last executing test programs: 11.008478142s ago: executing program 0 (id=2417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6dabd8b5ea4b1f98, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c0, 0x1, 0x3, 0x7}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x410, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6dabd8b5ea4b1f98, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf8c0, 0x1, 0x3, 0x7}}) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x410, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4008000) (async) 10.98776171s ago: executing program 0 (id=2418): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x8c, "f7f3c699adb5486d4805a7acade8a08becbe261348811ffa8456efdbecf56a0c2da3d1a8fcc2ac9a2f542b80358b9169cbb4bae1a219aa6e3208de696263f8202b23e1242fe0b274e1222b8f13f556b3079372ea6722858c50e7dc2351119662e4f0cc733a2bf94300b12b39076d29515d08688201e330d1b6aca816ed5313ebcbc4bf290793968a088b1538"}, &(0x7f0000000140)=0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x7f, 0x30, 0x43, 0x3}, &(0x7f00000001c0)=0x18) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="d502701ae82c0f5a", 0x8}, {&(0x7f0000000340)="bc85e3427246b8d2684f5deee15c9b7fdd36d111e70809fd2a18cf76f8389410719a50c7d59ec046d877748d25cf1b474c1c8dbb48f34351878a6928e249ea400d708f1322dbf9a6339c0e19f85fa260889603ea67b02e02366633a6865cea6cb0165292180f438daf09ed3fc0b22895a84c08f9ec749a114b5bb999c31e95741f7c69086612a07f54adc0a857c2561b550acb68db8f3e3142c1dcce1efa55b3aeedc8736b0ba77a", 0xa8}], 0x2, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0xd}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0xe000, 0x8000, 0x1, 0x4, 0x100, 0x8, 0x8, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x14}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xe}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x0, 0x65f6, 0x5, 0xfffa}}], 0xa8, 0x84104}, {&(0x7f0000000500)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000640)="7b765025ce77731eca8c03c17bf52dcef76446523f1de97931b5d7ec78a8e1da670e1c8e746510758e28bbfe31256e57a03b5b79939af5a46050dfdc7d5abfe81b73047386033c48fccfd5364828cf422174b2f403c96a104f6c8d270c41a925de87113a99514b0523268a5a227b31f877516a31404e1c0e64e51c746af3b1226f2f7019a428dbd236199f0e1f703b1af1dbdd8b43f6d1eec97c2c35ab95229b5fa137d5dccfb6ec27a8f9114cad690bf3db7c5ad8ad3515fb279ecd8646de468f20fad14e86a55621e2d6e95507a7a0bd4247012cb8c92950260fe981f78dbd2f09077785af9cdba805f6cfc27e572a0f1e1700920b2058", 0xf8}, {&(0x7f0000000740)="1420a472363ce1ae342bc03b0727ba02abb13b2955460384b2bd7d8b61e12b53596738d125f750646a560fb2ef485c0db00b504650d068552bba4ddd2a6754b86beff4619bf20177a083cbf6d335f3f4fedf664d154d20937132aa9628c0fd3ba280612685cab766ff16cf863ab2e2f02d34e3389c5840ec1b261a37b73b3e153d82c048040493f623ca492f8fb66f518e2a4a10fa0f133f7b1d5914390d1c9af140a04cd7557151802638fef15f63cd25eb8d2222222f", 0xb7}, {&(0x7f0000000800)}, {&(0x7f0000000840)="06f2b752674a7d87d91501d21743b1929b6ba82ace7ab3d751751d9c5036500ededd6e2e142c6cd3745b467d20f2ec9d097dd8b8978245e3984b4b1310db6225584f493d262df1ddf9a84d6d7251eaf2eb2ecd22632801506f316015df2b2d6fef489c9e46ab7f498c594aba1ce8c32a5630a2534551df0a0a3da1e60a04f651c313c4aee34cb6028498677bbd7f2a9bb034d9295249442b637d0ffb79587e774f33fefff2c95fc98c9e4561e8a5c861b4c4bfb797ae2f1de9110aa51d0048b7ef8ace69d615bea0aa74cf6081368f", 0xcf}], 0x5, &(0x7f00000009c0)=[@init={0x18, 0x84, 0x0, {0x200, 0x3, 0x0, 0xd4}}, @init={0x18, 0x84, 0x0, {0x4, 0x2, 0x9, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0xa0, 0x24044815}, {&(0x7f0000000a80)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000ac0)="2028e2c7c889cd526195ea8f38e4b87603251ba867e5198afb5469416e90706903af9c85814e52c631f1a6ee4c3c8cd35a7773e6111450651a234ad20e0e1311b52796a6df9e56bae3872d3b77c5209c98f986ded7564c6849f9cec580810d11b23abbb55fa53251deb03b1b1fa6cc105002de7406a98d081d26f069d3266e4e7b60b4d0ef9014fd3adab91c658e09009f89ae5e60f61a99632c3bc48c0aeab7ff9054b4922282d4942a3536fe814c0185b96f1582620e4586d3443f95ad25b2077d24cfcafb314e1ac0bda0310a4296", 0xd0}, {&(0x7f0000000bc0)="30da38150ccdd09a179e4688cf66118b50c40884c9460a5d2e7aac36463cab1bd96416a2c26f2c2feb269dcf00d10cc272e2411ae75b9e1171dc40d59877f81f9597ce7c84a5c8df681711faba491b68cc3a0251c2b4cace1d19c0058e0653e5ec93602bc1f4451e12c1c097d3517a6a5f831b91291eb2a690b6a7595f25c503f8cc38eea0f709b41e19716e6d0a0b4a71d0c285198bad21cf15efb36e279166e8254fedcff0255bba65abff16cb6deba29e5dda2f5b6278cf73dd630f358665ab21b3a3d9ac1e", 0xc7}, {&(0x7f0000000cc0)="ea26707b5d08d8fa112bf4c2b57680f0f088fab279e9d32ce15681d487f3", 0x1e}, {&(0x7f0000000d00)="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", 0x1000}], 0x4, &(0x7f0000001d40)=[@sndrcv={0x30, 0x84, 0x1, {0x7ff, 0xd294, 0x2, 0x7, 0x1, 0x6, 0x7, 0xb, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @sndrcv={0x30, 0x84, 0x1, {0x400, 0x4, 0x1800a, 0x7, 0x800, 0x7b8, 0x9, 0x0, r1}}], 0xb0, 0x44004}, {&(0x7f0000001e00)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001e40)="6915af81b2eabca9e21d1744cec97d0774e92d81a85130497f8f42488dfb1474be79b415c0842f42e3c494fde5df0170afe9499dceec249b59d0325ee261d6133618662fe57a87a199aed81e3b2f0db991e87435f2ed026e251a38b99b7b5bf771bdeadbdaa4c76dec0afecf2fd57e28754ed0ca2d41bcc098e2779661e037167c2cd7a9ed6636fb6a551bcb0dba1f7131", 0x91}, {&(0x7f0000001f00)="96d675f5163c048c5523c64a50d7cacd3bd816a2156cbdc549b84c005025ff365ce7686bc51a16e7f7ff2aa0fca3b784dcd8a056ad1850f6987b5de148aef0a3b77d561f924d89383e8feb731b43e297e6eec26e1ec55d02d9a08c05c24ec998d05658e0743335cb5217b16f2ab9967e6f779d9ee3497338eae4a4691f42172e0ed3a5f21ac391badbf62edd0b9851cf4e1442e4bdeadc8a64f24173396571ab1839e1ab5f7be1929aad87103a6a748395ba209ebddf6823ed3a0727db4dfe6f9dca66281c21162628c6641de32e95c1f41938139d5a3dbe7df02808c8090c4c832865c92b89ff8264ad71508279e9fc", 0xf0}], 0x2, 0x0, 0x0, 0x40}, {&(0x7f0000002040)=@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000002080)="8204d0b6ed15e214db5945c271b4eced29d767e6598b7357428ec1e184c37a7e509fd28d95fe1dfde733285814a7dba19376fa602d18f28e2a7876973bb334be3ce17824cdffe75ad3d22cd55a092a2514552fc193df9afa8c0043e24bbc837a8fe1e12b23f8de2bcbdd2626f1fa20aa962c75305219813a4b9a51fea5acc763ea7cb2390932835a8052cc310f98f533ee8f29d3d89f7b8fa01064cda0911a58af5b07c553336bcb713c8acfb15a5a7449463365e5f0a6ced90710b03d132563b7a3e0a3cbba9164e6817c1fccd1b26b488dc087e462661e2139cc17b7e903d13502031661a62a8258abd79a830caa13347df923a197c464b2", 0xf9}, {&(0x7f0000002180)="374f28fa66208c0700f4e6c44e3d53517956eb44e68c039fe5c2940b8a2a2a0ff0b370ac860c4efe4839c28ad36f656bcfeafa75e9a5ba9d9b501d8e2e3fda18eeea1cd1b7cf7b87b551df3dde024244d314c9d6d3a99f3d6e864be7aaf8d16331417195eb2f6b16b893093bf62fb7c8be245cd928a732d8c49f55bf7479cdcade6e50403de3b5ad6fe204f5568f7de8e5936f3681b0dab5", 0x98}, {&(0x7f0000002240)="891dce1c640166f0d5a722c4f426f050eab95aa7e33c182fb93cf8ce3faf38d8d4ebb453b8dd84004d8f0dd7ee40db1e84da7158dffe52550920a17f6a07befb059d4cf3283706b35ecac36f522192e976588cae4fad7109a28e156b26039bae515ea5aa47384d72d22f55941f4c67fce248e185f18d51883c97c15e4a85f01def8d584aa0d5a1bbb5706f8b86049334e48e041326ef258fa37e3e8a9451b85b55fb3e0cf78e4186c996ee0b22544671264a91853c3d7a2c22240633f412", 0xbe}], 0x3, &(0x7f0000002340)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @init={0x18, 0x84, 0x0, {0x0, 0x81, 0x100, 0x80}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8000}}, @init={0x18, 0x84, 0x0, {0x8, 0x9, 0xa, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x205, 0x8, 0x3ff, r1}}, @authinfo={0x18, 0x84, 0x6, {0x6ac}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10}}], 0xd0, 0x80}, {&(0x7f0000002440)=@in6={0xa, 0x4e22, 0xfffffffa, @private0, 0x343}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002480)="dabf5a6f661f8de8755ba293c1bc1863bb790ff236d5e95892c304b2b43fdf776429041754037109771772870c044230f670e86ab1561e5a1bcb0ff3f6c5a68154eb3a7b3bb400d2d98f033854ba469012acba19aa24167a2abc8c65759343b00e34e8f9477e9cf9a61a4b54eef4d9dd43454fe75c24516b00aaf689cbb5a6bb515efe64b6bebb2f24e02686ae8c533398cf17f570", 0x95}, {&(0x7f0000002540)="b4c0cd8d8ac8b331bff934a59e4f30b011f9cd65f02554b738432effe1ae8a2cadd5b8dfc0773496ed9cebddfce10da2c5fa17fb9aba65cdf6e8908d4ed81d80dcb8b3033e6d7a2fb2ad0c0bb76bf99c145591fbfc37f16088ed315b13364b75ce7e6ab102e1c4b1e7bd384387dae42ea19666108006b0cbd589f7334451d4e0a052e0a2e050caf051fc542e761046413891155abbd5e15ee26be8001cf2506432ae1d25e5d7c7b1821802d2e10ae3ccaac83c189584da11a85887e8cc995aaa1a11dd750a8410dab05e14b6fb", 0xcd}, {&(0x7f0000002640)="6cb70d14a10c54a1fb932405e8d4d6e79a7bbc07095e64656447d984ccea286591efd0852c49f3314fa3175abab1fdc826b222ac4f457a5e56ec16881bbb5b020af23bf9b0afcee725d27c640444a3d1a579a4dbb1cbc8b4448b94c826229e4570c5f3e7792dca4a5b8fc8d629c59a1ede5133baa913b59994ceca2dcb4174ef624d72c4e8f4a5bf13790f7d3925382055b06ee3a71432c7083de735", 0x9c}, {&(0x7f0000002700)="efeb3caaf6b62db8a709bb7e232072d720214057f9ce1b24d5bd0c185bd7f763ae25535010395a55081b58be6999953bb63fc457cb9b42a8bce67ef6017d745ccd68f2db57c6d3ca5efa75b5245c68c83d1b8b9007d19319b4d002c7ed085a81cf06bca49e3223e7cc53bf514a8be44b98607169c2538184b9cb00aa790959de4d", 0x81}, {&(0x7f00000027c0)="c90b4c", 0x3}, {&(0x7f0000002800)="4cb18bdbea454430a1e2c64ad2ca471d891f520ebb84d65829ea766795d58d0b1106c0ad323686bf9657b08df360dd1b0ecbc3e2a13e4aecf1cd92cf8aa90bf99473f1ed788e9ef0664ebe9d1fe81ca95af47f95e5f5beff04d8e246fc474d69abc33bf7480f29b02fdafd8c9b2664b8481faecd6ad6491a22155e08fccc6a0a373dc9e3789b2ec5a41c6b6eeac4a644f5987a052d159d1b393cf1b433e81bbe4e9a6633f5773f66d9578f7db48a07b6276376d59332500bd0c054038da331aa18d90938c8e92b4cd2a3de388a85b21c32b83dff41", 0xd5}, {&(0x7f0000002900)="829b110d825fee3ec8350c3fdc3b2222e75f85effd1338c9a7eec75bd226832976cc259735df6624b300c76b5abe10fc1b31e9a0d3fe1173d81e9295beb6f00d6dba784a24e4739fa472eceb68659ee7359ff4fa787085ec1fc701b3b3cfa23dccaaf9bde2955b714014b498b988d8c6a8f9d7f134ef0d52d2193fdc16dd1f8dc1eb7b08905137bfc0b5ae3092ad1b7022b02727c15a9d3a7f34def6534a191bec298bac5b834b3635ac24f3713b7cc3befec72ad1b011f59fff64ec81be0bf4b98c9598383520360cccc23f9f4cf3ee4ff3e5", 0xd3}], 0x7, 0x0, 0x0, 0x800}], 0x6, 0xc4) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000002c00)=0x5) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000002c40)=@assoc_value={r1, 0x80000000}, &(0x7f0000002c80)=0x8) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000002cc0)={0x0, 0x98, "e044062e918711875d96896548814268673ff2c6e51bb57e3cc7272702d873f7bc6b32f88729fc7afb5efcd27b9d748b0b64d9b47567917a466d386c5a8cd4d218e244c3453d6a53e6ff4c2f14a68ffe7a419b615b1cb91e0e760787e4c9720423808fc559045df42a225a0ec17087354ed3d86ec1de12c369b56806455a9818bdfd4e66af4040e2112cd909b0739cb77f0c389f5a02f88e"}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0x110, r3, 0x944ef000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002d80)={r2, 0xcb41, 0x200, 0xd932}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002dc0)={r1, 0x7, 0x20}, 0xc) connect$netlink(r4, &(0x7f0000002e00)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002e40), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r6) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x20, r8, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x6d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x890) r9 = syz_genetlink_get_family_id$team(&(0x7f0000003000), r4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000003040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003140)={'ip_vti0\x00', &(0x7f0000003080)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x1c02, 0x4, {{0x1b, 0x4, 0x0, 0x24, 0x6c, 0x65, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @remote, {[@rr={0x7, 0x7, 0xd8, [@remote]}, @ra={0x94, 0x4}, @generic={0x94, 0x10, "dfa4ae106b643caedc10b76875d5"}, @timestamp={0x44, 0x18, 0x62, 0x0, 0x9, [0x254, 0xcd72, 0x7, 0x483, 0x7]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0xf, [{@multicast2, 0x10}, {@multicast2, 0x3400}, {@multicast2, 0x3}]}, @generic={0x17, 0x7, "bfeefe90d0"}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000003180)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0xfffffff1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7800, 0x8000, 0x6, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003340)={'ip_vti0\x00', &(0x7f0000003280)={'gretap0\x00', 0x0, 0x700, 0x780e, 0x3, 0x5, {{0x1a, 0x4, 0x3, 0x8, 0x68, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@end, @timestamp={0x44, 0x1c, 0xef, 0x0, 0x3, [0x5, 0x0, 0xc, 0x3, 0x5, 0xffffffff]}, @end, @lsrr={0x83, 0x17, 0xa4, [@empty, @multicast1, @remote, @multicast2, @private=0xa010100]}, @rr={0x7, 0x1f, 0x70, [@dev={0xac, 0x14, 0x14, 0x1e}, @local, @empty, @empty, @private=0xa010100, @multicast2, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003380)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000033c0)={@loopback, 0x0}, &(0x7f0000003400)=0x14) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000003440)=0x0, &(0x7f0000003480)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000034c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000003bc0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b80)={&(0x7f00000036c0)={0x4a4, r9, 0x202, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3fff8000}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x744}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1ff, 0x5, 0x4, 0x2}, {0x3ff, 0x9, 0x5, 0x7f}, {0xfff, 0x2, 0x9, 0x1}, {0xfff9, 0x4, 0x10, 0x7fff}, {0x1, 0xce, 0x6, 0x4}]}}}]}}, {{0x8, 0x1, r16}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc2cf}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r18}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xff, 0x0, 0x40, 0xe}, {0x4, 0xe2, 0xe0, 0x5}, {0xf99b, 0x3, 0xac, 0x9}, {0x5, 0x0, 0x1, 0x4}, {0x81, 0x1, 0x3, 0xa23}, {0xf, 0x5, 0x10, 0x8001}, {0x9, 0x8, 0x6, 0x6}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 10.508089783s ago: executing program 0 (id=2423): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) 2.972408268s ago: executing program 3 (id=2495): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r1, 0x0, 0x2, 0xe) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.127499837s ago: executing program 4 (id=2508): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'dummy0\x00', 0x41}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="80935a5d0a3ce1d7a2f2f506729419f1068705bb22160750687529197c22280000001400030002000000000000000000210014000100ff020000000000000000000000000001000000003408fc70707a909bb09312fd13d18364bbb159e1f0166677b386715fa6e9d1fc3eb6d46dfbf2d95b48e6c33bafb2bfb112a2821a483fc7d6e25d7fc7e39017d585cbaf9c00e40e5a152d4dcd27d3d6"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r5 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @remote}, 0x10) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000000)={@loopback, @remote, 0x1, "b34211bac53b140dbe06313ea2ae909a3afd6b8f552292c7bfb31aadd91fcc88", 0x2, 0x3, 0x7, 0x3ff}, 0x3c) 2.102505804s ago: executing program 2 (id=2509): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fddbdf250200000008000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) (async) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0000000000000011424203000040"], 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.987948023s ago: executing program 3 (id=2510): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') unshare(0x6a040000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c0002800500010004002000080020000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 1.973732809s ago: executing program 3 (id=2511): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x644, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x608, 0x2, [@TCA_BPF_ACT={0xb0, 0x1, [@m_gact={0xac, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x199f, 0x3}}]}, {0x71, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c9950303"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_tunnel_key={0x40, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xd, 0x6, "67a6389f79d2db524e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x18000, 0x2, 0xffffffffffffffff, 0x200, 0x9}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_POLICE={0x4b4, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81d}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfffffffb, 0xcbae, 0xd, 0x819, 0x0, 0x36, 0x9146, 0x757, 0x71c5, 0xa, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x2, 0x5, 0x7ff, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x3, 0x5, 0x8, 0xffffffff, 0x7, 0x7ff, 0x8000, 0x5, 0x9, 0x2, 0x6, 0x9, 0x2, 0x9, 0x6, 0x84c, 0xb, 0xb, 0x5b1, 0x2, 0x5, 0x1, 0x4, 0x1, 0x2, 0x0, 0x4, 0x1, 0x9, 0x401, 0x10001, 0x0, 0xfcb, 0x9e9b, 0x5, 0x5, 0x3, 0xda, 0xffff, 0x7, 0x2000, 0xfb62, 0x7, 0x2, 0x1, 0x800, 0x6, 0x400, 0xa8c3, 0x7, 0x5, 0x6, 0x6, 0x4, 0x9, 0x5, 0x8, 0xe, 0x401, 0x10000, 0xc, 0x2, 0x81, 0x3b07, 0x327, 0xd, 0x9, 0x5, 0xe, 0x1, 0x2, 0x6, 0xdbb9, 0x80, 0xfffff000, 0x19ea, 0x2b4, 0x6, 0x0, 0x8, 0x4, 0xd, 0xff, 0xcd87, 0x9d72, 0x3, 0x452, 0x3, 0x6, 0x8001, 0x3, 0x9, 0xa9c1, 0x5, 0x10001, 0x7fffffff, 0x10001, 0x100, 0x984, 0xd8, 0x3, 0x3, 0xf, 0x1, 0x3d, 0x6, 0x7f, 0xc68, 0x4, 0x0, 0xb47, 0x5, 0x7, 0x7, 0x9, 0x7, 0x7fffffff, 0x8, 0x9, 0x6, 0x7, 0x7fffffff, 0x7ff, 0x1, 0x10a, 0x5, 0x9, 0x9, 0xffff, 0x7, 0x42c, 0x8, 0x48, 0x80000000, 0xc9, 0x2, 0xfffffffe, 0x5, 0xc5c, 0xe, 0x1ff, 0x80, 0x5, 0x1, 0x7, 0xd235, 0x958, 0x4, 0x3, 0x7, 0x0, 0xff, 0x56, 0x8000, 0x2, 0xffff8001, 0x0, 0x5, 0x5, 0xd, 0x8920, 0x752, 0x1, 0xdf0, 0x8, 0x7, 0x7, 0x8, 0x9, 0x7, 0x2, 0x40, 0xc43b, 0x9, 0x7, 0x8, 0x1, 0x9, 0x7ff, 0x6, 0x5, 0x7, 0x3, 0x40000, 0x8000, 0x9, 0x5, 0x8, 0x23, 0x60000000, 0x8, 0xffffffff, 0x21, 0x0, 0x1, 0x6, 0x8, 0x20000000, 0xfffffffb, 0x4, 0x8, 0x17, 0x7, 0x3, 0xb, 0xc, 0x0, 0x261, 0x3, 0x7, 0x4, 0x0, 0x0, 0x2, 0x2, 0x2, 0x6fa, 0x0, 0x5, 0xfffffffb, 0x1, 0x7, 0x3, 0xfff, 0x40, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff0d, 0x0, 0xb, 0x10001, 0x5, {0x80, 0x1, 0x9, 0x0, 0x2, 0x400}, {0x0, 0x1, 0x8, 0xfb4, 0x8, 0x7}, 0x6, 0x4, 0xf}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf5, 0x20000000, 0x8, 0x3, 0x67c355e9, {0x9, 0x1, 0xf6fc, 0x8, 0x8, 0x8001}, {0x3, 0x2, 0xd, 0x3, 0x1, 0x4b627d58}, 0x8, 0x4, 0x6}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e24, @remote}}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.955998239s ago: executing program 2 (id=2512): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xa4, 0xab, 0x1}) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000000c0)={r1, 0x0, 0xb79, 0xa3a, 0x1, 0x8}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="e2fe097a595ea36d5aa057ee74043cd42f092a7169974045070d2215846b55b73fb79bbb4be2", 0x26}], 0x1, 0x8) sendmmsg$inet6(r2, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000800) 1.869754875s ago: executing program 4 (id=2514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) write$tun(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)="43210098ed") (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x383f8, 0x4) 1.81465796s ago: executing program 2 (id=2515): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'xfrm0\x00', 0xd, 0xcd}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, &(0x7f0000000240)='xfrm0\x00', 0x98a01, &(0x7f0000000280)={@align=0xfffffffffffffff9, {0x80, 0x6, 0x3, 0x8}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x6}, 0x2, &(0x7f0000000580)=[{0x1, 0x8, &(0x7f0000000340)='team0\x00', &(0x7f0000000380)="4171fded8eb7e1426c4879fbe7b45ac5c55689bdad61426bd60eff1a6900ba1d623ba10e645153707d5330846adce619f002eccc23ff5a7fe79789846eef6df8ba290ecc077b01a049d33dd5eb7b28c6c277462a04fb3b357875abfdb2fd1e123064fc72b5ef09bab6f4ae1dec3411841298ecc8f61aadfe86c9c1cc1029cc07eb102c13c22016e1e64cb78e1e67e20322c75161ff1c068b35c1933922bf7077da1ab70866f5c8f5ab1a852ce56540821f3c36d6292f879c3b7804d54243f37a49d4232d5e5ad28c9a272e8da8939e51fbf534765c269bf42360046338054e0e225266d4", 0xe4, 0x8}, {0x3, 0x0, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="80bf357a2fef524085b7c5c32d36e3926a9a78b61d94304547e43b96950d51901943314e65b45ac223d4f16312586107e01d078c447d150ecf9951c01a69e4206e44630a36fdff8dc13fed65eb593dfb97fc6b678a70f06c69b167589245d1e11361d4031f433203725466197bbf4ee97ee94424946f61fc6e66e16c9489764e35", 0x81, 0x4}]}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000640), 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000680)={'ipvlan1\x00', {0x2, 0x0, @local}}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000006c0)=@rose={'rose', 0x0}, 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000700)=0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000740)={0x9, {0x22, 0x9, 0x4215, 0x10000}}) r5 = openat$cgroup_type(r2, &(0x7f0000000780), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x14, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0xf, &(0x7f00000009c0)=""/15, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x2, 0x80000001, 0x400}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0x81}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000c00)={'veth1_macvtap\x00', &(0x7f0000000bc0)=@ethtool_eee={0x45, 0x0, 0xc, 0x740, 0xfffffffd, 0xffff5f80, 0xc, 0x1, [0x0, 0x3]}}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000000c40)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000c80)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1000, 0x1}, &(0x7f0000000d40)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000d80)=@assoc_value={r10, 0x20}, 0x8) r11 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r11, 0x40585883, &(0x7f0000000dc0)={r8, 0x0, 0x10000, 0xffffffff7fffffff, 0xffffffff, 0xf, [0xe, 0x8519789, 0x6c, 0x7ff, 0x5]}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r9) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001540)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000ec0)={0x608, r12, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4a0, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x9}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x7}, {0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x4, 0x8, 0x4, 0x49, 0xee34, 0x33a5, 0x8]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0xfb, 0xfe01, 0x7, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x6, 0x80, 0xc00, 0x400, 0x0, 0xfff5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x22349712ff9e9f1b}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x0, 0xb4, 0x8, 0x2, 0x1950, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x1b, 0x16, 0x12, 0xc, 0x16, 0xb, 0x4, 0x18, 0xc, 0x6c]}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x92a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x534f9a1f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8000, 0x1, 0x1, 0x7, 0x8, 0x0, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x6}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0xb, 0x4, 0x8, 0x7f, 0x1ed, 0x386]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x7}, {0x4, 0x2}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x3}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x6}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x4}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x4}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x7}, {0x6, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x4}, {0x6, 0x7}, {0x5}, {0x5, 0x9}, {0x4, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x4}, {0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x17}, {0x1, 0x3}, {0x5, 0x7}, {0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {0x0, 0x4}, {0x7}, {0x2, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff2b, 0x9, 0x841, 0x3, 0x8, 0x4, 0xbac6, 0x160f]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x937, 0x2, 0x9, 0xfffc, 0xb, 0xf2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0xb, 0x6c, 0x1, 0x1b]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x3}, {0x4, 0x8}, {0x1}, {0x2, 0x3}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x13}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x2}, {0x6, 0x8}, {0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x30, 0x36, 0x60, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd191, 0x4, 0x8, 0x3, 0x800, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0xde68, 0xeb8, 0x7, 0x101, 0x4, 0x7, 0x3]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0x8000, 0x101, 0x5, 0x6, 0x9df, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x81, 0x5145, 0xa16, 0x7, 0xd2, 0x423d, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfb, 0x6, 0x0, 0x7ff, 0x7, 0x9, 0x6]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x49e5, 0x3, 0x8e5, 0x3, 0x6, 0xfffe, 0x8000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff80, 0x5, 0x2, 0x3e, 0x74c1, 0x96, 0xe]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x7, 0x2, 0xc, 0x7, 0x6, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0x6, 0x7, 0x100, 0x40, 0x8000]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x888, 0x4633, 0xb, 0x4, 0x0, 0x3, 0x0, 0xdf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x6, 0x2907, 0xd, 0xffff, 0xa, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x5, 0x9, 0xb, 0x24, 0x24, 0x5, 0x7, 0x3, 0x4, 0xb, 0x12, 0x60, 0x9, 0x1, 0x1, 0x30, 0x1b, 0x6c, 0x24, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x332, 0x2, 0x8, 0xe9, 0xfeff, 0x8, 0xd, 0x49]}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x154, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0xa}, {0x5, 0x1}, {0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x65, 0x12, 0x36, 0x12, 0x16, 0x1, 0x18, 0x0, 0x12, 0x6c, 0x16, 0x60, 0x4, 0x16, 0xc, 0xc, 0x60, 0x9, 0x6, 0x60, 0x30, 0x2, 0x48, 0x4, 0xc, 0x12]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x8}, {0x5, 0x1}, {0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x3}, {0x6, 0x6}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001580)=""/210, &(0x7f0000001680)=0xd2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) 1.752072037s ago: executing program 3 (id=2516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x10, 0x5, 0x5}, 0xc) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @remote}, 0x84, 0x0, 0x0, 0x0, 0xe, &(0x7f0000000100)='erspan0\x00', 0x0, 0xffffffff, 0x6}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='htcp', 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x304}, "c118cd744ebd059e", "1715138da1b9bec5b41dc616db7ab77a", "c85bc811", "4f291200569fa1f6"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0100002e00010000000000fcdbdf250b"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x7]}, &(0x7f0000000380)=0x6) sendfile(r4, r5, 0x0, 0x20000000002) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) socket(0xa, 0x3, 0x3a) 1.695253837s ago: executing program 2 (id=2517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x30000}}, 0x20}}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x0, 0x400, 0x4}, &(0x7f0000000740)=0x98) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000b311ff00000000000000000000ffffe0000002ff020000000000000000000078c243000100000000a8dd8945d8051ff8413bbe8cfa0b3bcbed5f75828ddf7f41278c1536614c0ec84cfb4af0d78f9482dacd3cd23ee36b467b555679b33a4a87021214ec17408e61e724a28d7e0b1d0dc8e215016e294a8259ade307a3e145d0dd75997fc25e4894cc6e1117d752958b65b105cb9c942cd074afe14590214565ee13fc4326a9432eab484d9b1d7a13bb45af622e5e315a2f7e656a98e0c4b4f621965cf8e69a77fc83c48a"], 0x14c) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a318000000008000440000000000900010073797a30000000000800034000000001", @ANYRESDEC], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000ffffffff18110000", @ANYRES32=r10, @ANYRES64=r2], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.524361254s ago: executing program 1 (id=2519): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) write(r1, 0x0, 0x0) unshare(0x400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b040000000000000000020000005400048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e0800034000000004140001800a0001006c696d697400180004000280097b630073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x2c, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_netdev_private(r7, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x0) bind$802154_raw(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.455720385s ago: executing program 2 (id=2520): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r2, 0x1) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) shutdown(r2, 0x1) (async) 1.435723932s ago: executing program 1 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x4000004) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}}, 0x0) (async, rerun: 64) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async, rerun: 32) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xd9, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9d}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc4}}, 0x404c840) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) 1.205402795s ago: executing program 1 (id=2522): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ec0)={0x30, 0x1e, 0x221, 0x70bd2c, 0x0, {0x7}, [@nested={0x1c, 0x144, 0x0, 0x1, [@nested={0x18, 0xf3, 0x0, 0x1, [@nested={0x10, 0x28, 0x0, 0x1, [@typed={0xc, 0x48, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x44}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x490, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x1, 0xfff, 0xfffffff8, 0x4, 0x7f, 0x2, 0x2135, 0x0, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0xa7fc, 0xffe, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x2, 0x7fff, 0x4, 0x4, 0xfffff89a, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x80004, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x40000, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0xffffffff, 0x6, 0xa0, 0x8, 0x6, 0x7, 0x100, 0x200, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x0, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x10e8, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x10000, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x400, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0xfffffffe, 0x8, 0xfffffffe, 0x0, 0x4, 0x7, 0x44, 0x3, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x0, 0x4, 0x7, 0x7f, 0x5, 0x4, 0x81, 0xffffffff, 0x8, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x7, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0xc, 0x8001, 0x10001ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x107e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3ff, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x2, 0x3, 0x7, 0x6, 0x8}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.104147265s ago: executing program 1 (id=2523): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x1, 0x6, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0800000000000000000000000800009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.083325326s ago: executing program 0 (id=2524): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x1, 0x6, 0x80000000, 0x6}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x65, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000000)="24a5d138f68d5af006c5902f71839c97f56ec4277ac9a64426c9194cb2d1f0152622f21a19beccb98bfc8a76e7c7", 0x2e, 0x24004810, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) 983.971506ms ago: executing program 1 (id=2525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7d}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x9, 0xfb, 0xfffeffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x0, 0x1, 0x7, 0xc}, {0x1, 0x3, 0x2, 0x6}], 0x10, 0x55}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e28a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000001000c0000000000000000000000000000000000000000000400", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000008900)={'security\x00', 0x1000, "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"}, &(0x7f0000009940)=0x1024) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r7, r9, 0x25, 0x4, @val=@tcx={@void, @value=r7}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x4, 0xb, 0xa, 0xde17, 0x0, @empty, @mcast2, 0x0, 0x7, 0x5, 0xc3}}) sendmsg$nl_route_sched(r6, &(0x7f000000ba00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000b9c0)={&(0x7f000000ba40)=@newtfilter={0x2acc, 0x2c, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xb, 0x5}, {0x0, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x137c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x7a}, @TCA_U32_INDEV={0x14, 0x8, 'wg1\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_macvtap\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_ACT={0x1338, 0x7, [@m_xt={0x14c, 0x9, 0x0, 0x0, {{0x7}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xb0}, @TCA_IPT_TARG={0x77, 0x6, {0x4, 'mangle\x00', 0x5, 0x3ff, "8fc7f144abc544dbfdea608c84fdaa467e92a215669eb9a391cabf868a989602c0f67c11e50618b154c063be3d375a6068261080f69daec7379a1872e09e4b4bf69bf45ea8781d2d0104ed3822"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x78, 0x6, "083cb62fc8e14d20ee983970b229c9750fc50620eaba7c4e749649b9f2715d38c39896e8a02f3d3b8d2d8011887a1a9b488bcf2850ce5db6cabf149df96f22704ec7bf85e5c024033865a75fb23e382a554d53bbed54a07c261c592d1b27351794a2b5da287bcce31ead57b83861e9be9d6701b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x110, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xcc, 0x6, "181ae2c77899b3ee485d2a0b2a16d6fef48d7178eabd13c380be969dff17d21ce19abebe29b1cc5e1bf4883b9ec2746be15e5bff8521c58b726ae806fbbb6effe7c2ac65b7dee9a243bef4a3274b3deaf253df8d855a8c580cb1d9a1310b376d1bab4aa4bb18c8d27262cdb4f81283a0d14ca96d9ff5f6e74e8e302dd6c27ccd1180077fd95a851686134dabd451024b165336f42e05b84352afa8340ddd255386d5ec6050b22f3c9e919791e369493b1de029657f1bec24d8d0c1efd8583d28bdebbff47796bbbb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1050, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x10001, 0x20000000, 0x400, 0x6}, 0x1, r10}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x88, 0xb, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff9c38, 0x4, 0x4, 0x4715bd9e, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x8, 0x2, 0x2}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0xc, 0x1, 0xfc1, 0xffffffff}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0x214, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffe}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_ACT={0x1c0, 0x4, [@m_mpls={0x134, 0x12, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7f, 0x1, 0x3, 0x10000}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd2, 0x6, "e5db8292cbf869cce6ab9cf4b58594658ba5f1b7a19c09a58b1e8a33309472961f89bd27ddbfdaead1447a2869b5ee9424c40d2c17a512c6f29ccd798e8f1e0aed51110bc171c5d637edef8d1343a00f68df06d53df1cbb5746dae75cf3d6cfe154220c03e1fd8f89d5805d7ed4731cb9128d2143ebbe2b3977b17f4e58d288b103e8ea147b5a237070fe719726fb368dbc062ed16fc3fbc774ae266165791d158d26dd5352959262c6528c63249e33c969075e1f25ca7343cfb5c6858aa32dc0b29e17fa75139811d85e50b7c1c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x88, 0x1e, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x16, 0x6, "d60c77bd921e927c6b3ff68dc7fd6895d0c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x14dc, 0x2, [@TCA_ROUTE4_POLICE={0x90, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0x1, 0x2, 0xfffffffe, {0x6f, 0x0, 0x7, 0xff, 0x7, 0xfffffff8}, {0x20, 0x1, 0xc000, 0xfff1, 0x7, 0x8001}, 0xe, 0x8, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0xfffffcfe, 0xd, 0x3, {0x10, 0x2, 0xb, 0x9, 0x4, 0x3}, {0x4, 0x0, 0x0, 0xd6, 0x3, 0xfffff000}, 0x5, 0x8000, 0xc1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_ROUTE4_ACT={0x1448, 0x6, [@m_tunnel_key={0x170, 0xa, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x20000000, 0x8, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x229d, 0x7f, 0x8, 0x8, 0x9}, 0x1}}]}, {0xf1, 0x6, "4922326f4469dd5e9ad3df52c8a0f8bdce092e0cb97d47750c4d75607e3ca1aefa918d00383b5a41e448e6e9aff978d0e424c93069a9ecf544db9611b96f272f4c8506ecdf8c40ba9e7aef50f7e36c14a044dab32693ec70a759e056e04cc52c353cf15502b9a88a5f350e64045efbe13db423efb9671282328ce52e2f190a643c2d438891393d5943b4ece2bf8ce234f33bc6f99365c1556d6fc8cc42e57b09858f91895fd366a3b86bf7e8d987d606205a5ec634f2458e5cbe0b6e129ad3eeb8e8065b37090f8f2cb30b7e9bf962250ea0e07128f96830cc3f8268b8f8b2cf560a9a1f2d4f2881d3081663a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x12c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4a3, 0x10000004, 0x2abc, 0x3800003}, 0x1, r10}}]}, {0xe0, 0x6, "4d480d2fc73b07f47f8a6456cabf8af99edc5f6068eb3d20281f72c6b1f61cea86c779e585795334fbb9f854c7a845a8060f711c89f6c6bc0a55b6980bd531155dafbb81352ae85b0f1f6446426c8a9806681b0fab07833ac30e2b338184e5030dbdc9f8dc1ea910461a63ec14115b6d81020e3e5798e2989781d43326a306559afc4be5cdc2faaf73101c0468b5864b9db17a5766a2bd009d9924564cd3681f002a1885b788de6d905a8b7ee32f3b6c775d559d6b92f2fa8be0695cf2bed1be18a4af58cabe46d1f00f1186f04240ac708f73c8d831e02d5c0df209"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x10b8, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xe39, 0xfffffffe, 0x4, 0x10000, 0x9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x3, 0x7, 0x8, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x375befbe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x5, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb251, 0x5660, 0x10000000, 0x10, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0xf0, 0x14, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x91e}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x10000000, 0x96aa}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xc14a, 0x2, 0x7f, 0x1000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x7a, 0x6, "2a4ab1cbad17e2d9c24ccc3ceff46e5cc1a98cb31f66abe7f427e24a4dbb500e5195a3ad3d1e59bd9e2a583c13198681ba7fb83ffcb4a184c7fd2c398aa05b5e45b86715ea92bfa6b2e1fe23c94e930bf58d67fb7e20b0b71c5fe0e6cacf85a035a6aee2551b1d6ad7b276fc044e0418b5ca4c8be865"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2acc}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r11 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c) clock_gettime(0x0, &(0x7f0000008880)) recvmmsg(r11, &(0x7f0000008700)=[{{&(0x7f0000000500)=@rc={0x1f, @none}, 0x80, &(0x7f0000003840)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/25, 0x19}, {&(0x7f0000003800)=""/26, 0x1a}], 0x3, &(0x7f0000003880)=""/233, 0xe9}, 0x5f}, {{&(0x7f0000003980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000003a80)=""/69, 0x45}, {&(0x7f0000003b00)=""/40, 0x28}, {&(0x7f0000003b40)=""/9, 0x9}, {&(0x7f0000003b80)=""/191, 0xbf}], 0x5, &(0x7f0000003cc0)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/177, 0xb1}, {&(0x7f0000003e40)=""/13, 0xd}], 0x2, &(0x7f00000003c0)=""/9, 0x9}, 0x10001}, {{&(0x7f0000003f00)=@hci, 0x80, &(0x7f0000004240), 0x0, &(0x7f00000042c0)=""/4096, 0x1000}, 0x100}, {{&(0x7f00000052c0)=@phonet, 0x80, &(0x7f0000006500)=[{&(0x7f0000005340)=""/252, 0xfc}, {&(0x7f0000005440)=""/184, 0xb8}, {&(0x7f0000005500)=""/4096, 0x1000}], 0x3, &(0x7f0000006540)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000007540)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000076c0)=[{&(0x7f00000075c0)=""/245, 0xf5}], 0x1, &(0x7f0000007700)=""/4096, 0x1000}, 0x6}], 0x6, 0x2000, &(0x7f00000088c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x400) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) 890.756531ms ago: executing program 4 (id=2526): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001300)={0x1134, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x1110, 0x11b, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @uid=r1}, @nested={0x1101, 0x136, 0x0, 0x1, [@generic="bba5527a1d359f8450a818d048b801e6e3cb043090c9b0f2c8e82b4a1c8d65a6951f7dd9a64098907b1d1fceb75fcbf43280db4f0d7b69717c3726a6625239d06105f2221593a326fd9570379cb829a7a27a83a485e25384d825b3f13d3fbe052ed6a5cd562779690698cc992e2d5e6b23599cb5c4b123d134367f22cbbb4fbb2bce3067997cd2b02d5e3610cf5b19ccdf4426b240c999", @generic="9f55a3f3523dda0a7a04d12d3a71826aef4617ec5975ea7f1d3264c77ec428f2fb4703ef09515e731b7d669e6936f994c103c377cf96413c4c369262b3249dc54e12bfbeaa7553b55fa4b60af75e", @generic="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", @typed={0x14, 0x149, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xa1}]}]}]}, 0x1134}], 0x1}, 0x0) 813.693539ms ago: executing program 3 (id=2527): r0 = socket$inet_sctp(0x2, 0x0, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r3, 0x4, r3}, 0x7) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0xfff9, 0x6, 0x8f, 0x8, 0xc6}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x40400) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket(0x1e, 0x4, 0x0) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16=r9], 0x14) (async) unshare(0x26020480) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 760.239884ms ago: executing program 0 (id=2528): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x4040004) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x18, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a060400) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt(r6, 0x9, 0x8, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800800001000000000017ef000000ec9d0002"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 671.085676ms ago: executing program 1 (id=2529): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000002c0)="4cf7", 0x2) splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0) readv(r0, &(0x7f0000001900)=[{0x0}, {0x0, 0xffffffffffffffbc}, {0x0}, {0x0, 0x1}, {0x0, 0xffffffffffffffa5}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) unshare(0x64000600) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r3, 0x36, 0x4, 0x0, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061f350000000000073014200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa7482fd, 0x8, 0x25dfdc00, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0xa00}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 651.752628ms ago: executing program 4 (id=2530): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f00000004c0)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) close(0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = epoll_create(0x3) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000013c0)={{r7}, "cb0f6000c02f3fb08580e167960e72225e7200caa95211d765b2a82067591b1d9077550c8776226e79d132e51ec5a8885b7567bcc3422b3249e12c55e5762409d9e51b5aa07abbf0cc66566191cbed4b59826002405d8675bea3b70731618d0e7db0ade17ade5a45f9fcd36907e27cf00704bd9173ecd5f663876094768ac09255c76d87f4d79a541788b67dcc3f3a30f269d12a589f65121bb84792d7a1bbdc9a44116db6cd9318771ddabe3fd2c25fb7e9526666ab586858651acfe48061cdcd86ff4d8547ba9848832a25a6dc6cd1b2da8157bd9d67c96c1d42c939afb8d7d34f66aa941ec1b7ed5c1bb479edb15a041dcce24e5520da665e4f3997a9f7ab8994cf06762f46a6b8c241be367888a32958104da59c02519192b617d235480e363452e89d240937208559f3e9a1978222e486cce5e1e5104d9f843a097315471117b8b332e255ad93fbedb86d76d4f655adfdfecc77e96066f9ea6baed5e7bc85c90eee1cbf88e38e038a2d51eb9fb4bf8bdbe46d4a6ddf635686aa0764890d6360114fee546516da7a57d60bb2ccc40e709b55ea24dc30a612fac92d071ca2af3dc02a630d0bcb5b9aafd1f810c28b4c0dc8a798ca5ae79fe9e62ab11750ba49875ba1d6453a1496056d2fb4a943e881bc73c28542a10382d4cc66e5f06073fcf45f1903acd74c5567350ec54375e2a501dab9585bce72bf57bf7fa2e6df69b3fe99ebe478258d1f70a3f1ed88297285b2f8c72bceeeaeae4e908781315ac391bc52dc7396f27ee22e06be504ca67b82a7d27f431c89616dd798b13c241877fb61304f88cacb1783a3857cbae427ac0c30a2c90dc6cb5daab1d528179057a006b5aebe2e0c276fe14761807920f7462e8693b7412e97ee963723f1876c08302b1498635b8fb9e7b1963ba56fb0ede583ca1cd4911986aff807cf3c4d2fbca6aa29ca3bd0a615a997fc748c941b527525103f0087ea83c96e13a1e032861e3f3cf9ee4285f20f53e37352ed0c2d0758be0718cf8eab3c9d9cf699e3b9743c99afee4368992096b88c385199a5202052ddcd1eb8b869bff3059dfa0caf81200f26b66f9086eb74468f9a15fe5164459653066400973ce17ef33a4087724f56f6f985ff7e0fe6673631d8743664ee030c9e13130f79da5f5e9b25f73f6d082379cae951679d05d476be898b119fed7f1c94c8447ea4a9a53175d2dd1c25b190b140dc3619f9536d831feb6f0ba0a03481f91602535a305db901985f33b6c12f2d7a816e31dc4a65b773ef2a0d921eef2b14b2e17d4440a0078736d0451885f7fffc3b7e4fb7e6c61aabe6bf3db322261153a82897b3b9067ba2816722617cd7d73f33ff5cbf0fcd12ccf941f3ccd23addcb17de5c8cf3d272aa691d5a52963b6bb8d0560623f3c21617f3cda49685394a094b442e8c76503ccb87017fa0c1c2cf8f9ef782c6c4351a8db46ef31c720c6c1dee5e075ae0d3142f75c4c616a21e8f1dafa73a45d15177836069f431b538d7b36d4785c0b1e9e90bfe3e5926c462ff01fe2c17bc5127b5c6d133bd83e2eac97ba5a3a9c26c7793cd7d082df77f57331b2db328f7ca36c5a219c4cba54f24166339a461e8e7021bd2b073f13cfb64c63d4bf376ea4cae40e70756af7f5c3cb2d54d00b14e65acd38f0ca16731ab95eb8d44026a480f5723aa0cb28b293f31042f9f058c15824471cc800ed7cd0ac22cc6026657a3db28e8c30302e04359c3065dd2eb408b57fe6349f0eac860d50266f2637a39eb46db8308e50e8d0a407cbe36d5a5e820aaa3ba1ee72f1bd4522ce374d38614d4a21fe7393f13969af337e8e0cf9e7f6c498ea32e2f95a1793bb248660c31e4fa6a34b6878163d1f41dfadd96367e35e6816eed6e1d4422686e4ee7c6f7d5e1a5576976215c97e479461740cd1fb6e5817c442c53c0dde23ea3f21180ea35299537b3062de37c5a923d16aa397f2e4a65d8492affe3a0361bfb461e9b62b7b3474f1e33f347e6d7e0400803d9515b6c504aab4a65df47c4b8a3d6079c26b49eb622dc6a5c1a1d4155b1c72ab3d1c3a713ed41cdf68829d83cb9f072e065b9fee08206645d3c8caf77018bbb43c955c18801942a802236b9a272873e87cc04c88af10e725374fd7de74f011619d3e0bf798b4d62b9d92b2712023f78f9b4245ccfe7c54fa0dd24e33dfb63808b9d6b3acddb1dc269a061751372cb761bdf2c5e8e3a5b5b9d6f226173b4197d604568bed8ccdddf20a4dbb6683089b2aded3da229a89886e03bc2daa8a2b858320a266258f69435fd23db37a63c16a7dec4a17caab696d1e1c2b4fa544a101000def2900a684be27cf2aa92fcb1cc3459e1ba731bb64fcc8a69d7d2ec53d2f98be3e878643139293132a00d9c433f0901066917be7800711b989ccaa7a36c52ac3fd0770b2eb5a9e7654815c1ace4e25866f9ba714ab3e4e7ba53cf2760cf54ac84c7a1e6e29dd914d02ec9aadbc8c906363f400e36427c32d6d2b615df255c8b887d522e37c49d7ef5db2f287c3a8e5b1b3e29ced1aef86f6c64546744066e18fe4139df135891d0afb5f2ed00272a82f2f40e16f6c4e1c66c81a5ced67829490720b7b58d9ea54b88388237751b0be0db7e5304b34fe5c42f31e6f6e4eebf8853d55d4dcd63b66e1057962cd4852d2bb91efb0477ddcd7410b9762bdd24f7777d440ec6385ac50176632e360693771c31c3ecfa3f1fd264e0c39eb0f78e636ad817a1f58aa3bde9cf8b40403b3b98f060c58ed0cea75a85c8171a53b4830c29b8ecea9302a55332f97bda6e99b4ed3ce26866aebe35e38d64c0da52d7571e6286b05e92bb74b2c787f16eca6d7f6bb764380ef104159120faa80e09b3dea21a61a3908bba81a75c799b8a59ece7c1833f2734740aa121b89c3730e0f0a6ed5f1ec25117109fa4809944a10e58b6e7d4d2fd21bce577b5cd5c5e2cf479bb6bf4d7b47c10aa214403fd2524185514fff54dcfaba8c4fff11948051fd1388c34dfc19af8df511609bfef5643e8355de873acafa444121d039493f39491905411cb97f4ecd6213a476ed685cce8f65440d6a4dbd2482293f73423d8d7e24f84f3bc85ef9bb8d81e3f7640962ccf39a93c50a87a41498e1183f9aca933e2f8936da316c21d846404a47e6100bd566a5c62d1cb3497a12ad48616e7f4d0257fa9b4cc2f7273cef9a0b1d537f6bc8c1f0bb1001dfacc15e287ff1b9f59ddc29d670a4f9fdd9d402a2d47c4c108455148bde0a8837961098b2c9d40f844422dc63e930053b632622ab4888700b1f8ddc5d3fe5459d8349ccaf4865fd4686b02deac636c9b74e4045abf8b85fb250908bc43c2a23318c3b35227531bd6b33b033db2a08872a0fde26d617ee7f4782e9b0cc7e74f1dea69ca8e4986752444be87efa476e7b5e68eb79ca3edb34985e194b9bad604bfa60ae29b0200b3f07c54a3611f9d47f65b9160e6c7df7f6ca5104cfd5a64ce3bd9f34f08bee36fa8268c10bdf8318f2505c70fac4580945142d6086826bf27c111c695623279b538d82b9b7a61d4df15d9fbcffcefd5fd7a152ad7b8f6c6e58f1c6db2eecb059199d5a7b31b82768917beef57b8a071cea7df9918fd36576a142dad6ce785b310dbdb5bfad555e698956e0d64aedf5f97bbd3b3dce2b37b7569b965f0980e41ed47db04cf34e3368405b86bef107dbb0e514333d9814963c7a4aa65e81aebe0862e0a2fbce75e5d2445c4a37d35fa83cdb6610d27eafe35dfafa71508838e191a1e25581e42fa2605116f02796a33c91fb9c553163ed67848e4d6a2742f52714a11767a5b5024aeaeb83cb6b504df06fdd91494a9b76014eb17a1045560d8e028858b7748d9323a266934b84465117dd3c6ec0fc26da56cde3fc94ada2cb0d91387e5d4675d7af1561cade8e8cfa9a1503b04c121f0bb3878bbe8221d63f424f9d651f8795babb24bd52bd445d12e424628c5a5e05d57d21e0459087e693c9a1d77dbc292ab6bd96e2d32b211708b0315109832c6563827b1cd2c0f383835f5468b8cf93286967faae8dd885e9149e478e3036723dbe5e4537ed2cd4d760f995b682f05d1408b9902a542ea901661afa18f735c7879c807e19da7ce2fa9d33a7c11f98fd4657eff8996e10a3fbc0c151acc17021df1404e80de450bcc6ef1939e8825c731c2a24214bcc8dbfc34bbd76c701b7f369e12c6e2c77cf009dd57fbddb01418d15c57e9878b148472b6dec0d5a0b327840fc0815810d2fe468eeb87a1178474fe66e48c21c4ce81e67d1a632399697a8e21347eb1fc269083ebcf5d91cc8fa822418e022fd44c4909e44274919fe69ef6d4c07aee24c87add03b49deb6db5d662d88fe7f723cc68b4c3e9d0eb604ee42bb96b939b80f4c71444e9413ced3c34ad272a173d8bc8fc0b280e33705bb663b1284c7c0fc6568f762a97db7d4e8ab782a5516ffb126e2985eee8dd403b0247020798f6ae3052aed115ca718a7deb6d32cd60609c4fab0b7c0f086af650c4d57187e0f46943fbd2a24efef95cf5d1e6370128c5533849341c492affe4e1bbff497b256ae7be22b1f5e8144206779fd86795fc370ca76bf925046025b23ebe3b03d09137982ea01d0701d0f9defaf8d2697e36c692c8134c697a580b41676a9ab3d5de2c71f86742b038ee65759a13c4cbb3d0e337edb3dc9463f2cd36a660395f83557919d1d8a1a9e2c56bf91d172f77280ee6e422dd0ddfef818763d87c774408456e27c16da695649cfc58d134b541a5abc1af4869dd96bee53a7c41af5e24685fa2d225ade55fff4c0709c1532fbe5ddb97513a9b9c60a46ddd0443f36b15da786f73551aec92c28806551bfd95f36ee10724e0e2641f5d19df8223afb1c46af5112ec95fe344b2054ff68249f75b07078bdd46cb5a64ec3276dd605df4c21ce57c44250597ab2ce3856813e78c40d514280f29a8b2c85697b5d179d318522f9cddd4b4759aa3f83edd36abcd92a081d01ace7a38e0d91316eac5f5fd16c4aaccb6a5d8d3dfba5a0df693662f9c5c5517f2e93ad364766c105bd590194a62de7ab3aab3debcb9ec5fcf7e4abe3195b76cdc052e554a5887a29b0bad459b3f38a967f7b720249bcb77239fe74c7bdd28956632f5425423afc8c096c14bc3d775245cbdd6d9ecc9661b76060ce9d19fb26a8f761e6eb7caa274dea6ef5f49047fd8c9bc1ab4799f1542584ab9195644a4c270933fbecfaf7b927366a4ff294f5f017d8818a7f7a8099f56cdbf585cd8ee81329df6c56b0b52e575aaace5fb1fa784175233d64284fbc8afc56718e09a138ce18eb34f8b85930923c06b5be994d9cbc25961d77ac892c82232bce705e6b290392d7fbff2aaac62342efb813e1a8176395eca4cdb2ed70d73e096dc3418ec7020efee0cf029e55af1d74f66781882bfffb10becc84c8aae17d2756981e05f15865b15ad03c11a11110e3c85c10126ef050aa64b5c4b288080950380af1976ff3c2f0a038a9ef4d6b88b0a81ff50bc54075f9a37f38d12153e5aa9851776a8585c4a70b36e50bb33511d66454955f42c84604fc01799900d6dfbbd1fd7721365bceb99289468219ca530c6305d5e8912e93101e653344c78ea459b5a41cffa20b0c5f1f63eb58e431b977d1d7dc4389154584bdc256b5859ee36fedca458fa3fd551eecf37e7f2d8ccf2b8d32dba1383ff37a9a0e14d0e9a5f3fbe004f5776e0f0a33bc6f7d8e2724b46e16dab6fdbc4be038d6304a4affb59b777f2dc46220d53802a24b0c7604eea"}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f00000004c0)}, 0x20) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) (async) close(0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) epoll_create(0x3) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f00000013c0)={{r7}, "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"}) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) (async) 490.802498ms ago: executing program 0 (id=2531): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) connect$caif(r0, &(0x7f0000000000), 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x1f0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f0000000040), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xff, 0xff, 0x10, 0x6, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xe7, 0xbd60, 0x21cc, 0x4, 0x4, 0x40, 'wg2\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0xfffffffffffffe01}}}}, {{@arp={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 0xb, 0xb, {@mac, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0xa767, 0x5, 0x7, 0x2, 0x4, 'ip_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x3c2}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) close(r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000004c0), 0x4) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r1, 0x20}, {r2, 0x8001}, {r2, 0x400}], 0x3, &(0x7f0000000580)={r3, r4+10000000}, &(0x7f00000005c0)={[0x7]}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r2}) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000640)={0xffff, 0xf270, 0x7537, 0x1}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x140e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044000) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48011}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40a24000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r6, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa0}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x4000) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x3fa, 0x300, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000c40), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000d00)={'gre0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x9, 0x4, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x65, 0x0, 0xa4, 0x2f, 0x0, @local, @multicast2, {[@rr={0x7, 0xf, 0x3c, [@rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x81, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x80, 0x80, 0x7f, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000e00)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x7, 0xab2, {{0x50, 0x4, 0x1, 0x2, 0x140, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x25, 0x3, [{0x1, 0x5, "b9ee9b"}, {0x6, 0x12, "f50a7ef52035c26b60b3f102d2f892ec"}, {0x6, 0x3, 'L'}, {0x0, 0x5, "241736"}]}, @timestamp={0x44, 0x10, 0x86, 0x0, 0x7, [0xb9c, 0xc18, 0xb]}, @cipso={0x86, 0x47, 0x3, [{0x6, 0x12, "b403246795f19baa4bba495880bd7a6d"}, {0x2, 0x9, "a1961ad898961a"}, {0x0, 0x12, "03d6e44ec3f454a2c8aeb7efff781d00"}, {0x3, 0x3, "f2"}, {0x0, 0x11, "323036823122e1f491e98254e2bd6e"}]}, @timestamp_addr={0x44, 0x24, 0x7c, 0x1, 0x5, [{@private=0xa010100}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x4806}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x6}]}, @end, @cipso={0x86, 0x28, 0x0, [{0x2, 0xc, "893f734b9487fb7881de"}, {0x7, 0x4, "9709"}, {0x7, 0x12, "ea19ee901977455db1ebbe9813c8e7d8"}]}, @timestamp_addr={0x44, 0x24, 0x9c, 0x1, 0x3, [{@multicast1, 0x9}, {@remote, 0x3}, {@local, 0x18}, {@empty, 0x5}]}, @ssrr={0x89, 0x17, 0x26, [@loopback, @empty, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x25, 0x1, [{0x2, 0xb, "afc9542ea47a4174c8"}, {0x0, 0xb, "c05d8809fdbb25263d"}, {0x5, 0x9, "4c51e4c90817d4"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0x3ff, 0x7ff, {{0xe, 0x4, 0x3, 0x28, 0x38, 0x66, 0x0, 0x81, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x20, 0xf8, 0x0, 0x9, [0xa5, 0x1, 0x4, 0x8, 0x9, 0x561, 0xb]}, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001080)=0x0, &(0x7f00000010c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0x1, 0x58, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000011c0)=0x0, &(0x7f0000001200)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001240)={0x0, @rand_addr, @remote}, &(0x7f0000001280)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000013c0)={'tunl0\x00', &(0x7f0000001300)={'syztnl0\x00', 0x0, 0x8, 0x727, 0xd, 0x2, {{0x1e, 0x4, 0x0, 0x1d, 0x78, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, {[@ssrr={0x89, 0x7, 0xf8, [@empty]}, @noop, @cipso={0x86, 0x32, 0x2, [{0x1, 0x11, "248bb205a7f2688aa7a4cb3f479652"}, {0x6, 0x2}, {0x2, 0xc, "91584dcc2dce41a12648"}, {0x1, 0x3, '\a'}, {0x2, 0xa, "7c05c64c7a83e241"}]}, @timestamp={0x44, 0x28, 0x1a, 0x0, 0x0, [0x1, 0x80, 0x5, 0x4, 0x101, 0x80000000, 0x3, 0x7, 0x8]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001400)={'gre0\x00', 0x0, 0x1, 0x7800, 0x8000, 0x0, {{0x2c, 0x4, 0x3, 0xb, 0xb0, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0xf, [{@multicast1, 0xfffff38b}, {@empty, 0x6}]}, @ssrr={0x89, 0x13, 0x75, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @loopback]}, @noop, @ssrr={0x89, 0x1f, 0x45, [@empty, @private=0xa010102, @remote, @local, @broadcast, @broadcast, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x3c, 0xd5, 0x3, 0xa, [{@multicast2, 0x80000000}, {@broadcast, 0xe}, {@empty, 0x200}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0xd60}, {@rand_addr=0x64010102, 0x9}, {@local, 0x7}]}, @ssrr={0x89, 0x13, 0xa7, [@dev={0xac, 0x14, 0x14, 0xc}, @empty, @private=0xa010102, @rand_addr=0x64010102]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001ec0)={&(0x7f0000000c00), 0xc, &(0x7f0000001e80)={&(0x7f00000016c0)={0x7bc, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x1c4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8, 0x7, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x74, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4987}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x8, 0xf, 0x2}, {0x2, 0x7, 0x1, 0xc34}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x232f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0xd6, 0x6}, {0x8001, 0x2, 0x8f, 0x8}]}}}]}}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081) 339.348831ms ago: executing program 3 (id=2532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000001d40)=ANY=[], 0xfce) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x58}}, 0x8044) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r6], 0x20}}, 0x4000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)="0cf1f0264af1e85d934628fdc65aebdcf293be9f88f0ded73664c28bf56426d37e02e2fd4cba6044c922b4a461e612f5c64d2eb86430659754bf3e532c3cd0d4d3494344ab008d84d8bba8677c7b457f0f9478ad89757dd9e1746135944d583555376cc031377cf75004d8") 319.213934ms ago: executing program 4 (id=2533): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @flow_dissector=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xae, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000001000)=""/31, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 88.295142ms ago: executing program 4 (id=2534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x26, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) splice(r4, 0x0, r7, 0x0, 0x5, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) unshare(0x20000400) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 2 (id=2535): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000050018000100000008000a000200000045d7687a55adec497030d34fe6938df77b726c035909e0cb9517722c1dcb5ff4e387266d5ec22e7e1a8bd7102cdb32f1348ce0b684e118ad2200"/92], 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x0) (async) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x2, 0x2, 0x2, 0xfffe, 0x7fff}, 0x20) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r7, 0x8b32, &(0x7f0000000040)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r8) socket$rds(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): tman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.442972][ T8870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.539687][ T8884] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 177.709410][ T8883] bond0: (slave geneve2): making interface the new active one [ 177.719709][ T8883] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 177.824553][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'. [ 177.854447][ T8890] geneve1: entered promiscuous mode [ 177.873556][ T222] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.903494][ T222] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.932645][ T222] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.008983][ T8901] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 (while UP) [ 178.064610][ T222] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.342699][ T8890] bond1: option tlb_dynamic_lb: invalid value (5) [ 178.376444][ T8890] bond1 (unregistering): Released all slaves [ 179.154069][ T8932] __nla_validate_parse: 9 callbacks suppressed [ 179.154091][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 179.185418][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 179.936339][ T8994] netlink: 'syz.1.762': attribute type 6 has an invalid length. [ 179.967239][ T8994] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.019764][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.029412][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.060397][ T8997] netlink: 'syz.0.763': attribute type 8 has an invalid length. [ 180.097062][ T8997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.763'. [ 180.180321][ T8999] syzkaller0: entered promiscuous mode [ 180.197933][ T8999] syzkaller0: entered allmulticast mode [ 180.271892][ T9007] syz_tun: entered allmulticast mode [ 180.323116][ T9006] syz_tun: left allmulticast mode [ 194.520636][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.765106][ T9030] netlink: 'syz.2.773': attribute type 6 has an invalid length. [ 199.917606][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 199.947676][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 200.151841][ T9060] bond4: option all_slaves_active: invalid value (5) [ 200.191626][ T9060] bond4 (unregistering): Released all slaves [ 201.033329][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 201.105661][ T9115] netlink: 340 bytes leftover after parsing attributes in process `syz.1.794'. [ 201.279868][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.797'. [ 201.834183][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 201.843417][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.803'. [ 201.883440][ T9150] vlan2: entered allmulticast mode [ 201.889344][ T9150] macvtap0: entered allmulticast mode [ 201.896240][ T9150] veth0_macvtap: entered allmulticast mode [ 202.194696][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 202.874258][ T9175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.808'. [ 203.202736][ T9189] netlink: 184 bytes leftover after parsing attributes in process `syz.1.811'. [ 204.303556][ T9129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.944893][ T9212] __nla_validate_parse: 1 callbacks suppressed [ 204.944912][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 204.950422][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 204.969719][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 205.111300][ T9221] netlink: 'syz.3.819': attribute type 31 has an invalid length. [ 205.746653][ T9252] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 206.372597][ T9275] TCP: TCP_TX_DELAY enabled [ 206.644376][ T9288] lo: Caught tx_queue_len zero misconfig [ 206.849261][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 206.856855][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 206.863065][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 207.016253][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.467636][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 207.832569][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 207.859941][ T9334] netlink: 'syz.3.850': attribute type 5 has an invalid length. [ 207.860126][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 207.909959][ T9334] netlink: 48 bytes leftover after parsing attributes in process `syz.3.850'. [ 207.930153][ T9341] netlink: 'syz.3.850': attribute type 5 has an invalid length. [ 207.948449][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.850'. [ 207.988056][ T9344] sctp: [Deprecated]: syz.0.851 (pid 9344) Use of int in maxseg socket option. [ 207.988056][ T9344] Use struct sctp_assoc_value instead [ 208.140139][ T9333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.152794][ T9333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.268826][ T9334] geneve3: entered promiscuous mode [ 208.281124][ T9334] geneve3: entered allmulticast mode [ 208.384841][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 37578 - 0 [ 208.418200][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 37578 - 0 [ 208.504238][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 208.524766][ T9333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.536048][ T9333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.684080][ T9368] vlan0: entered promiscuous mode [ 208.703155][ T9368] bond0: entered promiscuous mode [ 208.715810][ T9368] bond_slave_0: entered promiscuous mode [ 208.724737][ T9368] bond_slave_1: entered promiscuous mode [ 208.732333][ T9368] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 208.740436][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 208.783777][ T9370] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 208.801360][ T9372] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 209.283710][ T9401] wg1 speed is unknown, defaulting to 1000 [ 209.301657][ T9401] wg1 speed is unknown, defaulting to 1000 [ 209.313156][ T9401] wg1 speed is unknown, defaulting to 1000 [ 209.593548][ T9409] sctp: [Deprecated]: syz.1.866 (pid 9409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.593548][ T9409] Use struct sctp_sack_info instead [ 209.630524][ T9409] sctp: [Deprecated]: syz.1.866 (pid 9409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.630524][ T9409] Use struct sctp_sack_info instead [ 209.694874][ T9409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.832639][ T9417] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 210.261030][ T9422] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 210.340640][ T9333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.375410][ T9333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.414321][ T9333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37578 - 0 [ 210.556893][ T9401] infiniband syz0: set down [ 210.566209][ T9401] infiniband syz0: added wg1 [ 210.616503][ T9333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.631745][ T9333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.657095][ T9333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37578 - 0 [ 210.670301][ T9401] RDS/IB: syz0: added [ 210.670783][ T9401] smc: adding ib device syz0 with port count 1 [ 210.697815][ T9401] smc: ib device syz0 port 1 has no pnetid [ 210.723289][ T5906] wg1 speed is unknown, defaulting to 1000 [ 210.733361][ T9430] __nla_validate_parse: 2 callbacks suppressed [ 210.733384][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 210.752189][ T10] wg1 speed is unknown, defaulting to 1000 [ 210.761046][ T9401] wg1 speed is unknown, defaulting to 1000 [ 210.945146][ T9440] netlink: 'syz.0.875': attribute type 4 has an invalid length. [ 211.059327][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.089109][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 37578 - 0 [ 211.111295][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.136655][ T9446] netlink: 256 bytes leftover after parsing attributes in process `syz.0.876'. [ 211.174728][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.198416][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 37578 - 0 [ 211.214943][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.230390][ T9447] netlink: 260 bytes leftover after parsing attributes in process `syz.0.876'. [ 211.287233][ T6536] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.308127][ T6536] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 37578 - 0 [ 211.337260][ T6536] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.371457][ T9449] gre2: entered promiscuous mode [ 211.412645][ T6536] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.430072][ T6536] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 37578 - 0 [ 211.446199][ T6536] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.460936][ T9401] wg1 speed is unknown, defaulting to 1000 [ 211.595140][ T9462] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 211.753442][ T9466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.880'. [ 211.926252][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.062515][ T9471] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 212.430478][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.479915][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.983701][ T9401] wg1 speed is unknown, defaulting to 1000 [ 213.079496][ T8608] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.115250][ T8608] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.149574][ T8608] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.185542][ T8608] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.222334][ T8608] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.270818][ T8608] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.295196][ T8608] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.323239][ T8608] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.692491][ T9401] wg1 speed is unknown, defaulting to 1000 [ 213.851698][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'. [ 214.299428][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 214.395889][ T9520] netlink: 276 bytes leftover after parsing attributes in process `syz.1.895'. [ 214.402134][ T9401] wg1 speed is unknown, defaulting to 1000 [ 214.460896][ T9525] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 214.461243][ T9524] netlink: 'syz.4.896': attribute type 4 has an invalid length. [ 214.869249][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 214.907951][ T9533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.897'. [ 214.989084][ T9533] vlan4: entered allmulticast mode [ 215.006752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.041395][ T9533] macvtap0: entered allmulticast mode [ 215.064081][ T9533] veth0_macvtap: entered allmulticast mode [ 215.677460][ T9560] block nbd0: Unsupported socket: should be TCP or UNIX. [ 215.883851][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 215.913651][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 215.969842][ T9570] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 216.109430][ T9571] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 216.246209][ T9580] wg1 speed is unknown, defaulting to 1000 [ 216.417554][ T9601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.917'. [ 216.551532][ T9604] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 216.764633][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 216.847315][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.899242][ T9614] syzkaller1: entered allmulticast mode [ 217.072907][ T9627] smc: net device wlan0 applied user defined pnetid SYZ0 [ 217.093459][ T9627] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.926'. [ 217.306714][ T5838] Bluetooth: hci4: link tx timeout [ 217.312686][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.342392][ T9638] netlink: 'syz.2.928': attribute type 4 has an invalid length. [ 217.390924][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'. [ 217.485065][ T9641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.531404][ T9641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.985201][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 218.031192][ T9653] netlink: 120 bytes leftover after parsing attributes in process `syz.0.933'. [ 218.041322][ T9653] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 218.050873][ T9653] netlink: 64 bytes leftover after parsing attributes in process `syz.0.933'. [ 218.372933][ T9677] bridge5: entered promiscuous mode [ 218.407345][ T9677] bridge5: entered allmulticast mode [ 218.475361][ T9677] veth0: Caught tx_queue_len zero misconfig [ 218.724982][ T9689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.734387][ T9691] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 218.786870][ T9691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 218.806098][ T9691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 219.107377][ T9720] netlink: 'syz.1.948': attribute type 9 has an invalid length. [ 219.400547][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 219.666490][ T9748] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 219.726616][ T9748] syzkaller1: entered promiscuous mode [ 219.738149][ T9748] syzkaller1: entered allmulticast mode [ 219.753985][ T9743] wg1 speed is unknown, defaulting to 1000 [ 219.765284][ T9750] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 219.991773][ T5826] IPVS: starting estimator thread 0... [ 220.099710][ T9757] IPVS: using max 23 ests per chain, 55200 per kthread [ 220.649894][ T9785] ip6t_srh: unknown srh invflags 4000 [ 220.920078][ T9794] wg1 speed is unknown, defaulting to 1000 [ 221.330223][ T9808] geneve1: Caught tx_queue_len zero misconfig [ 221.942960][ T9803] wg1 speed is unknown, defaulting to 1000 [ 222.073514][ T9792] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 222.415286][ T9851] ipvlan2: entered promiscuous mode [ 222.427010][ T9853] __nla_validate_parse: 10 callbacks suppressed [ 222.427033][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 222.632790][ T9841] wg1 speed is unknown, defaulting to 1000 [ 222.733058][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 222.780048][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 222.804057][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 223.113125][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 223.573066][ T9816] wg1 speed is unknown, defaulting to 1000 [ 223.631519][ T9880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.661312][ T9878] syzkaller0: entered promiscuous mode [ 223.680086][ T9878] syzkaller0: entered allmulticast mode [ 224.073257][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 224.085348][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 224.094793][ T9893] netlink: 'syz.4.993': attribute type 11 has an invalid length. [ 224.507432][ T9897] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 224.617565][ T9900] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 225.593237][ T9926] x_tables: unsorted entry at hook 2 [ 225.822364][ T9928] sctp: [Deprecated]: syz.1.1002 (pid 9928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.822364][ T9928] Use struct sctp_sack_info instead [ 225.886262][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 225.994440][ T9928] veth0_macvtap: left allmulticast mode [ 225.999740][ T30] audit: type=1800 audit(1776607174.098:2): pid=9933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1003" name="memory.events" dev="tmpfs" ino=1077 res=0 errno=0 [ 226.017827][ T9928] veth0_macvtap: left promiscuous mode [ 226.100712][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 226.225432][ T9939] xt_connbytes: Forcing CT accounting to be enabled [ 226.248648][ T9939] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 226.339092][ T9942] xt_CT: No such helper "snmp_trap" [ 226.691930][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 226.800699][ T9916] x_tables: duplicate underflow at hook 1 [ 227.904598][ T9978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.935386][ T9978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.985497][T10009] geneve1: left promiscuous mode [ 228.013155][T10009] bridge5: left promiscuous mode [ 228.245255][ T9978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.263498][ T9978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.391935][ T9978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.425376][ T9978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.537184][T10017] wg1 speed is unknown, defaulting to 1000 [ 228.570049][T10027] __nla_validate_parse: 2 callbacks suppressed [ 228.570070][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 228.621625][ T9978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.642620][ T9978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.668403][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 228.963861][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.978020][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.036247][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.054835][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.135917][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.162645][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.236071][ T8607] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.252732][ T8607] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.893995][T10057] bond0: Error: Cannot enslave bond to itself. [ 229.930302][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 230.039185][T10052] "syz.1.1031" (10052) uses obsolete ecb(arc4) skcipher [ 230.396215][T10079] ip6t_REJECT: ECHOREPLY is not supported [ 231.421173][T10124] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1047'. [ 231.753632][T10138] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 231.793123][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 231.902709][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 231.991758][T10115] €Â: renamed from vlan0 (while UP) [ 232.100816][T10152] mac80211_hwsim hwsim6 wlan1: Caught tx_queue_len zero misconfig [ 232.489045][T10169] netlink: 'syz.3.1060': attribute type 4 has an invalid length. [ 232.508090][T10169] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1060'. [ 232.592557][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1062'. [ 232.612677][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 232.991055][T10184] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1066'. [ 233.272858][T10198] netlink: 'syz.2.1070': attribute type 13 has an invalid length. [ 233.613679][T10207] bond1: option all_slaves_active: invalid value (5) [ 233.642643][T10216] __nla_validate_parse: 1 callbacks suppressed [ 233.642662][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 233.666737][T10207] bond1 (unregistering): Released all slaves [ 233.819833][T10220] syzkaller1: entered promiscuous mode [ 233.844979][T10220] syzkaller1: entered allmulticast mode [ 234.075616][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 234.094579][T10234] openvswitch: netlink: IP tunnel dst address not specified [ 234.163634][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 234.352579][T10243] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 234.398891][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 234.778710][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.802750][T10247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.268399][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.284238][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1095'. [ 235.286915][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1095'. [ 235.312549][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.335883][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.355106][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.373156][T10277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.389978][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.404693][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.434113][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.446488][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.576240][T10277] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.602883][T10290] netlink: 'syz.4.1099': attribute type 13 has an invalid length. [ 235.612177][T10290] netlink: 'syz.4.1099': attribute type 12 has an invalid length. [ 235.840554][T10298] xt_hashlimit: size too large, truncated to 1048576 [ 235.936824][T10305] –: renamed from dummy0 (while UP) [ 236.509444][T10335] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1111'. [ 238.582887][T10327] team0: No ports can be present during mode change [ 238.729770][T10353] xt_TCPMSS: Only works on TCP SYN packets [ 238.821685][ T8607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.837107][T10362] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 238.857540][ T8607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.864386][T10359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.883382][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.970536][T10369] IPv6: sit1: Disabled Multicast RS [ 238.985284][T10371] netlink: 'syz.3.1120': attribute type 5 has an invalid length. [ 239.259108][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 239.285011][T10378] wg1 speed is unknown, defaulting to 1000 [ 239.302017][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 239.472737][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 239.527126][T10397] syzkaller0: entered promiscuous mode [ 239.533343][T10397] syzkaller0: entered allmulticast mode [ 239.738348][T10386] wg1 speed is unknown, defaulting to 1000 [ 239.868258][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 240.258334][T10421] netlink: 'syz.0.1135': attribute type 3 has an invalid length. [ 240.319243][T10428] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.422069][T10430] geneve3: entered promiscuous mode [ 240.605019][T10434] bridge_slave_0 (unregistering): left allmulticast mode [ 240.640216][T10440] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1141'. [ 240.647514][T10434] bridge_slave_0 (unregistering): left promiscuous mode [ 240.683056][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.745476][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 240.770041][T10436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 240.995214][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1144'. [ 241.986266][T10485] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 242.318572][T10478] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1154'. [ 242.671522][T10485] bridge0: port 3(veth0_to_bridge) entered disabled state [ 242.679513][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.687255][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.654878][T10485] veth0_macvtap: left allmulticast mode [ 243.956373][T10497] tipc: Enabling of bearer rejected, failed to enable media [ 243.966068][T10501] vŠÅË: renamed from team0 [ 243.988604][T10478] bond0: (slave –): Releasing backup interface [ 244.133437][ T8607] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.178008][ T8607] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 37578 - 0 [ 244.190472][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1162'. [ 244.201418][ T8607] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.207547][T10536] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1162'. [ 244.228046][ T8607] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.246793][ T8607] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 37578 - 0 [ 244.266279][ T8607] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.277471][T10510] netlink: 'syz.2.1156': attribute type 2 has an invalid length. [ 244.295716][ T8607] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.314770][ T8607] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 37578 - 0 [ 244.332394][ T8607] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.359181][ T8607] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.395468][ T8607] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 37578 - 0 [ 244.424753][ T8607] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.559978][T10555] lo: Caught tx_queue_len zero misconfig [ 244.771798][T10568] __nla_validate_parse: 2 callbacks suppressed [ 244.771819][T10568] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1168'. [ 244.796033][T10571] netlink: 'syz.4.1169': attribute type 62 has an invalid length. [ 244.954558][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 244.977165][T10576] ipvlan1: entered promiscuous mode [ 244.988623][T10576] ipvlan1: left promiscuous mode [ 245.008940][T10582] batadv_slave_0: Caught tx_queue_len zero misconfig [ 245.019736][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1170'. [ 245.103863][T10585] vcan0: entered promiscuous mode [ 245.109739][T10585] vcan0: entered allmulticast mode [ 245.617115][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 245.667105][T10612] openvswitch: netlink: IP tunnel dst address not specified [ 245.965549][T10633] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 245.988058][T10633] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1185'. [ 246.577105][T10660] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 246.597157][T10667] wg1 speed is unknown, defaulting to 1000 [ 246.697260][T10673] ip6erspan0: entered promiscuous mode [ 246.710554][T10673] ip6erspan0: entered allmulticast mode [ 246.914506][T10680] netlink: 'syz.4.1199': attribute type 39 has an invalid length. [ 247.879573][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1207'. [ 248.223779][T10716] syz_tun: entered allmulticast mode [ 248.341904][T10719] syzkaller0: entered promiscuous mode [ 248.377827][T10719] syzkaller0: entered allmulticast mode [ 248.388372][T10714] syz_tun: left allmulticast mode [ 248.471017][T10724] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 248.504727][T10724] netlink: 'syz.1.1210': attribute type 58 has an invalid length. [ 248.532261][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1210'. [ 251.800589][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 251.947019][T10786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 251.975255][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1228'. [ 252.010055][T10786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 252.048781][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 252.071229][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1228'. [ 252.092539][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1228'. [ 252.273849][T10808] bond0: entered promiscuous mode [ 252.287194][T10808] bond_slave_0: entered promiscuous mode [ 252.299196][T10808] bond_slave_1: entered promiscuous mode [ 252.306712][T10808] bond0: left promiscuous mode [ 252.312051][T10808] bond_slave_0: left promiscuous mode [ 252.317990][T10808] bond_slave_1: left promiscuous mode [ 252.346596][T10812] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1235'. [ 252.348397][T10811] tipc: Enabled bearer , priority 0 [ 252.370084][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 252.385534][T10811] syzkaller0: entered promiscuous mode [ 252.399129][T10811] syzkaller0: entered allmulticast mode [ 252.430897][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'. [ 252.549783][T10817] hsr_slave_1 (unregistering): left promiscuous mode [ 253.755006][T10850] tipc: Resetting bearer [ 253.849731][T10807] tipc: Resetting bearer [ 253.929103][T10807] tipc: Disabling bearer [ 254.247241][T10877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.270684][T10880] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 254.308859][T10880] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 254.329032][T10880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.406760][T10880] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 254.423234][T10877] bond5: entered promiscuous mode [ 254.514276][T10883] vxcan3: entered promiscuous mode [ 254.537112][T10883] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.583919][T10883] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 254.789808][T10901] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 254.871399][T10903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 255.779962][T10927] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 255.966335][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.178902][T10939] block nbd0: server does not support multiple connections per device. [ 256.221472][T10939] block nbd0: shutting down sockets [ 257.185391][T10984] vxcan3: entered promiscuous mode [ 257.442367][T11007] __nla_validate_parse: 16 callbacks suppressed [ 257.442934][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1291'. [ 257.593043][T11016] bond5: option arp_interval: invalid value (18446744073709551615) [ 257.609472][T11016] bond5: option arp_interval: allowed values 0 - 2147483647 [ 257.621405][T11016] bond5 (unregistering): Released all slaves [ 257.891713][T11031] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1297'. [ 258.059094][T11033] wg1 speed is unknown, defaulting to 1000 [ 258.162766][T11042] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1299'. [ 258.455376][T11049] xt_hashlimit: size too large, truncated to 1048576 [ 258.906777][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 258.929483][T11058] team0: left promiscuous mode [ 258.946196][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 258.955622][T11058] team_slave_0: left promiscuous mode [ 258.962855][T11058] team_slave_1: left promiscuous mode [ 259.048941][T11058] bridge1: left promiscuous mode [ 259.067511][T11058] bridge1: left allmulticast mode [ 259.085390][T11058] macvtap1: left promiscuous mode [ 259.106616][T11058] macvtap1: left allmulticast mode [ 259.121045][T11058] bridge3: left allmulticast mode [ 259.134912][T11058] vlan2: left allmulticast mode [ 259.147391][T11058] macvtap0: left allmulticast mode [ 259.166413][T11058] geneve3: left promiscuous mode [ 259.187869][T11058] geneve3: left allmulticast mode [ 259.277657][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 259.534304][T11076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.614315][T11079] bridge6: entered promiscuous mode [ 259.624418][T11079] bridge6: entered allmulticast mode [ 259.714659][T11084] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1306'. [ 259.746415][T11087] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 259.810996][T11087] bond5: entered promiscuous mode [ 259.821740][T11087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.837105][T11091] ipvlan2: entered allmulticast mode [ 259.842814][T11091] bond5: entered allmulticast mode [ 259.864233][T11087] ipvlan3: entered allmulticast mode [ 259.895507][T11087] bond5: (slave bridge7): making interface the new active one [ 259.903436][T11087] bridge7: entered promiscuous mode [ 259.909399][T11087] bridge7: entered allmulticast mode [ 259.919229][T11087] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 260.016308][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 260.026781][T11096] syzkaller0: entered promiscuous mode [ 260.033101][T11096] syzkaller0: entered allmulticast mode [ 260.196198][T11104] netlink: 'syz.2.1317': attribute type 15 has an invalid length. [ 260.266749][T11109] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1318'. [ 260.780482][T11135] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 260.834132][T11141] openvswitch: netlink: IPv4 tun info is not correct [ 260.866742][T11141] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 260.880073][T11141] bond2 (unregistering): Released all slaves [ 260.911493][T11145] syzkaller1: entered promiscuous mode [ 260.917458][T11145] syzkaller1: entered allmulticast mode [ 260.925197][T11145] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 4294967272. macoff=96 [ 261.020917][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1331'. [ 261.595782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.619263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.876702][T11197] vxcan0: entered allmulticast mode [ 262.162135][T11210] ipvlan4: entered promiscuous mode [ 262.273333][T11217] Bluetooth: MGMT ver 1.23 [ 262.397521][T11220] sctp: [Deprecated]: syz.0.1352 (pid 11220) Use of int in max_burst socket option. [ 262.397521][T11220] Use struct sctp_assoc_value instead [ 262.498513][T11226] __nla_validate_parse: 9 callbacks suppressed [ 262.498544][T11226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1355'. [ 262.677208][T11235] macsec1: entered allmulticast mode [ 262.684449][T11235] macsec0: entered allmulticast mode [ 262.800088][T11244] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1359'. [ 262.811356][T11244] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1359'. [ 262.828544][T11244] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1359'. [ 262.934889][T11254] x_tables: duplicate underflow at hook 2 [ 263.430164][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 263.448821][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 263.551806][T11284] wg1 speed is unknown, defaulting to 1000 [ 263.840127][T11297] ip6gre2: left promiscuous mode [ 263.845424][T11297] ip6gre2: left allmulticast mode [ 264.159610][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1375'. [ 264.194658][T11312] tipc: Enabling of bearer rejected, failed to enable media [ 264.832037][T11336] netlink: 'syz.2.1379': attribute type 11 has an invalid length. [ 264.948424][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 264.981872][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 265.017213][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 265.197526][T11343] veth3: entered allmulticast mode [ 265.381163][T11355] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 265.497162][T11365] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 265.640859][T11355] bond2: entered promiscuous mode [ 265.663951][T11355] bond2: entered allmulticast mode [ 265.686352][T11355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.751867][T11376] netlink: 'syz.2.1388': attribute type 3 has an invalid length. [ 265.821123][T11376] block nbd2: NBD_DISCONNECT [ 265.862679][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.886208][T11376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.184193][T11394] netlink: 'syz.0.1394': attribute type 49 has an invalid length. [ 266.509204][T11406] wg1 speed is unknown, defaulting to 1000 [ 267.045492][T11427] tipc: Can't bind to reserved service type 1 [ 267.259233][T11438] x_tables: unsorted entry at hook 2 [ 267.351047][T11440] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 267.746912][T11445] team_slave_1: entered promiscuous mode [ 267.762857][T11445] team_slave_1: entered allmulticast mode [ 267.776678][T11452] xt_CT: No such helper "syz0" [ 268.050450][T11447] wg1 speed is unknown, defaulting to 1000 [ 268.233730][T11472] netlink: 'syz.1.1414': attribute type 11 has an invalid length. [ 268.253275][T11472] __nla_validate_parse: 6 callbacks suppressed [ 268.253295][T11472] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1414'. [ 268.784321][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 268.945823][T11495] FAULT_INJECTION: forcing a failure. [ 268.945823][T11495] name failslab, interval 1, probability 0, space 0, times 0 [ 268.973939][T11495] CPU: 0 UID: 0 PID: 11495 Comm: syz.3.1421 Not tainted syzkaller #0 PREEMPT(full) [ 268.973969][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 268.973980][T11495] Call Trace: [ 268.973989][T11495] [ 268.973998][T11495] dump_stack_lvl+0xe8/0x150 [ 268.974034][T11495] should_fail_ex+0x412/0x560 [ 268.974070][T11495] should_failslab+0xa8/0x100 [ 268.974094][T11495] __kmalloc_noprof+0xe8/0x760 [ 268.974124][T11495] ? tomoyo_encode+0x28b/0x550 [ 268.974160][T11495] tomoyo_encode+0x28b/0x550 [ 268.974194][T11495] tomoyo_realpath_from_path+0x58d/0x5d0 [ 268.974225][T11495] ? tomoyo_domain+0xd7/0x130 [ 268.974260][T11495] ? tomoyo_path_number_perm+0x219/0x630 [ 268.974285][T11495] tomoyo_path_number_perm+0x246/0x630 [ 268.974312][T11495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.974335][T11495] ? __lock_acquire+0x6b5/0x2cf0 [ 268.974380][T11495] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 268.974430][T11495] ? __fget_files+0x2a/0x420 [ 268.974459][T11495] ? __fget_files+0x2a/0x420 [ 268.974483][T11495] ? __fget_files+0x3a0/0x420 [ 268.974506][T11495] ? __fget_files+0x2a/0x420 [ 268.974536][T11495] security_file_ioctl+0xc3/0x2a0 [ 268.974561][T11495] __se_sys_ioctl+0x47/0x170 [ 268.974581][T11495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.974604][T11495] do_syscall_64+0x15f/0xf80 [ 268.974628][T11495] ? trace_irq_disable+0x3b/0x140 [ 268.974650][T11495] ? clear_bhb_loop+0x40/0x90 [ 268.974675][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.974695][T11495] RIP: 0033:0x7f392399c819 [ 268.974714][T11495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.974731][T11495] RSP: 002b:00007f3924851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.974753][T11495] RAX: ffffffffffffffda RBX: 00007f3923c15fa0 RCX: 00007f392399c819 [ 268.974768][T11495] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 268.974781][T11495] RBP: 00007f3924851090 R08: 0000000000000000 R09: 0000000000000000 [ 268.974793][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.974813][T11495] R13: 00007f3923c16038 R14: 00007f3923c15fa0 R15: 00007fff33dea708 [ 268.974848][T11495] [ 268.974870][T11495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.228081][T11498] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1422'. [ 269.291636][T11502] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 269.324271][T11502] vŠÅË: Device vxcan1 is of different type [ 269.465924][T11508] tipc: Failed to remove unknown binding: 66,1,1/185854580:3803083337/3803083339 [ 269.486389][T11508] tipc: Failed to remove unknown binding: 66,1,1/185854580:3803083337/3803083339 [ 269.498246][T11508] tipc: Failed to remove unknown binding: 66,1,1/185854580:3803083337/3803083339 [ 270.015246][T11536] FAULT_INJECTION: forcing a failure. [ 270.015246][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.051094][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.1.1434 Not tainted syzkaller #0 PREEMPT(full) [ 270.051124][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.051136][T11536] Call Trace: [ 270.051144][T11536] [ 270.051153][T11536] dump_stack_lvl+0xe8/0x150 [ 270.051190][T11536] should_fail_ex+0x412/0x560 [ 270.051225][T11536] _copy_from_user+0x2d/0xb0 [ 270.051247][T11536] hidp_sock_ioctl+0x244/0x650 [ 270.051274][T11536] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 270.051345][T11536] ? do_vfs_ioctl+0x1166/0x1530 [ 270.051380][T11536] sock_do_ioctl+0x101/0x320 [ 270.051406][T11536] ? __pfx_sock_do_ioctl+0x10/0x10 [ 270.051425][T11536] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 270.051469][T11536] sock_ioctl+0x5c6/0x7f0 [ 270.051504][T11536] ? __pfx_sock_ioctl+0x10/0x10 [ 270.051527][T11536] ? __fget_files+0x2a/0x420 [ 270.051551][T11536] ? __fget_files+0x3a0/0x420 [ 270.051574][T11536] ? __fget_files+0x2a/0x420 [ 270.051603][T11536] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.051625][T11536] ? __pfx_sock_ioctl+0x10/0x10 [ 270.051647][T11536] __se_sys_ioctl+0xfc/0x170 [ 270.051666][T11536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.051688][T11536] do_syscall_64+0x15f/0xf80 [ 270.051711][T11536] ? trace_irq_disable+0x3b/0x140 [ 270.051733][T11536] ? clear_bhb_loop+0x40/0x90 [ 270.051758][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.051776][T11536] RIP: 0033:0x7f793539c819 [ 270.051796][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.051812][T11536] RSP: 002b:00007f793626a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.051833][T11536] RAX: ffffffffffffffda RBX: 00007f7935615fa0 RCX: 00007f793539c819 [ 270.051847][T11536] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004 [ 270.051859][T11536] RBP: 00007f793626a090 R08: 0000000000000000 R09: 0000000000000000 [ 270.051871][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.051882][T11536] R13: 00007f7935616038 R14: 00007f7935615fa0 R15: 00007fff883b3b88 [ 270.051913][T11536] [ 270.469762][T11545] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 270.492549][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 270.619155][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1436'. [ 270.661101][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 270.906144][T11544] wg1 speed is unknown, defaulting to 1000 [ 271.747420][T11588] xt_l2tp: invalid flags combination: 0 [ 272.310370][T11609] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.338989][T11612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 272.552649][T11616] netlink: 'syz.2.1453': attribute type 12 has an invalid length. [ 272.606378][T11623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.609311][T11616] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1453'. [ 272.958468][T11636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1460'. [ 272.994950][T11636] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 273.236855][T11651] netlink: 'syz.0.1464': attribute type 17 has an invalid length. [ 273.255670][T11648] netlink: 212048 bytes leftover after parsing attributes in process `syz.3.1463'. [ 273.392154][T11651] vcan0: left promiscuous mode [ 273.409784][T11651] vcan0: left allmulticast mode [ 273.422608][T11651] 8021q: adding VLAN 0 to HW filter on device vŠÅË [ 273.433282][T11658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1467'. [ 273.444165][T11651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.922686][T11677] wg1 speed is unknown, defaulting to 1000 [ 274.036781][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 274.400773][T11706] netlink: 'syz.4.1474': attribute type 177 has an invalid length. [ 274.611202][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'. [ 274.749527][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 275.045596][T11728] x_tables: duplicate underflow at hook 1 [ 275.158143][T11720] wg1 speed is unknown, defaulting to 1000 [ 275.416505][T11742] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 275.608431][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 275.617076][T11740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1483'. [ 275.679073][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 275.690696][T11748] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.705719][T11748] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 275.815375][T11740] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 275.851632][T11742] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.982377][T11755] macvlan4: entered promiscuous mode [ 275.999070][T11755] macvlan4: entered allmulticast mode [ 276.039739][T11755] bond6: entered promiscuous mode [ 276.052897][T11755] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 276.086933][T11755] bond6: left promiscuous mode [ 277.005317][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.096806][T11796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1493'. [ 280.291195][T11832] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1501'. [ 280.301176][T11832] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 280.679572][T11846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.706061][T11846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.749172][T11853] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1506'. [ 280.772941][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 281.132571][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 281.145902][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1511'. [ 281.159697][T11875] syzkaller1: entered promiscuous mode [ 281.166465][T11875] syzkaller1: entered allmulticast mode [ 281.189612][T11874] 8021q: VLANs not supported on ip_vti0 [ 281.244461][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 281.264834][T11877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 281.415839][T11885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1515'. [ 281.777135][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 281.788054][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 281.789200][T11904] netlink: 'syz.0.1521': attribute type 5 has an invalid length. [ 281.798401][T11910] netlink: 'syz.0.1521': attribute type 5 has an invalid length. [ 281.818932][T11911] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 281.838655][T11905] pim6reg1: entered promiscuous mode [ 281.844592][T11905] pim6reg1: entered allmulticast mode [ 281.867660][T11904] geneve3: entered promiscuous mode [ 281.886058][T11904] geneve3: entered allmulticast mode [ 281.920653][ T6536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 43522 - 0 [ 281.930697][ T6536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 43522 - 0 [ 281.943615][T11915] netlink: 'syz.4.1524': attribute type 10 has an invalid length. [ 282.640869][T11937] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 282.647409][T11937] syzkaller1: linktype set to 0 [ 283.023861][T11935] team_slave_1: Caught tx_queue_len zero misconfig [ 283.223915][T11927] lec:lec_atm_close: lec0: Shut down! [ 283.514668][T11972] netlink: 'syz.1.1537': attribute type 3 has an invalid length. [ 283.650053][T11973] wg1 speed is unknown, defaulting to 1000 [ 283.989884][T11903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 284.154440][T11903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 284.386878][T11994] tipc: Failed to remove unknown binding: 66,1,1/0:600833855/600833857 [ 284.407283][T11994] tipc: Failed to remove unknown binding: 66,1,1/0:600833855/600833857 [ 284.417213][T11994] tipc: Failed to remove unknown binding: 66,1,1/0:600833855/600833857 [ 284.458458][ T10] lec:lec_start_xmit: lec0:No lecd attached [ 284.542811][ T6536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 43522 - 0 [ 284.647694][ T6536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 43522 - 0 [ 284.857696][T12014] netlink: 'syz.1.1545': attribute type 5 has an invalid length. [ 284.884709][T12014] netlink: 'syz.1.1545': attribute type 6 has an invalid length. [ 284.905322][ T6536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 43522 - 0 [ 285.034496][ T468] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 43522 - 0 [ 285.450818][T12042] ieee802154 phy0 wpan0: encryption failed: -90 [ 285.500026][T12042] __nla_validate_parse: 11 callbacks suppressed [ 285.500048][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 285.937421][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1559'. [ 285.969349][T12056] wg1 speed is unknown, defaulting to 1000 [ 285.977404][T12071] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1557'. [ 286.441934][T12058] nbd0: detected capacity change from 0 to 127 [ 286.483697][ T5838] block nbd0: Receive control failed (result -32) [ 286.491535][ T9075] block nbd0: Send control failed (result -32) [ 286.506776][ T9075] block nbd0: Request send failed, requeueing [ 286.523228][ T1674] block nbd0: Dead connection, failed to find a fallback [ 286.533529][ T1674] block nbd0: shutting down sockets [ 286.541189][ T1674] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.554066][ T1674] Buffer I/O error on dev nbd0, logical block 0, async page read [ 286.564147][ T9075] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.590922][ T9075] Buffer I/O error on dev nbd0, logical block 1, async page read [ 286.612600][ T9075] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.646727][ T9075] Buffer I/O error on dev nbd0, logical block 2, async page read [ 286.660582][ T9075] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.679983][ T9075] Buffer I/O error on dev nbd0, logical block 3, async page read [ 286.713511][ T9075] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.747376][ T9075] Buffer I/O error on dev nbd0, logical block 0, async page read [ 286.803437][ T9075] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.819764][T12080] vlan2: entered promiscuous mode [ 286.824937][T12080] bond0: entered promiscuous mode [ 286.843266][ T9075] Buffer I/O error on dev nbd0, logical block 1, async page read [ 286.859379][T12080] geneve2: entered promiscuous mode [ 286.878058][ T9075] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.914639][ T9075] Buffer I/O error on dev nbd0, logical block 2, async page read [ 286.933973][ T9075] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.951941][T12087] IPVS: Error connecting to the multicast addr [ 286.971647][T12093] IPVS: Error connecting to the multicast addr [ 286.977265][ T9075] Buffer I/O error on dev nbd0, logical block 3, async page read [ 287.013819][ T9075] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.035662][ T9075] Buffer I/O error on dev nbd0, logical block 0, async page read [ 287.068136][ T9075] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.096015][ T9075] Buffer I/O error on dev nbd0, logical block 1, async page read [ 287.152453][ T9075] ldm_validate_partition_table(): Disk read failed. [ 287.193221][ T9075] Dev nbd0: unable to read RDB block 0 [ 287.214853][T12104] netlink: 'syz.4.1566': attribute type 4 has an invalid length. [ 287.245931][ T9075] nbd0: unable to read partition table [ 287.372345][T12118] xt_hashlimit: size too large, truncated to 1048576 [ 287.388723][ T9075] ldm_validate_partition_table(): Disk read failed. [ 287.389637][T12118] xt_hashlimit: invalid interval [ 287.429561][ T9075] Dev nbd0: unable to read RDB block 0 [ 287.466347][ T9075] nbd0: unable to read partition table [ 287.585114][T12118] syzkaller0: entered promiscuous mode [ 287.597965][T12118] syzkaller0: entered allmulticast mode [ 288.449123][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1576'. [ 288.764701][T12177] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 288.800704][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 288.893729][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 288.917392][T12180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.949473][T12184] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 289.086305][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 289.234622][T12205] Bluetooth: MGMT ver 1.23 [ 289.249327][T12175] wg1 speed is unknown, defaulting to 1000 [ 289.542197][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'. [ 289.585085][T12223] tipc: New replicast peer: 255.255.255.255 [ 289.587076][T12220] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 289.602042][T12223] tipc: Enabled bearer , priority 10 [ 289.616119][T12220] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1590'. [ 290.117775][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 290.129159][ C1] lec:lec_tx_timeout: lec0 [ 290.135546][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.185731][T12244] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 290.197880][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.240797][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.246604][T12245] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 290.301153][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.339713][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.393355][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.419607][T12244] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 290.446258][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 290.515800][T12258] __nla_validate_parse: 1 callbacks suppressed [ 290.515820][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 290.822921][T12271] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 290.943084][T12275] tc_dump_action: action bad kind [ 290.953477][T12268] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 290.966555][T12273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1601'. [ 290.981938][T12268] syzkaller1: linktype set to 270 [ 291.345886][T12283] wg1 speed is unknown, defaulting to 1000 [ 291.510331][T12299] sctp: [Deprecated]: syz.1.1608 (pid 12299) Use of int in max_burst socket option deprecated. [ 291.510331][T12299] Use struct sctp_assoc_value instead [ 291.752583][T12297] wg1 speed is unknown, defaulting to 1000 [ 292.099927][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 292.732659][T12337] IPVS: set_ctl: invalid protocol: 50 172.30.17.5:20001 [ 293.543544][T12346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1618'. [ 293.545526][T12337] bond3: option min_links: invalid value (18446744073709551612) [ 293.578346][T12337] bond3: option min_links: allowed values 0 - 2147483647 [ 293.694481][T12337] bond3 (unregistering): Released all slaves [ 293.840613][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 294.400075][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 294.418756][T12400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1632'. [ 295.147845][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.156143][ C1] lec:lec_tx_timeout: lec0 [ 295.161477][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.222015][T12421] wg1 speed is unknown, defaulting to 1000 [ 295.773815][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 295.825794][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1647'. [ 295.862436][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 295.888837][T12454] validate_nla: 1 callbacks suppressed [ 295.888860][T12454] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 295.941437][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 295.980025][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 296.019325][T12464] bond3: (slave geneve2): making interface the new active one [ 296.040196][T12464] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 296.081584][ T222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 296.109199][ T222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 296.125962][ T222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 296.161601][ T222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 296.271381][T12424] wg1 speed is unknown, defaulting to 1000 [ 297.140635][T12503] wg1 speed is unknown, defaulting to 1000 [ 297.627431][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 298.094807][T12542] vxcan2: entered allmulticast mode [ 298.342940][T12550] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 298.434948][T12554] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 298.560506][T12554] bond6: entered promiscuous mode [ 298.567170][T12554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.603707][T12556] bond6: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.618511][T12556] bond6: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 298.630446][T12556] bond6: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 298.874953][ T8608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.910610][ T8608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.526350][T12585] FAULT_INJECTION: forcing a failure. [ 299.526350][T12585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.543059][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.0.1670 Not tainted syzkaller #0 PREEMPT(full) [ 299.543089][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.543100][T12585] Call Trace: [ 299.543108][T12585] [ 299.543117][T12585] dump_stack_lvl+0xe8/0x150 [ 299.543152][T12585] should_fail_ex+0x412/0x560 [ 299.543187][T12585] _copy_from_user+0x2d/0xb0 [ 299.543209][T12585] btf_new_fd+0x352/0xd40 [ 299.543248][T12585] ? __pfx_btf_new_fd+0x10/0x10 [ 299.543277][T12585] ? bpf_token_put+0x143/0x160 [ 299.543303][T12585] ? bpf_btf_load+0x126/0x190 [ 299.543330][T12585] __sys_bpf+0x4e5/0x950 [ 299.543354][T12585] ? __pfx___sys_bpf+0x10/0x10 [ 299.543406][T12585] ? ksys_write+0x242/0x270 [ 299.543439][T12585] ? __pfx_ksys_write+0x10/0x10 [ 299.543473][T12585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.543496][T12585] __x64_sys_bpf+0x7c/0x90 [ 299.543516][T12585] do_syscall_64+0x15f/0xf80 [ 299.543540][T12585] ? trace_irq_disable+0x3b/0x140 [ 299.543562][T12585] ? clear_bhb_loop+0x40/0x90 [ 299.543587][T12585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.543607][T12585] RIP: 0033:0x7f1481d9c819 [ 299.543635][T12585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.543653][T12585] RSP: 002b:00007f1482be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.543676][T12585] RAX: ffffffffffffffda RBX: 00007f1482015fa0 RCX: 00007f1481d9c819 [ 299.543691][T12585] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 299.543703][T12585] RBP: 00007f1482be1090 R08: 0000000000000000 R09: 0000000000000000 [ 299.543716][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.543729][T12585] R13: 00007f1482016038 R14: 00007f1482015fa0 R15: 00007ffe6f64d948 [ 299.543768][T12585] [ 299.971275][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 300.181747][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 300.190994][ C1] lec:lec_tx_timeout: lec0 [ 300.196134][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.724888][T12561] wg1 speed is unknown, defaulting to 1000 [ 303.427103][T12629] netlink: 'syz.0.1678': attribute type 3 has an invalid length. [ 303.627415][T12634] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1680'. [ 303.658124][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 303.797553][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 303.850497][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 304.063208][T12634] dummy0: entered promiscuous mode [ 304.081885][T12634] macvtap1: entered promiscuous mode [ 304.096225][T12634] macvtap1: entered allmulticast mode [ 304.106144][T12634] dummy0: entered allmulticast mode [ 304.151844][T12642] dummy0: left allmulticast mode [ 304.168356][T12642] dummy0: left promiscuous mode [ 304.207944][T12638] wg1 speed is unknown, defaulting to 1000 [ 304.589623][T12673] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.918073][T12671] wg1 speed is unknown, defaulting to 1000 [ 305.207843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 305.216482][ C1] lec:lec_tx_timeout: lec0 [ 305.222038][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.251068][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 305.279064][T12693] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 305.291689][T12693] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 305.523343][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 305.563394][T12700] openvswitch: netlink: Unknown nsh attribute 0 [ 305.807146][T12708] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 305.846859][T12708] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 305.887378][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 305.958369][T12708] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1702'. [ 306.189583][T12716] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 306.747961][T12732] netlink: 'syz.3.1709': attribute type 7 has an invalid length. [ 306.790323][T12734] ip6t_srh: unknown srh match flags 4000 [ 306.826879][T12734] netlink: 'syz.0.1710': attribute type 1 has an invalid length. [ 306.864677][T12734] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 306.880349][T12737] netlink: 'syz.0.1710': attribute type 1 has an invalid length. [ 306.890403][T12734] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1710'. [ 306.914797][T12737] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 306.928019][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 306.965999][T12737] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1710'. [ 307.050561][T12740] wg1 speed is unknown, defaulting to 1000 [ 307.591072][T12761] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 308.509621][T12793] wg1 speed is unknown, defaulting to 1000 [ 308.720609][T12814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.765090][T12814] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 308.772077][T12814] syzkaller1: linktype set to 260 [ 308.955150][T12826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.121326][T12829] __nla_validate_parse: 3 callbacks suppressed [ 309.121346][T12829] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1734'. [ 309.408538][T12830] wg1 speed is unknown, defaulting to 1000 [ 309.925076][T12870] validate_nla: 1 callbacks suppressed [ 309.925099][T12870] netlink: 'syz.2.1743': attribute type 8 has an invalid length. [ 310.053699][T12857] wg1 speed is unknown, defaulting to 1000 [ 310.237852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 310.246109][ C1] lec:lec_tx_timeout: lec0 [ 310.251378][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.859295][T12900] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 310.893084][T12902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1749'. [ 310.918739][T12902] tunl0: Caught tx_queue_len zero misconfig [ 310.974203][ T5906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.178029][ T5906] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.415726][ T8607] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.920208][T12934] openvswitch: netlink: Message has 4 unknown bytes. [ 311.944464][T12934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.117153][T12943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1762'. [ 312.440137][ T468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.485086][ T468] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.608261][T10518] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.926721][T12973] veth8: entered promiscuous mode [ 312.946424][T12973] veth8: entered allmulticast mode [ 313.035982][T12969] veth10: entered promiscuous mode [ 313.058920][T12969] veth10: entered allmulticast mode [ 313.176841][T12978] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 313.506793][ T30] audit: type=1800 audit(1776607261.608:3): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1776" name="memory.events" dev="tmpfs" ino=1645 res=0 errno=0 [ 313.584003][T12979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.712438][T12992] wg1 speed is unknown, defaulting to 1000 [ 313.840766][T13017] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1780'. [ 313.851620][T13017] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 313.944362][T13019] netlink: 'syz.0.1779': attribute type 3 has an invalid length. [ 313.985693][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 314.018729][T13019] netlink: 'syz.0.1779': attribute type 3 has an invalid length. [ 314.041308][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 314.253249][T13028] netlink: 'syz.3.1784': attribute type 3 has an invalid length. [ 314.287952][T13028] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1784'. [ 314.318172][T13034] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1784'. [ 314.440679][T13034] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1784'. [ 314.470124][T13028] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.538941][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1787'. [ 314.554619][T13028] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 314.770696][T13039] wg1 speed is unknown, defaulting to 1000 [ 315.257782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 315.266933][ C1] lec:lec_tx_timeout: lec0 [ 315.272033][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.420371][T13066] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1793'. [ 315.454283][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1793'. [ 315.731518][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 315.770706][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 316.278373][T13086] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 316.702787][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1801'. [ 316.758159][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.798784][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 316.844539][T13104] ip6gre1: entered promiscuous mode [ 316.905912][T13107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.277358][T13116] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 317.326786][T13124] netlink: 'syz.2.1808': attribute type 21 has an invalid length. [ 317.337422][T13115] vlan3: entered allmulticast mode [ 317.347084][T13115] bridge0: port 4(vlan3) entered blocking state [ 317.355786][T13115] bridge0: port 4(vlan3) entered disabled state [ 317.365671][T13115] vlan3: entered promiscuous mode [ 317.405337][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.109734][T13157] openvswitch: netlink: IP tunnel dst address not specified [ 318.285493][T13164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.902278][T13187] xt_hashlimit: size too large, truncated to 1048576 [ 319.004309][T13191] FAULT_INJECTION: forcing a failure. [ 319.004309][T13191] name failslab, interval 1, probability 0, space 0, times 0 [ 319.033434][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.3.1830 Not tainted syzkaller #0 PREEMPT(full) [ 319.033466][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 319.033478][T13191] Call Trace: [ 319.033486][T13191] [ 319.033494][T13191] dump_stack_lvl+0xe8/0x150 [ 319.033531][T13191] should_fail_ex+0x412/0x560 [ 319.033565][T13191] should_failslab+0xa8/0x100 [ 319.033588][T13191] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 319.033623][T13191] ? __alloc_skb+0x186/0x7d0 [ 319.033649][T13191] ? __alloc_skb+0x1d0/0x7d0 [ 319.033673][T13191] ? __local_bh_enable_ip+0xd0/0x130 [ 319.033705][T13191] __alloc_skb+0x1d0/0x7d0 [ 319.033732][T13191] ? netlink_ack_tlv_len+0x6c/0x210 [ 319.033763][T13191] netlink_ack+0x146/0xa50 [ 319.033789][T13191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.033817][T13191] ? __lock_acquire+0x6b5/0x2cf0 [ 319.033856][T13191] netlink_rcv_skb+0x2b6/0x4b0 [ 319.033886][T13191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.033914][T13191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.033956][T13191] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.033984][T13191] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.034018][T13191] netlink_unicast+0x75c/0x8e0 [ 319.034056][T13191] netlink_sendmsg+0x813/0xb40 [ 319.034095][T13191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.034127][T13191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.034156][T13191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.034364][T13191] ____sys_sendmsg+0x972/0x9f0 [ 319.034394][T13191] ? __might_fault+0xaf/0x130 [ 319.034425][T13191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.034464][T13191] ? import_iovec+0x73/0xa0 [ 319.034489][T13191] ___sys_sendmsg+0x2a5/0x360 [ 319.034516][T13191] ? __lock_acquire+0x6b5/0x2cf0 [ 319.034547][T13191] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.034617][T13191] ? __fget_files+0x2a/0x420 [ 319.034642][T13191] ? __fget_files+0x3a0/0x420 [ 319.034679][T13191] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.034714][T13191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.034755][T13191] ? __pfx_ksys_write+0x10/0x10 [ 319.034795][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.034818][T13191] do_syscall_64+0x15f/0xf80 [ 319.034842][T13191] ? trace_irq_disable+0x3b/0x140 [ 319.034865][T13191] ? clear_bhb_loop+0x40/0x90 [ 319.034890][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.034911][T13191] RIP: 0033:0x7f392399c819 [ 319.034932][T13191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.034950][T13191] RSP: 002b:00007f3924851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.034974][T13191] RAX: ffffffffffffffda RBX: 00007f3923c15fa0 RCX: 00007f392399c819 [ 319.034989][T13191] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 319.035002][T13191] RBP: 00007f3924851090 R08: 0000000000000000 R09: 0000000000000000 [ 319.035015][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.035027][T13191] R13: 00007f3923c16038 R14: 00007f3923c15fa0 R15: 00007fff33dea708 [ 319.035062][T13191] [ 319.691898][T13199] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.729229][T13199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.799225][T13202] __nla_validate_parse: 7 callbacks suppressed [ 319.799249][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 319.836649][T13202] netlink: 'syz.1.1832': attribute type 6 has an invalid length. [ 319.868627][T13202] netlink: 'syz.1.1832': attribute type 7 has an invalid length. [ 319.890677][T13202] netlink: 'syz.1.1832': attribute type 8 has an invalid length. [ 319.991966][T13216] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 319.991966][T13216] Please contact the netfilter-devel mailing list or update your nftables rules. [ 320.250651][T13229] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1841'. [ 320.287838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 320.296693][ C1] lec:lec_tx_timeout: lec0 [ 320.301427][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.351552][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'. [ 320.497165][T13247] netlink: 'syz.0.1845': attribute type 3 has an invalid length. [ 321.492683][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1854'. [ 321.793792][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 321.852745][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1859'. [ 321.856782][T12924] block nbd64: NBD_DISCONNECT [ 321.914234][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1859'. [ 322.260712][T12924] udevd[12924]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 322.273325][T13312] dvmrp0: entered allmulticast mode [ 322.305800][T13320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1863'. [ 322.738575][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 322.758335][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 323.064996][T13359] syzkaller0: entered promiscuous mode [ 323.081895][T13359] syzkaller0: entered allmulticast mode [ 323.391383][T13369] wg1 speed is unknown, defaulting to 1000 [ 323.499944][T13388] netlink: 'syz.4.1886': attribute type 4 has an invalid length. [ 324.713371][T13430] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 325.266278][T13457] __nla_validate_parse: 3 callbacks suppressed [ 325.266301][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 325.292121][T13454] wg1 speed is unknown, defaulting to 1000 [ 325.300357][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 325.613766][T13473] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 325.617083][T10515] IPVS: starting estimator thread 0... [ 325.718401][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.737949][T13476] IPVS: using max 26 ests per chain, 62400 per kthread [ 325.902777][T13482] bond3: (slave bridge8): making interface the new active one [ 325.921138][T13482] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 326.117763][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 326.126321][ C1] lec:lec_tx_timeout: lec0 [ 326.131459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.182302][T13467] wg1 speed is unknown, defaulting to 1000 [ 326.543127][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 326.661544][T13471] wg1 speed is unknown, defaulting to 1000 [ 326.760742][T13505] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1911'. [ 327.123270][ T30] audit: type=1800 audit(1776607275.228:4): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1914" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2242 res=0 errno=0 [ 328.079909][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1918'. [ 328.104062][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1919'. [ 328.224298][T13548] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 328.466247][T13560] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 328.508026][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 328.529868][T13564] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 328.538571][T13564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 328.963097][T13569] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 329.009956][T13588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1929'. [ 329.050002][T13569] bond1 (unregistering): Released all slaves [ 329.084168][T13597] netlink: 'syz.1.1928': attribute type 5 has an invalid length. [ 329.291261][T13584] bridge6: left promiscuous mode [ 329.314171][T13584] bridge6: left allmulticast mode [ 329.349389][T13584] bond5: left promiscuous mode [ 329.354419][T13584] bridge7: left promiscuous mode [ 329.364396][T13584] ipvlan2: left allmulticast mode [ 329.370793][T13584] ipvlan3: left allmulticast mode [ 329.375972][T13584] bond5: left allmulticast mode [ 329.382099][T13584] bridge7: left allmulticast mode [ 329.388114][T13584] veth3: left allmulticast mode [ 329.393402][T13584] bond6: left promiscuous mode [ 329.445645][T13581] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 329.560196][T13581] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 329.710397][T13581] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 329.753158][T13613] netlink: 'syz.4.1933': attribute type 21 has an invalid length. [ 329.764440][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 329.785969][T13613] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.877673][T13581] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 329.908748][T13624] netlink: 'syz.2.1936': attribute type 1 has an invalid length. [ 330.225317][ T222] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 43522 - 0 [ 330.255017][T13634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 330.437496][ T6536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 43522 - 0 [ 330.496431][ T6536] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 43522 - 0 [ 330.552729][ T6536] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 43522 - 0 [ 331.072652][T13692] __nla_validate_parse: 1 callbacks suppressed [ 331.072677][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 331.137798][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 331.146128][ C1] lec:lec_tx_timeout: lec0 [ 331.151822][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.163852][T13695] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1954'. [ 331.503495][T13709] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1957'. [ 331.522167][T13709] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 331.687186][T13717] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 331.700243][T13717] syzkaller1: linktype set to 805 [ 331.722975][T13725] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1961'. [ 331.800550][T13725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.847072][T13725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.876889][T13725] bond0 (unregistering): Released all slaves [ 333.361811][T13787] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 333.441435][T13765] bond2: left promiscuous mode [ 333.447650][T13765] bond2: left allmulticast mode [ 333.462671][T13765] veth8: left promiscuous mode [ 333.469321][T13765] veth8: left allmulticast mode [ 333.474688][T13765] veth10: left promiscuous mode [ 333.482767][T13765] veth10: left allmulticast mode [ 333.493413][T13766] tipc: Enabling of bearer rejected, failed to enable media [ 333.513596][ T7644] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 333.523881][T13786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.541521][ T7644] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 333.615631][ T7644] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 333.639144][ T222] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 333.659395][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 333.782596][T13801] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1979'. [ 333.829218][T13801] gretap0: entered promiscuous mode [ 333.837474][T13806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.854907][T13801] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1979'. [ 333.891542][T13801] 0ªî{X¹¦: renamed from gretap0 [ 333.916388][T13801] 0ªî{X¹¦: left promiscuous mode [ 333.926134][T13801] 0ªî{X¹¦: entered allmulticast mode [ 333.937066][T13801] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 333.953774][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1983'. [ 334.442090][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 334.443752][T13822] syzkaller0: entered promiscuous mode [ 334.478483][T13822] syzkaller0: entered allmulticast mode [ 334.961329][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 336.173028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 336.181142][ C1] lec:lec_tx_timeout: lec0 [ 336.186463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.907275][T13857] bridge_slave_1: left allmulticast mode [ 337.917652][T13857] bridge_slave_1: left promiscuous mode [ 337.936213][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.005313][T13857] bridge_slave_0: left allmulticast mode [ 338.025347][T13857] bridge_slave_0: left promiscuous mode [ 338.048566][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.230969][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 338.835146][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'. [ 338.861444][T13915] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 3, id = 0 [ 338.898155][T13911] sctp: [Deprecated]: syz.2.2003 (pid 13911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.898155][T13911] Use struct sctp_sack_info instead [ 339.059434][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 339.083013][T13922] netlink: 'syz.1.2007': attribute type 8 has an invalid length. [ 339.119377][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'. [ 339.263840][T13922] 8021q: adding VLAN 0 to HW filter on device bond10 [ 340.787288][T13931] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 340.818721][T13939] bridge10: entered promiscuous mode [ 340.829664][T13939] bridge10: entered allmulticast mode [ 340.861503][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2015'. [ 340.963717][T13979] netlink: 'syz.1.2016': attribute type 5 has an invalid length. [ 340.993871][T13982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2018'. [ 341.041455][T13954] wg1 speed is unknown, defaulting to 1000 [ 341.049060][T13982] syzkaller0: entered promiscuous mode [ 341.049087][T13982] syzkaller0: entered allmulticast mode [ 341.155204][T13982] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2018'. [ 341.197817][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 341.206818][ C1] lec:lec_tx_timeout: lec0 [ 341.211670][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.233519][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2019'. [ 341.488844][T14007] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2023'. [ 341.746154][T14019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2026'. [ 341.868969][T14027] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 341.953950][T14006] wg1 speed is unknown, defaulting to 1000 [ 342.595291][T14033] wg1 speed is unknown, defaulting to 1000 [ 342.852482][T14052] raw_sendmsg: syz.3.2031 forgot to set AF_INET. Fix it! [ 343.585105][T14065] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20002 [ 343.629629][T14069] __nla_validate_parse: 4 callbacks suppressed [ 343.629652][T14069] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2035'. [ 343.937546][T14075] sctp: [Deprecated]: syz.3.2038 (pid 14075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.937546][T14075] Use struct sctp_sack_info instead [ 344.178954][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 344.218012][T14084] netlink: 'syz.3.2041': attribute type 2 has an invalid length. [ 344.273299][T14087] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2040'. [ 344.318614][T14087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2040'. [ 344.571912][T14095] geneve1: entered promiscuous mode [ 344.825558][T14102] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2047'. [ 344.840717][T14102] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 344.866621][T14108] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2047'. [ 344.901044][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 344.948694][T14103] macsec2: entered promiscuous mode [ 344.987040][T14103] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 345.033401][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'. [ 345.170600][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'. [ 345.172958][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 345.188055][T14121] sctp: [Deprecated]: syz.2.2052 (pid 14121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.188055][T14121] Use struct sctp_sack_info instead [ 345.414045][T14129] netlink: 'syz.3.2055': attribute type 21 has an invalid length. [ 345.449402][T14129] netlink: 'syz.3.2055': attribute type 5 has an invalid length. [ 345.958000][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 346.229085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 346.237473][ C1] lec:lec_tx_timeout: lec0 [ 346.242251][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.383580][T14170] veth1: entered promiscuous mode [ 346.394521][T14170] veth1: entered allmulticast mode [ 346.484819][T14172] netlink: 'syz.2.2070': attribute type 9 has an invalid length. [ 346.514748][T14172] netlink: 'syz.2.2070': attribute type 7 has an invalid length. [ 346.535848][T14172] netlink: 'syz.2.2070': attribute type 8 has an invalid length. [ 346.560864][T14176] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 346.714298][T14176] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 346.796500][T14187] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 346.836404][T14176] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 346.942179][T14176] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 43522 - 0 [ 347.026499][T14196] netlink: Conntrack attr has 4 unknown bytes [ 347.199736][ T468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 43522 - 0 [ 347.330617][ T468] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 43522 - 0 [ 347.398490][ T468] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 43522 - 0 [ 347.556933][T14211] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 347.585426][T14219] FAULT_INJECTION: forcing a failure. [ 347.585426][T14219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.613038][T14211] bond0 (unregistering): Released all slaves [ 347.627937][T14219] CPU: 0 UID: 0 PID: 14219 Comm: syz.4.2083 Not tainted syzkaller #0 PREEMPT(full) [ 347.627968][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.627981][T14219] Call Trace: [ 347.627989][T14219] [ 347.627998][T14219] dump_stack_lvl+0xe8/0x150 [ 347.628046][T14219] should_fail_ex+0x412/0x560 [ 347.628082][T14219] _copy_from_user+0x2d/0xb0 [ 347.628104][T14219] __sys_bpf+0x229/0x950 [ 347.628170][T14219] ? __pfx___sys_bpf+0x10/0x10 [ 347.628210][T14219] ? ksys_write+0x242/0x270 [ 347.628243][T14219] ? __pfx_ksys_write+0x10/0x10 [ 347.628277][T14219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.628309][T14219] __x64_sys_bpf+0x7c/0x90 [ 347.628331][T14219] do_syscall_64+0x15f/0xf80 [ 347.628356][T14219] ? trace_irq_disable+0x3b/0x140 [ 347.628379][T14219] ? clear_bhb_loop+0x40/0x90 [ 347.628405][T14219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.628426][T14219] RIP: 0033:0x7f564bd9c819 [ 347.628446][T14219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.628464][T14219] RSP: 002b:00007f564cc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.628487][T14219] RAX: ffffffffffffffda RBX: 00007f564c015fa0 RCX: 00007f564bd9c819 [ 347.628502][T14219] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 347.628515][T14219] RBP: 00007f564cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 347.628528][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.628540][T14219] R13: 00007f564c016038 R14: 00007f564c015fa0 R15: 00007ffd80b86408 [ 347.628574][T14219] [ 347.872225][ T8607] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 43522 - 0 [ 347.890471][T14225] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 347.924586][T14225] bond6: entered promiscuous mode [ 347.930766][T14225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.051810][T14225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.072267][T14225] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 348.097542][T14225] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 348.125720][T14225] bond6: (slave ip6gre2): making interface the new active one [ 348.134639][T14225] ip6gre2: entered promiscuous mode [ 348.142648][T14225] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 348.362455][T14236] netlink: 'syz.0.2087': attribute type 33 has an invalid length. [ 348.393097][T14236] `: renamed from vŠÅË (while UP) [ 348.660325][T14252] FAULT_INJECTION: forcing a failure. [ 348.660325][T14252] name failslab, interval 1, probability 0, space 0, times 0 [ 348.698754][T14252] CPU: 0 UID: 0 PID: 14252 Comm: syz.4.2094 Not tainted syzkaller #0 PREEMPT(full) [ 348.698783][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.698795][T14252] Call Trace: [ 348.698803][T14252] [ 348.698812][T14252] dump_stack_lvl+0xe8/0x150 [ 348.698847][T14252] should_fail_ex+0x412/0x560 [ 348.698879][T14252] should_failslab+0xa8/0x100 [ 348.698903][T14252] __kmalloc_noprof+0xe8/0x760 [ 348.698933][T14252] ? bpf_test_init+0x9f/0x150 [ 348.698964][T14252] bpf_test_init+0x9f/0x150 [ 348.698995][T14252] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 348.699039][T14252] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 348.699082][T14252] ? __fget_files+0x2a/0x420 [ 348.699110][T14252] ? __fget_files+0x2a/0x420 [ 348.699131][T14252] ? __fget_files+0x3a0/0x420 [ 348.699153][T14252] ? __fget_files+0x2a/0x420 [ 348.699181][T14252] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 348.699211][T14252] bpf_prog_test_run+0x2c7/0x340 [ 348.699239][T14252] __sys_bpf+0x643/0x950 [ 348.699262][T14252] ? __pfx___sys_bpf+0x10/0x10 [ 348.699298][T14252] ? ksys_write+0x242/0x270 [ 348.699330][T14252] ? __pfx_ksys_write+0x10/0x10 [ 348.699363][T14252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.699386][T14252] __x64_sys_bpf+0x7c/0x90 [ 348.699406][T14252] do_syscall_64+0x15f/0xf80 [ 348.699429][T14252] ? trace_irq_disable+0x3b/0x140 [ 348.699451][T14252] ? clear_bhb_loop+0x40/0x90 [ 348.699477][T14252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.699496][T14252] RIP: 0033:0x7f564bd9c819 [ 348.699516][T14252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.699534][T14252] RSP: 002b:00007f564cc97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.699556][T14252] RAX: ffffffffffffffda RBX: 00007f564c015fa0 RCX: 00007f564bd9c819 [ 348.699571][T14252] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 348.699584][T14252] RBP: 00007f564cc97090 R08: 0000000000000000 R09: 0000000000000000 [ 348.699597][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.699608][T14252] R13: 00007f564c016038 R14: 00007f564c015fa0 R15: 00007ffd80b86408 [ 348.699640][T14252] [ 349.461132][T14286] tipc: Started in network mode [ 349.466463][T14286] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 349.486220][T14286] tipc: Enabling of bearer rejected, failed to enable media [ 349.509679][T14285] tipc: Enabling of bearer rejected, failed to enable media [ 349.804287][T14298] wg1 speed is unknown, defaulting to 1000 [ 349.900383][T14308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 349.914316][T14308] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 350.066737][T14310] syzkaller0: entered promiscuous mode [ 350.072561][T14310] syzkaller0: entered allmulticast mode [ 350.096624][T14310] netlink: 'syz.3.2112': attribute type 39 has an invalid length. [ 351.263315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 351.271844][ C1] lec:lec_tx_timeout: lec0 [ 351.276543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 353.539447][T14318] __nla_validate_parse: 17 callbacks suppressed [ 353.539462][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2114'. [ 353.556440][T14320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.735464][T14325] wg1 speed is unknown, defaulting to 1000 [ 353.845757][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2119'. [ 354.073301][T14338] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 354.181404][T14338] bridge5: left allmulticast mode [ 354.189844][T14338] macsec0: left allmulticast mode [ 354.195234][T14338] macsec1: left allmulticast mode [ 354.204874][T14338] vxcan2: left allmulticast mode [ 354.232530][T14338] bridge10: left promiscuous mode [ 354.239350][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'. [ 354.244271][T14338] bridge10: left allmulticast mode [ 354.255948][T14338] macsec2: left promiscuous mode [ 354.263017][T14338] bond6: left promiscuous mode [ 354.269647][T14338] ip6gre2: left promiscuous mode [ 354.291703][ T222] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.315370][ T222] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.527407][T14366] netlink: 'syz.2.2126': attribute type 6 has an invalid length. [ 354.538364][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 354.547645][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 354.634744][T14371] netlink: 656 bytes leftover after parsing attributes in process `syz.2.2126'. [ 354.793999][T14356] tipc: Enabled bearer , priority 0 [ 354.846880][ T222] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.856843][ T222] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.867426][T14363] tipc: Resetting bearer [ 354.875511][T14358] syzkaller0: entered promiscuous mode [ 354.882904][T14358] syzkaller0: entered allmulticast mode [ 354.936023][T14350] tipc: Resetting bearer [ 355.028657][T14350] tipc: Disabling bearer [ 355.064190][T14388] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 355.313700][T14397] netlink: 'syz.0.2133': attribute type 30 has an invalid length. [ 355.334362][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 355.353265][T14397] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 355.635091][T14391] wg1 speed is unknown, defaulting to 1000 [ 355.645241][T14401] : renamed from veth0_to_bond [ 355.667035][T14405] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 355.709097][T14405] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2136'. [ 355.792627][T14409] syzkaller0: entered promiscuous mode [ 355.815727][T14409] syzkaller0: entered allmulticast mode [ 356.235210][T14421] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2139'. [ 356.287817][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 356.296124][ C1] lec:lec_tx_timeout: lec0 [ 356.301424][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.421558][T14434] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2141'. [ 356.565838][T14444] x_tables: duplicate underflow at hook 1 [ 356.930286][T14459] SET target dimension over the limit! [ 357.905824][T14458] wg1 speed is unknown, defaulting to 1000 [ 357.912619][T14470] syzkaller0: entered promiscuous mode [ 357.921465][T14470] syzkaller0: entered allmulticast mode [ 358.475010][T14493] netlink: 'syz.3.2158': attribute type 2 has an invalid length. [ 358.945960][T14501] sctp: [Deprecated]: syz.3.2160 (pid 14501) Use of int in maxseg socket option. [ 358.945960][T14501] Use struct sctp_assoc_value instead [ 359.064538][ T30] audit: type=1804 audit(1776607307.168:5): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2162" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1997 res=1 errno=0 [ 359.164410][ T30] audit: type=1800 audit(1776607307.168:6): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2162" name="cgroup.controllers" dev="tmpfs" ino=1997 res=0 errno=0 [ 359.254563][ T30] audit: type=1800 audit(1776607307.168:7): pid=14509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2162" name="cgroup.controllers" dev="tmpfs" ino=1997 res=0 errno=0 [ 359.792510][T14536] __nla_validate_parse: 2 callbacks suppressed [ 359.792534][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2169'. [ 359.966596][T14540] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 360.070745][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2172'. [ 360.151347][T14540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.208375][T14546] kthread_run failed with err -4 [ 360.315270][T14559] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2174'. [ 360.495383][T14563] IPVS: Error connecting to the multicast addr [ 360.551920][T14566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2177'. [ 360.578495][T14567] syzkaller0: entered promiscuous mode [ 360.578772][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 360.593825][T14567] syzkaller0: entered allmulticast mode [ 360.952299][T14579] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2181'. [ 361.222818][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 361.341524][T14591] bond11: entered promiscuous mode [ 361.351537][T14591] 8021q: adding VLAN 0 to HW filter on device bond11 [ 361.971070][T14587] netlink: 'syz.0.2185': attribute type 11 has an invalid length. [ 362.117727][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 362.125858][ C1] lec:lec_tx_timeout: lec0 [ 362.131137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.204330][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 362.590468][T14644] netlink: 'syz.2.2200': attribute type 11 has an invalid length. [ 362.612121][T14644] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2200'. [ 362.660976][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2201'. [ 363.650445][T14669] vlan3: entered promiscuous mode [ 363.679313][T14669] bridge0: entered promiscuous mode [ 364.570550][T14674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.613768][T14674] vxcan5: entered promiscuous mode [ 364.647387][T14674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.656565][T14674] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 364.671359][T14674] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 365.124257][T14701] syzkaller0: entered promiscuous mode [ 365.178557][T14701] 0: reclassify loop, rule prio 0, protocol 800 [ 365.268010][T14714] __nla_validate_parse: 3 callbacks suppressed [ 365.268032][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 365.363331][T14722] netlink: 'syz.3.2224': attribute type 39 has an invalid length. [ 366.000250][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 366.183634][T14742] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2226'. [ 366.442209][T14741] syzkaller0: entered promiscuous mode [ 366.450423][T14741] syzkaller0: entered allmulticast mode [ 367.120638][T14772] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2238'. [ 367.137889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 367.146099][ C1] lec:lec_tx_timeout: lec0 [ 367.150853][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.362768][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 369.706418][T14796] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 369.757371][T14793] netlink: 'syz.1.2242': attribute type 8 has an invalid length. [ 369.790175][T14796] 8021q: adding VLAN 0 to HW filter on device bond12 [ 369.875614][T14793] bond12: (slave geneve5): making interface the new active one [ 369.909681][T14793] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 369.964642][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.011566][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.043341][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.151311][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 370.250915][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 370.305396][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 370.417945][T14821] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 370.455594][T14823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.625239][T14841] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2256'. [ 370.636010][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2256'. [ 370.749719][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 370.786572][T14844] xfrm1: entered promiscuous mode [ 370.792475][T14844] xfrm1: entered allmulticast mode [ 370.808679][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 370.968109][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 370.996257][T14860] netlink: 'syz.4.2259': attribute type 13 has an invalid length. [ 371.171289][T14867] xt_hashlimit: size too large, truncated to 1048576 [ 371.230380][T14870] openvswitch: netlink: IP tunnel dst address not specified [ 371.653520][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 372.157748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.166204][ C1] lec:lec_tx_timeout: lec0 [ 372.171472][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.270492][T14924] tipc: Enabled bearer , priority 0 [ 372.368389][T14927] tipc: Disabling bearer [ 372.512156][T14930] wg1 speed is unknown, defaulting to 1000 [ 372.578736][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 372.643506][T14943] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 372.926069][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 372.975124][T14949] batadv_slave_1: entered promiscuous mode [ 373.010725][T14953] batadv_slave_1 (unregistering): left promiscuous mode [ 373.043989][T14953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.352392][T14963] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 373.409310][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2287'. [ 373.518635][ T5143] Bluetooth: hci4: link tx timeout [ 373.525011][ T5143] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 374.193969][T14981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.471369][T15006] netlink: 'syz.3.2298': attribute type 2 has an invalid length. [ 374.579600][T15010] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 374.713250][T15017] openvswitch: netlink: IP tunnel dst address not specified [ 374.800726][T15014] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 374.815746][T15014] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 374.866559][T15016] bond8: (slave bridge11): Enslaving as an active interface with a down link [ 374.885333][T15010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.894338][T15028] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 374.912935][T15028] pim6reg0: persist disabled [ 374.997959][T15029] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 375.054332][T15025] wg1 speed is unknown, defaulting to 1000 [ 375.147207][T15039] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 375.192856][T15040] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 375.559292][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 375.685154][T15041] wg1 speed is unknown, defaulting to 1000 [ 376.676779][T15093] netlink: 'syz.0.2318': attribute type 13 has an invalid length. [ 377.177781][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.186109][ C1] lec:lec_tx_timeout: lec0 [ 377.191196][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.656633][T15127] __nla_validate_parse: 8 callbacks suppressed [ 377.656663][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2329'. [ 377.762711][T15134] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 377.837651][T15134] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 378.070579][T15142] netlink: 'syz.2.2333': attribute type 18 has an invalid length. [ 378.110454][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'. [ 378.124874][T15142] netlink: 'syz.2.2333': attribute type 18 has an invalid length. [ 378.136718][T15145] 8021q: VLANs not supported on sit0 [ 378.143149][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'. [ 378.318208][T15154] netlink: 'syz.0.2335': attribute type 4 has an invalid length. [ 378.347962][T15154] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2335'. [ 378.464460][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 378.563434][T15162] syzkaller0: entered promiscuous mode [ 378.587145][T15162] syzkaller0: entered allmulticast mode [ 378.832293][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 378.950703][T15176] ip6gre2: entered promiscuous mode [ 378.968632][T15176] ip6gre2: entered allmulticast mode [ 379.000615][ T8608] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.035411][ T5826] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.049645][ T8608] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.137995][ T5826] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.208596][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 379.226381][T15202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2352'. [ 379.295482][T15200] 5Ò: entered promiscuous mode [ 379.380324][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2354'. [ 380.002868][T15241] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.016955][T15241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.050222][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 380.066362][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 380.083002][T15241] netlink: 'syz.4.2365': attribute type 2 has an invalid length. [ 380.093220][T15255] openvswitch: netlink: Key 10 has unexpected len 0 expected 4 [ 380.161862][T15258] x_tables: duplicate underflow at hook 1 [ 380.388814][T15269] syzkaller1: entered promiscuous mode [ 380.394737][T15269] syzkaller1: entered allmulticast mode [ 380.460446][T15273] Cannot find add_set index 2 as target [ 380.588710][T15275] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 380.654199][T15282] bond0: (slave bond_slave_0): Releasing backup interface [ 380.682249][T15282] bond0: (slave bond_slave_1): Releasing backup interface [ 380.702669][T15282] team0: Port device team_slave_0 removed [ 380.716091][T15282] team0: Port device 76žÿ removed [ 380.728303][T15282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.582300][ T30] audit: type=1804 audit(1776607329.688:8): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2390" name="/newroot/499/cgroup.controllers" dev="tmpfs" ino=2575 res=1 errno=0 [ 381.625766][ T30] audit: type=1800 audit(1776607329.688:9): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2390" name="cgroup.controllers" dev="tmpfs" ino=2575 res=0 errno=0 [ 381.654025][T15334] bond13: entered promiscuous mode [ 381.660026][T15334] 8021q: adding VLAN 0 to HW filter on device bond13 [ 381.699460][T15334] bond13 (unregistering): Released all slaves [ 381.765415][T15344] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 381.888761][T15344] tipc: Enabling of bearer rejected, media not registered [ 382.197764][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.206274][ C1] lec:lec_tx_timeout: lec0 [ 382.211048][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.745947][T15392] __nla_validate_parse: 3 callbacks suppressed [ 382.745967][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2406'. [ 383.014185][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 383.036571][T15403] ip6tnl3: entered allmulticast mode [ 383.058357][T15401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2409'. [ 383.125702][T15401] macsec0: entered promiscuous mode [ 383.202771][T15408] netlink: 'syz.0.2411': attribute type 29 has an invalid length. [ 383.227351][T15408] syzkaller0: entered promiscuous mode [ 383.238558][T15408] syzkaller0: entered allmulticast mode [ 383.238682][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.441992][T15428] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 383.442243][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'. [ 383.465230][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 383.546533][T15422] veth0_to_bridge: left allmulticast mode [ 383.553231][T15422] veth0_to_bridge: left promiscuous mode [ 383.562574][T15422] bridge0: port 3(veth0_to_bridge) entered disabled state [ 383.576244][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.588560][T15422] bridge_slave_1: left allmulticast mode [ 383.595301][T15422] bridge_slave_1: left promiscuous mode [ 383.601667][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.621931][T15422] team0: Port device team_slave_0 removed [ 383.632802][T15422] team0: Port device team_slave_1 removed [ 383.647102][T15422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.940517][T15454] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2421'. [ 383.972313][T15453] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2421'. [ 383.999056][T15459] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2422'. [ 384.022749][T15453] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2421'. [ 384.047634][T15459] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2422'. [ 384.150191][T15459] geneve2: entered allmulticast mode [ 384.337332][T15476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.431637][T15476] team0: Mode changed to "activebackup" [ 385.038749][T15509] xt_cgroup: path and classid specified [ 385.263276][T15519] netlink: 'syz.1.2434': attribute type 8 has an invalid length. [ 385.461839][T15528] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 385.675449][T15534] netlink: 'syz.2.2438': attribute type 13 has an invalid length. [ 385.703598][T15534] netlink: 'syz.2.2438': attribute type 17 has an invalid length. [ 385.753886][T15536] netlink: 'syz.4.2439': attribute type 10 has an invalid length. [ 385.844984][T15536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.954361][T15534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.009445][T15534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.556497][T15595] tap0: tun_chr_ioctl cmd 1074025677 [ 386.562570][T15595] tap0: linktype set to 776 [ 387.138448][T15614] syzkaller1: entered promiscuous mode [ 387.151521][T15614] syzkaller1: entered allmulticast mode [ 387.217765][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 387.226068][ C1] lec:lec_tx_timeout: lec0 [ 387.230880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 387.588095][T15622] wg1 speed is unknown, defaulting to 1000 [ 387.754500][T15637] openvswitch: netlink: IPv6 tunnel dst address is zero [ 388.368683][T15671] netlink: 'syz.4.2469': attribute type 2 has an invalid length. [ 388.547365][T15681] __nla_validate_parse: 9 callbacks suppressed [ 388.547389][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 388.739409][T15671] !: entered promiscuous mode [ 389.136981][T15702] wg1 speed is unknown, defaulting to 1000 [ 389.461593][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 389.487862][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 389.529068][T15722] syzkaller1: entered promiscuous mode [ 389.534697][T15722] syzkaller1: entered allmulticast mode [ 389.660413][T15720] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2475'. [ 389.899711][T15714] wg1 speed is unknown, defaulting to 1000 [ 391.295865][T15781] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2491'. [ 391.638192][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 391.925398][T15811] netlink: zone id is out of range [ 391.931769][T15811] netlink: zone id is out of range [ 391.937173][T15811] netlink: zone id is out of range [ 391.943347][T15812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 391.943746][T15811] netlink: zone id is out of range [ 391.958147][T15811] netlink: zone id is out of range [ 391.963975][T15811] netlink: zone id is out of range [ 391.969486][T15811] netlink: zone id is out of range [ 391.974699][T15811] netlink: zone id is out of range [ 391.974905][T15812] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2499'. [ 391.980468][T15811] netlink: zone id is out of range [ 392.176417][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 392.237824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 392.246015][ C1] lec:lec_tx_timeout: lec0 [ 392.251249][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.310642][T15829] netlink: 'syz.2.2505': attribute type 3 has an invalid length. [ 392.344394][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 392.604078][T15843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2508'. [ 392.658737][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2508'. [ 392.886088][T15864] sock: sock_timestamping_bind_phc: sock not bind to device [ 393.147602][T15879] netlink: 'syz.3.2516': attribute type 11 has an invalid length. [ 393.167014][T15879] netlink: 'syz.3.2516': attribute type 11 has an invalid length. [ 394.127038][T15914] bond7: option xmit_hash_policy: invalid value (10) [ 394.137283][T15914] bond7 (unregistering): Released all slaves [ 394.205019][T15925] x_tables: duplicate underflow at hook 1 [ 394.372623][T15913] wg1 speed is unknown, defaulting to 1000 [ 394.516904][T15931] syzkaller1: entered promiscuous mode [ 394.528103][T15931] syzkaller1: entered allmulticast mode [ 394.839417][T15940] ------------[ cut here ]------------ [ 394.846662][T15940] refcount_t: addition on 0; use-after-free. [ 394.853021][T15940] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: syz.2.2535/15940 [ 394.863258][T15940] Modules linked in: [ 394.869405][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT(full) [ 394.879411][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.889768][T15940] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 394.896100][T15940] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 6b 8d 15 fd 48 8d 3d 64 09 8d 0b 67 48 0f b9 3a eb 4a e8 58 8d 15 fd 48 8d 3d 61 09 8d 0b <67> 48 0f b9 3a eb 37 e8 45 8d 15 fd 48 8d 3d 5e 09 8d 0b 67 48 0f [ 394.916192][T15940] RSP: 0018:ffffc9000d35fd48 EFLAGS: 00010293 [ 394.923162][T15940] RAX: ffffffff84afd098 RBX: 0000000000000002 RCX: ffff8880322e8000 [ 394.931492][T15940] RDX: 0000000000000000 RSI: ffffffff8f106300 RDI: ffffffff903cda00 [ 394.939552][T15940] RBP: ffffc9000d35fe48 R08: ffff8880322e8000 R09: 0000000000000005 [ 394.947653][T15940] R10: 0000000000000004 R11: 0000000000000000 R12: 1ffff92001a6bfb4 [ 394.955730][T15940] R13: 1ffff1100b3a4805 R14: ffff888030fe70c8 R15: dffffc0000000000 [ 394.963779][T15940] FS: 00007fd85096f6c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 394.972962][T15940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.979689][T15940] CR2: 00007fd84fbe9f00 CR3: 000000002b1b6000 CR4: 00000000003526f0 [ 394.987981][T15940] Call Trace: [ 394.991325][T15940] [ 394.994289][T15940] ax25_setsockopt+0xab5/0xc30 [ 394.999180][T15940] ? __pfx_ax25_setsockopt+0x10/0x10 [ 395.004524][T15940] ? __fget_files+0x2a/0x420 [ 395.009300][T15940] ? aa_sock_opt_perm+0xff/0x1a0 [ 395.014286][T15940] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 395.020234][T15940] ? __pfx_ax25_setsockopt+0x10/0x10 [ 395.025844][T15940] do_sock_setsockopt+0x17c/0x1b0 [ 395.031033][T15940] __x64_sys_setsockopt+0x13d/0x1b0 [ 395.036429][T15940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.042804][T15940] do_syscall_64+0x15f/0xf80 [ 395.047597][T15940] ? trace_irq_disable+0x3b/0x140 [ 395.052821][T15940] ? clear_bhb_loop+0x40/0x90 [ 395.057555][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.063906][T15940] RIP: 0033:0x7fd84fb9c819 [ 395.068420][T15940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.088495][T15940] RSP: 002b:00007fd85096f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.097136][T15940] RAX: ffffffffffffffda RBX: 00007fd84fe15fa0 RCX: 00007fd84fb9c819 [ 395.105283][T15940] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 395.114228][T15940] RBP: 00007fd84fc32c91 R08: 0000000000000010 R09: 0000000000000000 [ 395.122628][T15940] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 395.130924][T15940] R13: 00007fd84fe16038 R14: 00007fd84fe15fa0 R15: 00007ffd1969ef38 [ 395.139093][T15940] [ 395.142142][T15940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.149588][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.2.2535 Not tainted syzkaller #0 PREEMPT(full) [ 395.159061][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.169663][T15940] Call Trace: [ 395.173071][T15940] [ 395.176034][T15940] vpanic+0x56c/0xa60 [ 395.180119][T15940] ? __pfx__printk+0x10/0x10 [ 395.184938][T15940] ? __pfx_vpanic+0x10/0x10 [ 395.189512][T15940] ? is_bpf_text_address+0x292/0x2b0 [ 395.194909][T15940] ? is_bpf_text_address+0x26/0x2b0 [ 395.200131][T15940] panic+0xc5/0xd0 [ 395.203940][T15940] ? __pfx_panic+0x10/0x10 [ 395.208569][T15940] __warn+0x315/0x4c0 [ 395.212739][T15940] ? refcount_warn_saturate+0x9f/0x110 [ 395.218276][T15940] ? refcount_warn_saturate+0x9f/0x110 [ 395.223763][T15940] __report_bug+0x29a/0x540 [ 395.228376][T15940] ? refcount_warn_saturate+0x9f/0x110 [ 395.233851][T15940] ? __pfx___report_bug+0x10/0x10 [ 395.239147][T15940] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.244199][T15940] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.250104][T15940] ? lockdep_hardirqs_on+0x7a/0x110 [ 395.255405][T15940] report_bug_entry+0x19a/0x290 [ 395.260378][T15940] ? refcount_warn_saturate+0x9f/0x110 [ 395.265934][T15940] ? refcount_warn_saturate+0xa4/0x110 [ 395.271494][T15940] handle_bug+0xce/0x200 [ 395.275760][T15940] exc_invalid_op+0x1a/0x50 [ 395.280459][T15940] asm_exc_invalid_op+0x1a/0x20 [ 395.285416][T15940] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 395.291491][T15940] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 6b 8d 15 fd 48 8d 3d 64 09 8d 0b 67 48 0f b9 3a eb 4a e8 58 8d 15 fd 48 8d 3d 61 09 8d 0b <67> 48 0f b9 3a eb 37 e8 45 8d 15 fd 48 8d 3d 5e 09 8d 0b 67 48 0f [ 395.311578][T15940] RSP: 0018:ffffc9000d35fd48 EFLAGS: 00010293 [ 395.317749][T15940] RAX: ffffffff84afd098 RBX: 0000000000000002 RCX: ffff8880322e8000 [ 395.325743][T15940] RDX: 0000000000000000 RSI: ffffffff8f106300 RDI: ffffffff903cda00 [ 395.333953][T15940] RBP: ffffc9000d35fe48 R08: ffff8880322e8000 R09: 0000000000000005 [ 395.342228][T15940] R10: 0000000000000004 R11: 0000000000000000 R12: 1ffff92001a6bfb4 [ 395.350316][T15940] R13: 1ffff1100b3a4805 R14: ffff888030fe70c8 R15: dffffc0000000000 [ 395.358391][T15940] ? refcount_warn_saturate+0x98/0x110 [ 395.363867][T15940] ? refcount_warn_saturate+0x98/0x110 [ 395.369337][T15940] ax25_setsockopt+0xab5/0xc30 [ 395.374128][T15940] ? __pfx_ax25_setsockopt+0x10/0x10 [ 395.379534][T15940] ? __fget_files+0x2a/0x420 [ 395.384284][T15940] ? aa_sock_opt_perm+0xff/0x1a0 [ 395.389867][T15940] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 395.395453][T15940] ? __pfx_ax25_setsockopt+0x10/0x10 [ 395.400875][T15940] do_sock_setsockopt+0x17c/0x1b0 [ 395.405941][T15940] __x64_sys_setsockopt+0x13d/0x1b0 [ 395.411255][T15940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.417348][T15940] do_syscall_64+0x15f/0xf80 [ 395.422124][T15940] ? trace_irq_disable+0x3b/0x140 [ 395.427199][T15940] ? clear_bhb_loop+0x40/0x90 [ 395.432005][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.438255][T15940] RIP: 0033:0x7fd84fb9c819 [ 395.442871][T15940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.462943][T15940] RSP: 002b:00007fd85096f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.471416][T15940] RAX: ffffffffffffffda RBX: 00007fd84fe15fa0 RCX: 00007fd84fb9c819 [ 395.479796][T15940] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000007 [ 395.487886][T15940] RBP: 00007fd84fc32c91 R08: 0000000000000010 R09: 0000000000000000 [ 395.496221][T15940] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 395.504396][T15940] R13: 00007fd84fe16038 R14: 00007fd84fe15fa0 R15: 00007ffd1969ef38 [ 395.512395][T15940] [ 395.515568][T15940] Kernel Offset: disabled [ 395.519892][T15940] Rebooting in 86400 seconds..