond6 (unregistering): Released all slaves [ 776.120099][ T8030] bond7 (unregistering): Released all slaves [ 776.165923][ T8030] bond8 (unregistering): Released all slaves [ 776.208326][ T8030] bond9 (unregistering): Released all slaves [ 776.239049][ T8030] bond10 (unregistering): Released all slaves [ 776.267479][ T8030] bond11 (unregistering): Released all slaves [ 776.321373][ T8030] bond12 (unregistering): Released all slaves [ 776.601271][ T8030] tipc: Disabling bearer [ 776.607894][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6330'. [ 776.621204][ T8030] tipc: Left network mode [ 776.651908][T26284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6330'. [ 776.864609][T26290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.904086][T26295] netlink: 'syz.0.6333': attribute type 13 has an invalid length. [ 776.939285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 776.947788][ C1] lec:lec_tx_timeout: lec0 [ 777.184425][T26303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6336'. [ 777.299868][T25875] veth0_vlan: entered promiscuous mode [ 777.336181][T25875] veth1_vlan: entered promiscuous mode [ 777.427286][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 777.634782][T25875] veth0_macvtap: entered promiscuous mode [ 777.704758][T25875] veth1_macvtap: entered promiscuous mode [ 777.724464][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 777.768773][T26319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6342'. [ 777.808535][T25875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.865671][T25875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.942425][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.985613][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.025649][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.133643][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.147223][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6348'. [ 778.162619][T26341] netlink: 'syz.1.6349': attribute type 1 has an invalid length. [ 778.377312][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6350'. [ 778.399085][T26341] bond1: entered promiscuous mode [ 778.418763][T26341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 778.475563][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.506249][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.783662][ T8030] team0 (unregistering): Port device team_slave_1 removed [ 778.806118][ T8030] team0 (unregistering): Port device team_slave_0 removed [ 778.970999][ T3494] smbdirect: ib_dev[syz2] removed [ 779.004250][T11005] lo speed is unknown, defaulting to 1000 [ 779.016408][T11005] syz2: Port: 1 Link DOWN [ 779.046528][T26356] ip6tnl3: entered allmulticast mode [ 779.152036][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.181988][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.290976][T26363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6355'. [ 779.345336][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 779.353802][T26363] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6355'. [ 779.381184][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 779.388988][T11018] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 779.408314][ T8020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.424663][ T8020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.820284][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6237'. [ 779.860782][ T5928] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 779.895662][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6360'. [ 780.025410][ T8030] IPVS: stop unused estimator thread 0... [ 780.046502][T26393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6362'. [ 780.060785][ T5928] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 780.339104][T26399] netlink: 'syz.1.6365': attribute type 13 has an invalid length. [ 780.367614][T26399] netlink: 'syz.1.6365': attribute type 17 has an invalid length. [ 780.615284][ T5161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 780.635099][ T5161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 780.644449][ T5161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 780.658777][ T5161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 780.668652][ T5161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 780.757976][T26399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.794754][T26399] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.839022][T26399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.902594][T26410] vlan3: entered allmulticast mode [ 780.916425][T26410] veth1_virt_wifi: entered allmulticast mode [ 781.116101][T16567] syz_tun (unregistering): left allmulticast mode [ 781.221231][T26419] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 781.269478][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 781.402336][T26425] netlink: 'syz.3.6374': attribute type 89 has an invalid length. [ 781.609766][T26425] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 781.672560][T26429] nbd5: detected capacity change from 0 to 63 [ 781.723560][T19032] block nbd5: Receive control failed (result -32) [ 781.739109][T25135] block nbd5: Dead connection, failed to find a fallback [ 781.779672][T26412] lec:lec_atm_close: lec0: Shut down! [ 781.788454][T25135] block nbd5: shutting down sockets [ 781.797547][T25135] blk_print_req_error: 138 callbacks suppressed [ 781.797571][T25135] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.829350][T25135] buffer_io_error: 138 callbacks suppressed [ 781.829373][T25135] Buffer I/O error on dev nbd5, logical block 0, async page read [ 781.862641][T25135] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.884511][T25135] Buffer I/O error on dev nbd5, logical block 1, async page read [ 781.901410][T25135] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.931274][T25135] Buffer I/O error on dev nbd5, logical block 2, async page read [ 781.946413][T25135] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.963198][T25135] Buffer I/O error on dev nbd5, logical block 3, async page read [ 781.981081][T25135] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.996268][T25135] Buffer I/O error on dev nbd5, logical block 0, async page read [ 782.021876][T25135] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.052002][T25135] Buffer I/O error on dev nbd5, logical block 1, async page read [ 782.076482][T25135] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.107794][T25135] Buffer I/O error on dev nbd5, logical block 2, async page read [ 782.136373][T25135] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.187049][T25135] Buffer I/O error on dev nbd5, logical block 3, async page read [ 782.228677][T25135] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.279372][T25135] Buffer I/O error on dev nbd5, logical block 0, async page read [ 782.298899][T26403] chnl_net:caif_netlink_parms(): no params data found [ 782.327828][T25135] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.388372][T25135] Buffer I/O error on dev nbd5, logical block 1, async page read [ 782.425736][T26403] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.435456][T26403] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.441394][T25135] ldm_validate_partition_table(): Disk read failed. [ 782.442985][T26403] bridge_slave_0: entered allmulticast mode [ 782.455848][T26452] netlink: 'syz.4.6380': attribute type 13 has an invalid length. [ 782.457299][T26403] bridge_slave_0: entered promiscuous mode [ 782.474203][T26403] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.481728][T26403] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.489772][T26403] bridge_slave_1: entered allmulticast mode [ 782.493733][T25135] Dev nbd5: unable to read RDB block 0 [ 782.497697][T26403] bridge_slave_1: entered promiscuous mode [ 782.543742][T25135] nbd5: unable to read partition table [ 782.610500][T25135] ldm_validate_partition_table(): Disk read failed. [ 782.648795][T25135] Dev nbd5: unable to read RDB block 0 [ 782.684758][T25135] nbd5: unable to read partition table [ 782.786425][T19032] Bluetooth: hci1: command tx timeout [ 782.898648][T26452] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.906720][T26452] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.147079][T26452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.165414][T26452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.411269][T26403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.422026][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 783.454019][T26403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.501960][ T3494] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.522300][ T3494] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.615950][ T3494] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.662911][ T3494] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.735235][T26403] team0: Port device team_slave_0 added [ 783.851240][T26473] bond1 (unregistering): Released all slaves [ 783.892293][T26403] team0: Port device team_slave_1 added [ 783.997317][T26403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.031101][T26403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.142672][T26403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.191143][T26403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.198928][T26403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.229788][T26403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.483650][T26510] netlink: 'syz.3.6394': attribute type 1 has an invalid length. [ 784.492474][T26505] macsec1: entered allmulticast mode [ 784.509926][T26505] macsec0: entered allmulticast mode [ 784.568120][T26403] hsr_slave_0: entered promiscuous mode [ 784.586459][T26403] hsr_slave_1: entered promiscuous mode [ 784.655367][T26510] bond1: entered promiscuous mode [ 784.662200][T26510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.698227][T26512] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.711228][T26512] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 784.722032][T26512] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 784.773300][T26515] netlink: 'syz.4.6395': attribute type 2 has an invalid length. [ 784.817226][T26515] __nla_validate_parse: 3 callbacks suppressed [ 784.817247][T26515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6395'. [ 784.859546][T19032] Bluetooth: hci1: command tx timeout [ 784.951352][T26515] bond1: option primary_reselect: invalid value (133) [ 785.007838][T26515] bond1 (unregistering): Released all slaves [ 785.244608][T26525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6397'. [ 785.266191][T26525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6397'. [ 785.301264][T26525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6397'. [ 785.320268][T26525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6397'. [ 785.406844][T26529] ip6tnl1: entered allmulticast mode [ 785.462561][ T8028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.475668][ T8028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.489683][T11002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.700029][T11002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 785.771765][T11002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 786.018729][T26547] netlink: 'syz.4.6405': attribute type 13 has an invalid length. [ 786.041684][T26547] macsec0: left allmulticast mode [ 786.939299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 786.944703][T19032] Bluetooth: hci1: command tx timeout [ 786.947792][ C1] lec:lec_tx_timeout: lec0 [ 787.066820][T26403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 787.079627][T26403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.088450][T26403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 787.118034][T26403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.143024][T26403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 787.169621][T26403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.273411][T26403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 787.324036][T26403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.582446][T26403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.644374][T26403] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.691087][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.698377][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.713515][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'. [ 787.772284][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.779815][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.195592][T26593] netlink: 'syz.0.6415': attribute type 1 has an invalid length. [ 788.309610][T26593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.341230][T26600] vlan2: entered promiscuous mode [ 788.348460][T26600] bond1: entered promiscuous mode [ 788.355105][T26600] vlan2: entered allmulticast mode [ 788.368418][T26600] bond1: entered allmulticast mode [ 788.402427][T26593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6415'. [ 788.477272][T26593] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.503137][T26593] bond1: (slave batadv1): making interface the new active one [ 788.519416][T26593] batadv1: entered promiscuous mode [ 788.529784][T26593] batadv1: entered allmulticast mode [ 788.536759][T26593] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 788.596276][T26604] tipc: Started in network mode [ 788.613668][T26604] tipc: Node identity 4a3d507a2e42, cluster identity 4711 [ 788.639999][T26604] tipc: Enabled bearer , priority 0 [ 788.680138][T26607] syzkaller0: entered promiscuous mode [ 788.686330][T26607] syzkaller0: entered allmulticast mode [ 788.726314][T26403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.813706][T26604] tipc: Resetting bearer [ 788.885330][T26603] tipc: Resetting bearer [ 788.949098][T26603] tipc: Disabling bearer [ 788.997881][T26403] veth0_vlan: entered promiscuous mode [ 789.017288][T26619] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6422'. [ 789.025843][T19032] Bluetooth: hci1: command tx timeout [ 789.049092][T26403] veth1_vlan: entered promiscuous mode [ 789.118482][T26403] veth0_macvtap: entered promiscuous mode [ 789.136969][T26403] veth1_macvtap: entered promiscuous mode [ 789.182225][T26403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.232248][T26403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.275459][ T8014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.302252][ T8014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.332967][ T8014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.360896][ T8014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.626831][T26626] netlink: 'syz.1.6425': attribute type 1 has an invalid length. [ 789.766769][T26626] bond2: entered promiscuous mode [ 789.787598][T26626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 789.843556][T26629] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 789.882802][T26629] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 789.906997][T26629] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 789.936511][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.954739][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.085470][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.114425][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.475946][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 790.494420][T26658] ip6tnl2: entered allmulticast mode [ 790.505827][ T8014] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.518946][ T8014] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.530748][T11018] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.560334][T26660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6437'. [ 790.645342][T26662] netlink: 'syz.0.6438': attribute type 1 has an invalid length. [ 790.758556][T26662] bond2: entered promiscuous mode [ 790.774524][T26662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 790.812993][T26666] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 790.852083][T26666] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 790.898484][T26666] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 791.000523][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.292142][T26694] netlink: 'syz.4.6446': attribute type 1 has an invalid length. [ 791.317177][T26694] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6446'. [ 791.351925][T26694] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6446'. [ 791.360389][T26703] syzkaller0: entered promiscuous mode [ 791.374943][T26712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 791.379400][T26694] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6446'. [ 791.384413][T26703] syzkaller0: entered allmulticast mode [ 791.406944][T26712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6450'. [ 791.420440][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.423786][T26712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6450'. [ 791.476954][T26715] xt_hashlimit: size too large, truncated to 1048576 [ 791.625647][T26719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6452'. [ 792.074039][T26734] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6458'. [ 792.139464][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 792.712324][T26752] ip6tnl1: entered allmulticast mode [ 792.730197][T26750] syzkaller0: entered promiscuous mode [ 792.743559][T26750] syzkaller0: entered allmulticast mode [ 793.218464][T26772] netlink: 'syz.1.6472': attribute type 1 has an invalid length. [ 793.492543][T26781] team_slave_1: entered promiscuous mode [ 793.529854][T26781] team_slave_1: entered allmulticast mode [ 793.558016][T26781] Cannot find del_set index 0 as target [ 793.577616][T26763] lec:lec_atm_close: lec0: Shut down! [ 793.624485][T26787] hsr0: entered promiscuous mode [ 793.662149][T26697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.690029][T26697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.697987][T11018] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.884656][T26796] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 794.140145][T26808] netlink: 'syz.3.6483': attribute type 1 has an invalid length. [ 794.175955][T26808] bond2: entered promiscuous mode [ 794.182047][T26808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 794.203683][T26808] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 794.216436][T26808] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 794.231752][T26808] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 794.259176][T26777] hsr0: left promiscuous mode [ 794.280103][T11018] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 794.837879][T26843] lo speed is unknown, defaulting to 1000 [ 794.855780][T26843] lo speed is unknown, defaulting to 1000 [ 794.866924][T26843] lo speed is unknown, defaulting to 1000 [ 794.877039][T26843] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 794.894353][T26843] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 794.912067][T26843] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 794.932209][T26843] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 794.958142][T26843] lo speed is unknown, defaulting to 1000 [ 794.967691][T26843] lo speed is unknown, defaulting to 1000 [ 794.975118][T26843] lo speed is unknown, defaulting to 1000 [ 794.983686][T26843] lo speed is unknown, defaulting to 1000 [ 794.992195][T26843] lo speed is unknown, defaulting to 1000 [ 795.001812][T26843] lo speed is unknown, defaulting to 1000 [ 795.009567][T26843] lo speed is unknown, defaulting to 1000 [ 795.016675][T26843] lo speed is unknown, defaulting to 1000 [ 795.025306][T26843] lo speed is unknown, defaulting to 1000 [ 795.095303][T26847] xt_cgroup: xt_cgroup: no path or classid specified [ 795.426183][T26854] openvswitch: netlink: Unknown key attributes 2 [ 795.479383][T26856] netlink: 'syz.3.6497': attribute type 13 has an invalid length. [ 795.605665][T26861] netlink: 'syz.3.6498': attribute type 27 has an invalid length. [ 795.615012][T26861] vlan3: left allmulticast mode [ 795.620484][T26861] veth1_virt_wifi: left allmulticast mode [ 795.627965][T26861] bond1: left promiscuous mode [ 795.633578][T26861] bond2: left promiscuous mode [ 795.647863][T26861] gretap0: left promiscuous mode [ 795.675451][T26861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.684229][T26861] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.696343][T26861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 795.713076][ T9] lo speed is unknown, defaulting to 1000 [ 795.720519][ T9] syz2: Port: 1 Link ACTIVE [ 796.069742][T26863] lo speed is unknown, defaulting to 1000 [ 796.310809][T26869] __nla_validate_parse: 10 callbacks suppressed [ 796.310833][T26869] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6499'. [ 796.329291][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6499'. [ 796.409743][T26779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.683029][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6500'. [ 796.905299][T26879] can: request_module (can-proto-4) failed. [ 796.914899][T26885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6505'. [ 796.952715][T26887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6506'. [ 797.011402][T26889] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6504'. [ 797.377744][T26867] lo speed is unknown, defaulting to 1000 [ 797.396603][T26882] siw: device registration error -23 [ 797.564918][T26899] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 797.739473][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 797.739493][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.332501][T26933] netlink: 'syz.1.6515': attribute type 27 has an invalid length. [ 798.445685][T26933] bond1: left promiscuous mode [ 798.472650][T26933] ip6tnl3: left allmulticast mode [ 798.521917][T26933] bond2: left promiscuous mode [ 798.546892][T26903] lo speed is unknown, defaulting to 1000 [ 798.740528][T26948] xt_hashlimit: size too large, truncated to 1048576 [ 798.804264][T26920] lec:lec_atm_close: lec0: Shut down! [ 798.828411][T26936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.883649][T26936] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.999514][T26936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 799.552328][T26959] sctp: [Deprecated]: syz.4.6521 (pid 26959) Use of int in max_burst socket option. [ 799.552328][T26959] Use struct sctp_assoc_value instead [ 799.848961][T26933] lo speed is unknown, defaulting to 1000 [ 800.328990][T26986] syz.0.6528 (26986) used obsolete PPPIOCDETACH ioctl [ 801.016744][T27004] sctp: [Deprecated]: syz.4.6534 (pid 27004) Use of int in max_burst socket option. [ 801.016744][T27004] Use struct sctp_assoc_value instead [ 801.068804][T26989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.175245][T27011] siw: device registration error -23 [ 801.200463][T27011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6536'. [ 801.248355][T27011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6536'. [ 801.262649][T27007] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 801.308966][T27007] bond3 (unregistering): Released all slaves [ 801.685684][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6542'. [ 802.246531][T27036] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6543'. [ 802.532462][T27042] sctp: [Deprecated]: syz.0.6546 (pid 27042) Use of int in max_burst socket option. [ 802.532462][T27042] Use struct sctp_assoc_value instead [ 802.674342][T27048] siw: device registration error -23 [ 802.708055][T27048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6549'. [ 802.754514][T27048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6549'. [ 802.896196][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6553'. [ 802.942229][T27061] netlink: 'syz.4.6555': attribute type 1 has an invalid length. [ 802.959660][T27058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6553'. [ 803.007956][T27061] bond1: entered promiscuous mode [ 803.013838][T27061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.054819][T27063] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 803.076430][T27064] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6553'. [ 803.113283][T27063] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 803.131413][T27063] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 803.979324][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 803.987962][ C1] lec:lec_tx_timeout: lec0 [ 803.993739][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 804.166273][T27092] No such timeout policy "syz0" [ 804.299439][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 804.449932][T27108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6564'. [ 804.488575][T27106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6569'. [ 804.664954][T27106] veth3: entered promiscuous mode [ 805.083078][T27130] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6576'. [ 805.242077][T27133] netlink: 'syz.4.6577': attribute type 8 has an invalid length. [ 805.276451][T27136] netlink: 'syz.4.6577': attribute type 8 has an invalid length. [ 805.305343][T27107] lo speed is unknown, defaulting to 1000 [ 806.126726][T27153] netlink: 'syz.3.6583': attribute type 7 has an invalid length. [ 806.219671][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 806.298469][T27157] netlink: 'syz.0.6585': attribute type 27 has an invalid length. [ 806.373874][T27157] ip6tnl1: left allmulticast mode [ 806.436949][T27157] vlan2: left promiscuous mode [ 806.468786][T27157] bond1: left promiscuous mode [ 806.488826][T27157] batadv1: left promiscuous mode [ 806.507410][T27157] vlan2: left allmulticast mode [ 806.544896][T27157] bond1: left allmulticast mode [ 806.566959][T27157] batadv1: left allmulticast mode [ 806.645783][T27157] bond2: left promiscuous mode [ 806.728602][T27157] veth3: left promiscuous mode [ 807.103908][T27178] __nla_validate_parse: 4 callbacks suppressed [ 807.103930][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6589'. [ 807.188489][T27158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.223142][T27182] netlink: 'syz.2.6592': attribute type 1 has an invalid length. [ 807.272561][T27158] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.437835][T27158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.476234][T27190] netlink: 'syz.2.6593': attribute type 13 has an invalid length. [ 807.608866][T27178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.024904][T27190] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.033030][T27190] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.290230][T27190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.328234][T27190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.590448][T26697] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.609507][T26697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.629782][T26697] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.649826][T26697] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.822630][T27210] siw: device registration error -23 [ 808.857366][T27210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6599'. [ 809.009246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 809.017321][ C1] lec:lec_tx_timeout: lec0 [ 809.023912][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 809.088966][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6603'. [ 809.289776][T27227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6606'. [ 809.344244][T27227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6606'. [ 809.468049][T27235] ip6tnl1: entered allmulticast mode [ 809.618319][T27241] syzkaller1: entered promiscuous mode [ 809.631723][T27241] syzkaller1: entered allmulticast mode [ 810.059536][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 810.146813][T27259] ip6tnl4: entered allmulticast mode [ 810.167822][T26697] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 810.177099][T26697] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 810.190008][T11018] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 810.245606][T27262] xt_hashlimit: size too large, truncated to 1048576 [ 810.257690][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6616'. [ 810.266234][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6618'. [ 810.278069][T27262] xt_hashlimit: max too large, truncated to 1048576 [ 810.423271][T27262] ipt_REJECT: TCP_RESET invalid for non-tcp [ 810.585630][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6620'. [ 810.635580][T27283] netlink: 'syz.1.6624': attribute type 1 has an invalid length. [ 810.721511][T27285] netlink: 'syz.3.6623': attribute type 2 has an invalid length. [ 810.729927][T11018] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 810.756066][T27283] bond3: entered promiscuous mode [ 810.767391][T27285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6623'. [ 810.792239][T27283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.856793][T27287] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 810.878278][T27287] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 810.899497][T27287] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 811.098098][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6626'. [ 811.111811][T11018] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 811.304024][T27305] netlink: 'syz.4.6631': attribute type 27 has an invalid length. [ 811.352435][T27305] macsec1: left allmulticast mode [ 811.358808][T11018] IPVS: starting estimator thread 0... [ 811.367632][T27305] ip6tnl1: left allmulticast mode [ 811.379737][T27305] ip6tnl2: left allmulticast mode [ 811.391940][T27305] bond1: left promiscuous mode [ 811.443020][T27310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.449994][T27308] IPVS: using max 25 ests per chain, 60000 per kthread [ 811.461061][T27310] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.482799][T27310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.528664][T27313] ip6gre1: entered promiscuous mode [ 811.534449][T27313] ip6gre1: entered allmulticast mode [ 811.545805][T27317] netlink: 'syz.3.6634': attribute type 27 has an invalid length. [ 811.555830][T27307] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20000 [ 811.722504][T27317] ip6tnl1: left allmulticast mode [ 811.729462][ T5928] lo speed is unknown, defaulting to 1000 [ 811.736009][ T5928] syz2: Port: 1 Link DOWN [ 811.877592][T27321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.914203][T27321] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.003847][T27321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.047853][ T5928] lo speed is unknown, defaulting to 1000 [ 812.069973][ T5928] syz2: Port: 1 Link ACTIVE [ 812.074188][T26697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.110979][T26697] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.118908][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.407085][T27340] sctp: [Deprecated]: syz.1.6640 (pid 27340) Use of int in max_burst socket option. [ 812.407085][T27340] Use struct sctp_assoc_value instead [ 812.609486][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.852387][T27350] No such timeout policy "syz0" [ 813.007667][T27310] lo speed is unknown, defaulting to 1000 [ 813.063130][T27355] ip6tnl5: entered allmulticast mode [ 813.138141][T27358] __nla_validate_parse: 3 callbacks suppressed [ 813.138163][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6645'. [ 813.146480][T27360] No such timeout policy "syz0" [ 813.476536][T27373] sctp: [Deprecated]: syz.0.6651 (pid 27373) Use of int in max_burst socket option. [ 813.476536][T27373] Use struct sctp_assoc_value instead [ 813.541132][T27374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6650'. [ 813.650838][T27317] lo speed is unknown, defaulting to 1000 [ 813.658716][T27371] siw: device registration error -23 [ 813.921214][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6653'. [ 814.039544][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 814.047784][ C1] lec:lec_tx_timeout: lec0 [ 814.234296][T27386] No such timeout policy "syz0" [ 814.465665][T27390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6656'. [ 814.624921][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6659'. [ 814.872979][T27410] xt_hashlimit: size too large, truncated to 1048576 [ 814.905743][T27410] xt_hashlimit: max too large, truncated to 1048576 [ 815.039584][T27410] ipt_REJECT: TCP_RESET invalid for non-tcp [ 815.100207][T27421] netlink: 'syz.3.6666': attribute type 13 has an invalid length. [ 815.229647][T27428] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6667'. [ 815.366041][T11018] lo speed is unknown, defaulting to 1000 [ 815.382205][T11018] syz2: Port: 1 Link DOWN [ 815.522555][T27403] lo speed is unknown, defaulting to 1000 [ 815.545564][T27438] netlink: 'syz.4.6669': attribute type 27 has an invalid length. [ 815.633789][T27441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6670'. [ 815.768105][T27439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.792102][T27439] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.834150][T27439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.061111][ C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 816.061134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.073158][T27447] netlink: 'syz.0.6671': attribute type 9 has an invalid length. [ 816.452720][T27454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6674'. [ 816.524896][T27458] netlink: 'syz.0.6676': attribute type 13 has an invalid length. [ 816.703647][T27467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6675'. [ 816.823395][T27472] netlink: 'syz.3.6679': attribute type 3 has an invalid length. [ 817.100622][T27444] lo speed is unknown, defaulting to 1000 [ 817.207826][T27481] No such timeout policy "syz0" [ 817.288413][T27484] netlink: 'syz.2.6683': attribute type 1 has an invalid length. [ 817.339506][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 817.362138][T27484] bond1: entered promiscuous mode [ 817.367935][T27484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.536701][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6686'. [ 817.542838][T27490] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 817.578432][T27490] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 817.599628][T27490] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 818.230413][T27510] __nla_validate_parse: 1 callbacks suppressed [ 818.230437][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6689'. [ 818.468503][T27519] netlink: 'syz.1.6694': attribute type 13 has an invalid length. [ 818.783050][T27540] netlink: 'syz.4.6699': attribute type 1 has an invalid length. [ 818.997923][T27548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6701'. [ 819.005153][T27540] bond2: entered promiscuous mode [ 819.007630][T27548] netlink: 'syz.3.6701': attribute type 7 has an invalid length. [ 819.023545][T27548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6701'. [ 819.027403][T27540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 819.063004][T27548] erspan0: entered promiscuous mode [ 819.080277][T27548] gretap0: entered promiscuous mode [ 819.087336][T27548] debugfs: 'hsr1' already exists in 'hsr' [ 819.093436][T27548] Cannot create hsr debugfs directory [ 819.099659][T27548] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 819.110539][T27548] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 819.220910][T27551] netlink: 'syz.1.6702': attribute type 27 has an invalid length. [ 819.247071][T27551] ip6tnl4: left allmulticast mode [ 819.260001][T27551] bond3: left promiscuous mode [ 819.271507][T27551] ip6tnl5: left allmulticast mode [ 819.416662][T27520] lec:lec_atm_close: lec0: Shut down! [ 819.422424][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6706'. [ 819.475505][T27557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.478832][T27567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 819.568445][T27557] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.652752][T27557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.059600][ T5161] Bluetooth: hci1: command 0x0405 tx timeout [ 820.123076][T27582] netlink: 'syz.3.6712': attribute type 13 has an invalid length. [ 820.127382][T27575] syzkaller0: entered promiscuous mode [ 820.136599][T27581] xt_hashlimit: size too large, truncated to 1048576 [ 820.136990][T27575] syzkaller0: entered allmulticast mode [ 820.151982][T27581] xt_hashlimit: max too large, truncated to 1048576 [ 820.234077][T27581] ipt_REJECT: TCP_RESET invalid for non-tcp [ 820.351531][T27587] netlink: 'syz.2.6713': attribute type 1 has an invalid length. [ 820.561475][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6714'. [ 820.572103][T27591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6714'. [ 824.146656][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.402033][T27587] bond2: entered promiscuous mode [ 824.407758][T27587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.418347][T27568] lo speed is unknown, defaulting to 1000 [ 824.448414][T27591] erspan0: entered promiscuous mode [ 824.471419][T27591] gretap0: entered promiscuous mode [ 824.493554][T27591] debugfs: 'hsr1' already exists in 'hsr' [ 824.500542][T27591] Cannot create hsr debugfs directory [ 824.506633][T27591] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 824.517110][T27591] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 824.651901][T27600] validate_nla: 1 callbacks suppressed [ 824.651922][T27600] netlink: 'syz.4.6716': attribute type 13 has an invalid length. [ 824.702174][T27600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6716'. [ 824.939280][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 824.947759][ C1] lec:lec_tx_timeout: lec0 [ 825.014575][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6716'. [ 825.096617][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6720'. [ 825.286903][T27629] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 825.694763][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6727'. [ 825.863632][T27642] syzkaller0: entered promiscuous mode [ 825.876210][T27642] syzkaller0: entered allmulticast mode [ 825.906586][T27650] netlink: 'syz.1.6730': attribute type 27 has an invalid length. [ 825.993527][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6733'. [ 826.018119][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6732'. [ 826.031656][T27657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6732'. [ 827.466294][T27676] netlink: 'syz.2.6737': attribute type 17 has an invalid length. [ 830.316079][T27653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.324300][T27653] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.334330][T27653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.443306][T27676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.454963][T27676] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.474789][T27676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.500122][T27682] netlink: 'syz.0.6739': attribute type 21 has an invalid length. [ 830.513058][T27682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6739'. [ 830.516350][T27686] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6738'. [ 830.537348][T27682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6739'. [ 830.577390][T27685] netlink: 'syz.0.6739': attribute type 21 has an invalid length. [ 830.617848][T27682] netlink: 'syz.0.6739': attribute type 21 has an invalid length. [ 830.653789][T27682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6739'. [ 830.668436][T27685] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6739'. [ 830.688908][T27683] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 830.704959][T27695] No such timeout policy "syz0" [ 830.722546][T27689] bond3: Removing last arp target with arp_interval on [ 831.013678][T27705] syzkaller0: entered promiscuous mode [ 831.025955][T27705] syzkaller0: entered allmulticast mode [ 831.070319][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6745'. [ 831.202447][T27688] lo speed is unknown, defaulting to 1000 [ 831.380815][T27712] syzkaller0: entered promiscuous mode [ 831.397949][T27712] syzkaller0: entered allmulticast mode [ 836.195419][T27758] netlink: 'syz.2.6759': attribute type 1 has an invalid length. [ 836.274022][T27758] bond3: entered promiscuous mode [ 836.288224][T27758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 836.297160][T27730] lo speed is unknown, defaulting to 1000 [ 836.306825][T27762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6760'. [ 836.542538][T27767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6761'. [ 836.561939][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6761'. [ 836.920893][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6764'. [ 837.349968][T27789] No such timeout policy "syz0" [ 837.799785][T27797] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6770'. [ 837.984841][T27802] No such timeout policy "syz0" [ 838.171563][T27809] netlink: 'syz.2.6775': attribute type 7 has an invalid length. [ 838.179900][T27809] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.6775'. [ 838.229782][T11021] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.019756][T11006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.810823][T27776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.979825][T11006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.056251][T27825] No such timeout policy "syz0" [ 840.067802][T27824] netlink: 'syz.1.6778': attribute type 1 has an invalid length. [ 840.206648][T27824] bond4: entered promiscuous mode [ 840.238954][T27824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 840.440630][T27840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6784'. [ 840.779503][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.960665][T27854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6787'. [ 840.986012][T27854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6787'. [ 841.017598][T27854] dummy0: entered promiscuous mode [ 841.041017][T27854] team0: entered promiscuous mode [ 841.059291][T27854] team_slave_0: entered promiscuous mode [ 841.072907][T27854] team_slave_1: entered promiscuous mode [ 841.083865][T27859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6789'. [ 841.103766][T27854] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 841.314210][T27867] netlink: 'syz.0.6793': attribute type 27 has an invalid length. [ 841.407986][T27871] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 841.473663][T27867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.489949][T27880] Bluetooth: MGMT ver 1.23 [ 841.543391][T27867] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.644586][T27867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.835155][T27880] bond3: (slave gretap1): making interface the new active one [ 841.877657][T27880] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 841.909445][T27893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6795'. [ 842.106086][T27901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6799'. [ 842.127964][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'. [ 842.138924][T27906] netlink: 'syz.4.6800': attribute type 4 has an invalid length. [ 842.167441][T26693] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.172355][T27906] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6800'. [ 842.199420][T26693] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.268902][T26693] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.295314][T26693] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.520072][T27921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6803'. [ 842.578707][T27924] ip6tnl6: entered allmulticast mode [ 842.660113][T27917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6803'. [ 842.885145][T27882] lo speed is unknown, defaulting to 1000 [ 842.983117][T26693] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 843.004702][T26693] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 843.015176][T11018] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 843.564609][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6813'. [ 843.619608][T11018] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 843.770332][T27952] netlink: 'syz.2.6816': attribute type 3 has an invalid length. [ 843.829527][T11018] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 843.838868][T27913] lo speed is unknown, defaulting to 1000 [ 843.868856][T27921] lo speed is unknown, defaulting to 1000 [ 844.643375][T27972] xt_hashlimit: size too large, truncated to 1048576 [ 844.661273][T27972] xt_hashlimit: max too large, truncated to 1048576 [ 844.731753][T27972] ipt_REJECT: TCP_RESET invalid for non-tcp [ 845.191204][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6825'. [ 845.355770][T27986] netlink: 'syz.1.6827': attribute type 5 has an invalid length. [ 845.650437][T27999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6829'. [ 845.672783][T27999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6829'. [ 845.798394][T27970] lo speed is unknown, defaulting to 1000 [ 845.909749][T28010] netlink: 'syz.2.6834': attribute type 1 has an invalid length. [ 845.933871][T11006] IPVS: starting estimator thread 0... [ 845.940194][T28010] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 845.976575][T28015] netlink: 'syz.1.6835': attribute type 7 has an invalid length. [ 846.060310][T28012] IPVS: using max 27 ests per chain, 64800 per kthread [ 846.613046][T27973] lo speed is unknown, defaulting to 1000 [ 846.779622][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 847.083690][T28033] __nla_validate_parse: 5 callbacks suppressed [ 847.083713][T28033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6842'. [ 847.137591][T28034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6842'. [ 847.235843][T28036] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6843'. [ 847.274080][T28036] 0ªX¹¦À: renamed from caif0 [ 847.294017][T28036] 0ªX¹¦À: entered allmulticast mode [ 847.302450][T28036] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 847.331414][T28035] delete_channel: no stack [ 847.403550][T28045] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 847.564710][T28055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6847'. [ 847.608472][T28054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6848'. [ 847.625364][T28055] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6847'. [ 847.645759][T28054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6848'. [ 847.978272][T28069] syz_tun: entered promiscuous mode [ 848.035487][T28064] syz_tun: left promiscuous mode [ 848.205312][T28083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6856'. [ 848.219035][T28083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6856'. [ 848.379350][T28088] IPv6: addrconf: prefix option has invalid lifetime [ 848.478646][T28090] No such timeout policy "syz0" [ 848.599903][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6861'. [ 848.867332][T28104] xt_hashlimit: size too large, truncated to 1048576 [ 848.874685][T28104] xt_hashlimit: max too large, truncated to 1048576 [ 848.954107][T28104] ipt_REJECT: TCP_RESET invalid for non-tcp [ 849.183158][T28115] netlink: 'syz.3.6869': attribute type 10 has an invalid length. [ 849.229696][T28115] team0: Port device dummy0 added [ 849.865733][T28145] tipc: Enabling of bearer rejected, failed to enable media [ 850.075153][T28125] lo speed is unknown, defaulting to 1000 [ 850.301568][T28153] netlink: 'syz.0.6880': attribute type 13 has an invalid length. [ 850.669661][T28162] xt_hashlimit: size too large, truncated to 1048576 [ 850.681576][T28162] xt_hashlimit: max too large, truncated to 1048576 [ 850.790432][T28162] ipt_REJECT: TCP_RESET invalid for non-tcp [ 851.416922][T28188] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 852.106800][T28187] lo speed is unknown, defaulting to 1000 [ 852.598917][T28221] __nla_validate_parse: 8 callbacks suppressed [ 852.598934][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6898'. [ 852.631843][T28221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6898'. [ 852.827432][T28225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6902'. [ 853.077161][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6903'. [ 853.524473][T28254] No such timeout policy "syz0" [ 853.632669][T28233] lo speed is unknown, defaulting to 1000 [ 853.640462][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6910'. [ 853.674675][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6909'. [ 853.726578][T28258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6909'. [ 854.472398][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6921'. [ 854.513942][T28284] sctp: [Deprecated]: syz.1.6918 (pid 28284) Use of int in max_burst socket option. [ 854.513942][T28284] Use struct sctp_assoc_value instead [ 854.536176][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6923'. [ 854.577488][T28299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6923'. [ 854.859812][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 854.904755][T28303] ip6_vti0: mtu less than device minimum [ 855.596128][T28337] syzkaller0: entered promiscuous mode [ 855.611794][T28337] syzkaller0: entered allmulticast mode [ 855.817272][T28349] siw: device registration error -23 [ 859.988500][T28371] __nla_validate_parse: 5 callbacks suppressed [ 859.988522][T28371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6943'. [ 860.187450][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6948'. [ 860.206453][T28387] ip6tnl2: entered allmulticast mode [ 860.232472][T28388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6948'. [ 860.256354][T28391] netlink: 'syz.4.6950': attribute type 27 has an invalid length. [ 860.355404][T28396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6952'. [ 860.366532][T28391] 0ªX¹¦À: left allmulticast mode [ 860.366591][T28398] xt_hashlimit: size too large, truncated to 1048576 [ 860.379440][T28398] xt_hashlimit: max too large, truncated to 1048576 [ 860.386392][T28391] bond2: left promiscuous mode [ 860.430067][T28398] ipt_REJECT: TCP_RESET invalid for non-tcp [ 860.457815][T28399] raw_sendmsg: syz.1.6951 forgot to set AF_INET. Fix it! [ 860.501578][T28394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.550052][T28394] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.635693][T28394] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 860.809024][T28412] netlink: 'syz.3.6956': attribute type 13 has an invalid length. [ 860.896258][T28409] syzkaller0: entered promiscuous mode [ 860.905620][T28409] syzkaller0: entered allmulticast mode [ 861.197502][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6960'. [ 864.993315][ T8236] lec:lec_start_xmit: lec0:No lecd attached [ 865.275983][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6963'. [ 865.300241][T28439] xt_hashlimit: size too large, truncated to 1048576 [ 865.319753][T28439] xt_hashlimit: max too large, truncated to 1048576 [ 865.330899][T28435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6963'. [ 865.405130][T28439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 865.559722][T28402] lo speed is unknown, defaulting to 1000 [ 866.011871][T28470] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 866.231321][T28482] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6973'. [ 866.457212][T28476] syzkaller0: entered promiscuous mode [ 866.471385][T28476] syzkaller0: entered allmulticast mode [ 870.009041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 870.017230][ C1] lec:lec_tx_timeout: lec0 [ 870.223861][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 870.239720][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 870.799390][T28455] lo speed is unknown, defaulting to 1000 [ 870.859417][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 870.949543][T28496] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6979'. [ 871.085938][T28501] netlink: 'syz.1.6981': attribute type 16 has an invalid length. [ 871.113292][T28501] ipip0: entered promiscuous mode [ 871.192716][T28480] lo speed is unknown, defaulting to 1000 [ 871.294503][T28511] netlink: 'syz.4.6983': attribute type 1 has an invalid length. [ 871.587034][T28511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 871.707891][T28520] siw: device registration error -23 [ 871.711296][T28515] vlan3: entered allmulticast mode [ 871.718744][T28515] bond4: entered allmulticast mode [ 871.724746][T28520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6985'. [ 871.750219][T28516] bond4: (slave gretap2): making interface the new active one [ 871.757954][T28516] gretap2: entered allmulticast mode [ 871.767239][T28516] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 871.943398][T28522] netlink: zone id is out of range [ 871.959835][T28522] netlink: zone id is out of range [ 871.972036][T28522] netlink: zone id is out of range [ 871.983252][T28524] No such timeout policy "syz0" [ 872.000811][T28522] netlink: zone id is out of range [ 872.031620][T28522] netlink: zone id is out of range [ 872.078350][T28522] netlink: zone id is out of range [ 872.141468][T28522] netlink: zone id is out of range [ 872.172158][T28522] netlink: zone id is out of range [ 872.208637][T28522] netlink: zone id is out of range [ 872.219028][T28522] netlink: zone id is out of range [ 872.651116][T28551] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 872.811795][T28534] lo speed is unknown, defaulting to 1000 [ 873.212234][T28573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7001'. [ 873.421633][T28577] netlink: 'syz.2.7002': attribute type 1 has an invalid length. [ 873.458757][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7004'. [ 874.351837][T28600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7006'. [ 874.858498][T28626] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 874.863974][T28628] netlink: 'syz.2.7013': attribute type 13 has an invalid length. [ 875.042448][T28640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'. [ 875.220983][T28650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7017'. [ 875.297049][T28654] netlink: 'syz.4.7019': attribute type 1 has an invalid length. [ 875.318831][T28654] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7019'. [ 875.356688][T28654] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7019'. [ 875.378370][T28654] netlink: 'syz.4.7019': attribute type 1 has an invalid length. [ 875.387591][T28654] netlink: 634 bytes leftover after parsing attributes in process `syz.4.7019'. [ 875.670217][T28625] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 875.877837][T28648] lo speed is unknown, defaulting to 1000 [ 875.979208][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 875.987438][ C1] lec:lec_tx_timeout: lec0 [ 876.072406][T28677] netlink: 'syz.2.7027': attribute type 13 has an invalid length. [ 876.135649][T28675] syzkaller0: entered promiscuous mode [ 876.151769][T28675] syzkaller0: entered allmulticast mode [ 876.860201][T28656] Bluetooth: hci3: command 0x0401 tx timeout [ 876.938195][T28699] No such timeout policy "syz0" [ 877.133144][T28703] __nla_validate_parse: 1 callbacks suppressed [ 877.133165][T28703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7033'. [ 877.305743][T28693] lo speed is unknown, defaulting to 1000 [ 877.433668][T28656] Bluetooth: hci2: command 0x0406 tx timeout [ 877.434050][T28633] Bluetooth: hci5: command 0x0406 tx timeout [ 877.749092][T28722] siw: device registration error -23 [ 877.758507][T28722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7038'. [ 877.831160][T28719] syzkaller0: entered promiscuous mode [ 877.836813][T28719] syzkaller0: entered allmulticast mode [ 878.034488][ T30] audit: type=1800 audit(1777083299.902:4): pid=28729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7044" name="memory.events" dev="tmpfs" ino=760 res=0 errno=0 [ 878.492516][T28748] netlink: 'syz.3.7049': attribute type 1 has an invalid length. [ 878.557509][T28748] bond4: entered promiscuous mode [ 878.565898][T28748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 878.581352][T28754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7048'. [ 878.629014][T28753] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 878.679993][T28753] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 878.690862][T28753] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 878.959796][T28765] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 879.044569][T28769] syzkaller0: entered promiscuous mode [ 879.061049][T28769] syzkaller0: entered allmulticast mode [ 879.168302][T28775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7057'. [ 879.342978][T28784] xt_hashlimit: size too large, truncated to 1048576 [ 879.408616][T28789] net_ratelimit: 390 callbacks suppressed [ 879.408850][T28790] openvswitch: netlink: Flow actions attr not present in new flow. [ 879.424729][T28789] openvswitch: netlink: Flow actions attr not present in new flow. [ 879.606651][T28798] xt_hashlimit: size too large, truncated to 1048576 [ 879.619499][T28798] xt_hashlimit: max too large, truncated to 1048576 [ 879.683408][T28798] ipt_REJECT: TCP_RESET invalid for non-tcp [ 879.974068][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7069'. [ 880.088384][T28818] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 880.405440][T28827] netlink: 'syz.3.7075': attribute type 13 has an invalid length. [ 880.442827][T28829] sctp: [Deprecated]: syz.4.7074 (pid 28829) Use of int in max_burst socket option. [ 880.442827][T28829] Use struct sctp_assoc_value instead [ 880.755829][T28847] xt_hashlimit: size too large, truncated to 1048576 [ 880.763280][T28847] xt_hashlimit: max too large, truncated to 1048576 [ 880.817659][T28847] ipt_REJECT: TCP_RESET invalid for non-tcp [ 881.316296][T28865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7085'. [ 881.937410][T28877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7091'. [ 881.985863][T28877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7091'. [ 881.997256][T28879] netlink: 'syz.0.7092': attribute type 13 has an invalid length. [ 882.008436][T28877] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7091'. [ 882.154805][T28887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7090'. [ 882.187917][T28887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7090'. [ 882.225543][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7094'. [ 882.323414][T28893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7094'. [ 882.341314][T28890] team1: entered promiscuous mode [ 882.356894][T28890] team1: entered allmulticast mode [ 882.366678][T28897] siw: device registration error -23 [ 882.376089][T28897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7095'. [ 882.377564][T28890] 8021q: adding VLAN 0 to HW filter on device team1 [ 882.554336][T28893] team2: entered promiscuous mode [ 882.562283][T28893] team2: entered allmulticast mode [ 882.572186][T28893] 8021q: adding VLAN 0 to HW filter on device team2 [ 882.717934][T28907] netlink: 268 bytes leftover after parsing attributes in process `syz.0.7098'. [ 882.746077][T28907] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7098'. [ 882.769698][T28907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7098'. [ 882.821801][T28907] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7098'. [ 882.842829][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7100'. [ 883.209935][T28929] No such timeout policy "syz0" [ 883.397474][T28938] netlink: 'syz.0.7109': attribute type 13 has an invalid length. [ 883.450560][T28942] netlink: 'syz.3.7110': attribute type 12 has an invalid length. [ 883.774737][T28961] netlink: 'syz.3.7117': attribute type 7 has an invalid length. [ 883.816021][T28962] netlink: 'syz.0.7116': attribute type 27 has an invalid length. [ 883.964331][T28962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.994325][T28962] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.041711][T28962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.069952][T28974] netlink: 'syz.3.7119': attribute type 1 has an invalid length. [ 884.590501][T28994] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 885.065437][T29012] ip6tnl3: entered allmulticast mode [ 885.073457][T26701] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.097488][T26701] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.106122][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.173218][T28975] lo speed is unknown, defaulting to 1000 [ 885.283864][T29020] team0: entered promiscuous mode [ 885.289915][T29020] team_slave_0: entered promiscuous mode [ 885.296598][T29020] team_slave_1: entered promiscuous mode [ 885.304060][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.312954][T29020] dummy0: entered promiscuous mode [ 885.324465][T29020] bond0: entered promiscuous mode [ 885.331484][T29020] bond_slave_0: entered promiscuous mode [ 885.337893][T29020] bond_slave_1: entered promiscuous mode [ 885.346403][T29020] debugfs: 'hsr2' already exists in 'hsr' [ 885.353745][T29020] Cannot create hsr debugfs directory [ 885.360264][T29020] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 885.371647][T29020] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 885.403984][T29020] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 885.419463][T11001] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.713506][T29028] team0: entered promiscuous mode [ 885.750226][T29028] team_slave_0: entered promiscuous mode [ 885.757999][T29028] team_slave_1: entered promiscuous mode [ 885.773678][T29028] bond0: entered promiscuous mode [ 885.780940][T29028] bond_slave_0: entered promiscuous mode [ 885.787017][T29028] bond_slave_1: entered promiscuous mode [ 885.796396][T29028] debugfs: 'hsr1' already exists in 'hsr' [ 885.803528][T29028] Cannot create hsr debugfs directory [ 885.829753][T29028] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 885.852053][T29028] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 886.146551][T29039] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 886.345685][T29046] netlink: 'syz.4.7140': attribute type 29 has an invalid length. [ 886.913858][T29058] ip6tnl2: entered allmulticast mode [ 887.120030][T29045] lo speed is unknown, defaulting to 1000 [ 887.600354][T29081] No such timeout policy "syz0" [ 887.660077][T19032] Bluetooth: hci3: command 0x0401 tx timeout [ 887.756082][T29083] __nla_validate_parse: 18 callbacks suppressed [ 887.756108][T29083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7153'. [ 887.903252][T29088] netlink: 'syz.1.7155': attribute type 27 has an invalid length. [ 888.024281][T29091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7156'. [ 888.217236][T29106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7158'. [ 888.292206][T29088] bond4: left promiscuous mode [ 888.385347][T29088] ip6tnl6: left allmulticast mode [ 888.412136][T29088] ipip0: left promiscuous mode [ 888.645694][T29089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.692039][T29089] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.742455][T29089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.826977][T29091] ip6gre1: entered promiscuous mode [ 888.832994][T29091] ip6gre1: entered allmulticast mode [ 888.860945][T29100] netlink: 'syz.0.7156': attribute type 6 has an invalid length. [ 888.870390][T29100] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7156'. [ 888.884493][T29107] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 888.915413][T29115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7160'. [ 888.924750][T29107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 888.924784][T29107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 888.952655][ T8018] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.971024][ T8018] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.993295][ T8018] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.021854][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7161'. [ 889.031122][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 889.048918][T26700] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 889.072517][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 889.083089][T26700] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 889.111493][ T8018] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.125869][T29119] No such timeout policy "syz0" [ 889.175123][T29122] No such timeout policy "syz0" [ 889.299702][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7161'. [ 889.489648][T11017] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 889.710130][T29104] lo speed is unknown, defaulting to 1000 [ 889.784502][T29134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7167'. [ 889.809754][T29134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7167'. [ 889.842780][T29138] netlink: 'syz.4.7168': attribute type 1 has an invalid length. [ 889.845581][T29134] team0: entered promiscuous mode [ 889.863343][T29134] team_slave_0: entered promiscuous mode [ 889.870817][T29134] team_slave_1: entered promiscuous mode [ 889.880518][T29134] bond0: entered promiscuous mode [ 889.885924][T29134] bond_slave_0: entered promiscuous mode [ 889.892684][T29134] bond_slave_1: entered promiscuous mode [ 889.901880][T29134] debugfs: 'hsr2' already exists in 'hsr' [ 889.908191][T29134] Cannot create hsr debugfs directory [ 889.917192][T29134] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 889.939043][T29134] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 890.110336][T29144] bond5 (unregistering): Released all slaves [ 890.141180][T11018] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 890.328721][T29152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'. [ 890.364842][T29154] siw: device registration error -23 [ 890.470845][T29158] netlink: 'syz.2.7174': attribute type 13 has an invalid length. [ 890.512588][T29160] No such timeout policy "syz0" [ 890.562818][T29164] netlink: 'syz.4.7176': attribute type 3 has an invalid length. [ 890.749654][T29164] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 890.834190][T29173] xt_hashlimit: size too large, truncated to 1048576 [ 890.865426][T29173] xt_hashlimit: max too large, truncated to 1048576 [ 890.925585][T29173] ipt_REJECT: TCP_RESET invalid for non-tcp [ 890.991867][T29175] netlink: 'syz.2.7179': attribute type 1 has an invalid length. [ 891.042698][T29175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 891.073666][T29175] vlan3: entered allmulticast mode [ 891.078986][T29175] bond4: entered allmulticast mode [ 891.113119][T29175] bond4: (slave geneve2): making interface the new active one [ 891.121464][T29175] geneve2: entered allmulticast mode [ 891.129342][T29175] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 891.142396][ T8018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.195120][ T8018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.213633][ T8018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.232127][ T8018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.434886][T29192] team0: entered promiscuous mode [ 891.449486][T29192] team_slave_0: entered promiscuous mode [ 891.472110][T29192] bond0: entered promiscuous mode [ 891.486119][T29199] No such timeout policy "syz0" [ 891.487924][T29192] bond_slave_0: entered promiscuous mode [ 891.509645][T29192] bond_slave_1: entered promiscuous mode [ 891.524942][T29192] debugfs: 'hsr1' already exists in 'hsr' [ 891.532848][T29192] Cannot create hsr debugfs directory [ 891.538546][T29192] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 891.552594][T29192] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 891.565734][T29192] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 891.713003][T29207] FAULT_INJECTION: forcing a failure. [ 891.713003][T29207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.726936][T29207] CPU: 1 UID: 0 PID: 29207 Comm: syz.2.7191 Not tainted syzkaller #0 PREEMPT(full) [ 891.726967][T29207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.726980][T29207] Call Trace: [ 891.726990][T29207] [ 891.726999][T29207] dump_stack_lvl+0xe8/0x150 [ 891.727038][T29207] should_fail_ex+0x412/0x560 [ 891.727078][T29207] _copy_from_iter+0x1d3/0x1670 [ 891.727104][T29207] ? rcu_is_watching+0x15/0xb0 [ 891.727134][T29207] ? __pfx__copy_from_iter+0x10/0x10 [ 891.727165][T29207] ? netlink_sendmsg+0x650/0xb40 [ 891.727186][T29207] ? skb_put+0x11b/0x210 [ 891.727211][T29207] netlink_sendmsg+0x6c0/0xb40 [ 891.727244][T29207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.727270][T29207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 891.727294][T29207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 891.727324][T29207] ____sys_sendmsg+0x972/0x9f0 [ 891.727348][T29207] ? __might_fault+0xaf/0x130 [ 891.727379][T29207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.727414][T29207] ? import_iovec+0x73/0xa0 [ 891.727452][T29207] ___sys_sendmsg+0x2a5/0x360 [ 891.727476][T29207] ? __lock_acquire+0x6b5/0x2cf0 [ 891.727513][T29207] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.727576][T29207] ? __fget_files+0x2a/0x420 [ 891.727597][T29207] ? __fget_files+0x3a0/0x420 [ 891.727629][T29207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 891.727656][T29207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 891.727686][T29207] ? __pfx_ksys_write+0x10/0x10 [ 891.727720][T29207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.727743][T29207] do_syscall_64+0x15f/0xf80 [ 891.727777][T29207] ? trace_irq_disable+0x3b/0x140 [ 891.727804][T29207] ? clear_bhb_loop+0x40/0x90 [ 891.727829][T29207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.727850][T29207] RIP: 0033:0x7f652c19cdd9 [ 891.727870][T29207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.727888][T29207] RSP: 002b:00007f652d092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.727911][T29207] RAX: ffffffffffffffda RBX: 00007f652c415fa0 RCX: 00007f652c19cdd9 [ 891.727927][T29207] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 891.727941][T29207] RBP: 00007f652d092090 R08: 0000000000000000 R09: 0000000000000000 [ 891.727954][T29207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.727966][T29207] R13: 00007f652c416038 R14: 00007f652c415fa0 R15: 00007ffd2b80d888 [ 891.728000][T29207] [ 892.007639][T29209] netlink: 'syz.3.7190': attribute type 13 has an invalid length. [ 892.257142][T29218] netlink: 'syz.2.7192': attribute type 1 has an invalid length. [ 892.343803][T29218] bond5: entered promiscuous mode [ 892.371041][T29218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 892.420874][T29222] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 892.490737][T29222] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 892.503709][T29222] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 892.532541][T29226] netlink: 'syz.1.7194': attribute type 6 has an invalid length. [ 892.553004][T29226] netlink: 'syz.1.7194': attribute type 6 has an invalid length. [ 892.572802][T29226] netlink: 'syz.1.7194': attribute type 10 has an invalid length. [ 892.591918][T29226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.602366][T29226] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 892.635567][T29226] batadv0: entered promiscuous mode [ 892.643963][T29226] batadv0: entered allmulticast mode [ 892.652650][T29226] bond0: (slave batadv0): Releasing backup interface [ 892.664282][T29226] bridge0: port 3(batadv0) entered blocking state [ 892.675672][T29226] bridge0: port 3(batadv0) entered disabled state [ 892.821637][T29236] xt_hashlimit: size too large, truncated to 1048576 [ 892.823272][T29238] __nla_validate_parse: 7 callbacks suppressed [ 892.823290][T29238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7196'. [ 892.840042][T29236] xt_hashlimit: max too large, truncated to 1048576 [ 892.935304][T29236] ipt_REJECT: TCP_RESET invalid for non-tcp [ 892.968611][T29242] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 893.029490][ T8018] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 893.040686][ T8018] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 893.114514][T29248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7201'. [ 893.232927][T29244] vlan3: left allmulticast mode [ 893.239851][T29244] bond4: left allmulticast mode [ 893.245350][T29244] gretap2: left allmulticast mode [ 893.359401][T29259] siw: device registration error -23 [ 893.395971][T29259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7205'. [ 893.538018][T29263] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7207'. [ 893.562125][T29263] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 893.594592][T29265] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7208'. [ 893.661662][T29265] vti0: entered promiscuous mode [ 893.673993][T29265] vti0: entered allmulticast mode [ 893.677466][T29270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7207'. [ 893.739070][T29272] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 894.063363][T29289] No such timeout policy "syz0" [ 894.102336][T29291] validate_nla: 2 callbacks suppressed [ 894.102357][T29291] netlink: 'syz.0.7217': attribute type 1 has an invalid length. [ 894.232242][T29299] siw: device registration error -23 [ 894.251070][T29299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7220'. [ 894.294712][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 894.386168][T29291] bond3: entered promiscuous mode [ 894.393051][T29291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 894.503074][T29310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7224'. [ 894.876312][T29334] No such timeout policy "syz0" [ 895.040571][T29343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7232'. [ 895.278592][T29351] siw: device registration error -23 [ 895.466790][T29360] FAULT_INJECTION: forcing a failure. [ 895.466790][T29360] name failslab, interval 1, probability 0, space 0, times 0 [ 895.482292][T29360] CPU: 1 UID: 0 PID: 29360 Comm: syz.1.7239 Not tainted syzkaller #0 PREEMPT(full) [ 895.482325][T29360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.482339][T29360] Call Trace: [ 895.482362][T29360] [ 895.482371][T29360] dump_stack_lvl+0xe8/0x150 [ 895.482411][T29360] should_fail_ex+0x412/0x560 [ 895.482450][T29360] should_failslab+0xa8/0x100 [ 895.482478][T29360] ? skb_clone+0x212/0x3a0 [ 895.482517][T29360] kmem_cache_alloc_noprof+0x87/0x650 [ 895.482543][T29360] ? __netlink_lookup+0xc6/0x8b0 [ 895.482574][T29360] skb_clone+0x212/0x3a0 [ 895.482603][T29360] __netlink_deliver_tap+0x404/0x850 [ 895.482638][T29360] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.482663][T29360] netlink_deliver_tap+0x19c/0x1b0 [ 895.482701][T29360] netlink_unicast+0x730/0x8e0 [ 895.482744][T29360] netlink_sendmsg+0x813/0xb40 [ 895.482778][T29360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.482805][T29360] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.482830][T29360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.482859][T29360] ____sys_sendmsg+0x972/0x9f0 [ 895.482883][T29360] ? __might_fault+0xaf/0x130 [ 895.482914][T29360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.482965][T29360] ? import_iovec+0x73/0xa0 [ 895.482999][T29360] ___sys_sendmsg+0x2a5/0x360 [ 895.483022][T29360] ? __lock_acquire+0x6b5/0x2cf0 [ 895.483070][T29360] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.483142][T29360] ? __fget_files+0x2a/0x420 [ 895.483163][T29360] ? __fget_files+0x3a0/0x420 [ 895.483199][T29360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.483240][T29360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.483276][T29360] ? __pfx_ksys_write+0x10/0x10 [ 895.483313][T29360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.483337][T29360] do_syscall_64+0x15f/0xf80 [ 895.483365][T29360] ? trace_irq_disable+0x3b/0x140 [ 895.483393][T29360] ? clear_bhb_loop+0x40/0x90 [ 895.483420][T29360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.483441][T29360] RIP: 0033:0x7f932fd9cdd9 [ 895.483461][T29360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.483480][T29360] RSP: 002b:00007f9330c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.483502][T29360] RAX: ffffffffffffffda RBX: 00007f9330015fa0 RCX: 00007f932fd9cdd9 [ 895.483518][T29360] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 895.483532][T29360] RBP: 00007f9330c72090 R08: 0000000000000000 R09: 0000000000000000 [ 895.483545][T29360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.483558][T29360] R13: 00007f9330016038 R14: 00007f9330015fa0 R15: 00007ffd6790a068 [ 895.483594][T29360] [ 895.805534][T29362] netlink: 'syz.2.7241': attribute type 13 has an invalid length. [ 895.912474][T29366] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 895.943966][ T8018] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.954466][ T8018] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.965549][ T8018] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.976340][ T8018] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.069808][T29376] xt_hashlimit: size too large, truncated to 1048576 [ 896.913386][T29401] netlink: 'syz.4.7252': attribute type 1 has an invalid length. [ 896.986825][T29401] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 897.028381][T29401] veth5: entered promiscuous mode [ 897.038523][T29401] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 897.082524][T26701] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 897.107905][T29401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 897.217392][T29412] syzkaller0: entered promiscuous mode [ 897.223377][T29412] syzkaller0: entered allmulticast mode [ 897.289783][T26697] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 898.911488][T29369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.138710][T29445] x_tables: ip6_tables: icmp6.0 match: invalid size 8 (kernel) != (user) 48 [ 899.167848][T29447] __nla_validate_parse: 6 callbacks suppressed [ 899.167872][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7267'. [ 899.204358][T29449] syzkaller0: entered promiscuous mode [ 899.217432][T29449] syzkaller0: entered allmulticast mode [ 899.305404][T29453] openvswitch: netlink: Key type 314 is out of range max 32 [ 899.445962][T29459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7267'. [ 899.546086][T29464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7273'. [ 900.523928][T29493] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7281'. [ 900.726225][T29496] syzkaller0: entered promiscuous mode [ 900.742529][T29496] syzkaller0: entered allmulticast mode [ 900.872774][T29500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7285'. [ 900.906933][T29500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7285'. [ 901.321733][T29513] netlink: 'syz.4.7289': attribute type 1 has an invalid length. [ 901.438740][T29513] bond6: entered promiscuous mode [ 901.466478][T29513] 8021q: adding VLAN 0 to HW filter on device bond6 [ 901.556999][T29515] bond6: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 901.594338][T29515] bond6: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 901.611014][T29515] bond6: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 902.196871][T29538] syzkaller0: entered promiscuous mode [ 902.209545][T29538] syzkaller0: entered allmulticast mode [ 902.641378][T29552] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7301'. [ 903.027814][ T5161] Bluetooth: hci0: command 0x0406 tx timeout [ 903.203986][T29571] netlink: 'syz.1.7307': attribute type 1 has an invalid length. [ 903.212268][T29571] netlink: 'syz.1.7307': attribute type 4 has an invalid length. [ 903.226678][T29571] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7307'. [ 903.354311][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 903.535016][T29585] netlink: 'syz.4.7312': attribute type 27 has an invalid length. [ 903.561055][T29577] bridge_slave_0 (unregistering): left allmulticast mode [ 903.584769][T29577] bridge_slave_0 (unregistering): left promiscuous mode [ 903.605236][T29577] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.637837][T29585] veth5: left promiscuous mode [ 903.654269][T29585] bond6: left promiscuous mode [ 903.756793][T29587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.773173][T29595] netlink: 'syz.2.7313': attribute type 27 has an invalid length. [ 903.774563][T29587] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.811620][T29587] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 903.885362][T29595] team_slave_1: left allmulticast mode [ 903.916391][T29595] ip6tnl1: left allmulticast mode [ 903.930947][T29595] ip6gre1: left promiscuous mode [ 903.943608][T29595] ip6gre1: left allmulticast mode [ 903.964251][T29595] bond1: left promiscuous mode [ 903.990905][T29595] bond2: left promiscuous mode [ 904.002959][T29595] bond3: left promiscuous mode [ 904.018640][T29595] ip6tnl2: left allmulticast mode [ 904.046929][T29595] vlan3: left allmulticast mode [ 904.071832][T29595] bond4: left allmulticast mode [ 904.077833][T29601] xt_hashlimit: size too large, truncated to 1048576 [ 904.110979][T29601] xt_hashlimit: max too large, truncated to 1048576 [ 904.128952][T29595] geneve2: left allmulticast mode [ 904.183267][T29595] bond5: left promiscuous mode [ 904.222217][T29601] ipt_REJECT: TCP_RESET invalid for non-tcp [ 904.688091][T29597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.778076][T29597] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.891701][T29597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.368075][T29626] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7321'. [ 905.720992][T29598] lo speed is unknown, defaulting to 1000 [ 905.838743][T29618] lec:lec_atm_close: lec0: Shut down! [ 905.988575][T29640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7326'. [ 906.040617][T29640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7326'. [ 906.321018][T29592] lo speed is unknown, defaulting to 1000 [ 906.464281][T29654] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 906.578760][T29661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7329'. [ 906.678886][T29654] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20003 [ 906.692826][T29654] netlink: 'syz.1.7329': attribute type 16 has an invalid length. [ 906.729050][T29654] netlink: 'syz.1.7329': attribute type 17 has an invalid length. [ 907.044355][T29667] ip6tnl4: entered allmulticast mode [ 907.062418][T26696] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 907.095254][T26696] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 907.104003][T11002] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 907.230420][ T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 907.307340][T29673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7334'. [ 907.567113][T29682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7336'. [ 907.673184][T29686] xt_hashlimit: size too large, truncated to 1048576 [ 907.699844][T29686] xt_hashlimit: max too large, truncated to 1048576 [ 907.809249][T29686] ipt_REJECT: TCP_RESET invalid for non-tcp [ 907.901023][ T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 908.088011][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7338'. [ 908.268377][T29705] netlink: 'syz.0.7342': attribute type 1 has an invalid length. [ 908.272346][T29691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7338'. [ 908.355471][T29693] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7338'. [ 908.370060][T29705] bond5: entered promiscuous mode [ 908.377089][T29705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 908.433533][T29708] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 908.473659][T29708] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 908.485529][T29708] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 908.557051][T29711] netlink: 'syz.1.7343': attribute type 13 has an invalid length. [ 908.624923][T29694] lec:lec_atm_close: lec0: Shut down! [ 908.814268][T29718] geneve2: entered promiscuous mode [ 908.829780][T29718] geneve2: entered allmulticast mode [ 909.162207][T29742] netlink: 'syz.3.7349': attribute type 13 has an invalid length. [ 909.284488][T29746] xt_hashlimit: size too large, truncated to 1048576 [ 909.314088][T29746] xt_hashlimit: max too large, truncated to 1048576 [ 909.388345][T29753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7353'. [ 909.423373][T29753] netlink: 'syz.0.7353': attribute type 7 has an invalid length. [ 909.457082][T29746] ipt_REJECT: TCP_RESET invalid for non-tcp [ 909.499322][T29755] lo: entered allmulticast mode [ 910.067282][T29766] xt_CT: No such helper "syz1" [ 910.208955][T29751] lo: left allmulticast mode [ 910.656052][T29797] __nla_validate_parse: 3 callbacks suppressed [ 910.656075][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7365'. [ 910.688578][T29797] netlink: 'syz.1.7365': attribute type 7 has an invalid length. [ 910.706355][T29797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7365'. [ 910.816947][T29803] xt_hashlimit: size too large, truncated to 1048576 [ 910.825508][T29803] xt_hashlimit: max too large, truncated to 1048576 [ 910.857701][T29803] ipt_REJECT: TCP_RESET invalid for non-tcp [ 911.368674][T29830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7377'. [ 911.378817][T29830] netlink: 'syz.3.7377': attribute type 7 has an invalid length. [ 911.387416][T29830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7377'. [ 911.921822][T29848] No such timeout policy "syz0" [ 912.383746][T29869] IPv6: NLM_F_CREATE should be specified when creating new route [ 912.630838][T29874] netlink: 'syz.0.7393': attribute type 1 has an invalid length. [ 912.646783][T29874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7393'. [ 913.138849][T26701] tipc: Subscription rejected, illegal request [ 913.979409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 913.987696][ C1] lec:lec_tx_timeout: lec0 [ 916.852158][T29880] tipc: Started in network mode [ 916.857079][T29880] tipc: Node identity 4e4f7a66d84e, cluster identity 4711 [ 916.864687][T29880] tipc: Enabled bearer , priority 0 [ 916.871799][T29881] syzkaller0: entered promiscuous mode [ 916.880468][T29881] syzkaller0: entered allmulticast mode [ 916.944952][T29881] tipc: Resetting bearer [ 917.027451][T29881] tipc: Disabling bearer [ 917.300815][T29921] syzkaller0: entered promiscuous mode [ 917.315717][T29921] syzkaller0: entered allmulticast mode [ 917.669621][T29905] lo speed is unknown, defaulting to 1000 [ 917.743978][T29930] syzkaller0: entered promiscuous mode [ 917.750106][T29930] syzkaller0: entered allmulticast mode [ 918.388015][T29942] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7417'. [ 923.012633][T29974] xt_hashlimit: size too large, truncated to 1048576 [ 923.038918][T29974] xt_hashlimit: max too large, truncated to 1048576 [ 923.117951][T29977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7428'. [ 923.131884][T29974] ipt_REJECT: TCP_RESET invalid for non-tcp [ 923.140381][T29977] netlink: 'syz.0.7428': attribute type 7 has an invalid length. [ 923.157793][T29977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7428'. [ 923.202202][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7426'. [ 923.674613][T29993] syzkaller0: entered promiscuous mode [ 923.686231][T29993] syzkaller0: entered allmulticast mode [ 923.704868][T29996] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7436'. [ 923.723738][T29996] openvswitch: netlink: Message has 3 unknown bytes. [ 923.783193][T29996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 924.080314][T30003] bond5: option lp_interval: invalid value (0) [ 924.117583][T30003] bond5: option lp_interval: allowed values 1 - 2147483647 [ 924.171256][T30003] bond5 (unregistering): Released all slaves [ 924.263626][T30018] žÿ: renamed from team_slave_1 [ 925.072272][T30050] xt_hashlimit: size too large, truncated to 1048576 [ 925.103627][T30050] xt_hashlimit: max too large, truncated to 1048576 [ 925.206844][T30050] ipt_REJECT: TCP_RESET invalid for non-tcp [ 925.358517][T30027] lo speed is unknown, defaulting to 1000 [ 925.880800][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7458'. [ 926.324637][T30079] netlink: 'syz.0.7460': attribute type 1 has an invalid length. [ 926.389874][T30079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 926.421918][T30082] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 926.599981][T30088] openvswitch: netlink: IP tunnel dst address not specified [ 926.789648][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7468'. [ 926.929408][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7468'. [ 926.972392][T30097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7468'. [ 927.050552][T30097] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7468'. [ 927.370084][T30126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7476'. [ 927.390501][T30126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7476'. [ 927.410949][T30125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7476'. [ 927.430370][T30125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7476'. [ 927.684851][T30138] netlink: 'syz.3.7479': attribute type 9 has an invalid length. [ 927.987330][T30121] lo speed is unknown, defaulting to 1000 [ 928.033029][ T8236] lec:lec_start_xmit: lec0:No lecd attached [ 928.240302][T30159] ip6tnl2: entered allmulticast mode [ 928.248772][ T8018] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.261631][ T8018] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.274744][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.710080][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.779566][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.996089][T30171] __nla_validate_parse: 2 callbacks suppressed [ 928.996114][T30171] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7492'. [ 929.300136][T30179] syzkaller0: entered promiscuous mode [ 929.308260][T30179] syzkaller0: entered allmulticast mode [ 929.332005][T30179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7496'. [ 929.350128][T30179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7496'. [ 929.654656][T30194] xt_hashlimit: size too large, truncated to 1048576 [ 929.686365][T30194] xt_hashlimit: max too large, truncated to 1048576 [ 929.742208][T30194] ipt_REJECT: TCP_RESET invalid for non-tcp [ 930.059666][T30203] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 930.452609][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7510'. [ 930.496258][T30216] gtp0: entered promiscuous mode [ 930.502700][T30216] gtp0: entered allmulticast mode [ 930.595091][T30224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7514'. [ 930.617903][T30224] netlink: 'syz.1.7514': attribute type 7 has an invalid length. [ 930.638462][T30224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7514'. [ 930.924995][T30239] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 931.613565][T30255] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 931.896219][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7531'. [ 931.909861][T30269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7532'. [ 931.933811][T30269] netlink: 'syz.1.7532': attribute type 7 has an invalid length. [ 931.950295][T30269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7532'. [ 931.980499][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 932.165609][T30280] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7531'. [ 932.496536][T30293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.613849][T30261] lec:lec_atm_close: lec0: Shut down! [ 932.946015][T30286] lo speed is unknown, defaulting to 1000 [ 933.682492][T30322] tipc: Started in network mode [ 933.703062][T30322] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 933.743636][T30322] tipc: Enabling of bearer rejected, failed to enable media [ 934.295779][T30335] __nla_validate_parse: 1 callbacks suppressed [ 934.295801][T30335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7546'. [ 934.342334][T30335] netlink: 'syz.2.7546': attribute type 7 has an invalid length. [ 934.362194][T30335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7546'. [ 934.372375][T30337] tipc: Enabled bearer , priority 0 [ 934.516428][T30335] erspan0: entered promiscuous mode [ 934.527550][T30335] gretap0: entered promiscuous mode [ 934.538563][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 934.540481][T30335] debugfs: 'hsr2' already exists in 'hsr' [ 934.554641][T30335] Cannot create hsr debugfs directory [ 934.568564][T30337] syzkaller0: entered promiscuous mode [ 934.580025][T30337] syzkaller0: entered allmulticast mode [ 934.599030][T30338] tipc: Resetting bearer [ 935.243415][T30333] tipc: Resetting bearer [ 935.320716][T30333] tipc: Disabling bearer [ 935.652189][T30377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7560'. [ 935.755699][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7561'. [ 935.807433][T30383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7563'. [ 936.360260][T30416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7572'. [ 936.366335][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7571'. [ 936.429372][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7571'. [ 936.669007][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7575'. [ 937.189403][T30397] ------------[ cut here ]------------ [ 937.197074][T30397] ODEBUG: init active (active state 0) object: ffff88802653cf78 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 937.210468][T30397] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.4.7568/30397 [ 937.221115][T30397] Modules linked in: [ 937.225468][T30397] CPU: 1 UID: 0 PID: 30397 Comm: syz.4.7568 Not tainted syzkaller #0 PREEMPT(full) [ 937.235175][T30397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.246218][T30397] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 937.253400][T30397] Code: 3c 38 00 74 08 4c 89 ef e8 0e df 74 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 20 a7 28 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 8e 8c 77 0b 83 fd 03 75 3f 4c 8b [ 937.273616][T30397] RSP: 0018:ffffc900038ff8f8 EFLAGS: 00010246 [ 937.279965][T30397] RAX: 1ffffffff179e734 RBX: ffff88802653cf78 RCX: 0000000000000000 [ 937.288093][T30397] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a720 RDI: ffffffff903e69a0 [ 937.296228][T30397] RBP: 0000000000000003 R08: ffff88802653cf78 R09: ffffffff8bcf4d00 [ 937.304963][T30397] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffffffff8c28ab20 [ 937.313337][T30397] R13: ffffffff8bcf39a0 R14: ffffffff903e69a0 R15: dffffc0000000000 [ 937.321627][T30397] FS: 00007f096a5f66c0(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 937.330692][T30397] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.337405][T30397] CR2: 00005595e37a8808 CR3: 000000005ce7e000 CR4: 00000000003526f0 [ 937.345731][T30397] Call Trace: [ 937.349050][T30397] [ 937.352201][T30397] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 937.358167][T30397] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 937.364210][T30397] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 937.370401][T30397] timer_init_key+0x41/0x2c0 [ 937.375052][T30397] lane_ioctl+0x1579/0x2220 [ 937.380055][T30397] ? __pfx_clip_ioctl+0x10/0x10 [ 937.384950][T30397] ? br2684_ioctl+0x110/0x6b0 [ 937.389945][T30397] ? __pfx_lane_ioctl+0x10/0x10 [ 937.394851][T30397] ? atmtcp_ioctl+0x1ce/0xdf0 [ 937.399881][T30397] do_vcc_ioctl+0x36d/0x9d0 [ 937.404450][T30397] svc_ioctl+0x1f6/0x7d0 [ 937.408915][T30397] ? kasan_quarantine_put+0xbb/0x1f0 [ 937.414370][T30397] ? __pfx_svc_ioctl+0x10/0x10 [ 937.419362][T30397] ? tomoyo_path_number_perm+0x219/0x630 [ 937.425053][T30397] ? tomoyo_path_number_perm+0x219/0x630 [ 937.430951][T30397] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 937.436037][T30397] sock_do_ioctl+0x101/0x320 [ 937.440765][T30397] ? __pfx_sock_do_ioctl+0x10/0x10 [ 937.445928][T30397] ? do_futex+0x333/0x420 [ 937.450505][T30397] sock_ioctl+0x5c6/0x7f0 [ 937.454889][T30397] ? __pfx_sock_ioctl+0x10/0x10 [ 937.460140][T30397] ? __fget_files+0x2a/0x420 [ 937.464775][T30397] ? __fget_files+0x3a0/0x420 [ 937.469691][T30397] ? __fget_files+0x2a/0x420 [ 937.474323][T30397] ? bpf_lsm_file_ioctl+0x9/0x20 [ 937.479477][T30397] ? __pfx_sock_ioctl+0x10/0x10 [ 937.484485][T30397] __se_sys_ioctl+0xfc/0x170 [ 937.489231][T30397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.495339][T30397] do_syscall_64+0x15f/0xf80 [ 937.500165][T30397] ? trace_irq_disable+0x3b/0x140 [ 937.505233][T30397] ? clear_bhb_loop+0x40/0x90 [ 937.510027][T30397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.515956][T30397] RIP: 0033:0x7f096c39cdd9 [ 937.520544][T30397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.540548][T30397] RSP: 002b:00007f096a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.549026][T30397] RAX: ffffffffffffffda RBX: 00007f096c615fa0 RCX: 00007f096c39cdd9 [ 937.557131][T30397] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 000000000000000b [ 937.565750][T30397] RBP: 00007f096c432d69 R08: 0000000000000000 R09: 0000000000000000 [ 937.574155][T30397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.582378][T30397] R13: 00007f096c616038 R14: 00007f096c615fa0 R15: 00007ffd8a977588 [ 937.590596][T30397] [ 937.593652][T30397] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 937.601138][T30397] CPU: 1 UID: 0 PID: 30397 Comm: syz.4.7568 Not tainted syzkaller #0 PREEMPT(full) [ 937.610713][T30397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.620776][T30397] Call Trace: [ 937.624084][T30397] [ 937.627030][T30397] vpanic+0x56c/0xa60 [ 937.631018][T30397] ? __pfx__printk+0x10/0x10 [ 937.635617][T30397] ? __pfx_vpanic+0x10/0x10 [ 937.640117][T30397] ? is_bpf_text_address+0x292/0x2b0 [ 937.645420][T30397] ? is_bpf_text_address+0x26/0x2b0 [ 937.650673][T30397] panic+0xc5/0xd0 [ 937.654428][T30397] ? __pfx_panic+0x10/0x10 [ 937.658883][T30397] __warn+0x315/0x4c0 [ 937.662915][T30397] ? __debug_object_init+0x2b1/0x4e0 [ 937.669450][T30397] ? __debug_object_init+0x2b1/0x4e0 [ 937.674849][T30397] __report_bug+0x29a/0x540 [ 937.679400][T30397] ? __debug_object_init+0x2b1/0x4e0 [ 937.684878][T30397] ? __pfx___report_bug+0x10/0x10 [ 937.690014][T30397] ? __lock_acquire+0x6b5/0x2cf0 [ 937.695074][T30397] ? rcu_is_watching+0x15/0xb0 [ 937.699945][T30397] report_bug_entry+0x19a/0x290 [ 937.704842][T30397] ? __debug_object_init+0x30f/0x4e0 [ 937.710147][T30397] ? __debug_object_init+0x314/0x4e0 [ 937.715451][T30397] handle_bug+0xce/0x200 [ 937.719709][T30397] exc_invalid_op+0x1a/0x50 [ 937.724218][T30397] asm_exc_invalid_op+0x1a/0x20 [ 937.729076][T30397] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 937.735015][T30397] Code: 3c 38 00 74 08 4c 89 ef e8 0e df 74 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 20 a7 28 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 8e 8c 77 0b 83 fd 03 75 3f 4c 8b [ 937.754634][T30397] RSP: 0018:ffffc900038ff8f8 EFLAGS: 00010246 [ 937.760722][T30397] RAX: 1ffffffff179e734 RBX: ffff88802653cf78 RCX: 0000000000000000 [ 937.768706][T30397] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a720 RDI: ffffffff903e69a0 [ 937.776736][T30397] RBP: 0000000000000003 R08: ffff88802653cf78 R09: ffffffff8bcf4d00 [ 937.784714][T30397] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffffffff8c28ab20 [ 937.792988][T30397] R13: ffffffff8bcf39a0 R14: ffffffff903e69a0 R15: dffffc0000000000 [ 937.801065][T30397] ? __pfx_timer_debug_hint+0x10/0x10 [ 937.806479][T30397] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 937.812220][T30397] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 937.817958][T30397] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 937.823784][T30397] timer_init_key+0x41/0x2c0 [ 937.828395][T30397] lane_ioctl+0x1579/0x2220 [ 937.833006][T30397] ? __pfx_clip_ioctl+0x10/0x10 [ 937.837956][T30397] ? br2684_ioctl+0x110/0x6b0 [ 937.842649][T30397] ? __pfx_lane_ioctl+0x10/0x10 [ 937.847529][T30397] ? atmtcp_ioctl+0x1ce/0xdf0 [ 937.852356][T30397] do_vcc_ioctl+0x36d/0x9d0 [ 937.856979][T30397] svc_ioctl+0x1f6/0x7d0 [ 937.861240][T30397] ? kasan_quarantine_put+0xbb/0x1f0 [ 937.866541][T30397] ? __pfx_svc_ioctl+0x10/0x10 [ 937.871354][T30397] ? tomoyo_path_number_perm+0x219/0x630 [ 937.877005][T30397] ? tomoyo_path_number_perm+0x219/0x630 [ 937.882661][T30397] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 937.887732][T30397] sock_do_ioctl+0x101/0x320 [ 937.892390][T30397] ? __pfx_sock_do_ioctl+0x10/0x10 [ 937.897554][T30397] ? do_futex+0x333/0x420 [ 937.901930][T30397] sock_ioctl+0x5c6/0x7f0 [ 937.906304][T30397] ? __pfx_sock_ioctl+0x10/0x10 [ 937.911178][T30397] ? __fget_files+0x2a/0x420 [ 937.915782][T30397] ? __fget_files+0x3a0/0x420 [ 937.920575][T30397] ? __fget_files+0x2a/0x420 [ 937.925191][T30397] ? bpf_lsm_file_ioctl+0x9/0x20 [ 937.930145][T30397] ? __pfx_sock_ioctl+0x10/0x10 [ 937.935011][T30397] __se_sys_ioctl+0xfc/0x170 [ 937.939709][T30397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.945790][T30397] do_syscall_64+0x15f/0xf80 [ 937.950498][T30397] ? trace_irq_disable+0x3b/0x140 [ 937.955658][T30397] ? clear_bhb_loop+0x40/0x90 [ 937.960354][T30397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.966346][T30397] RIP: 0033:0x7f096c39cdd9 [ 937.970858][T30397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.990909][T30397] RSP: 002b:00007f096a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.999432][T30397] RAX: ffffffffffffffda RBX: 00007f096c615fa0 RCX: 00007f096c39cdd9 [ 938.007763][T30397] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 000000000000000b [ 938.015753][T30397] RBP: 00007f096c432d69 R08: 0000000000000000 R09: 0000000000000000 [ 938.023777][T30397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.031847][T30397] R13: 00007f096c616038 R14: 00007f096c615fa0 R15: 00007ffd8a977588 [ 938.039847][T30397] [ 938.043295][T30397] Kernel Offset: disabled [ 938.047634][T30397] Rebooting in 86400 seconds..