last executing test programs: 7m51.710160952s ago: executing program 3 (id=7835): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x22020400) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000011c0)='ns/user\x00') 7m51.544523511s ago: executing program 3 (id=7836): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)=0xffffffffffffffa5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a480000001d0a01040095a806e60000000a0000050900020073797a32000000001c0004801800018008000100666962060c00028008000240000000030900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 7m51.313442503s ago: executing program 3 (id=7837): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000580)={'dvmrp1\x00', @ifru_map={0x80000001, 0x3, 0x80, 0x6, 0x7, 0x7}}) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f00000002000000040500000100000000000000f34174e612865e895b97598eee635e57865cf91fe7f2e4b1fd87fdefc7dd24efed1d5b2b7848ba9529c37600d4dd97aaf89fba04e0d6bc53f6deec07959957d1e9e93b8e52ad9dffaac7b045c5f573d58f4b0241978c05ab9f4a2544d1a7cb859f5b320bac3e41a21fb06dad4af982c880add71faa2fa51d104fe80b3b7e366a5b74ed7208a3dd2d9e299850467468490ce22d7793e877585ee6715268cc96e721a6366baa923851cc727b5f1c6d95c823fc734428bc98667479f066edd5007c312ddb0e95c8", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {0x0}], 0x2}, 0x1021) socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040018000abd0fc831f20004001a00e9e9fe23aa5339f62fb147e4a43f308aa589d3ee95257e616b430f013ceb6d3d15ff928d122d2cea0ea6ec9cccff01c9fe1fe3778078a7042d868ed91e9f036ad201cc46faee0b4dc68505ede9db46c0cf7037f9f366"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbffffbbbbbbaaaaaaaaaabb86dd6d042000000811ff00e7000000000000000000000000008d4e4e3ad9cb47b11b5900089078"], 0x42) 7m50.691383267s ago: executing program 3 (id=7843): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1000000000000063, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="b8d3d8e48974aae56e0000001070636c90a5408bdf271fd6b9aa6701365ffc7238b9ad120c5a54b1c6008b090480f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5547f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980ea000000000000000000000000148da2a939b2ae0fb30d0a0c15", 0xa0}], 0x1, 0x0, 0x0, 0x8094}, 0x240048c9) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0xf983e000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x6eca, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendfile(r3, r2, 0x0, 0xf03a0005) close(r1) 7m50.462315815s ago: executing program 3 (id=7846): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r0, 0x1, 0x2, &(0x7f0000000340)=""/187, &(0x7f0000000400)=0xbb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@var={0x7, 0x0, 0x0, 0xe, 0x3, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x18, 0x1}]}}, 0x0, 0x52}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x20, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x41}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f00000001c0)=0xa85) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'ip6tnl0\x00'}) syz_emit_ethernet(0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d010000198401fec00000f8ffffff0000ffff0a010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 7m50.369027894s ago: executing program 3 (id=7847): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7m35.217324062s ago: executing program 32 (id=7847): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16.276695642s ago: executing program 5 (id=11029): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000400)="87aa8e258efc073bcc70e077131653ec68ba", 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000041000000000000002000000000e81d5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x1f9}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) close(r4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000011fb042b53a989078d00000000000000004f31ce04850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x4000c3, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0xf373, 0x1c}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.589074206s ago: executing program 2 (id=11103): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.472723133s ago: executing program 2 (id=11105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 5.139013992s ago: executing program 2 (id=11106): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000708c981e31e5a3425000000911178000000000095627dac00000000"], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x8011, 0x0, 0x4, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @remote, {[@generic={0x82, 0xb, "d7f4a0dd4a9e52d817"}, @generic={0x89, 0xd, "5dba757ddbafde62535436"}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xb, [{@multicast2, 0x3}, {@multicast1, 0x1}, {@loopback, 0x1}]}]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40804) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40804) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x1a0, 0x30, 0x101, 0x70bd2b, 0x25dfdc00, {}, [{0xd8, 0x1, [@m_bpf={0xd4, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0xa9, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22041d13980367da8408d539eb10ae552c36da2b8b9009d7ed24f9b33ffeb7989b0b6ed0ae05501c8dc34fe8cd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xb4, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x84, 0xd, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0x2, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x80000001, 0x10000000, 0xe2, 0xfffff3d0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) socket(0x10, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket(0x1, 0x5, 0x0) (async) socket(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r2 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) 5.138617686s ago: executing program 1 (id=11107): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643d", 0x68}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a62", 0xb8}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c1", 0xa}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e9060002", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x150}, 0x1, 0x0, 0x0, 0x20000804}, 0x5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000700)={&(0x7f0000000340), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x57, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44045}, 0x20040044) recvmsg(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 2.201963797s ago: executing program 0 (id=11119): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000100000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 2.162782227s ago: executing program 0 (id=11120): r0 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)='|.', 0x2}], 0x1}}], 0x1, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x777}]}}}]}, 0x40}}, 0x240080c0) 2.049497122s ago: executing program 4 (id=11121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643d", 0x68}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa481753", 0x8a}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x3, 0x20000044) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x2004}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x200}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x2c}}, 0xea5bc50b6199d7fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.880646085s ago: executing program 0 (id=11122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400060005400695ac17"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414e0450000160000000000110000ac1414aa0000000017c1b7df60c700"/70], 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x81) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xffffffffffffffbf, 0x0, &(0x7f00000002c0)="ff3f0000859bb9", 0x0, 0x20000001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000c598236fdf11d40300000000e6000000000200000f080001000100000a"], 0x1c}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000006000000850000006100000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24041840}, 0x4000000) 1.720193426s ago: executing program 0 (id=11123): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100280000004004000007000000", @ANYRES32=r2, @ANYBLOB="000004000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0xdb, &(0x7f0000000080)={@local, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x6}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "c62956", 0xa1, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, {[@srh={0x32, 0x10, 0x4, 0x8, 0x3, 0x10, 0x2, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @remote]}], @echo_reply={0x81, 0x0, 0x0, 0x6, 0xab21, "a3fa492e0bf0f742362e4a1ee7422a8460"}}}}}}, 0x0) 1.61276494s ago: executing program 4 (id=11124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@id, &(0x7f0000000400)=0x10, 0x800) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f0000000f80)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r4, 0x0, 0x8c, 0xdf, &(0x7f0000000000)="f5f3543f9eddfd2c1e53f0aaafc7b804d93e5c0862fbbdbf0994bd77d22b75a61000fbd809d4974672e6c8c8138d187e51ce4efa10158f99d3f724d674c0dadc7fcd55178837709fd2e002faab04bf50fc79f2788f9f312be3b3f70c2b4d79330db0da156f9020e2843cb4ebac8d3f337d761485d22b20aaca87b20d4c0c84e77694340304deb47c0ba0fbf9", &(0x7f00000000c0)=""/223, 0x6, 0x0, 0x1000, 0x6e, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="643521536bf9ce6c47ef9a794644bef5def0f483cd2ecf507e73dded8075f9e22330afc41aece39824f69b8020d758a4661121ada1b9861f4797877ff07dbd4831d67f9ca3a4973fd2cb698cf9af877b209a600b8bb551d5b22134cbab0915d1118ec4ffa81a75c541f6d02cb85e", 0x1, 0x0, 0x6}, 0x50) 1.503185458s ago: executing program 4 (id=11125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x44063, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x50}}, 0x8000002) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="07000000010000", 0x7) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x200, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1.287658435s ago: executing program 4 (id=11126): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xad}, @remote, 0xbfff, "082d827951937ce8556a2acba5e248490de3c3ad7582b1bc56a4d4114edd4d54", 0x4, 0x7, 0x80, 0x8}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 1.125505819s ago: executing program 2 (id=11127): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="2c002d80050001000400000005000400000000000500"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 1.125054925s ago: executing program 4 (id=11128): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000e80), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) splice(r5, 0x0, r6, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7fff, 0x4, 0x1ff, 0x2014, 0xffffffffffffffff, 0x59, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7fff, 0x4, 0x1ff, 0x2014, 0xffffffffffffffff, 0x59, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x18, r12}, 0x18) (async) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x18, r12}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x23, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9ce}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x551, 0x41, &(0x7f0000000440)=""/65, 0x40f00, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r13, 0x2, &(0x7f0000000b80)=[r10, r11, r12], &(0x7f00000009c0)=[{0x1, 0x2, 0xa, 0xc}, {0x3, 0x4, 0xd, 0x1}], 0x10, 0x1}, 0x94) 1.069809915s ago: executing program 2 (id=11129): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000300000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 878.402188ms ago: executing program 1 (id=11130): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000400)="87aa8e258efc073bcc70e077131653ec68ba", 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000041000000000000002000000000e81d5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3b2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) close(r4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000011fb042b53a989078d00000000000000004f31ce04850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x4000c3, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0xf373, 0x1c}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 801.40928ms ago: executing program 4 (id=11131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x24000811, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0xfd61) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaad2f9dd6d000000000000ff02000000000000000000000009ce5b3f0e0000000000000000000000000000000000000000885290c12087f03470877169584a855ee636db2a2fe39def56b706c045ecd2d01dcb409046d5b9fa258c526155cd7f2862af687a85e6b9e7f91e82bff04d78d8d5c16a157d029647780bb6717eb79ca9fe7d7b1e00"/157], 0xfdef) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x0, 0x3, 0x0, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r10, 0x12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="59e0cfe9", 0x4}], 0x1}, 0x8014) 800.740164ms ago: executing program 2 (id=11132): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_generic(r2, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000001680)={&(0x7f0000000440)={0x1240, 0x25, 0x0, 0x70bd27, 0x25dfdbfd, {0x3}, [@nested={0x1133, 0x2f, 0x0, 0x1, [@generic="26015a65209b9314dcb730fd3a99d93b", @generic="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", @typed={0x4, 0x7b}, @generic="79dbec37723941378fdbd23fc906cb4ade44fa50c87410192e2a48dd4e59766de0523fd3a01c2ff966d675ef7c4d391c305605a49c2dc4dc446c84704b9bd4f8bb0aefa7e5776fe2c046fb4f19a60e83c2fc7f75958c0bc3617b32d3600996816abfb161f4304355d9167aafbba9e739bd6c15f0ddcd29fc90e3385a74f5f98c3b5d66e59546387ed99493a532da8ccac3dfc230c34572f24a3cca69546819df90640680d7dea7d1", @nested={0x4, 0xdc}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x51}, @generic="94d0cf0566e54e2786b18160b34dbb0c29fe266a278f1a6dc8b2747e0e665f9c0ec0266b42f340c1cf4a0eb550ba4e51bf9477a6ef3efef388682025f7557d0b88911e2bdd3422ef6de347398421f8debb9ab5e3ae97f273c0ae689907032d", @nested={0x4, 0x59}]}, @generic="5a4198455397d25ee1a2e17c5ef8a15367ace65e8186701aad80e2b69debfba80a6dbc58f5cf5c210a81c24f2cfa88c9dda4caddba189ea570b3adcb9f1d4a5771a6cd5702113cee6cd87c2681317f0a3442cf1b6e9da5e632db1c1cacfe37e4901dbd16c2c6a1a456830a6d782199277534d04a23262b25c7270d8c4f1af47616e1365367f0cf1842900a3f9ea830ae13aad44cb7edd8edeb64250112e6653b044ad04078bbd824d40eda6224ff2f0f7b08e89b5c9ed72e90636c87f6c7bbde58949b95b2aa630979cb32dd24179fc9109df8302aee9853f671322feece4167b92a768e8866728b61caa326363e222f4296b42289f4"]}, 0x1240}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006006a"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 754.808722ms ago: executing program 0 (id=11133): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1401, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f00)=""/130, 0x82}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000100)=""/143, 0x8f}], 0x3}, 0xfffffffd}], 0x1, 0x2120, 0x0) close(r1) 624.051152ms ago: executing program 1 (id=11134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@id, &(0x7f0000000400)=0x10, 0x800) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 511.36536ms ago: executing program 1 (id=11135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 479.044444ms ago: executing program 5 (id=11031): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f00000000c0)=""/253, 0xfd}], 0x4}, 0x101}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000004080)=[{&(0x7f00000066c0)=""/4103, 0x1007}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/247, 0xf7}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/138, 0x8a}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000003e40)=""/223, 0xdf}, {&(0x7f0000003f40)=""/55, 0x37}, {&(0x7f0000003f80)=""/39, 0x27}, {&(0x7f0000003fc0)=""/180, 0xb4}], 0xa}, 0x9f3}, {{&(0x7f0000004140)=@tipc=@id, 0x80, &(0x7f0000006440)=[{&(0x7f00000041c0)=""/213, 0xd5}, {&(0x7f00000042c0)=""/198, 0xc6}, {&(0x7f00000043c0)=""/23, 0x17}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000001280)=""/37, 0x25}, {&(0x7f0000006240)=""/198, 0xc6}, {&(0x7f0000006340)=""/31, 0x1f}, {&(0x7f0000006380)=""/126, 0x7e}, {&(0x7f0000006400)=""/28, 0x1c}], 0x9, &(0x7f0000006500)=""/73, 0x49}, 0x3ff}], 0x5, 0x20, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0xb, 0x3) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 317.530292ms ago: executing program 0 (id=11136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x777, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7b3, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7c1) 314.748531ms ago: executing program 5 (id=11137): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xad}, @remote, 0xbfff, "082d827951937ce8556a2acba5e248490de3c3ad7582b1bc56a4d4114edd4d54", 0x4, 0x7, 0x80, 0x8}, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 246.888719ms ago: executing program 5 (id=11138): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000007c4a9ff6000000000018110000ca1b607589aac88e0a881e6dd35658ec9fe30b11e97a92d3d72191c3e4fd740c54f9561722f3dd748712821f0deb52bede189be67234890e540bf3cc2db1c8947c5d8b5778feca2bc0bb91e5409b78d30128e487d78a95577bcd1c2bb510c359b237221ea21c0cfafc52a8230c1442d1abf4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 150.06493ms ago: executing program 5 (id=11139): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 90.020718ms ago: executing program 1 (id=11140): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 35.758609ms ago: executing program 5 (id=11141): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRESDEC=r1, @ANYBLOB="28da", @ANYRES8=r0, @ANYRESOCT=r0], 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000be7000005c0400000401", @ANYRES32=0x1, @ANYBLOB="0000000000000000001e08000000000000000000", @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) sendto$inet6(r2, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) socket$inet(0x2, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000540)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x7eeb}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x3}, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x9, 0x3, 0x5f12) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'pimreg0\x00'}) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000001c0)={'nat\x00', 0x0, [0x24, 0x3, 0x92, 0x1, 0x3ff]}, &(0x7f0000000240)=0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000020000001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8a124c919e1208c8c8409cdb87"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "1a16935fffb33b35ae10ee22383758"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "8a9266f416ef"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000500)={&(0x7f0000000800), 0xc, &(0x7f00000004c0)={&(0x7f0000000c80)={0x30c, r8, 0x710, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7bc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xce9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x211b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc44}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc820}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x23d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "44b01fbc8902b837a80eb163246672a240855204ef60cf4469e43bb0303130263ec166"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x635}]}, @TIPC_NLA_SOCK={0x4}]}, 0x30c}, 0x1, 0x0, 0x0, 0x1}, 0x91) 0s ago: executing program 1 (id=11142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) kernel console output (not intermixed with test programs): 1280.339794][T12216] 46659 total pagecache pages [ 1280.348747][T12274] netlink: 'syz.2.9751': attribute type 39 has an invalid length. [ 1280.370087][T12216] 0 pages in swap cache [ 1280.381953][T12216] Free swap = 124996kB [ 1280.393024][T12216] Total swap = 124996kB [ 1280.402334][T12216] 2097051 pages RAM [ 1280.435990][T12216] 0 pages HighMem/MovableOnly [ 1280.451590][T12216] 427573 pages reserved [ 1280.476612][T12216] 0 pages cma reserved [ 1280.609476][T12281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9753'. [ 1280.904982][T12292] netlink: 'syz.2.9756': attribute type 1 has an invalid length. [ 1281.140605][T12304] x_tables: duplicate underflow at hook 2 [ 1281.291219][T12301] syzkaller0: entered promiscuous mode [ 1281.304476][T12301] syzkaller0: entered allmulticast mode [ 1281.320970][T11197] syzkaller0: tun_net_xmit 48 [ 1281.562070][T12328] netlink: 'syz.1.9763': attribute type 39 has an invalid length. [ 1285.574342][T12325] netlink: 'syz.1.9763': attribute type 12 has an invalid length. [ 1285.582528][T12325] __nla_validate_parse: 1 callbacks suppressed [ 1285.582546][T12325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9763'. [ 1285.687732][T12335] FAULT_INJECTION: forcing a failure. [ 1285.687732][T12335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.717437][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.2.9766 Not tainted syzkaller #0 PREEMPT(full) [ 1285.717483][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1285.717498][T12335] Call Trace: [ 1285.717506][T12335] [ 1285.717514][T12335] dump_stack_lvl+0xe8/0x150 [ 1285.717548][T12335] should_fail_ex+0x412/0x560 [ 1285.717579][T12335] _copy_from_user+0x2d/0xb0 [ 1285.717603][T12335] ___sys_sendmsg+0x1c6/0x360 [ 1285.717622][T12335] ? __lock_acquire+0x6b5/0x2cf0 [ 1285.717653][T12335] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.717705][T12335] ? __fget_files+0x2a/0x420 [ 1285.717725][T12335] ? __fget_files+0x3a0/0x420 [ 1285.717751][T12335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1285.717774][T12335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1285.717804][T12335] ? __pfx_ksys_write+0x10/0x10 [ 1285.717835][T12335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.717855][T12335] do_syscall_64+0x15f/0xf80 [ 1285.717879][T12335] ? trace_irq_disable+0x3b/0x140 [ 1285.717903][T12335] ? clear_bhb_loop+0x40/0x90 [ 1285.717925][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.717944][T12335] RIP: 0033:0x7fdc3a79cdd9 [ 1285.717962][T12335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.717977][T12335] RSP: 002b:00007fdc3b633028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.718003][T12335] RAX: ffffffffffffffda RBX: 00007fdc3aa15fa0 RCX: 00007fdc3a79cdd9 [ 1285.718016][T12335] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1285.718028][T12335] RBP: 00007fdc3b633090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.718039][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.718050][T12335] R13: 00007fdc3aa16038 R14: 00007fdc3aa15fa0 R15: 00007ffec7834f48 [ 1285.718080][T12335] [ 1285.969695][T12339] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1286.186322][T12358] syzkaller1: entered promiscuous mode [ 1286.192142][T12358] syzkaller1: entered allmulticast mode [ 1286.361435][T12363] macvtap1: entered promiscuous mode [ 1286.384875][T12363] bridge0: entered promiscuous mode [ 1286.396419][T12363] bridge0: port 3(macvtap1) entered blocking state [ 1286.423759][T12363] bridge0: port 3(macvtap1) entered disabled state [ 1286.444753][T12363] macvtap1: entered allmulticast mode [ 1286.457230][T12363] bridge0: entered allmulticast mode [ 1286.516686][T12363] macvtap1: left allmulticast mode [ 1286.547469][T12363] bridge0: left allmulticast mode [ 1286.714357][T32511] bridge0: left promiscuous mode [ 1286.733300][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9780'. [ 1287.049207][T12392] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1287.087165][T12392] netlink: 'syz.1.9782': attribute type 1 has an invalid length. [ 1287.103630][T12393] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1287.108372][T12392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1287.237838][T12401] netlink: 'syz.2.9784': attribute type 6 has an invalid length. [ 1287.271172][T12401] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.9784'. [ 1287.539952][T12419] syzkaller0: entered promiscuous mode [ 1287.552207][T12419] syzkaller0: entered allmulticast mode [ 1287.696497][T12425] netlink: 'syz.5.9790': attribute type 3 has an invalid length. [ 1287.718468][T12425] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9790'. [ 1287.995526][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9794'. [ 1288.063011][T12434] syzkaller0: entered promiscuous mode [ 1288.088856][T12434] syzkaller0: entered allmulticast mode [ 1288.136283][T12443] bridge2: entered promiscuous mode [ 1288.144343][T12443] bridge2: entered allmulticast mode [ 1291.935971][ T5161] Bluetooth: hci5: command 0x0406 tx timeout [ 1292.655225][T12476] netlink: 'syz.2.9806': attribute type 1 has an invalid length. [ 1292.686282][T12476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1292.725957][T12476] bond2: (slave veth0_to_bond): making interface the new active one [ 1292.735894][T12476] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1293.395939][T12476] bond2: entered promiscuous mode [ 1293.416725][T12476] veth0_to_bond: entered promiscuous mode [ 1293.437497][T12476] bond2: entered allmulticast mode [ 1293.455577][T12476] veth0_to_bond: entered allmulticast mode [ 1293.487713][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9808'. [ 1293.566555][T12490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1293.578618][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1293.670512][T12491] bond3: option primary_reselect: invalid value (133) [ 1293.693226][T12491] bond3 (unregistering): Released all slaves [ 1293.788739][T12499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1293.892901][T12501] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9811'. [ 1293.932988][T12501] gretap0: entered promiscuous mode [ 1294.101331][T12506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1294.164840][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1294.219058][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1294.246984][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1294.379587][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9819'. [ 1294.407318][T12538] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1294.594396][T12545] netlink: 'syz.5.9823': attribute type 12 has an invalid length. [ 1294.705647][T12545] netlink: 'syz.5.9823': attribute type 39 has an invalid length. [ 1295.293129][T12570] syzkaller0: entered promiscuous mode [ 1295.309513][T12570] syzkaller0: entered allmulticast mode [ 1295.640103][T12590] netlink: 'syz.5.9837': attribute type 12 has an invalid length. [ 1295.694251][T12590] netlink: 'syz.5.9837': attribute type 39 has an invalid length. [ 1295.713765][T12592] netlink: 'syz.1.9838': attribute type 12 has an invalid length. [ 1295.775469][T12592] netlink: 'syz.1.9838': attribute type 39 has an invalid length. [ 1296.057187][T12599] netlink: 'syz.5.9840': attribute type 1 has an invalid length. [ 1296.178720][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.440337][T12615] bond3: option ad_user_port_key: invalid value (65535) [ 1296.493922][T12615] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 1296.517549][T12615] bond3 (unregistering): Released all slaves [ 1297.347262][T12640] netlink: 'syz.2.9852': attribute type 12 has an invalid length. [ 1297.426122][T12640] netlink: 'syz.2.9852': attribute type 39 has an invalid length. [ 1297.717996][T12656] xt_limit: Overflow, try lower: 28676/2147483648 [ 1297.920574][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.928346][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.983836][T12656] team_slave_0: left promiscuous mode [ 1298.000351][T12656] team_slave_1: left promiscuous mode [ 1298.100062][T12656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.126844][T12656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.362727][ T1151] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.394682][ T1151] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.417856][ T1151] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.442121][ T1151] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.631804][T12679] __nla_validate_parse: 13 callbacks suppressed [ 1298.631823][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9862'. [ 1298.660448][T12688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9863'. [ 1298.670564][T12687] sctp: [Deprecated]: syz.4.9865 (pid 12687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1298.670564][T12687] Use struct sctp_sack_info instead [ 1298.862129][T12691] sctp: [Deprecated]: syz.4.9865 (pid 12691) Use of int in max_burst socket option. [ 1298.862129][T12691] Use struct sctp_assoc_value instead [ 1298.982284][T12702] block nbd1: not configured, cannot reconfigure [ 1298.989810][T12702] netlink: 'syz.1.9870': attribute type 1 has an invalid length. [ 1298.998083][T12702] netlink: 'syz.1.9870': attribute type 2 has an invalid length. [ 1299.006205][T12702] netlink: 'syz.1.9870': attribute type 1 has an invalid length. [ 1299.280351][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9874'. [ 1299.392006][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9876'. [ 1299.413601][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9876'. [ 1299.433888][T12717] syzkaller1: entered promiscuous mode [ 1299.468412][T12717] syzkaller1: entered allmulticast mode [ 1299.523379][T12725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1299.723955][T12732] netlink: 'syz.5.9877': attribute type 83 has an invalid length. [ 1300.103135][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1300.186630][T12736] xt_TCPMSS: Only works on TCP SYN packets [ 1300.347484][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1301.180118][T12745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9884'. [ 1301.204894][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9884'. [ 1302.362808][T12748] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9885'. [ 1302.385916][T12744] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1302.387109][T12745] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1302.413769][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9885'. [ 1302.591217][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9888'. [ 1302.602013][T12761] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1302.701151][ T1151] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.720701][ T1151] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.754946][ T1151] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.781825][ T1151] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.159964][T12840] __nla_validate_parse: 4 callbacks suppressed [ 1304.159982][T12840] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1304.381649][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9913'. [ 1304.732645][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9920'. [ 1304.750870][T12862] syzkaller0: entered promiscuous mode [ 1304.771990][T12862] syzkaller0: entered allmulticast mode [ 1304.803585][T12867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.841941][T12877] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9922'. [ 1304.875122][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9922'. [ 1304.942713][T12877] xt_hashlimit: size too large, truncated to 1048576 [ 1304.967467][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1305.002923][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9922'. [ 1305.566731][T12911] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1305.764594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.772712][ C1] lec:lec_tx_timeout: lec0 [ 1305.777909][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1305.918958][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9934'. [ 1306.013192][T12923] netlink: 504 bytes leftover after parsing attributes in process `syz.5.9936'. [ 1306.027049][T12919] macvtap1: entered promiscuous mode [ 1306.053233][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9939'. [ 1306.054342][T12919] bridge0: entered promiscuous mode [ 1306.067021][T12930] netlink: 'syz.1.9939': attribute type 9 has an invalid length. [ 1306.079790][T12921] netlink: 'syz.2.9935': attribute type 29 has an invalid length. [ 1306.130468][T12931] bridge3: entered promiscuous mode [ 1306.144789][T12931] bridge3: entered allmulticast mode [ 1306.478085][T12945] sctp: [Deprecated]: syz.5.9940 (pid 12945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1306.478085][T12945] Use struct sctp_sack_info instead [ 1306.484392][T12928] syzkaller0: entered promiscuous mode [ 1306.587178][T12928] syzkaller0: entered allmulticast mode [ 1306.859713][T12962] netlink: 'syz.5.9940': attribute type 1 has an invalid length. [ 1310.792025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1310.800110][ C1] lec:lec_tx_timeout: lec0 [ 1311.930781][T13000] __nla_validate_parse: 2 callbacks suppressed [ 1311.930799][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9950'. [ 1311.961791][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9951'. [ 1311.997683][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9950'. [ 1312.007720][T13007] x_tables: duplicate underflow at hook 2 [ 1312.032484][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9952'. [ 1312.098806][T13005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1312.173041][T13010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1312.322872][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9954'. [ 1312.532584][T13032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9956'. [ 1312.601638][T13032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9956'. [ 1312.933761][T13045] netlink: 'syz.2.9961': attribute type 8 has an invalid length. [ 1312.944094][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1313.010385][T13046] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9961'. [ 1313.026126][T13045] veth1_to_team: entered promiscuous mode [ 1313.042237][T13052] netlink: 'syz.4.9962': attribute type 30 has an invalid length. [ 1313.080008][T13045] batadv_slave_0: entered promiscuous mode [ 1313.094889][T13045] batadv_slave_0: left promiscuous mode [ 1313.108784][T13045] veth1_to_team: left promiscuous mode [ 1313.220331][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9967'. [ 1313.237767][T13068] netlink: 'syz.0.9966': attribute type 11 has an invalid length. [ 1315.011237][T13135] netlink: 'syz.0.9986': attribute type 1 has an invalid length. [ 1315.046988][T32511] IPVS: starting estimator thread 0... [ 1315.154775][T13137] IPVS: using max 33 ests per chain, 79200 per kthread [ 1315.277746][T13149] netlink: 'syz.4.9988': attribute type 39 has an invalid length. [ 1315.389939][T13146] netlink: 'syz.4.9988': attribute type 12 has an invalid length. [ 1315.859479][T13159] xt_TCPMSS: Only works on TCP SYN packets [ 1316.056183][T13159] bridge_slave_1: left allmulticast mode [ 1316.076458][T13159] bridge_slave_1: left promiscuous mode [ 1316.104815][T13159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.136292][T13159] bridge_slave_0: left allmulticast mode [ 1316.153914][T13159] bridge_slave_0: left promiscuous mode [ 1316.171411][T13159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.214728][T13159] bridge0 (unregistering): left promiscuous mode [ 1316.488533][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.500259][T13182] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1316.510387][T13182] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1316.520928][T13182] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1317.118948][T13213] __nla_validate_parse: 7 callbacks suppressed [ 1317.118969][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10003'. [ 1317.238300][T13213] bond9: entered promiscuous mode [ 1317.263700][T13213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1317.984854][T13257] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10013'. [ 1318.112909][T13257] dvmrp0: entered allmulticast mode [ 1318.441141][T13264] delete_channel: no stack [ 1318.473371][T13272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10017'. [ 1318.493315][T13272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10017'. [ 1318.584938][T13275] netlink: 'syz.5.10018': attribute type 32 has an invalid length. [ 1318.596983][T13267] gretap0: left promiscuous mode [ 1319.241564][T13267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.805744][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10026'. [ 1319.825724][T13306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10028'. [ 1319.877479][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10026'. [ 1319.975121][T13312] ip6gre1: entered promiscuous mode [ 1319.984706][T13312] ip6gre1: entered allmulticast mode [ 1320.006281][T13314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.063946][ T1122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.121377][ T1122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.134218][ T2172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.177965][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10029'. [ 1320.179583][T13321] sock: sock_timestamping_bind_phc: sock not bind to device [ 1320.214655][T13320] nbd: must specify at least one socket [ 1320.288117][T13322] macsec1: entered promiscuous mode [ 1320.293515][T13322] vlan3: entered promiscuous mode [ 1320.299959][T13322] bridge0: entered promiscuous mode [ 1320.408764][T13327] pimreg9: entered allmulticast mode [ 1320.968383][T10132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.998772][T10132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1321.351281][T13370] netlink: 'syz.1.10041': attribute type 12 has an invalid length. [ 1321.431159][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10040'. [ 1321.494494][T13374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10040'. [ 1321.603187][T13374] vlan2: entered promiscuous mode [ 1321.624612][T13374] bridge0: entered promiscuous mode [ 1321.644840][T13374] vlan2: entered allmulticast mode [ 1321.654628][T13374] bridge0: entered allmulticast mode [ 1321.692544][T28166] Bluetooth: hci1: link tx timeout [ 1321.698777][T28166] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1321.712998][ T5161] Bluetooth: hci1: link tx timeout [ 1321.723309][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1321.864393][ T5161] Bluetooth: hci1: link tx timeout [ 1321.872317][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1321.891153][ T5161] Bluetooth: hci1: link tx timeout [ 1321.896695][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1321.908913][ T5161] Bluetooth: hci1: link tx timeout [ 1321.916112][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1322.807283][ T5161] Bluetooth: hci1: link tx timeout [ 1322.812498][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1323.009818][ T5161] Bluetooth: hci1: link tx timeout [ 1323.016062][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1323.446842][T13344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.498737][ T5161] Bluetooth: hci1: link tx timeout [ 1323.503921][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1323.612581][ T5161] Bluetooth: hci1: link tx timeout [ 1323.621452][ T5161] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1323.766034][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 1323.783857][T13432] __nla_validate_parse: 1 callbacks suppressed [ 1323.783875][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10056'. [ 1323.922673][T13432] bond4: Invalid ad_actor_system MAC address. [ 1323.931559][T13432] bond4: option ad_actor_system: invalid value (7) [ 1323.948445][T13432] bond4 (unregistering): Released all slaves [ 1324.013950][T13436] wireguard: wg1: Could not create IPv4 socket [ 1324.164721][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1324.253909][T13456] openvswitch: netlink: Actions may not be safe on all matching packets [ 1324.631312][T13465] IPVS: Scheduler module ip_vs_ not found [ 1324.661347][T13474] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1325.148103][T13499] netlink: 'syz.1.10070': attribute type 1 has an invalid length. [ 1326.308029][T13527] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1327.871222][T13497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1328.303675][T13549] Bluetooth: MGMT ver 1.23 [ 1328.312103][T13551] openvswitch: netlink: Duplicate key (type 21). [ 1328.514493][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10088'. [ 1328.576725][T13560] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1328.593119][T13553] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1328.629904][ T807] IPVS: starting estimator thread 0... [ 1328.657434][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10088'. [ 1328.765091][T13567] IPVS: using max 30 ests per chain, 72000 per kthread [ 1329.122006][T13586] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10094'. [ 1329.419454][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10101'. [ 1329.428755][T13584] syzkaller0: entered promiscuous mode [ 1329.428782][T13584] syzkaller0: entered allmulticast mode [ 1329.608389][T13615] netlink: 'syz.5.10102': attribute type 1 has an invalid length. [ 1330.054248][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10105'. [ 1330.081104][T13390] udevd[13390]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1330.155392][T13328] udevd[13328]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1332.094813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1334.211321][T13615] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1334.258371][T13618] bond10: (slave gretap1): making interface the new active one [ 1334.278194][T13618] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 1334.344501][T13642] erspan0: entered promiscuous mode [ 1334.384750][T13642] macsec1: entered promiscuous mode [ 1334.393506][T13642] erspan0: left promiscuous mode [ 1334.641533][T13666] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10112'. [ 1334.684084][T13666] netlink: 'syz.2.10112': attribute type 1 has an invalid length. [ 1334.706386][T13666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10112'. [ 1334.943454][T13691] xt_hashlimit: size too large, truncated to 1048576 [ 1335.499256][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10120'. [ 1335.537389][T13714] delete_channel: no stack [ 1336.330944][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10131'. [ 1336.460713][T13763] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1336.504077][T13764] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10131'. [ 1336.528170][T13773] netlink: 'syz.2.10137': attribute type 1 has an invalid length. [ 1336.544156][T13764] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10131'. [ 1336.554878][T13773] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10137'. [ 1336.579089][T13763] bond5 (unregistering): Released all slaves [ 1337.150214][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1337.211320][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1337.246372][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1338.362625][T13838] netlink: 'syz.5.10151': attribute type 3 has an invalid length. [ 1338.386068][T13838] netlink: 'syz.5.10151': attribute type 2 has an invalid length. [ 1338.434903][T13838] netlink: 'syz.5.10151': attribute type 2 has an invalid length. [ 1338.458377][T13849] netlink: 'syz.4.10153': attribute type 1 has an invalid length. [ 1338.510214][T13841] netlink: 'syz.1.10152': attribute type 10 has an invalid length. [ 1338.581985][T13852] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 1338.681098][T13841] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1338.740572][T13866] netlink: 'syz.5.10156': attribute type 13 has an invalid length. [ 1338.763331][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.772649][T13866] netlink: 'syz.5.10156': attribute type 17 has an invalid length. [ 1338.812676][T13866] netlink: 'syz.5.10156': attribute type 27 has an invalid length. [ 1338.913172][T13866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1339.294049][T13878] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1339.717192][T13886] team0: Port device team_slave_0 removed [ 1339.939348][T13906] netlink: 'syz.0.10167': attribute type 13 has an invalid length. [ 1339.961694][T13906] netlink: 'syz.0.10167': attribute type 17 has an invalid length. [ 1339.988607][T13906] netlink: 'syz.0.10167': attribute type 27 has an invalid length. [ 1340.050037][T13906] team0: left promiscuous mode [ 1340.072863][T13906] team_slave_0: left promiscuous mode [ 1340.119051][T13906] team_slave_1: left promiscuous mode [ 1340.151598][T13906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.191250][T13906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1340.285191][T13927] netlink: 'syz.2.10170': attribute type 7 has an invalid length. [ 1340.428995][T13930] __nla_validate_parse: 10 callbacks suppressed [ 1340.429015][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1340.466043][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10172'. [ 1341.055165][T13958] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1341.109720][T13960] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 1341.495976][T13970] netlink: 'syz.0.10185': attribute type 13 has an invalid length. [ 1341.536453][T13970] netlink: 'syz.0.10185': attribute type 17 has an invalid length. [ 1341.577632][T13970] netlink: 'syz.0.10185': attribute type 27 has an invalid length. [ 1341.609814][T13972] xt_hashlimit: overflow, rate too high: 1 [ 1341.631617][T13973] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10186'. [ 1341.688792][T13970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.103539][T13993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10190'. [ 1342.565881][T14000] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1342.765670][T14008] x_tables: unsorted underflow at hook 3 [ 1342.783869][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10196'. [ 1342.882334][T14006] syzkaller1: entered promiscuous mode [ 1342.896468][T14006] syzkaller1: entered allmulticast mode [ 1343.023180][T14021] netlink: 'syz.1.10200': attribute type 13 has an invalid length. [ 1343.082449][T14021] netlink: 'syz.1.10200': attribute type 17 has an invalid length. [ 1343.190623][T14021] netlink: 'syz.1.10200': attribute type 27 has an invalid length. [ 1343.306946][T14021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.573794][T14043] delete_channel: no stack [ 1343.741015][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.780307][T14040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10205'. [ 1343.819039][T14064] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10209'. [ 1343.922982][T14043] bond1: entered promiscuous mode [ 1343.935130][T14043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.997547][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10208'. [ 1344.100609][T14076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10208'. [ 1344.640495][T14105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1344.767188][T14114] bond3: entered promiscuous mode [ 1344.772428][T14114] bond3: entered allmulticast mode [ 1344.779209][T14114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1345.004299][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10222'. [ 1345.047623][T14123] l2tp_ppp: sess 2/0: no socket in recv [ 1345.538588][T14143] x_tables: duplicate underflow at hook 1 [ 1345.586989][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10228'. [ 1345.622545][T14150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1345.692340][T14153] validate_nla: 8 callbacks suppressed [ 1345.692359][T14153] netlink: 'syz.5.10231': attribute type 13 has an invalid length. [ 1345.747155][T14153] netlink: 'syz.5.10231': attribute type 17 has an invalid length. [ 1345.811474][T14153] netlink: 'syz.5.10231': attribute type 27 has an invalid length. [ 1346.129059][T14144] veth5: entered allmulticast mode [ 1346.286059][T14144] bond5: (slave veth5): Enslaving as an active interface with an up link [ 1346.478637][T14156] bond5 (unregistering): (slave veth5): Releasing backup interface [ 1346.502812][T14156] bond5 (unregistering): Released all slaves [ 1346.553802][T14153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.444728][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1347.772990][T14228] netlink: 'syz.0.10249': attribute type 12 has an invalid length. [ 1347.802921][T14228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10249'. [ 1347.942097][T14231] netlink: 'syz.0.10249': attribute type 39 has an invalid length. [ 1348.031918][T14233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1348.669844][T14256] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1348.912934][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10258'. [ 1348.949516][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10260'. [ 1349.031539][T25877] netdevsim netdevsim0 ªªªªª»: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.043483][T14271] Bluetooth: MGMT ver 1.23 [ 1349.068781][T25877] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.092373][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10260'. [ 1349.105058][T25877] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.143539][T25877] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.160515][T14274] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10261'. [ 1349.379661][T14293] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10266'. [ 1349.381320][T14274] syzkaller0: entered promiscuous mode [ 1349.414884][T14274] syzkaller0: entered allmulticast mode [ 1349.506312][T14297] netlink: 'syz.5.10267': attribute type 12 has an invalid length. [ 1349.524021][T14297] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10267'. [ 1349.647763][T14297] netlink: 'syz.5.10267': attribute type 39 has an invalid length. [ 1349.784003][T14305] xt_TCPMSS: Only works on TCP SYN packets [ 1349.888139][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10271'. [ 1350.298976][T14325] netlink: 'syz.1.10274': attribute type 15 has an invalid length. [ 1354.044845][T14330] __nla_validate_parse: 2 callbacks suppressed [ 1354.044864][T14330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10277'. [ 1354.406756][T14352] tipc: Started in network mode [ 1354.442563][T14352] tipc: Node identity 8ebada108d37, cluster identity 4711 [ 1354.472487][T14352] tipc: Enabled bearer , priority 0 [ 1354.659208][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10283'. [ 1354.674834][T14367] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1354.753679][T14352] tipc: Disabling bearer [ 1354.914494][T14380] netlink: 'syz.0.10286': attribute type 2 has an invalid length. [ 1355.437861][T14408] IPVS: set_ctl: invalid protocol: 39014 61.213.52.179:27751 [ 1355.453182][T14402] syzkaller0: entered promiscuous mode [ 1355.461425][T14402] syzkaller0: entered allmulticast mode [ 1355.489550][T14411] tipc: Started in network mode [ 1355.505404][T14411] tipc: Node identity 22a3ed87f7bb, cluster identity 4711 [ 1355.515869][T14411] tipc: Enabled bearer , priority 0 [ 1358.513886][T28166] Bluetooth: hci2: command 0x0401 tx timeout [ 1359.739733][T14395] syzkaller0: left promiscuous mode [ 1359.754628][T14395] syzkaller0: left allmulticast mode [ 1359.799801][T14411] syzkaller0: MTU too low for tipc bearer [ 1359.817427][T14411] tipc: Disabling bearer [ 1359.862676][T14426] netlink: 'syz.1.10297': attribute type 13 has an invalid length. [ 1359.882370][T14426] netlink: 'syz.1.10297': attribute type 17 has an invalid length. [ 1359.891983][T32511] tipc: Node number set to 3575180679 [ 1359.946380][T14426] netlink: 'syz.1.10297': attribute type 27 has an invalid length. [ 1359.957544][T14429] FAULT_INJECTION: forcing a failure. [ 1359.957544][T14429] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.996410][T14429] CPU: 0 UID: 0 PID: 14429 Comm: syz.1.10297 Not tainted syzkaller #0 PREEMPT(full) [ 1359.996423][T14431] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10298'. [ 1359.996440][T14429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.996454][T14429] Call Trace: [ 1359.996460][T14429] [ 1359.996467][T14429] dump_stack_lvl+0xe8/0x150 [ 1359.996497][T14429] should_fail_ex+0x412/0x560 [ 1359.996529][T14429] should_failslab+0xa8/0x100 [ 1359.996565][T14429] __kmalloc_cache_noprof+0x88/0x660 [ 1359.996589][T14429] ? tls_set_sw_offload+0x13a/0x1780 [ 1359.996613][T14429] tls_set_sw_offload+0x13a/0x1780 [ 1359.996640][T14429] ? tls_set_device_offload+0x20a/0xc00 [ 1359.996670][T14429] tls_setsockopt+0xef2/0x15c0 [ 1359.996696][T14429] ? __pfx_tls_setsockopt+0x10/0x10 [ 1359.996712][T14429] ? fd_install+0x94/0x3d0 [ 1359.996737][T14429] ? aa_sock_opt_perm+0xff/0x1a0 [ 1359.996757][T14429] ? sock_common_setsockopt+0x36/0xc0 [ 1359.996781][T14429] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1359.996808][T14429] do_sock_setsockopt+0x17c/0x1b0 [ 1359.996830][T14429] __x64_sys_setsockopt+0x13d/0x1b0 [ 1359.996851][T14429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.996870][T14429] do_syscall_64+0x15f/0xf80 [ 1359.996893][T14429] ? trace_irq_disable+0x3b/0x140 [ 1359.996916][T14429] ? clear_bhb_loop+0x40/0x90 [ 1359.996938][T14429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.996956][T14429] RIP: 0033:0x7f6732b9cdd9 [ 1359.996973][T14429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.996989][T14429] RSP: 002b:00007f673399c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1359.997008][T14429] RAX: ffffffffffffffda RBX: 00007f6732e16090 RCX: 00007f6732b9cdd9 [ 1359.997021][T14429] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a [ 1359.997031][T14429] RBP: 00007f673399c090 R08: 0000000000000038 R09: 0000000000000000 [ 1359.997043][T14429] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1359.997053][T14429] R13: 00007f6732e16128 R14: 00007f6732e16090 R15: 00007ffcf7b65fc8 [ 1359.997084][T14429] [ 1360.011786][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10297'. [ 1360.078539][T14431] netlink: Conntrack attr has 4 unknown bytes [ 1360.255033][T14426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1360.290720][T14442] netlink: 'syz.0.10296': attribute type 21 has an invalid length. [ 1360.357660][T14442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10296'. [ 1360.384723][T14442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10296'. [ 1360.658446][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10306'. [ 1360.711743][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10306'. [ 1361.328527][T14468] bond0: Unable to set up delay as MII monitoring is disabled [ 1361.374885][T14470] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10306'. [ 1361.389867][T14471] veth0_macvtap: entered allmulticast mode [ 1361.396588][T14471] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1361.532932][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1361.860496][T14500] netlink: 'syz.4.10315': attribute type 13 has an invalid length. [ 1361.891216][T14500] netlink: 'syz.4.10315': attribute type 17 has an invalid length. [ 1361.917410][T14500] netlink: 'syz.4.10315': attribute type 27 has an invalid length. [ 1361.947401][T14497] "syz.0.10313" (14497) uses obsolete ecb(arc4) skcipher [ 1361.976101][T14502] FAULT_INJECTION: forcing a failure. [ 1361.976101][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.010108][T14500] erspan0: left promiscuous mode [ 1362.036431][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.4.10315 Not tainted syzkaller #0 PREEMPT(full) [ 1362.036458][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1362.036470][T14502] Call Trace: [ 1362.036478][T14502] [ 1362.036486][T14502] dump_stack_lvl+0xe8/0x150 [ 1362.036529][T14502] should_fail_ex+0x412/0x560 [ 1362.036563][T14502] should_failslab+0xa8/0x100 [ 1362.036590][T14502] __kmalloc_node_noprof+0xf0/0x7c0 [ 1362.036613][T14502] ? crypto_create_tfm_node+0x83/0x3f0 [ 1362.036645][T14502] crypto_create_tfm_node+0x83/0x3f0 [ 1362.036677][T14502] crypto_alloc_tfm_node+0x172/0x3f0 [ 1362.036705][T14502] ? timer_init_key+0x161/0x2c0 [ 1362.036735][T14502] tls_set_sw_offload+0xa33/0x1780 [ 1362.036782][T14502] tls_setsockopt+0xef2/0x15c0 [ 1362.036811][T14502] ? __pfx_tls_setsockopt+0x10/0x10 [ 1362.036827][T14502] ? fd_install+0x94/0x3d0 [ 1362.036856][T14502] ? aa_sock_opt_perm+0xff/0x1a0 [ 1362.036876][T14502] ? sock_common_setsockopt+0x36/0xc0 [ 1362.036902][T14502] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1362.036929][T14502] do_sock_setsockopt+0x17c/0x1b0 [ 1362.036953][T14502] __x64_sys_setsockopt+0x13d/0x1b0 [ 1362.036976][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.036997][T14502] do_syscall_64+0x15f/0xf80 [ 1362.037021][T14502] ? trace_irq_disable+0x3b/0x140 [ 1362.037045][T14502] ? clear_bhb_loop+0x40/0x90 [ 1362.037065][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.037082][T14502] RIP: 0033:0x7f49c699cdd9 [ 1362.037099][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.037114][T14502] RSP: 002b:00007f49c7904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1362.037132][T14502] RAX: ffffffffffffffda RBX: 00007f49c6c16090 RCX: 00007f49c699cdd9 [ 1362.037144][T14502] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a [ 1362.037155][T14502] RBP: 00007f49c7904090 R08: 0000000000000038 R09: 0000000000000000 [ 1362.037166][T14502] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1362.037176][T14502] R13: 00007f49c6c16128 R14: 00007f49c6c16090 R15: 00007fff1005c358 [ 1362.037206][T14502] [ 1362.098935][T14500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.297050][T14500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.309908][T14500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1362.709273][T14519] syzkaller1: entered promiscuous mode [ 1362.717194][T14519] syzkaller1: entered allmulticast mode [ 1362.731506][T14519] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1362.757012][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10320'. [ 1362.811070][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10320'. [ 1363.110127][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10324'. [ 1363.186455][T14540] xt_time: unknown flags 0xf4 [ 1363.295865][T14546] netlink: 'syz.5.10327': attribute type 13 has an invalid length. [ 1363.312416][T14546] netlink: 'syz.5.10327': attribute type 17 has an invalid length. [ 1363.327160][T14546] netlink: 'syz.5.10327': attribute type 27 has an invalid length. [ 1363.354965][T14546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1363.396968][T14546] FAULT_INJECTION: forcing a failure. [ 1363.396968][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.410382][T14546] CPU: 1 UID: 0 PID: 14546 Comm: syz.5.10327 Not tainted syzkaller #0 PREEMPT(full) [ 1363.410408][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1363.410420][T14546] Call Trace: [ 1363.410428][T14546] [ 1363.410436][T14546] dump_stack_lvl+0xe8/0x150 [ 1363.410470][T14546] should_fail_ex+0x412/0x560 [ 1363.410504][T14546] should_failslab+0xa8/0x100 [ 1363.410531][T14546] __kmalloc_node_noprof+0xf0/0x7c0 [ 1363.410554][T14546] ? crypto_create_tfm_node+0x83/0x3f0 [ 1363.410586][T14546] crypto_create_tfm_node+0x83/0x3f0 [ 1363.410618][T14546] crypto_spawn_tfm2+0x5c/0x90 [ 1363.410641][T14546] crypto_gcm_init_tfm+0x48/0x140 [ 1363.410664][T14546] crypto_create_tfm_node+0x18c/0x3f0 [ 1363.410696][T14546] crypto_alloc_tfm_node+0x172/0x3f0 [ 1363.410722][T14546] ? timer_init_key+0x161/0x2c0 [ 1363.410751][T14546] tls_set_sw_offload+0xa33/0x1780 [ 1363.410791][T14546] tls_setsockopt+0xef2/0x15c0 [ 1363.410820][T14546] ? __pfx_tls_setsockopt+0x10/0x10 [ 1363.410848][T14546] ? __fget_files+0x2a/0x420 [ 1363.410866][T14546] ? aa_sock_opt_perm+0xff/0x1a0 [ 1363.410887][T14546] ? sock_common_setsockopt+0x36/0xc0 [ 1363.410912][T14546] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1363.410940][T14546] do_sock_setsockopt+0x17c/0x1b0 [ 1363.410966][T14546] __x64_sys_setsockopt+0x13d/0x1b0 [ 1363.410988][T14546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.411009][T14546] do_syscall_64+0x15f/0xf80 [ 1363.411037][T14546] ? trace_irq_disable+0x3b/0x140 [ 1363.411061][T14546] ? clear_bhb_loop+0x40/0x90 [ 1363.411084][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.411102][T14546] RIP: 0033:0x7fe7d119cdd9 [ 1363.411120][T14546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.411143][T14546] RSP: 002b:00007fe7d202d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1363.411163][T14546] RAX: ffffffffffffffda RBX: 00007fe7d1415fa0 RCX: 00007fe7d119cdd9 [ 1363.411176][T14546] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000009 [ 1363.411188][T14546] RBP: 00007fe7d202d090 R08: 0000000000000038 R09: 0000000000000000 [ 1363.411199][T14546] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1363.411211][T14546] R13: 00007fe7d1416038 R14: 00007fe7d1415fa0 R15: 00007fffc486f9c8 [ 1363.411244][T14546] [ 1365.454440][T14513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1366.012883][T14575] tipc: Enabled bearer , priority 0 [ 1366.060201][T14575] syzkaller0: entered promiscuous mode [ 1366.071245][T14575] syzkaller0: entered allmulticast mode [ 1366.252865][T14579] netem: change failed [ 1366.257985][T14582] netlink: 'syz.1.10336': attribute type 30 has an invalid length. [ 1366.284460][T14590] tipc: Resetting bearer [ 1366.290746][T14590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.322175][T14573] tipc: Resetting bearer [ 1366.368615][T14573] tipc: Disabling bearer [ 1366.461095][T14597] netlink: 'syz.0.10338': attribute type 13 has an invalid length. [ 1366.470599][T14597] netlink: 'syz.0.10338': attribute type 17 has an invalid length. [ 1366.489805][T14597] netlink: 'syz.0.10338': attribute type 27 has an invalid length. [ 1366.552587][T14598] FAULT_INJECTION: forcing a failure. [ 1366.552587][T14598] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.574865][T14598] CPU: 0 UID: 0 PID: 14598 Comm: syz.0.10338 Not tainted syzkaller #0 PREEMPT(full) [ 1366.574892][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1366.574903][T14598] Call Trace: [ 1366.574910][T14598] [ 1366.574919][T14598] dump_stack_lvl+0xe8/0x150 [ 1366.574950][T14598] should_fail_ex+0x412/0x560 [ 1366.574983][T14598] should_failslab+0xa8/0x100 [ 1366.575012][T14598] __kmalloc_noprof+0xe8/0x760 [ 1366.575033][T14598] ? crypto_skcipher_setkey+0x14a/0x460 [ 1366.575053][T14598] ? crypto_gcm_setkey+0xe6/0x420 [ 1366.575077][T14598] crypto_gcm_setkey+0xe6/0x420 [ 1366.575101][T14598] crypto_aead_setkey+0x14e/0x220 [ 1366.575129][T14598] tls_set_sw_offload+0xb40/0x1780 [ 1366.575188][T14598] tls_setsockopt+0xef2/0x15c0 [ 1366.575216][T14598] ? __pfx_tls_setsockopt+0x10/0x10 [ 1366.575233][T14598] ? fd_install+0x94/0x3d0 [ 1366.575260][T14598] ? aa_sock_opt_perm+0xff/0x1a0 [ 1366.575280][T14598] ? sock_common_setsockopt+0x36/0xc0 [ 1366.575306][T14598] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1366.575333][T14598] do_sock_setsockopt+0x17c/0x1b0 [ 1366.575358][T14598] __x64_sys_setsockopt+0x13d/0x1b0 [ 1366.575381][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.575401][T14598] do_syscall_64+0x15f/0xf80 [ 1366.575425][T14598] ? trace_irq_disable+0x3b/0x140 [ 1366.575449][T14598] ? clear_bhb_loop+0x40/0x90 [ 1366.575472][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.575490][T14598] RIP: 0033:0x7fcba199cdd9 [ 1366.575508][T14598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.575524][T14598] RSP: 002b:00007fcba27cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1366.575543][T14598] RAX: ffffffffffffffda RBX: 00007fcba1c16090 RCX: 00007fcba199cdd9 [ 1366.575557][T14598] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a [ 1366.575568][T14598] RBP: 00007fcba27cd090 R08: 0000000000000038 R09: 0000000000000000 [ 1366.575579][T14598] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1366.575591][T14598] R13: 00007fcba1c16128 R14: 00007fcba1c16090 R15: 00007ffdfa6cd848 [ 1366.575622][T14598] [ 1366.724552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.804953][ C1] lec:lec_tx_timeout: lec0 [ 1366.866773][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1366.878518][T14609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.885904][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.893156][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.926843][T14597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1367.431077][T14623] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1367.808824][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10347'. [ 1367.834051][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10346'. [ 1367.888903][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10347'. [ 1367.953537][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10347'. [ 1368.039744][T14642] bond4: entered promiscuous mode [ 1368.060325][T14642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1368.102779][T14642] bond4 (unregistering): Released all slaves [ 1368.255575][T14651] netlink: 'syz.4.10348': attribute type 10 has an invalid length. [ 1368.425753][T10359] lec:lec_start_xmit: lec0:No lecd attached [ 1368.752347][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10356'. [ 1368.796075][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10356'. [ 1368.818189][T14677] netlink: 124 bytes leftover after parsing attributes in process `syz.5.10356'. [ 1369.117301][T14694] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10360'. [ 1369.153141][T14694] gretap0: entered promiscuous mode [ 1369.218073][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10362'. [ 1369.919572][T14731] netlink: 'syz.4.10368': attribute type 13 has an invalid length. [ 1369.943760][T14731] netlink: 'syz.4.10368': attribute type 17 has an invalid length. [ 1369.953621][T14731] netlink: 'syz.4.10368': attribute type 27 has an invalid length. [ 1369.965796][T14732] netlink: 'syz.2.10369': attribute type 1 has an invalid length. [ 1370.071446][T14731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.100950][T14731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1370.540827][T14755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.596766][T14753] syzkaller1: entered promiscuous mode [ 1370.602435][T14753] syzkaller1: entered allmulticast mode [ 1371.035377][T14774] netlink: 'syz.4.10382': attribute type 13 has an invalid length. [ 1371.052630][T14774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.322875][T14787] validate_nla: 2 callbacks suppressed [ 1371.322894][T14787] netlink: 'syz.0.10385': attribute type 1 has an invalid length. [ 1371.346511][T14787] netlink: 'syz.0.10385': attribute type 2 has an invalid length. [ 1372.282598][T14828] __nla_validate_parse: 1 callbacks suppressed [ 1372.282619][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10396'. [ 1372.570644][T14834] bridge_slave_0: left allmulticast mode [ 1372.607017][T14834] bridge_slave_0: left promiscuous mode [ 1372.629011][T14834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.673184][T14834] bridge_slave_1: left allmulticast mode [ 1372.709055][T14834] bridge_slave_1: left promiscuous mode [ 1372.744920][T14834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.833529][T14834] team0: Port device team_slave_0 removed [ 1372.887736][T14834] team0: Port device team_slave_1 removed [ 1372.907531][T14834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.945144][T14834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1373.382024][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10408'. [ 1373.466538][T14875] netlink: 'syz.0.10409': attribute type 13 has an invalid length. [ 1373.496842][T14875] netlink: 'syz.0.10409': attribute type 17 has an invalid length. [ 1373.527861][T14875] netlink: 'syz.0.10409': attribute type 27 has an invalid length. [ 1373.668695][T14875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1373.764715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1373.772895][ C1] lec:lec_tx_timeout: lec0 [ 1373.944004][T14865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10404'. [ 1374.031514][T14865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10404'. [ 1374.352641][T14888] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1374.662326][T10132] IPVS: starting estimator thread 0... [ 1374.773704][T14908] IPVS: using max 27 ests per chain, 64800 per kthread [ 1377.610746][T14921] syzkaller0: entered promiscuous mode [ 1377.697593][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10419'. [ 1377.700618][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10419'. [ 1377.831026][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1377.893451][T14938] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.10422'. [ 1377.961443][T14938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1378.015475][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10423'. [ 1378.063022][T14944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10424'. [ 1378.169069][T14952] netlink: 'syz.4.10426': attribute type 5 has an invalid length. [ 1378.205463][T14950] team0: No ports can be present during mode change [ 1378.299409][T14957] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10429'. [ 1378.343066][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10426'. [ 1378.736570][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10433'. [ 1378.759155][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10433'. [ 1378.901954][T14988] netlink: 'syz.4.10435': attribute type 30 has an invalid length. [ 1378.916279][T14977] geneve2: entered promiscuous mode [ 1379.057546][T14978] ip6gre4: entered promiscuous mode [ 1379.075374][T14978] ip6gre4: entered allmulticast mode [ 1379.177016][T14988] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1379.220952][T14988] bond4 (unregistering): Released all slaves [ 1379.454676][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1380.329750][T15036] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 1380.415367][T15040] sctp: [Deprecated]: syz.0.10449 (pid 15040) Use of int in maxseg socket option. [ 1380.415367][T15040] Use struct sctp_assoc_value instead [ 1380.820518][T15051] can: request_module (can-proto-0) failed. [ 1380.924103][T15059] atomic_op ffff88804d2ad198 conn xmit_atomic 0000000000000000 [ 1382.296448][T15130] netlink: 'syz.5.10473': attribute type 1 has an invalid length. [ 1382.313398][T15128] netlink: 'syz.1.10474': attribute type 3 has an invalid length. [ 1382.761194][T15161] __nla_validate_parse: 10 callbacks suppressed [ 1382.761216][T15161] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10483'. [ 1382.809797][T15163] netlink: 'syz.5.10484': attribute type 1 has an invalid length. [ 1382.820186][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10483'. [ 1382.854668][T15163] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10484'. [ 1382.887638][T15163] Cannot find set identified by id 65534 to match [ 1382.943780][T15168] macsec2: entered promiscuous mode [ 1383.201204][T15179] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1383.243856][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1383.291500][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1383.348543][T15189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10491'. [ 1383.513511][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1383.553791][T15201] netlink: 'syz.1.10496': attribute type 13 has an invalid length. [ 1383.576341][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10496'. [ 1383.594430][T15199] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1384.292902][T15243] xt_socket: unknown flags 0x8 [ 1384.317598][T15243] Cannot find del_set index 49151 as target [ 1384.326673][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10507'. [ 1384.922696][T15266] netlink: 'syz.0.10515': attribute type 12 has an invalid length. [ 1384.948731][T15264] tun0: tun_chr_ioctl cmd 1074025672 [ 1384.973591][T15264] tun0: ignored: set checksum disabled [ 1385.022439][T15266] netlink: 'syz.0.10515': attribute type 39 has an invalid length. [ 1385.069453][ T5161] Bluetooth: hci1: link tx timeout [ 1385.074873][ T5161] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1386.128627][T15317] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1387.128974][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 1388.017266][T15385] syzkaller1: entered promiscuous mode [ 1388.035954][T15385] syzkaller1: entered allmulticast mode [ 1388.182842][T15394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.284472][T15398] netlink: 'syz.2.10550': attribute type 15 has an invalid length. [ 1388.455475][T15407] __nla_validate_parse: 25 callbacks suppressed [ 1388.455497][T15407] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10551'. [ 1388.728943][T15417] netlink: 'syz.2.10554': attribute type 2 has an invalid length. [ 1388.733695][T15416] team0: Port device dummy0 removed [ 1388.783486][T15416] bridge_slave_0: left allmulticast mode [ 1388.783661][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10554'. [ 1388.801913][T15416] bridge_slave_0: left promiscuous mode [ 1388.812295][T15420] SET target dimension over the limit! [ 1388.843275][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.880633][T15416] bridge_slave_1: left allmulticast mode [ 1388.902712][T15416] bridge_slave_1: left promiscuous mode [ 1388.930944][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.955967][T15416] bond2: (slave veth0_to_bond): Releasing active interface [ 1388.963635][T15416] veth0_to_bond: left promiscuous mode [ 1388.970160][T15416] veth0_to_bond: left allmulticast mode [ 1388.991027][T15416] bond0: (slave bond_slave_0): Releasing backup interface [ 1389.023809][T15416] bond0: (slave bond_slave_1): Releasing backup interface [ 1389.048966][T15428] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1389.108016][T15416] team0: Port device team_slave_1 removed [ 1389.136464][T15416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.156196][T15416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.175511][T15416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1389.223178][T15422] 0ªî{X¹¦: entered promiscuous mode [ 1389.252620][T15422] vlan4: entered promiscuous mode [ 1389.382320][T15417] bond4: option primary_reselect: invalid value (133) [ 1389.427109][T15417] bond4 (unregistering): Released all slaves [ 1389.514738][T15452] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1389.538368][T15455] netlink: 'syz.5.10561': attribute type 39 has an invalid length. [ 1389.550856][T15452] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1389.581151][T15417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10554'. [ 1389.615272][T15451] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1389.636075][T15450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10562'. [ 1389.668722][T15443] netlink: 'syz.5.10561': attribute type 12 has an invalid length. [ 1389.670259][T15451] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1389.682824][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10554'. [ 1389.702718][T15443] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10561'. [ 1389.783081][T15450] ip6gre1: entered promiscuous mode [ 1389.795621][T15450] ip6gre1: entered allmulticast mode [ 1389.813346][T15417] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1389.969751][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10563'. [ 1390.281439][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10569'. [ 1390.342045][T15489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10570'. [ 1390.523862][T15493] tipc: Enabled bearer , priority 0 [ 1390.923465][T15525] netlink: 'syz.1.10574': attribute type 1 has an invalid length. [ 1391.069078][T15530] netlink: 'syz.5.10575': attribute type 39 has an invalid length. [ 1391.248475][T15488] syzkaller0: entered promiscuous mode [ 1391.254145][T15488] syzkaller0: entered allmulticast mode [ 1391.303112][T15515] tipc: Resetting bearer [ 1391.387887][T15515] tipc: Disabling bearer [ 1391.456254][T15526] netlink: 'syz.5.10575': attribute type 12 has an invalid length. [ 1391.471870][T15526] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10575'. [ 1391.718185][T15537] syzkaller0: entered promiscuous mode [ 1391.735418][T15537] syzkaller0: entered allmulticast mode [ 1392.033349][T15561] gretap0: left promiscuous mode [ 1392.225833][T15561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1392.439441][T15573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1392.992824][T15608] wg1 speed is unknown, defaulting to 1000 [ 1393.005296][T15592] gretap0: entered allmulticast mode [ 1393.028610][T15592] bond4: (slave gretap0): making interface the new active one [ 1393.048083][T15592] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 1393.176846][T15608] wg1 speed is unknown, defaulting to 1000 [ 1393.252206][T15608] wg1 speed is unknown, defaulting to 1000 [ 1394.031885][T15651] __nla_validate_parse: 9 callbacks suppressed [ 1394.031905][T15651] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10595'. [ 1394.067936][T15653] validate_nla: 5 callbacks suppressed [ 1394.067956][T15653] netlink: 'syz.4.10596': attribute type 13 has an invalid length. [ 1394.126217][T15653] netlink: 'syz.4.10596': attribute type 17 has an invalid length. [ 1394.162409][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10596'. [ 1394.183810][T15653] netlink: 'syz.4.10596': attribute type 27 has an invalid length. [ 1394.319610][T15653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1394.391161][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10597'. [ 1394.638898][T15608] infiniband syz0: set active [ 1394.646929][T15675] wg1 speed is unknown, defaulting to 1000 [ 1394.664456][T15608] infiniband syz0: added wg1 [ 1394.678063][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10599'. [ 1394.692982][T15608] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1394.712089][T15608] infiniband syz0: Couldn't open port 1 [ 1394.748056][T15608] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1394.764755][T15608] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1394.834157][T15608] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1395.009086][T15673] veth5: entered allmulticast mode [ 1395.060291][T15673] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1395.086099][T15608] RDS/IB: syz0: added [ 1395.103170][T15608] smc: adding ib device syz0 with port count 1 [ 1395.119816][T15679] bond4 (unregistering): (slave veth5): Releasing backup interface [ 1395.145320][T15608] smc: ib device syz0 port 1 has no pnetid [ 1395.163172][T15679] bond4 (unregistering): Released all slaves [ 1395.260649][T15608] wg1 speed is unknown, defaulting to 1000 [ 1395.308908][T15675] wg1 speed is unknown, defaulting to 1000 [ 1395.485569][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1395.546849][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1395.609765][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1395.620527][T15706] syzkaller0: entered promiscuous mode [ 1395.642688][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1395.646944][T15706] syzkaller0: entered allmulticast mode [ 1395.674949][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10606'. [ 1395.713677][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1396.071150][T15608] wg1 speed is unknown, defaulting to 1000 [ 1396.558270][T15743] syzkaller1: entered promiscuous mode [ 1396.587904][T15743] syzkaller1: entered allmulticast mode [ 1396.818552][T15756] netlink: 'syz.4.10615': attribute type 13 has an invalid length. [ 1396.850778][T15756] netlink: 'syz.4.10615': attribute type 17 has an invalid length. [ 1396.897695][T15756] netlink: 'syz.4.10615': attribute type 27 has an invalid length. [ 1396.950956][T15756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.011852][T15608] wg1 speed is unknown, defaulting to 1000 [ 1397.776705][T15608] wg1 speed is unknown, defaulting to 1000 [ 1397.862703][T15792] hsr0 (unregistering): left allmulticast mode [ 1398.409930][T15815] netlink: 'syz.5.10624': attribute type 12 has an invalid length. [ 1398.500730][T15815] netlink: 'syz.5.10624': attribute type 39 has an invalid length. [ 1398.628135][T15608] wg1 speed is unknown, defaulting to 1000 [ 1399.587559][T15830] __nla_validate_parse: 5 callbacks suppressed [ 1399.587580][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10628'. [ 1399.618645][T15789] wg1 speed is unknown, defaulting to 1000 [ 1400.123448][T15608] wg1 speed is unknown, defaulting to 1000 [ 1400.709311][T15608] wg1 speed is unknown, defaulting to 1000 [ 1400.779449][T15876] netlink: 'syz.4.10640': attribute type 24 has an invalid length. [ 1401.314338][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10643'. [ 1401.559139][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10645'. [ 1401.963296][T15910] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1402.011727][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1402.211823][T15919] netlink: 'syz.5.10652': attribute type 4 has an invalid length. [ 1402.229399][T15919] netlink: 17 bytes leftover after parsing attributes in process `syz.5.10652'. [ 1402.570319][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10659'. [ 1403.107464][T15967] netlink: 'syz.1.10664': attribute type 1 has an invalid length. [ 1403.218788][T15956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.264603][T15956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.291937][T15956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1403.314198][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10664'. [ 1403.344455][T15975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1403.359501][T15975] netlink: 'syz.2.10666': attribute type 7 has an invalid length. [ 1403.392286][T15975] netlink: 'syz.2.10666': attribute type 8 has an invalid length. [ 1403.431446][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1403.499559][T15969] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1403.542982][T15971] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1403.653674][T15956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.680792][T15956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.709591][T15956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1403.803102][T15964] wg1 speed is unknown, defaulting to 1000 [ 1403.974981][T15956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1403.996392][T15990] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1404.019954][T15956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.064763][T15956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1404.261029][T15956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1404.279441][T15956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.311704][T15956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1404.408276][T25898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.419920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.860056][ T1122] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1404.893317][ T1122] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1404.925085][ T1122] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1405.186866][ T1122] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.210949][ T1122] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1405.248649][ T1122] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1405.332888][T16025] wg1 speed is unknown, defaulting to 1000 [ 1405.346000][ T1122] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.370086][ T1122] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1405.395765][ T1122] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1405.549261][ T1122] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.565274][ T1122] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1405.587846][ T1122] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1405.950788][T16044] lo speed is unknown, defaulting to 1000 [ 1406.029778][T16044] lo speed is unknown, defaulting to 1000 [ 1406.126392][T16052] __nla_validate_parse: 3 callbacks suppressed [ 1406.126412][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10682'. [ 1406.225386][T16046] xt_CT: No such helper "snmp" [ 1406.239375][T16050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1406.288873][T16044] lo speed is unknown, defaulting to 1000 [ 1406.361319][T16052] bond5 (unregistering): Released all slaves [ 1406.554130][T16059] tipc: Enabling of bearer rejected, failed to enable media [ 1406.619331][T16061] ip6gre5: entered promiscuous mode [ 1406.644766][T16061] ip6gre5: entered allmulticast mode [ 1406.825608][T16057] wg1 speed is unknown, defaulting to 1000 [ 1406.966113][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.977485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.617898][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.630282][T32511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.644758][ T2172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.807422][T16044] infiniband sqz0: set active [ 1407.821906][T16044] infiniband sqz0: added lo [ 1407.828880][T15675] lo speed is unknown, defaulting to 1000 [ 1407.898059][T16044] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1407.915085][T16044] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1407.953937][T16044] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1408.033379][T16044] RDS/IB: sqz0: added [ 1408.044167][T16044] smc: adding ib device sqz0 with port count 1 [ 1408.054069][T16044] smc: ib device sqz0 port 1 has no pnetid [ 1408.157420][T16090] vxcan3: entered promiscuous mode [ 1408.167241][T15675] lo speed is unknown, defaulting to 1000 [ 1408.241037][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10691'. [ 1408.257711][T16044] lo speed is unknown, defaulting to 1000 [ 1408.876354][T16044] lo speed is unknown, defaulting to 1000 [ 1409.151216][T16141] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1409.168636][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1409.183058][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1409.289914][T16144] netlink: 'syz.0.10703': attribute type 1 has an invalid length. [ 1409.310015][T16144] netlink: 13 bytes leftover after parsing attributes in process `syz.0.10703'. [ 1409.336222][T16044] lo speed is unknown, defaulting to 1000 [ 1409.748122][T16044] lo speed is unknown, defaulting to 1000 [ 1410.137041][T16044] lo speed is unknown, defaulting to 1000 [ 1410.165513][T16134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.174725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.333703][T16161] netlink: 'syz.5.10708': attribute type 12 has an invalid length. [ 1410.365267][T16161] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1410.492214][T16044] lo speed is unknown, defaulting to 1000 [ 1410.498452][T16161] netlink: 'syz.5.10708': attribute type 39 has an invalid length. [ 1410.690423][T16165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10710'. [ 1411.028802][T16044] lo speed is unknown, defaulting to 1000 [ 1411.130713][T16179] syzkaller0: entered promiscuous mode [ 1411.146117][T16179] syzkaller0: entered allmulticast mode [ 1411.442930][T16044] lo speed is unknown, defaulting to 1000 [ 1411.727102][T16095] wg1 speed is unknown, defaulting to 1000 [ 1411.997900][T16195] netlink: 'syz.2.10718': attribute type 1 has an invalid length. [ 1412.032338][T16195] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10718'. [ 1412.058273][T16196] netlink: 'syz.0.10719': attribute type 1 has an invalid length. [ 1412.077841][T16196] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1412.268341][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10721'. [ 1412.496891][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10721'. [ 1412.726267][T16134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.735461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.751971][T16213] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10724'. [ 1412.793899][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10724'. [ 1413.187095][T16225] x_tables: duplicate underflow at hook 1 [ 1413.201724][T16223] netlink: 'syz.0.10729': attribute type 1 has an invalid length. [ 1413.370769][T16134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.380689][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.394944][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.734365][T16239] netlink: 'syz.5.10734': attribute type 1 has an invalid length. [ 1413.984126][T16262] smc: net device veth1_to_team erased user defined pnetid S [ 1414.064998][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10735'. [ 1414.191225][T16269] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 1414.525529][T16283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1415.024154][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.065526][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.093037][T16295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.171391][T16304] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10753'. [ 1415.272012][T16305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10753'. [ 1415.284956][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.294110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.332145][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.357438][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.383137][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.407777][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.441950][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.501645][T16290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.510309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.520857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.142934][T16382] netlink: 'syz.5.10772': attribute type 1 has an invalid length. [ 1417.260926][T16382] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1417.317461][T16385] vlan5: entered allmulticast mode [ 1417.334574][T16385] bond13: entered allmulticast mode [ 1417.411213][T16396] __nla_validate_parse: 12 callbacks suppressed [ 1417.411234][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10775'. [ 1417.972536][T16423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10783'. [ 1418.278649][T16439] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10786'. [ 1418.549869][T16454] IPVS: length: 4096 != 24 [ 1418.719351][T16467] netlink: 'syz.4.10793': attribute type 1 has an invalid length. [ 1418.748354][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10793'. [ 1418.889905][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10794'. [ 1419.011057][T16479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1419.060957][T16481] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1419.079422][T16479] netlink: 'syz.2.10794': attribute type 13 has an invalid length. [ 1419.087605][T16479] netlink: 'syz.2.10794': attribute type 17 has an invalid length. [ 1419.185440][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10794'. [ 1419.222041][ T807] lo speed is unknown, defaulting to 1000 [ 1419.348383][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10799'. [ 1419.603221][T16519] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10807'. [ 1419.629979][T16516] bond14: option miimon: invalid value (18446744073709551607) [ 1419.640400][T16516] bond14: option miimon: allowed values 0 - 2147483647 [ 1419.650226][T16516] bond14 (unregistering): Released all slaves [ 1419.958459][T16541] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10811'. [ 1420.145967][T16551] lo: entered promiscuous mode [ 1420.158723][T16551] tunl0: entered promiscuous mode [ 1420.171267][T16551] gre0: entered promiscuous mode [ 1420.189884][T16551] gretap0: entered promiscuous mode [ 1420.221588][T16551] erspan0: entered promiscuous mode [ 1420.246061][T16551] ip_vti0: entered promiscuous mode [ 1420.262764][T16551] ip6_vti0: entered promiscuous mode [ 1420.272848][T16551] sit0: entered promiscuous mode [ 1420.305578][T16551] ip6tnl0: entered promiscuous mode [ 1420.353621][T16551] ip6gre0: entered promiscuous mode [ 1420.372464][T16551] syz_tun: entered promiscuous mode [ 1420.401301][T16551] bond0: entered promiscuous mode [ 1420.407662][T16551] bond_slave_0: entered promiscuous mode [ 1420.413526][T16551] bond_slave_1: entered promiscuous mode [ 1420.430527][T16551] team0: entered promiscuous mode [ 1420.438952][T16551] team_slave_0: entered promiscuous mode [ 1420.447545][T16551] team_slave_1: entered promiscuous mode [ 1420.453790][T16551] dummy0: entered promiscuous mode [ 1420.465835][T16551] nlmon0: entered promiscuous mode [ 1420.476484][T16551] caif0: entered promiscuous mode [ 1420.481831][T16551] batadv0: entered promiscuous mode [ 1420.490569][T16551] vxcan0: entered promiscuous mode [ 1420.500585][T16551] vxcan1: entered promiscuous mode [ 1420.506023][T16551] veth0: entered promiscuous mode [ 1420.511605][T16551] veth1: entered promiscuous mode [ 1420.517804][T16551] wg1: entered promiscuous mode [ 1420.522904][T16551] wg2: entered promiscuous mode [ 1420.528156][T16551] veth0_to_bridge: entered promiscuous mode [ 1420.537094][T16551] bridge_slave_0: entered promiscuous mode [ 1420.543036][T16551] veth1_to_bridge: entered promiscuous mode [ 1420.549493][T16551] bridge_slave_1: entered promiscuous mode [ 1420.555484][T16551] veth0_to_bond: entered promiscuous mode [ 1420.561437][T16551] veth1_to_bond: entered promiscuous mode [ 1420.567700][T16551] veth0_to_team: entered promiscuous mode [ 1420.573736][T16551] veth1_to_team: entered promiscuous mode [ 1420.580018][T16551] veth0_to_batadv: entered promiscuous mode [ 1420.586318][T16551] batadv_slave_0: entered promiscuous mode [ 1420.593095][T16551] xfrm0: entered promiscuous mode [ 1420.598436][T16551] veth0_to_hsr: entered promiscuous mode [ 1420.604294][T16551] veth1_to_hsr: entered promiscuous mode [ 1420.610544][T16551] hsr0: entered promiscuous mode [ 1420.615736][T16551] veth1_virt_wifi: entered promiscuous mode [ 1420.621785][T16551] veth0_virt_wifi: entered promiscuous mode [ 1420.628022][T16551] virt_wifi0: entered promiscuous mode [ 1420.633759][T16551] vlan1: entered promiscuous mode [ 1420.639156][T16551] macvlan0: entered promiscuous mode [ 1420.644663][T16551] macvlan1: entered promiscuous mode [ 1420.652091][T16551] ipvlan0: entered promiscuous mode [ 1420.657898][T16551] ipvlan1: entered promiscuous mode [ 1420.663423][T16551] veth0_macvtap: left allmulticast mode [ 1420.669169][T16551] macvtap0: entered promiscuous mode [ 1420.674772][T16551] macsec0: entered promiscuous mode [ 1420.680137][T16551] geneve0: entered promiscuous mode [ 1420.685709][T16551] geneve1: entered promiscuous mode [ 1420.691110][T16551] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 1420.699198][T16551] mac80211_hwsim hwsim115 wlan1: entered promiscuous mode [ 1420.709256][T16551] bridge1: entered promiscuous mode [ 1420.717096][T16551] gre1: entered promiscuous mode [ 1420.722161][T16551] gre2: entered promiscuous mode [ 1420.727417][T16551] bond1: entered promiscuous mode [ 1420.732686][T16551] vxcan2: entered promiscuous mode [ 1420.738180][T16551] vxcan3: entered promiscuous mode [ 1420.743488][T16551] geneve2: entered promiscuous mode [ 1420.748944][T16551] mac80211_hwsim hwsim121 wlan2: entered promiscuous mode [ 1420.756296][T16551] macvlan2: entered promiscuous mode [ 1420.761690][T16551] macsec1: entered promiscuous mode [ 1420.767095][T16551] ip6gretap0: entered promiscuous mode [ 1420.772850][T16551] syztnl1: entered promiscuous mode [ 1420.778318][T16551] ip6erspan0: entered promiscuous mode [ 1420.784397][T16551] bond2: entered promiscuous mode [ 1420.791124][T16551] bond3: entered promiscuous mode [ 1420.797093][T16551] veth2: entered promiscuous mode [ 1420.802261][T16551] veth3: entered promiscuous mode [ 1420.808708][T16551] dvmrp0: entered promiscuous mode [ 1420.819736][T16551] macvlan3: entered promiscuous mode [ 1420.825734][T16551] ip6gre1: left allmulticast mode [ 1420.833710][T16551] pimreg9: entered promiscuous mode [ 1420.848833][T16551] mac80211_hwsim hwsim115 nicvf0: entered promiscuous mode [ 1420.858483][T16551] geneve3: entered promiscuous mode [ 1420.864285][T16551] bridge0: entered promiscuous mode [ 1420.880714][T16551] xfrm1: entered promiscuous mode [ 1420.886108][T16551] bridge2: entered promiscuous mode [ 1420.891435][T16551] gre3: entered promiscuous mode [ 1420.897282][T16551] ip6gretap1: entered promiscuous mode [ 1420.903634][T16551] veth4: entered promiscuous mode [ 1420.909070][T16551] veth5: entered promiscuous mode [ 1420.914308][T16551] veth5: left allmulticast mode [ 1420.920410][T16551] macvlan4: entered promiscuous mode [ 1420.926811][T16551] ip6tnl1: entered promiscuous mode [ 1420.940902][T16551] netdevsim netdevsim4 eth0: entered promiscuous mode [ 1420.950451][T16551] netdevsim netdevsim4 eth1: entered promiscuous mode [ 1420.957969][T16551] netdevsim netdevsim4 eth2: entered promiscuous mode [ 1420.965123][T16551] netdevsim netdevsim4 eth3: entered promiscuous mode [ 1420.972130][T16551] vxcan4: entered promiscuous mode [ 1420.978857][T16551] vxcan5: entered promiscuous mode [ 1420.984168][T16551] mac80211_hwsim hwsim127 wlan3: entered promiscuous mode [ 1421.001568][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10821'. [ 1421.042918][T11194] net_ratelimit: 311 callbacks suppressed [ 1421.042938][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.083058][T11194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.154050][T16580] netlink: 'syz.1.10825': attribute type 12 has an invalid length. [ 1421.158609][T16584] netlink: 'syz.0.10828': attribute type 25 has an invalid length. [ 1421.199842][T16580] netlink: 'syz.1.10825': attribute type 39 has an invalid length. [ 1421.230017][T16587] vlan2: entered promiscuous mode [ 1421.281531][T16592] netlink: 'syz.4.10829': attribute type 1 has an invalid length. [ 1421.291131][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 1421.718928][T16583] veth17: entered allmulticast mode [ 1421.739936][T16583] bond14: (slave veth17): Enslaving as an active interface with an up link [ 1421.772573][T16589] bond14 (unregistering): (slave veth17): Releasing backup interface [ 1421.786964][T16589] bond14 (unregistering): Released all slaves [ 1421.851792][T32511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.108593][T16638] netlink: 'syz.5.10839': attribute type 2 has an invalid length. [ 1422.118681][T16639] netlink: 'syz.1.10840': attribute type 12 has an invalid length. [ 1422.170571][T16639] netlink: 'syz.1.10840': attribute type 39 has an invalid length. [ 1422.282801][T16645] netlink: 'syz.4.10841': attribute type 13 has an invalid length. [ 1422.291606][T16645] netlink: 'syz.4.10841': attribute type 17 has an invalid length. [ 1422.300500][T16645] lo: left promiscuous mode [ 1422.307560][T16638] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1422.318355][T16645] tunl0: left promiscuous mode [ 1422.325264][T11203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.334399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.348545][T16645] gre0: left promiscuous mode [ 1422.358065][T16645] gretap0: left promiscuous mode [ 1422.366487][T16645] erspan0: left promiscuous mode [ 1422.373696][T16645] ip_vti0: left promiscuous mode [ 1422.380234][T16645] ip6_vti0: left promiscuous mode [ 1422.386744][T16645] sit0: left promiscuous mode [ 1422.395120][T16645] ip6tnl0: left promiscuous mode [ 1422.407361][T16645] ip6gre0: left promiscuous mode [ 1422.422696][T16645] syz_tun: left promiscuous mode [ 1422.439424][T16645] bond0: left promiscuous mode [ 1422.450249][T16645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.460456][T16645] team0: left promiscuous mode [ 1422.466859][T16645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.476616][T16645] dummy0: left promiscuous mode [ 1422.493125][T16645] nlmon0: left promiscuous mode [ 1422.721552][T16645] caif0: left promiscuous mode [ 1422.726757][T16645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.772407][T16655] syzkaller0: entered promiscuous mode [ 1422.795551][T16655] syzkaller0: entered allmulticast mode [ 1422.956964][T16667] delete_channel: no stack [ 1422.976845][ T2172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.988214][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1423.019886][T16674] netlink: 'syz.2.10845': attribute type 15 has an invalid length. [ 1423.310745][T16695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.326278][T16695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.707711][T16713] __nla_validate_parse: 12 callbacks suppressed [ 1423.707729][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10856'. [ 1424.148510][T16731] netlink: 'syz.2.10859': attribute type 1 has an invalid length. [ 1424.203047][T16731] bond5: entered promiscuous mode [ 1424.209308][T16731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1424.239111][T16731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1424.255192][T16731] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1424.270783][T16731] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1424.322034][T16731] bond5: (slave wireguard1): making interface the new active one [ 1424.346991][T16731] wireguard1: entered promiscuous mode [ 1424.370963][T16731] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 1424.621256][T16742] wg1 speed is unknown, defaulting to 1000 [ 1425.372736][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10868'. [ 1425.478480][T16770] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10867'. [ 1425.496613][T16742] lo speed is unknown, defaulting to 1000 [ 1425.632533][T16771] wg1 speed is unknown, defaulting to 1000 [ 1425.942158][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10874'. [ 1426.000675][T16771] lo speed is unknown, defaulting to 1000 [ 1426.749283][T16802] wg1 speed is unknown, defaulting to 1000 [ 1426.969239][T16811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10882'. [ 1426.984012][T16811] ip6gre2: entered promiscuous mode [ 1426.994641][T16811] ip6gre2: entered allmulticast mode [ 1427.012415][T16811] netlink: 'syz.4.10882': attribute type 6 has an invalid length. [ 1427.020905][T16811] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10882'. [ 1427.232118][T16802] lo speed is unknown, defaulting to 1000 [ 1427.365364][T16827] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10886'. [ 1427.387696][T11195] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1427.445901][T25877] net_ratelimit: 13 callbacks suppressed [ 1427.445921][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.460842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.507392][T16822] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1427.867959][T16846] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1427.947412][T16846] netlink: 'syz.0.10890': attribute type 4 has an invalid length. [ 1427.962842][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10889'. [ 1428.724578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1428.732638][ C1] lec:lec_tx_timeout: lec0 [ 1428.735824][T25877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.748261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.772952][T16869] bridge0: port 1(macvlan3) entered blocking state [ 1428.779976][T16869] bridge0: port 1(macvlan3) entered disabled state [ 1428.787401][T16869] macvlan3: entered allmulticast mode [ 1428.793020][T16869] ip6gretap0: entered allmulticast mode [ 1428.800714][T16869] macvlan3: entered promiscuous mode [ 1428.809952][T16869] bridge0: port 1(macvlan3) entered blocking state [ 1428.816660][T16869] bridge0: port 1(macvlan3) entered forwarding state [ 1428.884900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.897086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.211567][T16884] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10902'. [ 1429.247631][T16884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.633409][T16916] netlink: 65173 bytes leftover after parsing attributes in process `syz.5.10912'. [ 1429.744217][T16927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10916'. [ 1429.825871][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10917'. [ 1430.380122][T16964] netlink: 'syz.1.10924': attribute type 3 has an invalid length. [ 1430.400731][T16967] tipc: Enabled bearer , priority 0 [ 1430.443078][T16967] tipc: Disabling bearer [ 1430.465297][T16964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10924'. [ 1430.485275][T16964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10924'. [ 1430.591954][T16979] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10927'. [ 1431.077127][T17013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.087953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.135631][T17015] sctp: Trying to GSO but underlying device doesn't support it. [ 1431.448440][T17027] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1431.965704][T17050] 8021q: VLANs not supported on ip6_vti0 [ 1431.981234][T17052] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 1432.084259][T17057] netlink: 'syz.4.10944': attribute type 1 has an invalid length. [ 1432.175293][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10947'. [ 1432.233876][T17055] wg1 speed is unknown, defaulting to 1000 [ 1432.280490][T17070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1432.454137][T10359] lec:lec_start_xmit: lec0:No lecd attached [ 1432.566612][ T2172] net_ratelimit: 1 callbacks suppressed [ 1432.566630][ T2172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.676834][T17055] lo speed is unknown, defaulting to 1000 [ 1433.206569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.221489][T25883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.230893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.360138][T17101] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1433.401422][T17100] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.417096][T17100] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.427858][T17100] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1433.456262][T17103] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1433.731573][T17111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.744362][T25877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1433.756253][T25877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1433.785740][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.802626][T25877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1433.822734][T25877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1433.847400][T17100] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.859123][T17100] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.874438][T17100] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1433.904091][T17119] dummy0: entered promiscuous mode [ 1433.910195][T17119] dummy0: entered allmulticast mode [ 1433.965982][T17100] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.987531][T17100] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1433.998552][T17100] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1434.116769][T17100] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.146124][T17100] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1434.166457][T17100] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1434.194994][T17128] netlink: 'syz.2.10963': attribute type 12 has an invalid length. [ 1434.208260][T17129] netlink: 'syz.2.10963': attribute type 39 has an invalid length. [ 1434.219795][T17128] __nla_validate_parse: 4 callbacks suppressed [ 1434.219813][T17128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10963'. [ 1434.298840][T17124] syzkaller1: entered promiscuous mode [ 1434.311914][T17124] syzkaller1: entered allmulticast mode [ 1434.356048][T15676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.558521][T17136] openvswitch: netlink: Key type 247 is out of range max 32 [ 1434.599618][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1434.628745][T16136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.657585][T16133] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.676510][T16133] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1434.693141][T16133] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1434.768899][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1434.804830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.845312][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1434.848456][T17138] vlan3: entered promiscuous mode [ 1434.875515][T17138] geneve1: entered promiscuous mode [ 1434.881082][T17138] vlan3: entered allmulticast mode [ 1434.894884][T17138] geneve1: entered allmulticast mode [ 1434.905527][T17141] netlink: 'syz.1.10967': attribute type 12 has an invalid length. [ 1434.931620][T16133] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.940653][T16133] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1434.949636][T16133] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1435.179948][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.196480][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.240524][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.253982][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.415691][T25877] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.428393][T25877] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.437181][T25877] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.447295][T25877] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.464876][T25877] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.476558][T25877] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.502095][T25877] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1435.511251][T25877] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.533758][T25877] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.553459][T25877] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1435.571892][T25877] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1435.597372][T25877] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.619702][T25877] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1435.636144][T25877] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1435.646463][T17178] netlink: 'syz.1.10975': attribute type 12 has an invalid length. [ 1435.664799][T17178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10975'. [ 1435.690103][T17178] netlink: 'syz.1.10975': attribute type 39 has an invalid length. [ 1435.880460][T17188] wg1 speed is unknown, defaulting to 1000 [ 1436.060291][T17195] bond14: (slave bond_slave_1): Device is not bonding slave [ 1436.120606][T17195] bond14: option active_slave: invalid value (bond_slave_1) [ 1436.184186][T17195] bond14 (unregistering): Released all slaves [ 1436.294085][T17188] lo speed is unknown, defaulting to 1000 [ 1436.543432][T17225] netlink: 'syz.4.10989': attribute type 12 has an invalid length. [ 1436.556086][T17225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10989'. [ 1436.699425][T17228] netlink: 'syz.4.10989': attribute type 39 has an invalid length. [ 1436.752206][T17235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10991'. [ 1436.890367][T17235] delete_channel: no stack [ 1437.069169][T17241] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10992'. [ 1437.319114][T17263] netlink: 'syz.1.10994': attribute type 3 has an invalid length. [ 1437.348803][T17263] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10994'. [ 1437.388845][T17265] netlink: 7 bytes leftover after parsing attributes in process `syz.5.10995'. [ 1437.764592][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 1437.772713][ C1] lec:lec_tx_timeout: lec0 [ 1438.455621][T17290] tipc: Enabled bearer , priority 0 [ 1438.486618][T17292] syzkaller0: entered promiscuous mode [ 1438.511663][T17292] syzkaller0: entered allmulticast mode [ 1438.605429][T17296] netlink: 'syz.2.11002': attribute type 12 has an invalid length. [ 1438.625497][T17290] tipc: Resetting bearer [ 1438.708948][T17290] tipc: Resetting bearer [ 1438.718760][T17296] netlink: 'syz.2.11002': attribute type 39 has an invalid length. [ 1438.786425][T17290] tipc: Disabling bearer [ 1439.028627][T17307] wg1 speed is unknown, defaulting to 1000 [ 1439.418198][T17307] lo speed is unknown, defaulting to 1000 [ 1439.453164][T17327] __nla_validate_parse: 1 callbacks suppressed [ 1439.453181][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11009'. [ 1439.528875][T17330] netlink: 'syz.4.11010': attribute type 1 has an invalid length. [ 1439.555129][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1439.567068][T17330] netlink: 'syz.4.11010': attribute type 2 has an invalid length. [ 1439.586105][T17330] netlink: 'syz.4.11010': attribute type 3 has an invalid length. [ 1439.814911][T17342] netlink: 'syz.2.11013': attribute type 1 has an invalid length. [ 1439.822922][T17342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11013'. [ 1439.862971][T17342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11013'. [ 1440.132334][T17353] netlink: 'syz.4.11017': attribute type 12 has an invalid length. [ 1440.142365][T17353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11017'. [ 1440.210219][T17354] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11018'. [ 1440.215426][T17353] netlink: 'syz.4.11017': attribute type 39 has an invalid length. [ 1440.293600][T17349] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.303741][T17349] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1440.313969][T17349] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1440.513328][T17349] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.535026][T17349] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1440.559802][T17349] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1440.828925][T17349] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.875032][T17349] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1440.915319][T17349] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1441.094125][T17365] wg1 speed is unknown, defaulting to 1000 [ 1441.108553][T17349] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.131161][T17349] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1441.152960][T17349] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1441.270425][T25883] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.283059][T25883] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1441.298304][T25883] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1441.322401][T25883] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.344674][T25883] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1441.363177][T25883] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1441.455006][T25883] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.463831][T25883] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1441.472473][T25883] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1441.481798][T25883] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.490940][T25883] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1441.501902][T25883] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1441.522871][T17365] lo speed is unknown, defaulting to 1000 [ 1441.599189][T17389] wg1 speed is unknown, defaulting to 1000 [ 1441.665696][T17394] netlink: 'syz.5.11029': attribute type 12 has an invalid length. [ 1441.678266][T17394] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11029'. [ 1441.731609][T17394] netlink: 'syz.5.11029': attribute type 39 has an invalid length. [ 1442.335380][ T5161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1442.352495][ T5161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1442.365723][ T5161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1442.376108][ T5161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1442.383928][ T5161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1442.557488][T17389] lo speed is unknown, defaulting to 1000 [ 1442.976353][T17407] wg1 speed is unknown, defaulting to 1000 [ 1443.650961][T17426] netlink: 'syz.1.11038': attribute type 1 has an invalid length. [ 1443.676726][T17427] netlink: 'syz.1.11038': attribute type 1 has an invalid length. [ 1443.776525][T17426] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1443.817749][T17427] bond6: entered promiscuous mode [ 1443.867348][T17427] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1443.905061][T17407] lo speed is unknown, defaulting to 1000 [ 1444.132567][T17447] openvswitch: netlink: Unknown key attributes 2 [ 1444.166111][T17448] syzkaller1: entered promiscuous mode [ 1444.181954][T17448] syzkaller1: entered allmulticast mode [ 1444.484800][T28166] Bluetooth: hci4: command tx timeout [ 1444.514759][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11044'. [ 1444.558948][T17455] bond0: entered promiscuous mode [ 1444.576109][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11044'. [ 1444.764653][T17463] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11046'. [ 1445.182603][T17407] chnl_net:caif_netlink_parms(): no params data found [ 1445.378519][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.390715][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.398635][T17407] bridge_slave_0: entered allmulticast mode [ 1445.406885][T17407] bridge_slave_0: entered promiscuous mode [ 1445.419156][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.426568][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.433953][T17407] bridge_slave_1: entered allmulticast mode [ 1445.442326][T17407] bridge_slave_1: entered promiscuous mode [ 1445.496090][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.514847][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.549606][T17496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 1445.570811][T17496] netlink: zone id is out of range [ 1445.577435][T17496] netlink: zone id is out of range [ 1445.584255][T17496] netlink: zone id is out of range [ 1445.590619][T17496] netlink: zone id is out of range [ 1445.597493][T17496] netlink: zone id is out of range [ 1445.602767][T17496] netlink: zone id is out of range [ 1445.603822][T17407] team0: Port device team_slave_0 added [ 1445.609350][T17496] netlink: zone id is out of range [ 1445.619785][T17496] netlink: zone id is out of range [ 1445.625685][T17496] netlink: zone id is out of range [ 1445.638320][T17407] team0: Port device team_slave_1 added [ 1445.691938][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.710854][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.740825][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.753833][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.766799][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.779687][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.797048][T17503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11054'. [ 1445.800968][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.816514][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.826231][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1445.848818][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.857395][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.886174][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.936523][T17507] bond6: option ad_select: invalid value (34) [ 1445.943791][T17507] bond6 (unregistering): Released all slaves [ 1446.018420][T17407] hsr_slave_0: entered promiscuous mode [ 1446.029019][T17407] hsr_slave_1: entered promiscuous mode [ 1446.319967][T16136] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.330742][T16136] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1446.341109][T16136] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1446.437980][T16136] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.450132][T16136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1446.460624][T16136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1446.515256][T17530] FAULT_INJECTION: forcing a failure. [ 1446.515256][T17530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.530975][T17530] CPU: 1 UID: 0 PID: 17530 Comm: syz.0.11062 Not tainted syzkaller #0 PREEMPT(full) [ 1446.531000][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1446.531009][T17530] Call Trace: [ 1446.531017][T17530] [ 1446.531024][T17530] dump_stack_lvl+0xe8/0x150 [ 1446.531053][T17530] should_fail_ex+0x412/0x560 [ 1446.531081][T17530] _copy_from_user+0x2d/0xb0 [ 1446.531100][T17530] smc_setsockopt+0x3c5/0xac0 [ 1446.531124][T17530] ? __pfx_smc_setsockopt+0x10/0x10 [ 1446.531140][T17530] ? aa_sock_opt_perm+0xff/0x1a0 [ 1446.531160][T17530] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1446.531177][T17530] ? __pfx_smc_setsockopt+0x10/0x10 [ 1446.531194][T17530] do_sock_setsockopt+0x17c/0x1b0 [ 1446.531213][T17530] __x64_sys_setsockopt+0x13d/0x1b0 [ 1446.531231][T17530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.531247][T17530] do_syscall_64+0x15f/0xf80 [ 1446.531268][T17530] ? trace_irq_disable+0x3b/0x140 [ 1446.531297][T17530] ? clear_bhb_loop+0x40/0x90 [ 1446.531314][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.531327][T17530] RIP: 0033:0x7fcba199cdd9 [ 1446.531342][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.531354][T17530] RSP: 002b:00007fcba27ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1446.531371][T17530] RAX: ffffffffffffffda RBX: 00007fcba1c15fa0 RCX: 00007fcba199cdd9 [ 1446.531381][T17530] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000003 [ 1446.531390][T17530] RBP: 00007fcba27ee090 R08: 000000000000000c R09: 0000000000000000 [ 1446.531399][T17530] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1446.531408][T17530] R13: 00007fcba1c16038 R14: 00007fcba1c15fa0 R15: 00007ffdfa6cd848 [ 1446.531432][T17530] [ 1446.535216][T16136] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.615093][T17532] netlink: 'syz.0.11063': attribute type 2 has an invalid length. [ 1446.621307][T28166] Bluetooth: hci4: command tx timeout [ 1446.727432][T16136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1446.770539][T16136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1446.988089][T16136] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1447.024452][T16136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1447.047589][T16136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1447.418405][T17575] netlink: 'syz.0.11076': attribute type 2 has an invalid length. [ 1447.694266][T17586] netlink: 'syz.0.11080': attribute type 7 has an invalid length. [ 1447.863785][T17578] bond0: (slave wlan1): Releasing backup interface [ 1447.977552][T16136] macvlan3: left allmulticast mode [ 1448.002827][T16136] ip6gretap0: left allmulticast mode [ 1448.015351][T16136] macvlan3: left promiscuous mode [ 1448.026872][T16136] bridge0: port 1(macvlan3) entered disabled state [ 1448.491879][T16136] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1448.502986][T16136] ip6gre1 (unregistering): left promiscuous mode [ 1448.767795][T16136] batman_adv: batadv0: Removing interface: macvtap1 [ 1448.815296][T28166] Bluetooth: hci4: command tx timeout [ 1448.822708][T16136] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1449.280326][T16136] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1449.340854][T16136] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1449.349162][T16136] bridge4 (unregistering): left promiscuous mode [ 1449.437493][T17614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1449.536711][T16136] bond0 (unregistering): Released all slaves [ 1449.558254][T16136] bond1 (unregistering): Released all slaves [ 1449.573442][T16136] bond2 (unregistering): Released all slaves [ 1449.587828][T16136] bond3 (unregistering): Released all slaves [ 1449.602509][T16136] bond4 (unregistering): Released all slaves [ 1449.629160][T16136] bond5 (unregistering): Released all slaves [ 1449.648776][T16136] bond6 (unregistering): Released all slaves [ 1449.664302][T16136] bond7 (unregistering): Released all slaves [ 1449.692082][T16136] bond8 (unregistering): (slave batadv1): Releasing active interface [ 1449.700371][T16136] batadv1: left promiscuous mode [ 1449.705593][T16136] batadv1: left allmulticast mode [ 1449.712254][T16136] bond8 (unregistering): Released all slaves [ 1449.727829][T16136] bond9 (unregistering): Released all slaves [ 1449.741795][T16136] bond10 (unregistering): Released all slaves [ 1449.756179][T16136] bond11 (unregistering): Released all slaves [ 1449.771503][T16136] bond12 (unregistering): Released all slaves [ 1449.792111][T16136] bond13 (unregistering): Released all slaves [ 1449.875995][T17615] bond7: option downdelay: invalid value (18446744073709547007) [ 1449.886109][T17615] bond7: option downdelay: allowed values 0 - 2147483647 [ 1449.896362][T17615] bond7 (unregistering): Released all slaves [ 1450.036203][T17618] __nla_validate_parse: 34 callbacks suppressed [ 1450.036224][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11085'. [ 1450.205378][T17607] wg1 speed is unknown, defaulting to 1000 [ 1450.222337][T16136] tipc: Left network mode [ 1450.231740][T17626] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1450.624777][T17641] netlink: 'syz.4.11091': attribute type 10 has an invalid length. [ 1450.734565][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11092'. [ 1450.896630][T28166] Bluetooth: hci4: command tx timeout [ 1450.987921][T17651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11094'. [ 1451.160770][T17607] lo speed is unknown, defaulting to 1000 [ 1451.988537][T17685] pimreg: entered allmulticast mode [ 1452.089123][T17690] netlink: 'syz.4.11101': attribute type 30 has an invalid length. [ 1452.410977][T17705] netlink: 'syz.4.11102': attribute type 39 has an invalid length. [ 1452.478617][T17707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11105'. [ 1452.557903][T17698] netlink: 'syz.4.11102': attribute type 12 has an invalid length. [ 1452.566256][T17698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11102'. [ 1452.586069][T17407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1452.611240][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1452.807887][T17407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1452.843513][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.872411][T17407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1452.884110][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.928066][T17407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1452.941501][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11108'. [ 1452.957212][T17714] SET target dimension over the limit! [ 1452.971414][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.071210][T17709] wg1 speed is unknown, defaulting to 1000 [ 1453.257364][T16136] veth0_macvtap: left promiscuous mode [ 1454.322361][T17718] wg1 speed is unknown, defaulting to 1000 [ 1454.322540][T17709] lo speed is unknown, defaulting to 1000 [ 1454.487341][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.524363][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.562005][T25877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.569297][T25877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.630031][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.637338][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.741824][T17751] syzkaller1: entered promiscuous mode [ 1454.766343][T17751] syzkaller1: entered allmulticast mode [ 1455.033046][T16136] IPVS: stop unused estimator thread 0... [ 1455.095606][T17718] lo speed is unknown, defaulting to 1000 [ 1455.296802][T17764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11115'. [ 1455.372137][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.505819][T17771] netlink: 'syz.4.11117': attribute type 12 has an invalid length. [ 1455.527367][T17771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11117'. [ 1455.641114][T17779] netlink: 'syz.4.11117': attribute type 39 has an invalid length. [ 1456.342047][T17407] veth0_vlan: entered promiscuous mode [ 1456.381979][T17407] veth1_vlan: entered promiscuous mode [ 1456.530580][T17407] veth0_macvtap: entered promiscuous mode [ 1456.559045][T17407] veth1_macvtap: entered promiscuous mode [ 1456.616703][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.641960][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.675052][T25877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.718138][T25877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.743824][T17806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11127'. [ 1456.759932][T25877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.774041][T25877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.989242][T25883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.009699][T25883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.087744][T17814] netlink: 'syz.1.11130': attribute type 12 has an invalid length. [ 1457.096106][T17814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11130'. [ 1457.111888][T17817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.123075][T17817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1457.150144][T17814] netlink: 'syz.1.11130': attribute type 39 has an invalid length. [ 1457.179094][T16136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.187552][T16136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.227366][T17817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.246265][T17817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1457.429703][T17820] syzkaller0: entered promiscuous mode [ 1457.443361][T17820] syzkaller0: entered allmulticast mode [ 1457.454315][T17817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.466402][T17817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1457.527943][T17832] syzkaller0: entered promiscuous mode [ 1457.543191][T17832] syzkaller0: entered allmulticast mode [ 1457.561661][T17817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.574132][T17817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1457.631322][T17838] syzkaller1: entered promiscuous mode [ 1457.640154][T17838] syzkaller1: entered allmulticast mode [ 1457.810117][T25877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1457.840760][T25877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1457.906673][T11202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1457.926663][T11202] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1458.014449][T11202] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1458.023158][T11202] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1458.023575][ C1] ================================================================== [ 1458.039404][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.047411][ C1] Read of size 2 at addr ffff88819df96060 by task syz.0.11136/17853 [ 1458.055749][ C1] [ 1458.058176][ C1] CPU: 1 UID: 0 PID: 17853 Comm: syz.0.11136 Not tainted syzkaller #0 PREEMPT(full) [ 1458.058201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.058213][ C1] Call Trace: [ 1458.058222][ C1] [ 1458.058230][ C1] dump_stack_lvl+0xe8/0x150 [ 1458.058263][ C1] print_address_description+0x55/0x1e0 [ 1458.058289][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.058309][ C1] print_report+0x58/0x70 [ 1458.058331][ C1] kasan_report+0x117/0x150 [ 1458.058355][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.058379][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.058405][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 1458.058431][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.058459][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.058485][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.058511][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1458.058536][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1458.058553][ C1] ? lock_acquire+0x106/0x350 [ 1458.058587][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 1458.058611][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.058640][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1458.058670][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 1458.058694][ C1] ? lock_acquire+0x106/0x350 [ 1458.058720][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1458.058743][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1458.058766][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 1458.058795][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 1458.058821][ C1] ? css_rstat_updated+0x23a/0x530 [ 1458.058847][ C1] napi_complete_done+0x299/0x730 [ 1458.058880][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 1458.058904][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 1458.058933][ C1] gro_cell_poll+0x5a9/0x5d0 [ 1458.058961][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 1458.058986][ C1] __napi_poll+0xae/0x340 [ 1458.059008][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1458.059033][ C1] net_rx_action+0x627/0xf70 [ 1458.059056][ C1] ? lock_acquire+0x106/0x350 [ 1458.059087][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1458.059118][ C1] ? sched_clock+0x3f/0x60 [ 1458.059144][ C1] handle_softirqs+0x22a/0x840 [ 1458.059172][ C1] ? do_softirq+0x76/0xd0 [ 1458.059197][ C1] ? tun_rx_batched+0x185/0x790 [ 1458.059214][ C1] do_softirq+0x76/0xd0 [ 1458.059239][ C1] [ 1458.059245][ C1] [ 1458.059251][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1458.059277][ C1] ? tun_rx_batched+0x185/0x790 [ 1458.059292][ C1] tun_rx_batched+0x617/0x790 [ 1458.059311][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 1458.059326][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.059353][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.059378][ C1] ? tun_get_user+0x2394/0x43e0 [ 1458.059403][ C1] ? tun_get_user+0x2394/0x43e0 [ 1458.059428][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1458.059454][ C1] tun_get_user+0x2bbc/0x43e0 [ 1458.059481][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.059510][ C1] ? aa_file_perm+0x192/0x15e0 [ 1458.059531][ C1] ? aa_file_perm+0x50e/0x15e0 [ 1458.059549][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 1458.059575][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.059602][ C1] ? __pfx_file_ioctl+0x10/0x10 [ 1458.059628][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 1458.059647][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1458.059665][ C1] ? tun_get+0x1c/0x2f0 [ 1458.059690][ C1] ? tun_get+0x1c/0x2f0 [ 1458.059715][ C1] ? tun_get+0x1c/0x2f0 [ 1458.059739][ C1] ? tun_get+0x1c/0x2f0 [ 1458.059765][ C1] tun_chr_write_iter+0x113/0x200 [ 1458.059792][ C1] vfs_write+0x61d/0xb90 [ 1458.059816][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1458.059840][ C1] ? __fget_files+0x2a/0x420 [ 1458.059861][ C1] ksys_write+0x150/0x270 [ 1458.059889][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1458.059909][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1458.059932][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.059950][ C1] do_syscall_64+0x15f/0xf80 [ 1458.059974][ C1] ? trace_irq_disable+0x3b/0x140 [ 1458.059996][ C1] ? clear_bhb_loop+0x40/0x90 [ 1458.060016][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.060033][ C1] RIP: 0033:0x7fcba199cdd9 [ 1458.060051][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.060066][ C1] RSP: 002b:00007fcba27cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1458.060086][ C1] RAX: ffffffffffffffda RBX: 00007fcba1c16090 RCX: 00007fcba199cdd9 [ 1458.060099][ C1] RDX: 00000000000007c1 RSI: 0000200000000840 RDI: 0000000000000003 [ 1458.060111][ C1] RBP: 00007fcba1a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1458.060123][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.060133][ C1] R13: 00007fcba1c16128 R14: 00007fcba1c16090 R15: 00007ffdfa6cd848 [ 1458.060153][ C1] [ 1458.060159][ C1] [ 1458.535130][ C1] The buggy address belongs to the physical page: [ 1458.541543][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19df96 [ 1458.550471][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 1458.557930][ C1] raw: 057ff00000000000 ffffea000677e588 ffffea000677e588 0000000000000000 [ 1458.566519][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1458.575262][ C1] page dumped because: kasan: bad access detected [ 1458.581772][ C1] page_owner info is not present (never set?) [ 1458.588029][ C1] [ 1458.590352][ C1] Memory state around the buggy address: [ 1458.595966][ C1] ffff88819df95f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1458.604011][ C1] ffff88819df95f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1458.612077][ C1] >ffff88819df96000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1458.620294][ C1] ^ [ 1458.627478][ C1] ffff88819df96080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1458.635533][ C1] ffff88819df96100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1458.643577][ C1] ================================================================== [ 1458.652039][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1458.659251][ C1] CPU: 1 UID: 0 PID: 17853 Comm: syz.0.11136 Not tainted syzkaller #0 PREEMPT(full) [ 1458.668718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.678787][ C1] Call Trace: [ 1458.682082][ C1] [ 1458.684947][ C1] vpanic+0x56c/0xa60 [ 1458.688948][ C1] ? __pfx_vpanic+0x10/0x10 [ 1458.693644][ C1] ? irqentry_exit+0x218/0x730 [ 1458.698454][ C1] panic+0xc5/0xd0 [ 1458.702180][ C1] ? __pfx_panic+0x10/0x10 [ 1458.706615][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.712291][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.718816][ C1] check_panic_on_warn+0x89/0xb0 [ 1458.723841][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.729502][ C1] end_report+0x73/0x170 [ 1458.733857][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.739494][ C1] kasan_report+0x128/0x150 [ 1458.744199][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.749899][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 1458.755388][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 1458.761263][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.766223][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.771237][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.776218][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1458.782380][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1458.787500][ C1] ? lock_acquire+0x106/0x350 [ 1458.792299][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 1458.798292][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.803253][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1458.809879][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 1458.816054][ C1] ? lock_acquire+0x106/0x350 [ 1458.820746][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1458.827250][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1458.834025][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 1458.839155][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 1458.844281][ C1] ? css_rstat_updated+0x23a/0x530 [ 1458.849421][ C1] napi_complete_done+0x299/0x730 [ 1458.854449][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 1458.860000][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 1458.864955][ C1] gro_cell_poll+0x5a9/0x5d0 [ 1458.869547][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 1458.874438][ C1] __napi_poll+0xae/0x340 [ 1458.878792][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1458.884177][ C1] net_rx_action+0x627/0xf70 [ 1458.888892][ C1] ? lock_acquire+0x106/0x350 [ 1458.893811][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1458.898946][ C1] ? sched_clock+0x3f/0x60 [ 1458.903386][ C1] handle_softirqs+0x22a/0x840 [ 1458.908196][ C1] ? do_softirq+0x76/0xd0 [ 1458.912554][ C1] ? tun_rx_batched+0x185/0x790 [ 1458.917507][ C1] do_softirq+0x76/0xd0 [ 1458.921694][ C1] [ 1458.924627][ C1] [ 1458.927554][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1458.932786][ C1] ? tun_rx_batched+0x185/0x790 [ 1458.937668][ C1] tun_rx_batched+0x617/0x790 [ 1458.942396][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 1458.947799][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.952716][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.957614][ C1] ? tun_get_user+0x2394/0x43e0 [ 1458.962561][ C1] ? tun_get_user+0x2394/0x43e0 [ 1458.967616][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1458.973101][ C1] tun_get_user+0x2bbc/0x43e0 [ 1458.977798][ C1] ? tun_get_user+0x2787/0x43e0 [ 1458.983116][ C1] ? aa_file_perm+0x192/0x15e0 [ 1458.987901][ C1] ? aa_file_perm+0x50e/0x15e0 [ 1458.992788][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 1458.997837][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1459.002790][ C1] ? __pfx_file_ioctl+0x10/0x10 [ 1459.007697][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 1459.012806][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1459.018261][ C1] ? tun_get+0x1c/0x2f0 [ 1459.022422][ C1] ? tun_get+0x1c/0x2f0 [ 1459.026609][ C1] ? tun_get+0x1c/0x2f0 [ 1459.030773][ C1] ? tun_get+0x1c/0x2f0 [ 1459.034952][ C1] tun_chr_write_iter+0x113/0x200 [ 1459.039996][ C1] vfs_write+0x61d/0xb90 [ 1459.044251][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1459.049019][ C1] ? __fget_files+0x2a/0x420 [ 1459.053633][ C1] ksys_write+0x150/0x270 [ 1459.057964][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1459.062814][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1459.067671][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.073766][ C1] do_syscall_64+0x15f/0xf80 [ 1459.078381][ C1] ? trace_irq_disable+0x3b/0x140 [ 1459.083605][ C1] ? clear_bhb_loop+0x40/0x90 [ 1459.088390][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.094368][ C1] RIP: 0033:0x7fcba199cdd9 [ 1459.098795][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.118601][ C1] RSP: 002b:00007fcba27cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1459.127017][ C1] RAX: ffffffffffffffda RBX: 00007fcba1c16090 RCX: 00007fcba199cdd9 [ 1459.135004][ C1] RDX: 00000000000007c1 RSI: 0000200000000840 RDI: 0000000000000003 [ 1459.143175][ C1] RBP: 00007fcba1a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1459.151152][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.159122][ C1] R13: 00007fcba1c16128 R14: 00007fcba1c16090 R15: 00007ffdfa6cd848 [ 1459.167121][ C1] [ 1459.170279][ C1] Kernel Offset: disabled [ 1459.174591][ C1] Rebooting in 86400 seconds..