last executing test programs: 15.728560298s ago: executing program 2 (id=3360): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 14.435393171s ago: executing program 2 (id=3371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000222}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x5}, 0x6, 0x5, 0x0, 0x4, 0xe, 'syz0\x00', "feba9ad85b49718f21462c1dd2db9caaa4e619f11c256407e2749686a9c496a8", "29e06e1a0c6de9083268cf050f7ddb37c338655fb1e6c56736cb0c1a40ba40d8", [{0x0, 0x32a8, {0x0, 0xfffffffd}}, {0x1f8, 0x3, {0x2, 0x3}}, {0x968, 0x7ff, {0x1, 0x10001}}, {0x4, 0x3b5f, {0x1, 0xfffffffc}}, {0xfff, 0x1, {0x1, 0x6}}, {0x10, 0x2, {0x2, 0x61}}, {0x7, 0x4, {0x0, 0x7}}, {0x6, 0x9, {0x3, 0x5}}, {0x1, 0x766d, {0x1, 0x6}}, {0x9, 0x4, {0x0, 0x3e}}, {0x5, 0x5fdc, {0x1, 0x8}}, {0x8, 0x4, {0x3, 0x3}}, {0x5, 0x9, {0x2, 0x8}}, {0x4, 0xa, {0x2, 0xf}}, {0x3, 0x3, {0x3, 0x4e}}, {0x7, 0xbf4, {0x1, 0x8001}}, {0x4, 0xb259, {0x3, 0x1a}}, {0x4, 0x9, {0x3, 0x6}}, {0x5, 0x3, {0x3, 0x7}}, {0x1, 0x5, {0x2, 0x1}}, {0x4, 0x0, {0x3, 0x5}}, {0xe, 0x1000, {0x0, 0xa}}, {0x7f, 0x9, {0x3, 0x2}}, {0x0, 0x7}, {0x1, 0x9, {0x0, 0x401}}, {0x3, 0x3, {0x1, 0xfffffff1}}, {0x42bb, 0xfff, {0x0, 0x1b}}, {0x400, 0x5, {0x3}}, {0x6, 0x7, {0x1, 0x3}}, {0x5, 0x5, {0x2, 0xfffffffa}}, {0x37b4, 0x9}, {0x48, 0x1, {0x3, 0x36bc}}, {0x1, 0x1, {0x1, 0xee9}}, {0x7f, 0x100, {0x1, 0x10001}}, {0x17, 0x4, {0x1, 0x8}}, {0xfffa, 0xd, {0x2, 0x3}}, {0x3, 0xbb, {0x2, 0x4}}, {0x9, 0x5, {0x2, 0xfffffffb}}, {0x2, 0x4, {0x2, 0x9}}, {0xffff, 0x3, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x401}, 0x40, 0x3, 0x545, 0x1ab, 0x16, 'syz0\x00', "5434beaca4d3741666ae516249371104290730f27f8a8cd6ff1b7a4d67218d84", "c02115b7f37e6592bb54941f399c188ca541271e8d38a40572835da15a0f08ec", [{0x2, 0x9, {0x1, 0xfffffffa}}, {0xca, 0xe}, {0x5, 0x3815, {0x1, 0xfffffffa}}, {0x1, 0x56d, {0x2, 0xce89}}, {0xffff, 0x3, {0x0, 0x1}}, {0xfffd, 0x0, {0x2, 0x6}}, {0xe0ed, 0x9, {0x3, 0x4}}, {0xf, 0xffff, {0x2, 0x3}}, {0x3, 0x40, {0x3, 0x5}}, {0x3, 0xffd8, {0x1, 0xd}}, {0x6, 0x0, {0x3, 0x2}}, {0xe, 0x8, {0x2}}, {0x3, 0x3, {0x1, 0x4}}, {0x2, 0xe9d, {0x0, 0x2}}, {0xafcf, 0x8, {0x0, 0x9b}}, {0x7fff, 0x3, {0x2, 0xfffffffc}}, {0x5, 0x200, {0x2, 0x80000001}}, {0x9, 0x609, {0x2, 0x7}}, {0x3, 0x0, {0x2, 0x9}}, {0x8, 0x5, {0x1, 0x6}}, {0x1, 0x0, {0x3, 0x5}}, {0x7, 0x7548, {0x1, 0x4}}, {0x7, 0x7f, {0x2, 0x5}}, {0x0, 0x6, {0x1, 0xe1f3}}, {0xfffd, 0xffff, {0x3, 0x2}}, {0x0, 0xf, {0x3, 0x237}}, {0x7f, 0xfff, {0x2, 0x2}}, {0xffff, 0x0, {0x3, 0x3}}, {0x4, 0x8001, {0x1, 0x4}}, {0x9, 0xd9, {0x1}}, {0x8, 0xe4, {0x0, 0x7}}, {0x6, 0x8a2, {0x0, 0x100}}, {0x4, 0x7ff, {0x0, 0x1000}}, {0x4, 0x7, {0x0, 0x296}}, {0x0, 0xff6f, {0x1, 0x400}}, {0x0, 0x8, {0x1, 0x1ff}}, {0x8, 0xb7fb, {0x1, 0xfffffff8}}, {0x3, 0x3, {0x0, 0x6}}, {0x9, 0x8d6c, {0x0, 0x5}}, {0x4, 0xfffd, {0x1, 0x401}}]}}}, {{0x254, 0x1, {{0x1, 0xffffff27}, 0x91, 0x1, 0x94f4, 0x80, 0x9, 'syz1\x00', "f09ab0b7ef78fd205db85f88b0db5c5e61d0f083ada6db8f294c38271043f2f0", "ad063a8a773f34e8a729a498012dec7308d60f1c4978c2cf23cfdd5b8159ebe5", [{0x1, 0x8000, {0x3, 0x7ff}}, {0x3, 0xfffe, {0x1, 0x374}}, {0x6, 0x8, {0x3, 0x9}}, {0xe96, 0x8, {0x2, 0x886}}, {0x1, 0x5, {0x2, 0xfffff3a0}}, {0x8, 0x2, {0x3, 0x2}}, {0x8, 0x2, {0x3, 0x6}}, {0x6, 0x7, {0x3, 0x5}}, {0x8, 0x8, {0x3, 0x2}}, {0x4, 0x40, {0x2, 0x2}}, {0x0, 0xfffb, {0x3, 0x40}}, {0x1, 0x4, {0x1, 0x3}}, {0x0, 0x5, {0x2, 0x22}}, {0x14, 0x10, {0x1, 0xc093}}, {0x0, 0xfff8, {0x1, 0x4}}, {0x800, 0x4, {0x1, 0x1ff}}, {0x9, 0xd, {0x3, 0xffff}}, {0xf8, 0x70, {0x2604cfa25d255b9, 0x2}}, {0x4, 0x9, {0x0, 0x4}}, {0x400, 0x6, {0x3}}, {0x6, 0x9, {0x0, 0x7}}, {0x3ff, 0x7a, {0x2, 0xfffffdff}}, {0x3ff, 0x3, {0x0, 0x8}}, {0x81, 0x2, {0x1, 0x9}}, {0x4, 0xfffc, {0x2, 0x4}}, {0xfffc, 0x2, {0x1, 0x7}}, {0x1ff, 0x0, {0x2, 0x7fff}}, {0x6, 0x7, {0x2, 0x28a3}}, {0x5, 0x5, {0x2}}, {0x5, 0xfc00, {0x1, 0x4}}, {0x6, 0x0, {0x3, 0x4}}, {0x0, 0x0, {0x2, 0xfffffff1}}, {0x0, 0x1, {0x2}}, {0x81, 0x2, {0x2, 0x6}}, {0x40, 0x8, {0x0, 0xe}}, {0xc, 0x5, {0x1, 0x5}}, {0x3, 0x9, {0x0, 0x5}}, {0x0, 0x8, {0x2, 0xaa5e}}, {0x5, 0x9, {0x1}}, {0x94, 0xd, {0x2, 0x200}}]}}}, {{0x254, 0x1, {{0x0, 0xfff}, 0x2, 0x2, 0x401, 0x5, 0x22, 'syz0\x00', "a00f47014ce20f38e8532f9438ee23008f1a7c4ec01db801069b58fad31b90d2", "141000aa4d636ca427dc45afc6259d49db1ee6450406ea375d8c3c64fbfc1b42", [{0x1, 0xf, {0x1, 0xfffffff9}}, {0x3, 0x8, {0x0, 0x9}}, {0x9, 0x81, {0x1, 0x4}}, {0x9, 0xfff, {0x2, 0x9}}, {0x7fff, 0x9, {0x2, 0xf}}, {0x3, 0xe33e, {0x1, 0x7}}, {0x9, 0x5, {0x3, 0xffffffff}}, {0x7a, 0x1, {0x3, 0xfffffff7}}, {0x5, 0x7f, {0x0, 0x1}}, {0x6, 0x5066, {0x0, 0x9f3}}, {0x3, 0x5, {0x3, 0x2}}, {0x0, 0xfffa, {0x2, 0x1e2}}, {0x800, 0x6, {0x1, 0xfffffff8}}, {0x9, 0x7}, {0xfffe, 0x0, {0x1, 0x8}}, {0xfff9, 0x905, {0x3, 0x2}}, {0x2f, 0x5, {0x1, 0x10000}}, {0x0, 0x200, {0x1, 0x2}}, {0x0, 0xfff8, {0x0, 0x5}}, {0x80, 0x6, {0x0, 0x4}}, {0x5, 0x27ed, {0x2}}, {0x6, 0x7, {0x1}}, {0xff, 0x400, {0x2, 0x8}}, {0x4, 0x3, {0x2, 0xc0}}, {0x1, 0x2, {0x3, 0x1}}, {0xd0, 0x1, {0x1, 0xffff}}, {0xdf, 0x2, {0x1, 0x430}}, {0x7fff, 0x9, {0x2, 0x4}}, {0x8, 0x39, {0x1, 0x8}}, {0x8, 0x200, {0x1, 0x10001}}, {0x80db, 0x8, {0x1, 0x8}}, {0x8b, 0xd9ea, {0x1, 0xf90}}, {0x100, 0x7189, {0x3, 0x4}}, {0x2, 0x5, {0x3, 0x7}}, {0x0, 0x7181}, {0x7f, 0xcd, {0x1, 0xb}}, {0x3d, 0x8, {0x0, 0x9}}, {0x6, 0x7f, {0x2, 0x3}}, {0xc, 0x0, {0x1, 0x5}}, {0x9, 0x2, {0x3, 0x2000}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x40) 14.148793503s ago: executing program 2 (id=3376): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) 14.043951047s ago: executing program 2 (id=3379): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'macvtap0\x00', {0x2, 0x4e23, @local}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={{0x6c, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x13, 0x81, 0x3, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x4, 0x0, 0x9, 0x7fffffff, 0xfffffffffffffffa}, @sadb_x_nat_t_port={0x1, 0x3c, 0x4e24}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_lifetime={0x4, 0x2, 0x56b7, 0x2, 0x1ff, 0xfffffffffffffffe}, @sadb_lifetime={0x4, 0x2, 0x60, 0xfffffffffffffe00, 0x6, 0x3}, @sadb_key={0x5, 0x9, 0xd8, 0x0, "67d37d9c5154361a6ccb1de186920ee7520fe4d5b37aaf3987fc43"}, @sadb_ident={0x2, 0xb, 0xffff, 0x0, 0x8001}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x27, 0x14}]}, 0xe8}}, 0x8c0) 13.675105872s ago: executing program 2 (id=3384): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x1ff) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x254119bab1d8db29, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0x1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r8}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x101}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r5, 0x100, 0xac}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x5c}}, 0xeb64d656001b2f26) r12 = epoll_create1(0x0) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETFLAGS(r12, 0x40088a01, &(0x7f0000000000)=0x100) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r14, &(0x7f0000000040)={0x1}) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x5000, 0x4) mmap$xdp(&(0x7f00007d5000/0x1000)=nil, 0x1000, 0x700000d, 0x811, r0, 0x100000000) 2.824507741s ago: executing program 0 (id=3471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000080)={0x38, r1, 0x1, 0xfffffffe, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 2.755561219s ago: executing program 3 (id=3472): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x7937, @none, 0x7, 0x1}, 0x80) (async) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x7937, @none, 0x7, 0x1}, 0x80) sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="a02c4445fe82254d", 0x8}, {&(0x7f0000000180)="6c9a5385a3d9bd2c5d983cdd2299f74741af0e7b93610ff0a3f5b6ad926384c8a3a05a9a5dcb4b4b49df2ae0a1d18fa2da65344e8dd644365c7d7d73a6cc396437111d59cde4955881ce03f59f17214de17eca157be6d1bac198ae8656f402b7f5dcd87a", 0x64}, {&(0x7f0000000200)="d2fde5cdc0f82d8f885b121e", 0xc}], 0x3}, 0x4) (async) sendmsg$sock(r1, &(0x7f0000000280)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="a02c4445fe82254d", 0x8}, {&(0x7f0000000180)="6c9a5385a3d9bd2c5d983cdd2299f74741af0e7b93610ff0a3f5b6ad926384c8a3a05a9a5dcb4b4b49df2ae0a1d18fa2da65344e8dd644365c7d7d73a6cc396437111d59cde4955881ce03f59f17214de17eca157be6d1bac198ae8656f402b7f5dcd87a", 0x64}, {&(0x7f0000000200)="d2fde5cdc0f82d8f885b121e", 0xc}], 0x3}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000300)={r0}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000300)={r0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@loopback}, &(0x7f0000000400)=0x14) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x85, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000740)={@empty, 0x0}, &(0x7f0000000780)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000007c0)={0x0, @initdev, @remote}, &(0x7f0000000800)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000880)=0x14) getsockname$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x31c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "9a9cc2f6539df5076bad7c57409f04cf184798a9c6622b69b832d96d5dbef5dd1e062fa20c4c02135f9af106bcece4713ce6bb15d696958f28a875b924bc947639fd45eca564636b2f675fef4ad854f87d4d364a0a9069c9329412da0d30484a88049da53d3cffd248d0da1897a63b24a16d46ed2993e98447a080782aab54243b3242ccd886c5256ccc08a177fafcce13424faee8327153475c55483f7b35ec0d96a7c933fd0d62149d3581c2248ae8214508e2f8fd1e7a6b253b391b541d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "a287cd620711dbb266d4234479a3867d9af2bbbfbb85c4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "c68b6a742bdfd5cb23ed90b929cfd58405"}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\x91\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1d}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ec182fd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@W\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\\&%[)$#,[{+(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xe6$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4044}, 0x40810) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x31c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "9a9cc2f6539df5076bad7c57409f04cf184798a9c6622b69b832d96d5dbef5dd1e062fa20c4c02135f9af106bcece4713ce6bb15d696958f28a875b924bc947639fd45eca564636b2f675fef4ad854f87d4d364a0a9069c9329412da0d30484a88049da53d3cffd248d0da1897a63b24a16d46ed2993e98447a080782aab54243b3242ccd886c5256ccc08a177fafcce13424faee8327153475c55483f7b35ec0d96a7c933fd0d62149d3581c2248ae8214508e2f8fd1e7a6b253b391b541d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "a287cd620711dbb266d4234479a3867d9af2bbbfbb85c4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "c68b6a742bdfd5cb23ed90b929cfd58405"}, @ETHTOOL_A_BITSET_BITS={0x150, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\x91\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1d}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ec182fd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@W\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\\&%[)$#,[{+(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xe6$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4044}, 0x40810) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d00)={'gre0\x00', r4, 0x7, 0x10, 0x5, 0x8, {{0x30, 0x4, 0x3, 0x3b, 0xc0, 0x66, 0x0, 0xaf, 0x2f, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x8, 0x84, 0x0, 0xa, [0x7]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xf, "4a03ea581bc700365ce3298ab1"}]}, @end, @cipso={0x86, 0x68, 0x3, [{0x7, 0xa, "c11e9ee6403496b2"}, {0x2, 0xf, "f38c3d1a0888b05be4c532874d"}, {0x0, 0xd, "68d41b69ec8f45c5b69cbf"}, {0x6, 0x2}, {0x7, 0x7, "e5f609c6e6"}, {0x0, 0xe, "203275a82b2e20e939408461"}, {0x6, 0x5, "0abd5a"}, {0x7, 0x12, "415c34e680ad61b277efc940b7c3c280"}, {0x0, 0xe, "e5b5b48c77af20e715e297d0"}]}, @ssrr={0x89, 0x23, 0xb2, [@local, @loopback, @multicast1, @local, @private=0xa010101, @rand_addr=0x64010100, @multicast1, @multicast2]}]}}}}}) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000e40)=""/169, &(0x7f0000000f00)=0xa9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r2, 0x2, '\x00', r11, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r2, 0x2, '\x00', r11, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=r6, 0x4) r14 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001280)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0x1}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0x1, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xc, 0x1c, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ce38a0d, 0x0, 0x0, 0x0, 0xb2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdffd}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4b, r13, 0x8, &(0x7f0000001140)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001180)={0x3, 0x1, 0x4, 0x80000000}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000001480)=[r14, r15, r16, 0xffffffffffffffff, r17, r18, r19], &(0x7f00000014c0)=[{0x2, 0x2, 0x2, 0x6}, {0x3, 0x5, 0xc, 0x7}], 0x10, 0x8}, 0x94) r20 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), r14) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x64, r20, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x84}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x64, r20, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x84}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001740)={0x0, 0xfffffff6}, &(0x7f0000001780)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f00000017c0)={r21, 0x429, 0x6, [0x5, 0x9, 0x9, 0x0, 0x9, 0x1]}, &(0x7f0000001800)=0x14) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f00000017c0)={r21, 0x429, 0x6, [0x5, 0x9, 0x9, 0x0, 0x9, 0x1]}, &(0x7f0000001800)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x5, 0xffff478c, 0x1, 0x44000, r14, 0x4, '\x00', r22, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0xc}, 0x50) 2.745777771s ago: executing program 4 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006103f0df6e8e856ce26f7e9a5e123000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.63121339s ago: executing program 3 (id=3474): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x801) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x6, 0x5, 0x9, 0x23, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd25, 0x34ff}, @sadb_key={0x19, 0x8, 0x5d0, 0x0, "bc02b15ff6abb26e8cec2b10ffdb410a0d99782cf8fdc8dcf6cca74ca3cc82d61587f0b3c2c61761e1bf581a2dfe4a08553a969b37df29630cde48fa23658e8d160f799858974c8eef44dfa6f4bb3beb00852fe46f7684ccffe8fa6fc6a4a40f2c3ceca9e18ef85ff599a864b57658842b48e150883849e8cdcb2e60a566877706444bf79c1357828209dd805436a16322b2f3b6ddb794d1037ef31b81fce8f52a31c3311cf5c88de9547a7e3545222f53dba5440c8f6e2b148f"}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd26, 0x689b3652}]}, 0x118}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)={0x4, 0x1ae, 0x0, {0x0, 0x2710}, {r3, r4/1000+60000}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40814}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) socket$inet(0x2, 0x3, 0x8d) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000040)) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 2.548510704s ago: executing program 4 (id=3475): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) 2.515355513s ago: executing program 0 (id=3477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000380)="fbdbaa0f1433d1503ec911836e814ee4d78a9091ed6536bf02c78026ceff7ddbf427e130c25aa8f76393e4b14408055c8109bd9d1c983f13c81fb55b55d944efe098443279399a86ae67fc57d67e5f2bba0276af29425bc7e05053e24b893eaed6be9f336d3460c894e76f37d440b498a94cf14455ee508fb3ade40b68431b9ed877f13695236d9b5a6ccb861f05e3b3ee88d22c827a611beb8cf56df86f2fb140537d1485f9c6f36e5228fd17bfc4b38713ed4d0a8b59c1f49bf03c89996d933ec9a9c77fd580ebd704e29cd503b8cfea346fbb4a27a37214257f", 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xf2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x30}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000240), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_bcm(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0600000000000000feffffff0000ce5e0d7e1f6c32b7a756e100009e94c2efa79cdd752124c603fae7e2f30b87fed1cfac6bf6854b282ec7470b43a88941f1bb8095f03d31bc668b8f2acf3503fbf1a5eaf36a2b9c305f5670557ee2bc7494f5c7d0e0285dd5de18dbf5a6725d2fa93c61b77ec7d68e40a39176e277ae53a46be86fea1c9671d58d3e6c93ff999c878f9e61564d26f644eff8ed", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400000001000000040000800801000020df31e63824a588"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854) 2.296579321s ago: executing program 3 (id=3479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100c300010004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r8, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xfff}}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) 2.296088178s ago: executing program 4 (id=3480): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x40050) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$nci(r2, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @v={0xff, 0x5, 0x6, 0x5e, {0x8, 0xf7, "7836b10aab380298"}, 0x2}}, 0x12) 2.26151334s ago: executing program 1 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000300)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x1, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x5b7, 0x8}, 0xc) close(r8) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000003060fd0df29970229a00000000000000341fc5bece932bbf9fba12dea7aee7a1507b00320f370b4687d12731ec530aad5fde0fde74baffa9ff02ad5bab3f050b34c91a50e053b4e178307a89264268f9b8acd52a8b7fb7ab2be1eaabba5bc438405a4ea7497bfe724eeaadab9a51cd90a90b", @ANYRES32=0x0, @ANYBLOB="40080000000100001c0016801800018014000b00ffffff7f00000000a8c700000000000008001e0007000000"], 0x44}}, 0x0) 1.929275613s ago: executing program 4 (id=3482): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000340000000000100000a00000000"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x26, 0x5, 0xffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2, @ANYBLOB="7082b08a7597acf97643dcd28116106a998f9052e4bf6b82ea4120e9d4fdba3fe5f1", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8=r8], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008815) (async) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.868361985s ago: executing program 3 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r3 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000000010a000000000000000007000200"], 0x14}}, 0x0) 1.794509015s ago: executing program 1 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x65}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 1.729568719s ago: executing program 1 (id=3485): sendto(0xffffffffffffffff, &(0x7f0000000240)="227153a59ba9d7156437ab89033ee371f5576457b38eba748d7ec75dd4c2710a5d7f7e2254fdc77bc73bb54f352c9fbb9e5db8f1d8646678dae8c91aa247e67898a6b7bef2eb9d04fa5a5b760101c50cfd4cb0297b096a1456a4b1bc5f32a76b01c8dc313d7bea9df7b5327f8972335bc079e5596c5c359bacb6", 0x7a, 0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x40047452, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x9, 0x15, 0x0, 0x0, @str='#[]-\x00'}]}]}, 0x30}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.560445145s ago: executing program 0 (id=3486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) close(r1) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) close(r1) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) (async) close(r1) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) 1.513985541s ago: executing program 0 (id=3487): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="c375000000000000000054000000"], 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x30000007}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000a80)=[{0x80000006}]}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) 947.110887ms ago: executing program 3 (id=3488): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x24, r3, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 884.730806ms ago: executing program 4 (id=3489): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x10}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4, 0x1, 0xf, {0x77359400}, {r1, r2/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1}, 0x13, 0x0, 0x0, 0x0, "f96a499b19606212d8fae00094975930b704482f658bc8b45c8c0be62eeb4c528f12f2f685483099e3675c308fb7d0f7f27b57fdf4f51dc655c07312d871045c"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x219651a04dd3fcb1}]}}}]}, 0x58}}, 0x0) 458.506763ms ago: executing program 3 (id=3490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x10001) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001280), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000007100040029f94cc64493f1579cadf68f", @ANYRES32=0x0, @ANYBLOB="0c0001800500060002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4049000}, 0x4000) 456.556437ms ago: executing program 4 (id=3491): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000080)="533dc5d15d2364b2bc2f2d4fcd4a2f8c8b9f03728a3c555016ae91c8e1c93a66b25892d70b105891b61f7e255dc3370e5d3d1032f09fe4b2a1e620c9c65b02e02ad1e8656e4fd1e022281a29f0cf0abefb05311ba76f11806caf8fdb7316e9db2034f93de7b680341fc672181798c091016f0d3becff2a15bec330", 0x7b}, {&(0x7f0000000100)="498cd6e75268c945d38a0329c67b7a3c7faaeffd079e72b4f451e82dd550dd6479cda1fffee86f0df94ebdd679595c454668bc0f77cbc2825605ccf52002b1fd73677f01cdce65", 0x47}, {&(0x7f00000001c0)="9d7a83e312abd3cfdd138c752a19a80b2ef25b8db39ee1d4c239b711e9b4081228d9273062a47aee5b078656a7328be19edf68d1327382329080bb4a88fb14828654c1f3a104b635f1fb05882076231f55f2e5ff99b3a6679f04e0ad126a5f621b4d3cc582f333", 0x67}, {&(0x7f0000000240)="3417728ceb6688e35589d04bfc1779192f24cebf61f0303b2c81bac82b89b14af5d3bd9ec230a02b89cf68208f1be9dad095847c5d551a7264e00d76af5d5b06638532687bb033a9df60a79e86412d2144fa8add7fab49440a89c11df0bfda2ff99267ea137904123d6fc12dad19833fdba1ff06eaa4025544527db34b4bb125a42c19869917953bd826059fe04a6b4fd183b9643d61e4cf910e0d2a", 0x9c}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000300)="b367da7055d4b1a45a240ece56aef3de342281d5026953e79a09a3122cc885e0df69af96d0c3487bb0f914764237863e09ec846522a570390ce997d846343eb04224acf34108440c4fb2ce", 0x4b}, {&(0x7f0000000380)="52abf84057b19da3c71d960b31ecba5296f18a58f6ea53cb7475c1d952ab5094c93aec68b2501638b3d305251f25950abe68c0337bc8fe314d9b19e96e4e978141f4d8e4a4387f52efd3f977050004372a0af6522d0e0888aef6d3e28d9399b13cdfd8a73e1dfa083c38dd7e16a0376b1c7d9edcb55b9f09b4e0b703be0ea62fc356337afb66dfc159bce5aa07945697444f8cd1e46774b95f390d9f6ecc803baa9ce023b62a52ad4c55ec43ffce94e23e458bd93b4ebdea8cf0a5bfc01d7b1efe3a439cea3b425c2b3e66aeb5e6", 0xce}, {&(0x7f0000000480)="7fbb2a859539f299b0ffc384dc46e4ca6e44b04fb60233d3f6221b637ab31d11bcc305140165eb9ed22e71a56ae8b21ac5756183044d53a2e6fc7c687b701e4ca91babf48f9e7939b3d2941d5edc02c7f08ca822a4f15c63c8619ffc9065036975b41c170b5c19925308c4c3f007becd227fa792f592d0caeeb9e4c504edeefe517e94e6954d7ad18a5e5fc1be9df8198d7f520e69552c7dbeb89a0f4e7142b30fa4f0b471af003acf01e5115ca0fd25c173cf5169efb7b814358f60cea94e13463c0f29a89ecff066b0809ff812025243dc34683e", 0xd5}], 0x8, &(0x7f0000000600)}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000800)="03bd89f56df3bb0506d260aa90cb05f7ec940463fc", 0x15}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000000840)="7d92d5303eb5a7ff607616036fa24df8ba58c8bb813ec13bbfa46abc70be6468d090c9dd150c3dda130c21eaac899d798e58af24a46be0b851fac1d29a486e154c344315396bb6f1adf87530ab4fc6d11e1161", 0x53}, {&(0x7f00000008c0)="b5d5490b0860feb8f81914b0705840ef4ed8a24864f21efa10af216b11959562d0d9ac4c07bd28b66c32a684f2c5f2041dbbab6fa5b597cbef2a48ffbb743c4ba78a7be434d4784e02e53ca9dea6aa147509dde6771fc33d3cd7b044849f1975d9d399f050ffbb2fe303a6e146edcd9e6890bb076979505367fdc029d236b378a2527be6109e40f0fc9cc4692fcfe4849e49fa95e6e1478154e4214951b2c0390431f43b8cf929f8cc2d065c92be7f7b36d611ba1d854f83", 0xb8}], 0x4, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb42}}], 0x70}}], 0x2, 0x2004000) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x2000}) 450.282027ms ago: executing program 0 (id=3492): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(r1, 0x20, 0x200, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}}, 0x0) syz_emit_ethernet(0x11b5, &(0x7f00000026c0)={@local, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x800}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, '\x00', 0x1177, 0x3a, 0xff, @empty, @private0, {[@routing={0x33, 0x8, 0x3, 0xa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @loopback, @mcast2]}, @srh={0x4, 0x2, 0x4, 0x1, 0x4, 0x78, 0x1000, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2f, 0x8, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x8, [0x7, 0x3678, 0x8, 0x1, 0x2, 0x8, 0x8]}}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0xe, 0x17, "86cd2103c09f1c0b46d49fc378e3ef5eab034d246ec036ae38b410285d3db8b7531d507e56231dd564093af48e0287c4eb4bddf9e330120dae22018e97e3528c7ecd8dfbdd63aef204d503bfac386e5316248b431e65525f7a3dfa4f9d46f26fc0e372ea2f6ed5fcb1bc5ae433424a82a1daf22d7fe19f3f1eed4c9a3a5a0f1a4b133b01cc001aeacf30b48ac90187bbc4c2112c7bddc777f379617cd9bb9e17010ed58fd8e9c820abecc69bafc82384e43f51e7722e802209d1f5"}, {0x19, 0x200, "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"}]}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xbe3) (async) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) (async) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) 446.359466ms ago: executing program 1 (id=3493): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0xc, 0x4}) (async) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)="2225333535174c40a7d44c348d0940116f59b54943d522a98cb6de4d6153f3439ca9ed67e622ca0b4fccfd8ef15f7e62d50aab4f14776ce7ca5aef4923c3d41066403e0fa9cbd1f0f185e6f205ef80299b31da8cb2dfd420fccbf5670bf0c516f99a42d8fc1118ae04579f5a0486357aba6452f4607d7b64e6a71b60523a6988e962502c433ce57adb6c30af32f59bafbb108bc71237639be188d7ea2df1fdcd4fb6f01d17ba961f2c7d3c", 0xab}, {&(0x7f0000000100)="91d37424c4ccd26fd5868e6d142fa0a62234488febe3501dd465c2eb8a0606fd41ae77669da64a9e561117ea3cf43c320fffdb71", 0x34}, {&(0x7f0000000140)="f1e773f0224b81d085be83bcf06cdc6da3ab7d1eab3e8c19", 0x18}, {&(0x7f0000000180)="de85dd505dc194d90b339038f51b010729bf5596fd548ddfcd03a1ebfc643421ff900e9a121e4b32586a9f35db44b99372f49dd37e7e8ab1e19e180d12703b4a01bcf8e988cda30f94eb05982a2cf1cb6d5fb2e7221f8ed2baa0c7724b8714968d64b37d3511a98c83222d49934853a4440ce6164a68d2dfd5d9b3a6764a8150a87db0de92193a3918aa386b90ca36d8943125f70d136e1de6ad67321bc3e8022a495e83801a921ef917c3d262b67dab59a174155b72b734", 0xb8}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="3f4efa4d9235d59f425b61ef88c015ba7e18d7eec4b9dc905a8676a4f95296b4b0890bac6a83865953e3ecb6061865764b7ddb85fb8fb6", 0x37}, {&(0x7f0000001280)="463f6960753c541dc9788c64d2b5f2728015257943c3167205c867185fca6a6b1140ce25eefff64f7f4f1c071761e8dfbbc36ca494dea895412ba3f09803eac13ab67159f67a9c9ac70f854ed7a0e0b8f760c3a2d3366514b925b1471e13b5e3ecc6b1a8dce3535cfffd2bac322857b885a32352fb3529383431ba4fa48533be28d12c0d3fc008fe22bd148eacc5bec0fb08649158008ee453d182282a79034c9a9097eeb7a6a469d008e98687549caecf3131f02803df9b0fc598d42707d2941f6e78eea55fe229e5f6ea83b682abeca714573be27dcf931d61d9f05070efb88d", 0xe1}, {&(0x7f0000001380)="21a65bbf2806beff3d4e5b4e1ce9e8769045d3787112ead668c5005ffc05db3190571863e6d91ea053f514b6b68172e9ee1d49ab485b5cf3615d3d2f441c228180af6e10861e207a3129b3bd89549f35a8dc520caf7d909fca3007246d6ea2537469978d7c7cb1b9eba6dd47d0fc1c9bfa33949513489d06b8593c6688327a726189b534f9402abf4e1350be5209ff60a88eea2dc544e2674404f4157d670131d0b642d8192cf37fb41f00c9cb2e439eeb80", 0xb2}, {&(0x7f0000001440)="daeab8709cbe7f1d7b447e090133121b0f395df41e5d40594ba4931b36e4b2ec1d41186768acac51e6d6ca2ec1eefba08737e6d04875ff413f44d47c74e408bf6f398386e92c96014616768d629f1678715c842b99b6f5377edb494567ab8ad27af38a64633b4d9e62e41ed54ee126c342e5c549c32f82d27b87e8c022", 0x7d}], 0x9, 0x9) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x109080, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001880)={0x4, &(0x7f0000001800)=[{0x4, 0x29, &(0x7f00000015c0)="6183a635e958655eb81a0017f91d13f4da738607c9bfe77313770c673811872387395d91d74e505d0d", 0x1, 0x1}, {0x2, 0xaf, &(0x7f0000001600)="d9ea0b960f794c8404bc1c8b829fe13b7f3d883919871afd5c0229c2585154b5e0e01e17b46e16ed38cc575770a9014a070af481766f93e3af18ca7340be2032507538d10058f9232c5bd6db6c03079ed16d4d8394847207c5d3fde64845aa289f65d76e761b47f2e8fa9987fe2fe55186cf6c93efe9d07c93bc017bdf00120a7fd0520d22b5e9f0eb5b170dcc1c574ff04b6a2c47a34c3f0d14c6ba200f3378dd7a2f1c03f0c089a5d1cae0a2825c", 0x0, 0x1}, {0x4, 0x66, &(0x7f00000016c0)="dacc1349fa377bbdd1d770a2f068dcfa7c0ff9b6a4165ee223cd4c3118605d4cc73da4f9234baf21fa99b96a930ecef9d910d99e2e2b6da48983d91dda8ab23d7508b69e56d7c9b1ab8de60d82162acf51511e7b3d80ffa706c801b575083160e6b1379cd882", 0x0, 0x1}, {0x9, 0xa1, &(0x7f0000001740)="69a30f2d628ca56ac1685453066a9c0f609c5928927f0f7835d39e9951a609884330134f1fdb8bfa6ccdd3cc140c3803cad2efe1b08b6e8207c4c7a4e3e4e16faa2e620221578ea55c6f3f9c2b6288cad49cbd9ad4d568e38bac63f0569a81ce10b08a772342e855421c998f341fe6a12bab0baf47974ca34da634bff3f0bc7fa20738fb0156f679587893c5515bc3658a21906a4048ae7986b4792ff768cf865c", 0x1}]}) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x1010, r1, 0xf2e21000) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000018c0)) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001900)={0x0, 0x8}) (async) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000002900), &(0x7f0000002940)=0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pread64(r3, &(0x7f0000002980)=""/147, 0x93, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000002a40)={0x7fffffff, 0x97cb, 0x4, 0x100, 0x2f9617c}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000002a80)={0x9, 0x8000000000000001, 0x0, 0x8, 0x3, [0x2, 0x2, 0x2, 0x5]}) (async) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000002ac0)=[{r3, 0x200}, {r1, 0x500}, {r1, 0x4169}, {r0, 0x294}, {r0, 0x220}, {r4, 0x5480}, {r1, 0x2}, {r3, 0x4000}, {r0, 0x10a0}], 0x9, &(0x7f0000002b40)={0x77359400}, &(0x7f0000002b80)={[0x7]}, 0x8) (async) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000002bc0)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000002c00)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000002e00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x134, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe6badec4c9c25a57}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0x72, 0x7, 0x1, 0x0, "baaf2049f3a18a22d39fb35bef818ae303d49b36fac4f23219b877741deba2bbdc4e11b391a84ef823ac3e320e67e7551e7b243d71a00d1b35a39722a19461661e1a4023798e788ec640eb00695e728a561aace09620d56ed27d0ef200d93f80cef59be3b1c5b71ad614aa10cc29"}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000045}, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002e40)) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000003080)={{r0}, 0x2, &(0x7f0000003040)=[0x100, 0x2], 0x0, 0x0, 0x1}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, r6, 0xc37c09b29c304622, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x51}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="43830a386f33"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004804}, 0x4008041) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003240)) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f00000034c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x60, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1000}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8a2}, 0x4000084) 445.333179ms ago: executing program 2 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000180)=""/53, 0x35}], 0x3) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a, 0x0, 0xfffffffc}, 0x28) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r5, 0x891c, &(0x7f0000000080)={'syzkaller1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffd8ee}}) 444.949083ms ago: executing program 1 (id=3494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xe17, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0xc, 0x9, 0x0, 0x2}}]}}]}, 0x50}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000a80)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a00000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) 370.006763ms ago: executing program 0 (id=3495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/207, 0xcf}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000001240)=""/153, 0x99}, {&(0x7f0000001300)=""/213, 0xd5}], 0x5, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x40) 0s ago: executing program 1 (id=3496): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x24}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000ee10000100000000000000000000fffd41a79533674100000a30000000120a09000000000000000000020000000900020073797a310000310008000440000000000800034000000001140000001100010000000000000000bfbb00000a"], 0x58}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 0 (id=3499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xee00}) kernel console output (not intermixed with test programs): ibute type 5 has an invalid length. [ 277.975270][T14031] netlink: 'syz.4.2356': attribute type 10 has an invalid length. [ 277.984484][T14031] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 278.283482][T14045] wg1 speed is unknown, defaulting to 1000 [ 278.328155][T14044] wg1 speed is unknown, defaulting to 1000 [ 278.352393][T14045] wlan1 speed is unknown, defaulting to 1000 [ 278.730780][T14071] tipc: Enabling of bearer rejected, failed to enable media [ 278.789903][T14078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.173995][T14091] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 279.485216][T14109] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 279.611036][T14044] wlan1 speed is unknown, defaulting to 1000 [ 279.885535][T14118] __nla_validate_parse: 11 callbacks suppressed [ 279.885560][T14118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2383'. [ 279.950299][T14122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.009440][T14127] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2386'. [ 280.101060][ T30] audit: type=1804 audit(1757281015.696:6): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2387" name="/newroot/470/memory.events" dev="tmpfs" ino=2423 res=1 errno=0 [ 280.184178][ T30] audit: type=1800 audit(1757281015.716:7): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2387" name="memory.events" dev="tmpfs" ino=2423 res=0 errno=0 [ 280.258046][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 280.450811][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 280.534545][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'. [ 280.544634][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'. [ 280.598126][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'. [ 280.690780][T14164] sctp: [Deprecated]: syz.4.2396 (pid 14164) Use of int in max_burst socket option deprecated. [ 280.690780][T14164] Use struct sctp_assoc_value instead [ 280.827496][T14172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2396'. [ 280.843843][T14172] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2396'. [ 280.874474][T14172] netlink: 'syz.4.2396': attribute type 5 has an invalid length. [ 280.887956][T14172] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2396'. [ 281.159285][T14190] netlink: 'syz.4.2399': attribute type 17 has an invalid length. [ 281.222887][T14194] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 281.232426][T14190] gretap0: entered promiscuous mode [ 281.253463][T14190] gretap0: left promiscuous mode [ 281.270233][T14193] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 281.279615][T14194] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 281.349733][T14194] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 282.427126][T14257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.436049][T14257] team0: Failed to send port change of device bond7 via netlink (err -105) [ 282.446919][T14257] team0: Failed to send options change via netlink (err -105) [ 282.454886][T14257] team0: Port device bond7 added [ 282.711587][T14276] netlink: 'syz.0.2428': attribute type 5 has an invalid length. [ 283.167383][T14304] tipc: Enabling of bearer rejected, failed to enable media [ 283.261661][T14305] macvtap1: entered allmulticast mode [ 283.269908][T14305] veth0_macvtap: entered allmulticast mode [ 284.404663][T10226] nci: nci_rx_work: unknown MT 0x1 [ 285.998769][T14331] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 286.015842][T14336] __nla_validate_parse: 4 callbacks suppressed [ 286.015866][T14336] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2443'. [ 286.136231][T14351] syzkaller1: entered promiscuous mode [ 286.142693][T14351] syzkaller1: entered allmulticast mode [ 286.403267][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2451'. [ 286.509797][T14385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2451'. [ 286.563054][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2454'. [ 286.622381][T14399] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2454'. [ 286.710475][T14400] netlink: 'syz.4.2455': attribute type 5 has an invalid length. [ 286.889619][T14408] netlink: 'syz.1.2458': attribute type 11 has an invalid length. [ 286.898971][T14408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2458'. [ 286.953751][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 286.988332][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 287.083196][T14417] tipc: Enabling of bearer rejected, failed to enable media [ 287.098487][T14405] netem: change failed [ 287.234745][T14432] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2465'. [ 289.312170][T14456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2468'. [ 289.397635][T14467] netlink: 'syz.1.2472': attribute type 7 has an invalid length. [ 289.590995][T14476] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 289.805689][T14476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.850597][T14482] bond7: (slave gretap2): making interface the new active one [ 289.852702][T14496] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 289.864850][T14482] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 290.054828][T14507] TCP: TCP_TX_DELAY enabled [ 290.082361][T14512] IPVS: Error connecting to the multicast addr [ 290.229962][T14518] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 290.256794][T14518] dummy0: entered promiscuous mode [ 290.263309][T14518] bridge0: port 1(dummy0) entered blocking state [ 290.298242][T14518] bridge0: port 1(dummy0) entered disabled state [ 290.307382][T14518] dummy0: entered allmulticast mode [ 290.364793][T14524] tipc: Enabled bearer , priority 0 [ 290.393386][T14524] syzkaller0: entered promiscuous mode [ 290.406884][T14524] syzkaller0: entered allmulticast mode [ 290.545716][T14538] tipc: Resetting bearer [ 290.608778][T14523] tipc: Resetting bearer [ 290.628762][T14523] tipc: Disabling bearer [ 290.754929][T14539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.989581][T14562] : renamed from hsr0 (while UP) [ 291.333476][T14577] __nla_validate_parse: 5 callbacks suppressed [ 291.333496][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2500'. [ 291.401410][T14577] team0: No ports can be present during mode change [ 291.573890][T14592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2506'. [ 291.790779][T14605] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.010271][T14618] tipc: Enabled bearer , priority 0 [ 292.018577][T14618] syzkaller0: entered promiscuous mode [ 292.024097][T14618] syzkaller0: entered allmulticast mode [ 292.119404][T14624] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2516'. [ 292.143059][T14622] bond4: (slave veth3): Releasing active interface [ 292.154138][T14622] bond4: (slave veth3): the permanent HWaddr of slave - 9a:0c:e4:49:6b:e6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 292.180029][T14627] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 292.198053][T14622] bond4: (slave veth5): Releasing active interface [ 292.223989][T14622] team0: Port device bond6 removed [ 292.232952][T14622] bond7: (slave gretap2): Releasing active interface [ 292.304112][T14627] tipc: Resetting bearer [ 292.364490][T14614] tipc: Resetting bearer [ 292.442281][T14614] tipc: Disabling bearer [ 292.609984][T14639] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2519'. [ 292.782763][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 292.810024][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 293.068747][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 293.145515][T14670] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2527'. [ 293.203831][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2527'. [ 293.269482][T14668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2528'. [ 293.485817][T14685] openvswitch: netlink: Key type 9232 is out of range max 32 [ 294.223220][T14727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.023718][T14744] netlink: 'syz.1.2554': attribute type 3 has an invalid length. [ 296.234005][T14758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.334051][T14765] wireguard: wg1: Could not create IPv4 socket [ 296.369493][T14765] wg1: entered promiscuous mode [ 296.395161][T14765] wg1: entered allmulticast mode [ 296.724846][T14788] __nla_validate_parse: 5 callbacks suppressed [ 296.724870][T14788] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2569'. [ 296.798853][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2571'. [ 296.875734][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2572'. [ 297.032172][T14801] veth11: entered promiscuous mode [ 297.133454][T14815] netlink: 'syz.4.2578': attribute type 2 has an invalid length. [ 297.145620][T14815] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2578'. [ 297.217661][T14818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2579'. [ 297.345473][T14822] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2580'. [ 297.386747][T14824] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 297.394648][T14824] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.503937][T14833] netlink: 'syz.2.2583': attribute type 23 has an invalid length. [ 297.531885][T14828] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 297.540460][T14828] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.749981][T14845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.773409][T14848] sctp: [Deprecated]: syz.2.2587 (pid 14848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.773409][T14848] Use struct sctp_sack_info instead [ 297.897183][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 298.097423][T14871] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2590'. [ 298.128640][T14871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2590'. [ 298.139600][T14871] netlink: 'syz.3.2590': attribute type 7 has an invalid length. [ 298.162103][T14871] netlink: 'syz.3.2590': attribute type 8 has an invalid length. [ 298.180289][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 298.327193][T14879] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 298.410922][T14885] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 298.421235][T14882] netlink: 'syz.3.2598': attribute type 3 has an invalid length. [ 298.489886][T14885] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 298.882488][T14892] veth1_vlan: left allmulticast mode [ 298.998600][T14892] bond0: left promiscuous mode [ 299.036501][T10228] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.056700][T10228] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.076060][T10228] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.101052][T10228] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.833336][T14944] netlink: 'syz.3.2616': attribute type 11 has an invalid length. [ 299.847516][T14944] netlink: 'syz.3.2616': attribute type 11 has an invalid length. [ 300.458971][T14978] sctp: [Deprecated]: syz.0.2627 (pid 14978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.458971][T14978] Use struct sctp_sack_info instead [ 301.199729][T15032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.748303][T15061] __nla_validate_parse: 15 callbacks suppressed [ 301.748321][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2654'. [ 301.780827][T15061] vlan4: entered promiscuous mode [ 301.791187][T15061] 0{X: entered promiscuous mode [ 301.822564][T15063] netlink: 'syz.1.2655': attribute type 12 has an invalid length. [ 301.907552][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'. [ 302.472939][T15080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2661'. [ 302.881695][T15089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2662'. [ 302.954510][T15092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2663'. [ 303.075554][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 303.086874][T15100] netlink: 'syz.3.2667': attribute type 6 has an invalid length. [ 303.136212][T15100] netlink: 'syz.3.2667': attribute type 6 has an invalid length. [ 303.147927][T15096] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 303.171082][T10232] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.191426][T10232] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.214939][T10232] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.246460][T10232] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.333842][T15110] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.483972][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 303.510984][T15123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'. [ 303.536093][T15123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'. [ 303.572222][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2674'. [ 303.595905][T15126] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 303.800418][T15134] veth7: entered allmulticast mode [ 304.078590][T15159] netlink: 'syz.0.2686': attribute type 11 has an invalid length. [ 304.795058][T15195] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 304.824949][T15195] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 304.922383][T15204] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 304.989514][T15204] netlink: 'syz.2.2700': attribute type 2 has an invalid length. [ 305.033604][T15204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.176148][T15217] netlink: 'syz.3.2706': attribute type 5 has an invalid length. [ 305.194932][T15216] openvswitch: netlink: Message has 4 unknown bytes. [ 305.264501][T15224] tipc: Enabled bearer , priority 0 [ 305.282911][T15225] syzkaller0: entered promiscuous mode [ 305.299063][T15225] syzkaller0: entered allmulticast mode [ 305.349737][T15227] syzkaller0: entered promiscuous mode [ 305.356838][T15227] syzkaller0: entered allmulticast mode [ 305.444824][T15224] tipc: Resetting bearer [ 305.502701][T15224] tipc: Disabling bearer [ 305.618864][T15242] sit0: left promiscuous mode [ 305.624294][T15242] macvlan0: left promiscuous mode [ 305.676646][T10234] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.698887][T10228] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.724634][T10228] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.750624][T10228] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.974392][T15258] netlink: 'syz.1.2720': attribute type 3 has an invalid length. [ 306.048105][T15258] tipc: Enabled bearer , priority 0 [ 306.077395][T15258] syzkaller0: entered promiscuous mode [ 306.082943][T15258] syzkaller0: entered allmulticast mode [ 306.148068][T15267] netlink: 'syz.3.2724': attribute type 4 has an invalid length. [ 306.238274][T15258] tipc: Resetting bearer [ 306.307269][T15257] tipc: Resetting bearer [ 306.367745][T15257] tipc: Disabling bearer [ 306.554669][T15290] team0: Device vti0 is of different type [ 306.971652][T15321] __nla_validate_parse: 12 callbacks suppressed [ 306.971675][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 307.084915][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 307.295993][T15350] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 307.304631][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 307.314833][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2748'. [ 307.325877][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 307.599674][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 307.625053][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 307.642579][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2753'. [ 307.665354][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 307.690988][T15364] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 307.762494][T15374] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 307.793334][T15364] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.802789][T15374] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 307.942827][T15383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2757'. [ 308.146772][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 308.286945][T15396] wlan1 speed is unknown, defaulting to 1000 [ 308.421895][T15409] syz.4.2766: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.456484][T15409] CPU: 1 UID: 0 PID: 15409 Comm: syz.4.2766 Not tainted syzkaller #0 PREEMPT(full) [ 308.456515][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.456541][T15409] Call Trace: [ 308.456551][T15409] [ 308.456560][T15409] dump_stack_lvl+0x189/0x250 [ 308.456594][T15409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.456620][T15409] ? __pfx__printk+0x10/0x10 [ 308.456649][T15409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.456675][T15409] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.456701][T15409] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 308.456729][T15409] warn_alloc+0x214/0x310 [ 308.456762][T15409] ? stack_depot_save_flags+0x40/0x860 [ 308.456793][T15409] ? __pfx_warn_alloc+0x10/0x10 [ 308.456827][T15409] ? kasan_save_track+0x4f/0x80 [ 308.456852][T15409] ? xskq_create+0x56/0x170 [ 308.456880][T15409] ? xsk_init_queue+0xb0/0x110 [ 308.456905][T15409] ? xsk_setsockopt+0x4dc/0x8d0 [ 308.456938][T15409] ? do_sock_setsockopt+0x17c/0x1b0 [ 308.456958][T15409] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 308.456978][T15409] ? do_syscall_64+0xfa/0x3b0 [ 308.456995][T15409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.457025][T15409] __vmalloc_node_range_noprof+0x125/0x12f0 [ 308.457092][T15409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.457130][T15409] ? __kasan_kmalloc+0x93/0xb0 [ 308.457162][T15409] vmalloc_user_noprof+0xad/0xf0 [ 308.457192][T15409] ? xskq_create+0xbf/0x170 [ 308.457222][T15409] xskq_create+0xbf/0x170 [ 308.457255][T15409] xsk_init_queue+0xb0/0x110 [ 308.457287][T15409] xsk_setsockopt+0x4dc/0x8d0 [ 308.457318][T15409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.457346][T15409] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.457381][T15409] ? aa_sock_opt_perm+0xff/0x1b0 [ 308.457405][T15409] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 308.457428][T15409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.457458][T15409] do_sock_setsockopt+0x17c/0x1b0 [ 308.457485][T15409] __x64_sys_setsockopt+0x13f/0x1b0 [ 308.457514][T15409] do_syscall_64+0xfa/0x3b0 [ 308.457532][T15409] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.457561][T15409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.457581][T15409] ? clear_bhb_loop+0x60/0xb0 [ 308.457607][T15409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.457627][T15409] RIP: 0033:0x7f780198ebe9 [ 308.457646][T15409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.457665][T15409] RSP: 002b:00007f7802776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.457687][T15409] RAX: ffffffffffffffda RBX: 00007f7801bc6090 RCX: 00007f780198ebe9 [ 308.457702][T15409] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 308.457714][T15409] RBP: 00007f7801a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 308.457727][T15409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.457740][T15409] R13: 00007f7801bc6128 R14: 00007f7801bc6090 R15: 00007fff0b4167a8 [ 308.457775][T15409] [ 308.457790][T15409] Mem-Info: [ 308.763162][T15409] active_anon:5237 inactive_anon:0 isolated_anon:0 [ 308.763162][T15409] active_file:3207 inactive_file:39933 isolated_file:0 [ 308.763162][T15409] unevictable:768 dirty:115 writeback:0 [ 308.763162][T15409] slab_reclaimable:12094 slab_unreclaimable:110834 [ 308.763162][T15409] mapped:30571 shmem:2935 pagetables:911 [ 308.763162][T15409] sec_pagetables:0 bounce:0 [ 308.763162][T15409] kernel_misc_reclaimable:0 [ 308.763162][T15409] free:1314860 free_pcp:13499 free_cma:0 [ 308.832707][T15409] Node 0 active_anon:21048kB inactive_anon:0kB active_file:12828kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122484kB dirty:460kB writeback:0kB shmem:10404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13060kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.993124][T15409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.065069][T15426] veth0_to_bridge: entered promiscuous mode [ 309.073740][T15426] veth0_to_bridge: left promiscuous mode [ 309.136638][T15409] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.159141][T15428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.189949][T15409] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 309.209818][T15409] Node 0 DMA32 free:1366364kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25092kB inactive_anon:0kB active_file:12828kB inactive_file:157952kB unevictable:1536kB writepending:468kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:28660kB local_pcp:19404kB free_cma:0kB [ 309.314990][T15409] lowmem_reserve[]: 0 0 1 1 1 [ 309.325291][T15409] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 309.412507][T15409] lowmem_reserve[]: 0 0 0 0 0 [ 309.430721][T15409] Node 1 Normal free:3887360kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20996kB local_pcp:13060kB free_cma:0kB [ 309.481879][T15409] lowmem_reserve[]: 0 0 0 0 0 [ 309.493324][T15409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 309.511242][T15409] Node 0 DMA32: 613*4kB (UME) 126*8kB (UME) 241*16kB (UME) 549*32kB (UME) 474*64kB (UME) 52*128kB (UME) 15*256kB (M) 3*512kB (ME) 0*1024kB 6*2048kB (UME) 314*4096kB (UM) = 1365684kB [ 309.581180][T15409] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 309.631604][T15409] Node 1 Normal: 226*4kB (UE) 71*8kB (UME) 54*16kB (UME) 69*32kB (UME) 27*64kB (UME) 9*128kB (UME) 4*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3887360kB [ 309.709818][T15409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.719688][T15409] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.729152][T15409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.739085][T15409] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.748817][T15409] 45649 total pagecache pages [ 309.754167][T15409] 0 pages in swap cache [ 309.760431][T15409] Free swap = 124996kB [ 309.764808][T15409] Total swap = 124996kB [ 309.769505][T15409] 2097051 pages RAM [ 309.773779][T15409] 0 pages HighMem/MovableOnly [ 309.779183][T15409] 425667 pages reserved [ 309.783843][T15409] 0 pages cma reserved [ 310.227764][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 310.549873][T15494] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 310.573957][T15491] tipc: Enabled bearer , priority 0 [ 310.612248][T15491] tipc: Disabling bearer [ 311.062721][T15515] netlink: 'syz.4.2798': attribute type 29 has an invalid length. [ 311.434874][T15532] tipc: Enabled bearer , priority 0 [ 311.472811][T15532] syzkaller0: entered promiscuous mode [ 311.502148][T15532] syzkaller0: entered allmulticast mode [ 311.595886][T15532] tipc: Resetting bearer [ 311.705407][T15554] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 311.831040][T15566] x_tables: ip_tables: udp match: only valid for protocol 17 [ 311.882257][T15529] tipc: Resetting bearer [ 311.963519][T15529] tipc: Disabling bearer [ 312.017513][T15575] __nla_validate_parse: 8 callbacks suppressed [ 312.017536][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 312.101132][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 312.126732][T15575] netlink: 'syz.0.2812': attribute type 5 has an invalid length. [ 312.176233][T15575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 312.196966][T15574] netlink: 'syz.0.2812': attribute type 5 has an invalid length. [ 312.204768][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 312.473748][T15601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 312.488262][T15600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.605130][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 312.653171][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 312.656778][T10226] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 312.838934][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2824'. [ 313.351855][T15632] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 313.375544][T15632] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2826'. [ 313.421114][T15631] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 313.435703][T15631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2826'. [ 313.499695][T15650] FAULT_INJECTION: forcing a failure. [ 313.499695][T15650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.539623][T15650] CPU: 0 UID: 0 PID: 15650 Comm: syz.2.2830 Not tainted syzkaller #0 PREEMPT(full) [ 313.539654][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.539667][T15650] Call Trace: [ 313.539676][T15650] [ 313.539686][T15650] dump_stack_lvl+0x189/0x250 [ 313.539715][T15650] ? __pfx____ratelimit+0x10/0x10 [ 313.539746][T15650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.539771][T15650] ? __pfx__printk+0x10/0x10 [ 313.539799][T15650] ? __might_fault+0xb0/0x130 [ 313.539840][T15650] should_fail_ex+0x414/0x560 [ 313.539874][T15650] _copy_from_iter+0x1de/0x1790 [ 313.539905][T15650] ? rcu_is_watching+0x15/0xb0 [ 313.539928][T15650] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 313.539960][T15650] ? __pfx__copy_from_iter+0x10/0x10 [ 313.539983][T15650] ? __build_skb_around+0x257/0x3e0 [ 313.540008][T15650] ? netlink_sendmsg+0x642/0xb30 [ 313.540025][T15650] ? skb_put+0x11b/0x210 [ 313.540050][T15650] netlink_sendmsg+0x6b2/0xb30 [ 313.540081][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.540105][T15650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.540126][T15650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.540149][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.540179][T15650] __sock_sendmsg+0x21c/0x270 [ 313.540213][T15650] ____sys_sendmsg+0x505/0x830 [ 313.540244][T15650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.540277][T15650] ? import_iovec+0x74/0xa0 [ 313.540304][T15650] ___sys_sendmsg+0x21f/0x2a0 [ 313.540331][T15650] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.540395][T15650] ? __fget_files+0x2a/0x420 [ 313.540413][T15650] ? __fget_files+0x3a0/0x420 [ 313.540443][T15650] __x64_sys_sendmsg+0x19b/0x260 [ 313.540470][T15650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.540505][T15650] ? __pfx_ksys_write+0x10/0x10 [ 313.540530][T15650] ? rcu_is_watching+0x15/0xb0 [ 313.540556][T15650] ? do_syscall_64+0xbe/0x3b0 [ 313.540580][T15650] do_syscall_64+0xfa/0x3b0 [ 313.540598][T15650] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.540627][T15650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.540648][T15650] ? clear_bhb_loop+0x60/0xb0 [ 313.540673][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.540693][T15650] RIP: 0033:0x7ff5baf8ebe9 [ 313.540712][T15650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.540729][T15650] RSP: 002b:00007ff5b91f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.540751][T15650] RAX: ffffffffffffffda RBX: 00007ff5bb1c5fa0 RCX: 00007ff5baf8ebe9 [ 313.540766][T15650] RDX: 0000000020004846 RSI: 0000200000000000 RDI: 0000000000000004 [ 313.540779][T15650] RBP: 00007ff5b91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.540792][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.540804][T15650] R13: 00007ff5bb1c6038 R14: 00007ff5bb1c5fa0 R15: 00007ffce451b458 [ 313.540838][T15650] [ 313.915306][T15657] pim6reg1: entered promiscuous mode [ 313.921860][T15657] pim6reg1: entered allmulticast mode [ 314.069836][T15661] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.192592][T15675] netlink: 'syz.0.2840': attribute type 27 has an invalid length. [ 314.305541][T15689] netlink: 'syz.4.2839': attribute type 1 has an invalid length. [ 314.368254][T15689] 8021q: adding VLAN 0 to HW filter on device bond10 [ 314.376143][T15690] tipc: Enabled bearer , priority 0 [ 314.475222][T15696] FAULT_INJECTION: forcing a failure. [ 314.475222][T15696] name failslab, interval 1, probability 0, space 0, times 1 [ 314.496796][T15696] CPU: 1 UID: 0 PID: 15696 Comm: syz.0.2845 Not tainted syzkaller #0 PREEMPT(full) [ 314.496827][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.496839][T15696] Call Trace: [ 314.496847][T15696] [ 314.496857][T15696] dump_stack_lvl+0x189/0x250 [ 314.496886][T15696] ? __pfx____ratelimit+0x10/0x10 [ 314.496918][T15696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.496943][T15696] ? __pfx__printk+0x10/0x10 [ 314.496973][T15696] ? __lock_acquire+0xab9/0xd20 [ 314.497013][T15696] should_fail_ex+0x414/0x560 [ 314.497047][T15696] should_failslab+0xa8/0x100 [ 314.497079][T15696] kmem_cache_alloc_noprof+0x73/0x3c0 [ 314.497106][T15696] ? skb_clone+0x212/0x3a0 [ 314.497136][T15696] skb_clone+0x212/0x3a0 [ 314.497175][T15696] __netlink_deliver_tap+0x404/0x850 [ 314.497223][T15696] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.497256][T15696] netlink_deliver_tap+0x19c/0x1b0 [ 314.497290][T15696] netlink_unicast+0x7fa/0x9e0 [ 314.497329][T15696] ? __pfx_netlink_unicast+0x10/0x10 [ 314.497360][T15696] ? netlink_sendmsg+0x642/0xb30 [ 314.497378][T15696] ? skb_put+0x11b/0x210 [ 314.497401][T15696] netlink_sendmsg+0x805/0xb30 [ 314.497430][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.497452][T15696] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.497474][T15696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.497495][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.497515][T15696] __sock_sendmsg+0x21c/0x270 [ 314.497546][T15696] ____sys_sendmsg+0x505/0x830 [ 314.497575][T15696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.497607][T15696] ? import_iovec+0x74/0xa0 [ 314.497634][T15696] ___sys_sendmsg+0x21f/0x2a0 [ 314.497660][T15696] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.497726][T15696] ? __fget_files+0x2a/0x420 [ 314.497743][T15696] ? __fget_files+0x3a0/0x420 [ 314.497773][T15696] __x64_sys_sendmsg+0x19b/0x260 [ 314.497800][T15696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.497835][T15696] ? __pfx_ksys_write+0x10/0x10 [ 314.497860][T15696] ? rcu_is_watching+0x15/0xb0 [ 314.497887][T15696] ? do_syscall_64+0xbe/0x3b0 [ 314.497911][T15696] do_syscall_64+0xfa/0x3b0 [ 314.497928][T15696] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.497956][T15696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.497974][T15696] ? clear_bhb_loop+0x60/0xb0 [ 314.498000][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.498020][T15696] RIP: 0033:0x7fda6098ebe9 [ 314.498039][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.498056][T15696] RSP: 002b:00007fda6185c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.498078][T15696] RAX: ffffffffffffffda RBX: 00007fda60bc5fa0 RCX: 00007fda6098ebe9 [ 314.498092][T15696] RDX: 0000000020004846 RSI: 0000200000000000 RDI: 0000000000000004 [ 314.498106][T15696] RBP: 00007fda6185c090 R08: 0000000000000000 R09: 0000000000000000 [ 314.498118][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.498130][T15696] R13: 00007fda60bc6038 R14: 00007fda60bc5fa0 R15: 00007ffe8cc81db8 [ 314.498175][T15696] [ 314.807087][T15699] netlink: 'syz.3.2846': attribute type 11 has an invalid length. [ 315.019612][T15710] : renamed from bridge_slave_0 (while UP) [ 315.260708][T15717] wlan1 speed is unknown, defaulting to 1000 [ 315.462456][T15734] bond11: entered promiscuous mode [ 315.492333][T15734] bond11: entered allmulticast mode [ 315.498524][T15734] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.832070][T15734] bond11 (unregistering): Released all slaves [ 315.924671][T15743] netlink: 'syz.0.2853': attribute type 11 has an invalid length. [ 317.690124][T15742] veth0: entered promiscuous mode [ 317.700548][T15742] veth0: left promiscuous mode [ 317.705765][T15745] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 317.714184][T15745] __nla_validate_parse: 9 callbacks suppressed [ 317.714203][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'. [ 317.920181][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 317.973469][T15758] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 317.990993][T15764] FAULT_INJECTION: forcing a failure. [ 317.990993][T15764] name failslab, interval 1, probability 0, space 0, times 0 [ 318.013599][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 318.043742][T15758] bond11: entered promiscuous mode [ 318.053836][T15758] bond11: entered allmulticast mode [ 318.059689][T15758] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.068999][T15764] CPU: 1 UID: 0 PID: 15764 Comm: syz.2.2860 Not tainted syzkaller #0 PREEMPT(full) [ 318.069030][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.069044][T15764] Call Trace: [ 318.069052][T15764] [ 318.069061][T15764] dump_stack_lvl+0x189/0x250 [ 318.069098][T15764] ? __pfx____ratelimit+0x10/0x10 [ 318.069129][T15764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.069175][T15764] ? __pfx__printk+0x10/0x10 [ 318.069210][T15764] ? __pfx___might_resched+0x10/0x10 [ 318.069229][T15764] ? fs_reclaim_acquire+0x7d/0x100 [ 318.069267][T15764] should_fail_ex+0x414/0x560 [ 318.069301][T15764] should_failslab+0xa8/0x100 [ 318.069333][T15764] __kmalloc_cache_noprof+0x70/0x3d0 [ 318.069361][T15764] ? rtnl_newlink+0xed/0x1c70 [ 318.069390][T15764] ? kasan_save_free_info+0x46/0x50 [ 318.069416][T15764] rtnl_newlink+0xed/0x1c70 [ 318.069444][T15764] ? netlink_sendmsg+0x805/0xb30 [ 318.069461][T15764] ? __sock_sendmsg+0x21c/0x270 [ 318.069485][T15764] ? ____sys_sendmsg+0x505/0x830 [ 318.069505][T15764] ? ___sys_sendmsg+0x21f/0x2a0 [ 318.069524][T15764] ? __x64_sys_sendmsg+0x19b/0x260 [ 318.069545][T15764] ? do_syscall_64+0xfa/0x3b0 [ 318.069561][T15764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.069591][T15764] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.069648][T15764] ? kasan_quarantine_put+0xdd/0x220 [ 318.069673][T15764] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.069709][T15764] ? nlmon_xmit+0xb0/0x100 [ 318.069728][T15764] ? kmem_cache_free+0x18f/0x400 [ 318.069764][T15764] ? __local_bh_enable_ip+0x12d/0x1c0 [ 318.069785][T15764] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.069815][T15764] ? __local_bh_enable_ip+0x12d/0x1c0 [ 318.069845][T15764] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.069870][T15764] ? __dev_queue_xmit+0x27b/0x3b50 [ 318.069896][T15764] ? __dev_queue_xmit+0x27b/0x3b50 [ 318.069917][T15764] ? __dev_queue_xmit+0x27b/0x3b50 [ 318.069943][T15764] ? __dev_queue_xmit+0x1d79/0x3b50 [ 318.069980][T15764] ? __lock_acquire+0xab9/0xd20 [ 318.070043][T15764] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.070074][T15764] rtnetlink_rcv_msg+0x7cf/0xb70 [ 318.070110][T15764] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 318.070139][T15764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.070179][T15764] ? ref_tracker_free+0x63a/0x7d0 [ 318.070209][T15764] ? __asan_memcpy+0x40/0x70 [ 318.070231][T15764] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.070273][T15764] netlink_rcv_skb+0x205/0x470 [ 318.070305][T15764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.070338][T15764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.070383][T15764] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.070423][T15764] netlink_unicast+0x82c/0x9e0 [ 318.070462][T15764] ? __pfx_netlink_unicast+0x10/0x10 [ 318.070492][T15764] ? netlink_sendmsg+0x642/0xb30 [ 318.070509][T15764] ? skb_put+0x11b/0x210 [ 318.070533][T15764] netlink_sendmsg+0x805/0xb30 [ 318.070564][T15764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.070587][T15764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 318.070608][T15764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.070631][T15764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.070651][T15764] __sock_sendmsg+0x21c/0x270 [ 318.070683][T15764] ____sys_sendmsg+0x505/0x830 [ 318.070711][T15764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.070745][T15764] ? import_iovec+0x74/0xa0 [ 318.070773][T15764] ___sys_sendmsg+0x21f/0x2a0 [ 318.070798][T15764] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.070864][T15764] ? __fget_files+0x2a/0x420 [ 318.070881][T15764] ? __fget_files+0x3a0/0x420 [ 318.071008][T15764] __x64_sys_sendmsg+0x19b/0x260 [ 318.071047][T15764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.071084][T15764] ? __pfx_ksys_write+0x10/0x10 [ 318.071125][T15764] ? rcu_is_watching+0x15/0xb0 [ 318.071152][T15764] ? do_syscall_64+0xbe/0x3b0 [ 318.071176][T15764] do_syscall_64+0xfa/0x3b0 [ 318.071194][T15764] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.071224][T15764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.071244][T15764] ? clear_bhb_loop+0x60/0xb0 [ 318.071268][T15764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.071288][T15764] RIP: 0033:0x7ff5baf8ebe9 [ 318.071307][T15764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.071325][T15764] RSP: 002b:00007ff5b91d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.071347][T15764] RAX: ffffffffffffffda RBX: 00007ff5bb1c6090 RCX: 00007ff5baf8ebe9 [ 318.071362][T15764] RDX: 0000000020004846 RSI: 0000200000000000 RDI: 0000000000000004 [ 318.071376][T15764] RBP: 00007ff5b91d5090 R08: 0000000000000000 R09: 0000000000000000 [ 318.071388][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.071400][T15764] R13: 00007ff5bb1c6128 R14: 00007ff5bb1c6090 R15: 00007ffce451b458 [ 318.071435][T15764] [ 318.074312][T15761] netlink: 'syz.0.2858': attribute type 26 has an invalid length. [ 318.077498][T15768] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2861'. [ 318.810624][T15789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2867'. [ 318.898541][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 319.056151][T15799] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 319.071770][T15803] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 319.087126][T15803] netlink: 'syz.2.2870': attribute type 2 has an invalid length. [ 319.103536][T15803] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 319.115295][T15803] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.2870'. [ 319.160191][T15799] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.265932][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 319.283601][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 319.530146][T15834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2877'. [ 319.570613][T15834] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 319.794000][T15845] team0: Device vti0 is of different type [ 319.919733][T15860] netlink: 'syz.1.2885': attribute type 126 has an invalid length. [ 319.941638][T15856] FAULT_INJECTION: forcing a failure. [ 319.941638][T15856] name failslab, interval 1, probability 0, space 0, times 0 [ 319.993681][T15856] CPU: 1 UID: 0 PID: 15856 Comm: syz.2.2883 Not tainted syzkaller #0 PREEMPT(full) [ 319.993725][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.993738][T15856] Call Trace: [ 319.993746][T15856] [ 319.993755][T15856] dump_stack_lvl+0x189/0x250 [ 319.993785][T15856] ? __pfx____ratelimit+0x10/0x10 [ 319.993815][T15856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.993839][T15856] ? __pfx__printk+0x10/0x10 [ 319.993872][T15856] ? __pfx___might_resched+0x10/0x10 [ 319.993891][T15856] ? fs_reclaim_acquire+0x7d/0x100 [ 319.993928][T15856] should_fail_ex+0x414/0x560 [ 319.993962][T15856] should_failslab+0xa8/0x100 [ 319.993994][T15856] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 319.994022][T15856] ? __d_alloc+0x36/0x7a0 [ 319.994047][T15856] __d_alloc+0x36/0x7a0 [ 319.994074][T15856] d_alloc_parallel+0xe5/0x15e0 [ 319.994113][T15856] ? __lock_acquire+0xab9/0xd20 [ 319.994149][T15856] ? __pfx_d_alloc_parallel+0x10/0x10 [ 319.994179][T15856] ? __raw_spin_lock_init+0x45/0x100 [ 319.994206][T15856] ? __init_waitqueue_head+0xa9/0x150 [ 319.994237][T15856] __lookup_slow+0x116/0x3d0 [ 319.994263][T15856] ? __pfx___lookup_slow+0x10/0x10 [ 319.994297][T15856] ? d_lookup+0x8a/0xa0 [ 319.994319][T15856] ? lookup_noperm+0x112/0x220 [ 319.994347][T15856] simple_start_creating+0xfd/0x1e0 [ 319.994366][T15856] ? __pfx_simple_start_creating+0x10/0x10 [ 319.994406][T15856] start_creating+0x10f/0x180 [ 319.994438][T15856] __debugfs_create_file+0x79/0x4f0 [ 319.994475][T15856] debugfs_create_file_full+0x3f/0x60 [ 319.994510][T15856] ref_tracker_dir_debugfs+0x14e/0x270 [ 319.994542][T15856] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 319.994606][T15856] ? rcu_is_watching+0x15/0xb0 [ 319.994627][T15856] ? alloc_netdev_mqs+0xa3/0x11b0 [ 319.994659][T15856] ? __raw_spin_lock_init+0x45/0x100 [ 319.994687][T15856] alloc_netdev_mqs+0x26f/0x11b0 [ 319.994723][T15856] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 319.994759][T15856] rtnl_create_link+0x31f/0xd10 [ 319.994795][T15856] rtnl_newlink_create+0x25c/0xb00 [ 319.994824][T15856] ? __mutex_lock+0x5bb/0x1350 [ 319.994851][T15856] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 319.994878][T15856] ? __pfx___mutex_lock+0x10/0x10 [ 319.994910][T15856] ? ns_capable+0x8a/0xf0 [ 319.994936][T15856] rtnl_newlink+0x16d6/0x1c70 [ 319.994971][T15856] ? netlink_sendmsg+0x805/0xb30 [ 319.995006][T15856] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.995066][T15856] ? kasan_quarantine_put+0xdd/0x220 [ 319.995092][T15856] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.995131][T15856] ? nlmon_xmit+0xb0/0x100 [ 319.995150][T15856] ? kmem_cache_free+0x18f/0x400 [ 319.995187][T15856] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.995208][T15856] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.995239][T15856] ? __local_bh_enable_ip+0x12d/0x1c0 [ 319.995259][T15856] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.995285][T15856] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.995311][T15856] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.995333][T15856] ? __dev_queue_xmit+0x27b/0x3b50 [ 319.995360][T15856] ? __dev_queue_xmit+0x1d79/0x3b50 [ 319.995392][T15856] ? __lock_acquire+0xab9/0xd20 [ 319.995453][T15856] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.995485][T15856] rtnetlink_rcv_msg+0x7cf/0xb70 [ 319.995522][T15856] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 319.995553][T15856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.995581][T15856] ? ref_tracker_free+0x63a/0x7d0 [ 319.995611][T15856] ? __asan_memcpy+0x40/0x70 [ 319.995634][T15856] ? __pfx_ref_tracker_free+0x10/0x10 [ 319.995677][T15856] netlink_rcv_skb+0x205/0x470 [ 319.995717][T15856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.995752][T15856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.995800][T15856] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.995842][T15856] netlink_unicast+0x82c/0x9e0 [ 319.995883][T15856] ? __pfx_netlink_unicast+0x10/0x10 [ 319.995915][T15856] ? netlink_sendmsg+0x642/0xb30 [ 319.995932][T15856] ? skb_put+0x11b/0x210 [ 319.995958][T15856] netlink_sendmsg+0x805/0xb30 [ 319.995990][T15856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.996013][T15856] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.996035][T15856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.996057][T15856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.996078][T15856] __sock_sendmsg+0x21c/0x270 [ 319.996111][T15856] ____sys_sendmsg+0x505/0x830 [ 319.996141][T15856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.996177][T15856] ? import_iovec+0x74/0xa0 [ 319.996207][T15856] ___sys_sendmsg+0x21f/0x2a0 [ 319.996233][T15856] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.996298][T15856] ? __fget_files+0x2a/0x420 [ 319.996316][T15856] ? __fget_files+0x3a0/0x420 [ 319.996346][T15856] __x64_sys_sendmsg+0x19b/0x260 [ 319.996372][T15856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.996408][T15856] ? __pfx_ksys_write+0x10/0x10 [ 319.996433][T15856] ? rcu_is_watching+0x15/0xb0 [ 319.996460][T15856] ? do_syscall_64+0xbe/0x3b0 [ 319.996499][T15856] do_syscall_64+0xfa/0x3b0 [ 319.996517][T15856] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.996547][T15856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.996567][T15856] ? clear_bhb_loop+0x60/0xb0 [ 319.996593][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.996613][T15856] RIP: 0033:0x7ff5baf8ebe9 [ 319.996633][T15856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.996651][T15856] RSP: 002b:00007ff5b91d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.996672][T15856] RAX: ffffffffffffffda RBX: 00007ff5bb1c6090 RCX: 00007ff5baf8ebe9 [ 319.996687][T15856] RDX: 0000000020004846 RSI: 0000200000000000 RDI: 0000000000000004 [ 319.996700][T15856] RBP: 00007ff5b91d5090 R08: 0000000000000000 R09: 0000000000000000 [ 319.996719][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.996732][T15856] R13: 00007ff5bb1c6128 R14: 00007ff5bb1c6090 R15: 00007ffce451b458 [ 319.996769][T15856] [ 320.690619][T15866] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 320.757697][T15866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.910673][T15878] netlink: 'syz.2.2889': attribute type 16 has an invalid length. [ 320.949933][T15878] netlink: 'syz.2.2889': attribute type 17 has an invalid length. [ 321.022639][T15878] bridge0: port 1(dummy0) entered blocking state [ 321.029510][T15878] bridge0: port 1(dummy0) entered forwarding state [ 321.043037][T15878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.435665][T10226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.451750][T10226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.460101][ T6005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.582954][T15921] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 321.647595][T15921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.808030][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.883436][T15937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.897649][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.943275][T15942] netlink: 'syz.1.2911': attribute type 21 has an invalid length. [ 322.072533][T15946] syzkaller1: entered promiscuous mode [ 322.079392][T15946] syzkaller1: entered allmulticast mode [ 322.515754][T15977] 8021q: VLANs not supported on ip6_vti0 [ 322.581137][T15979] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 322.623549][T15979] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 322.632374][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 322.655194][T15979] gretap3: entered promiscuous mode [ 322.661092][T15979] gretap3: entered allmulticast mode [ 322.768101][T15989] __nla_validate_parse: 12 callbacks suppressed [ 322.768124][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 323.014620][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2929'. [ 323.212831][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 323.369893][T16002] macvlan3: entered promiscuous mode [ 323.375264][T16002] macvlan3: entered allmulticast mode [ 323.413342][T16002] bond11: entered promiscuous mode [ 323.444883][T16002] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 323.511710][T16002] bond11: left promiscuous mode [ 323.611752][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2934'. [ 323.665868][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.684727][T10236] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.699040][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.712130][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.721018][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.734913][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.851799][T10236] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.904072][T16026] wlan1 speed is unknown, defaulting to 1000 [ 323.942703][T10236] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 323.972424][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 324.034299][T10236] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 324.121300][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 324.281277][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2942'. [ 324.595916][T16066] openvswitch: netlink: Key type 192 is out of range max 32 [ 324.614111][T16066] openvswitch: netlink: Key type 192 is out of range max 32 [ 325.186612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.406771][T10236] bond0 (unregistering): Released all slaves [ 325.552517][T10236] bond1 (unregistering): Released all slaves [ 325.685453][T10236] bond2 (unregistering): Released all slaves [ 325.814071][T10236] bond3 (unregistering): Released all slaves [ 325.837227][ T5882] Bluetooth: hci3: command tx timeout [ 325.955524][T10236] bond4 (unregistering): Released all slaves [ 326.081243][T10236] bond5 (unregistering): Released all slaves [ 326.213654][T10236] bond6 (unregistering): Released all slaves [ 326.230044][T10236] bond7 (unregistering): Released all slaves [ 326.358276][T10236] bond8 (unregistering): Released all slaves [ 326.489347][T10236] bond9 (unregistering): Released all slaves [ 326.620762][T10236] bond10 (unregistering): Released all slaves [ 326.745477][T10236] bond11 (unregistering): Released all slaves [ 326.945417][T16098] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.2953'. [ 326.970281][T10236] : left promiscuous mode [ 327.034314][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 327.147842][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2953'. [ 327.173211][T10236] tipc: Left network mode [ 327.437874][T16113] syzkaller0: entered promiscuous mode [ 327.443514][T16113] syzkaller0: entered allmulticast mode [ 327.512883][T16124] tipc: Enabled bearer , priority 0 [ 327.921056][ T5882] Bluetooth: hci3: command tx timeout [ 328.629763][T11814] tipc: Node number set to 2975980480 [ 329.518521][T16116] syzkaller0: entered promiscuous mode [ 329.524047][T16116] syzkaller0: entered allmulticast mode [ 329.569383][T16114] tipc: Resetting bearer [ 329.611652][T16138] __nla_validate_parse: 3 callbacks suppressed [ 329.611677][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 329.662713][T16114] tipc: Disabling bearer [ 329.799722][T16026] chnl_net:caif_netlink_parms(): no params data found [ 329.918761][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 329.987226][ T5882] Bluetooth: hci3: command tx timeout [ 330.247939][T16168] netlink: 'syz.3.2974': attribute type 8 has an invalid length. [ 330.318323][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2973'. [ 330.371000][T16167] gre5: entered promiscuous mode [ 330.404679][T16167] gre5: entered allmulticast mode [ 330.533898][T16168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'. [ 330.656089][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.685456][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.704528][T16026] bridge_slave_0: entered allmulticast mode [ 330.719505][T16026] bridge_slave_0: entered promiscuous mode [ 330.741122][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.749530][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.757492][T16026] bridge_slave_1: entered allmulticast mode [ 330.766794][T16026] bridge_slave_1: entered promiscuous mode [ 330.936578][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 331.000352][T16203] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 331.125376][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.200718][T10236] hsr_slave_1: left promiscuous mode [ 331.261195][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 331.318976][T16223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2985'. [ 332.026193][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.067296][ T5882] Bluetooth: hci3: command tx timeout [ 332.094684][T16026] team0: Port device team_slave_0 added [ 332.104859][T16026] team0: Port device team_slave_1 added [ 332.204035][T16232] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 332.220157][T16232] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 332.236719][T16232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2988'. [ 332.245844][T16232] NCSI netlink: No device for ifindex 131080 [ 332.342557][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.362838][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.416179][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.470250][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.496719][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.618440][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.813945][T16261] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2993'. [ 332.866716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.884583][T16026] hsr_slave_0: entered promiscuous mode [ 332.895539][T16260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.898568][T16026] hsr_slave_1: entered promiscuous mode [ 332.915965][T16026] debugfs: 'hsr0' already exists in 'hsr' [ 333.032576][T16026] Cannot create hsr debugfs directory [ 333.068492][T10236] IPVS: stop unused estimator thread 0... [ 333.089425][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 333.708341][T16301] tipc: Enabled bearer , priority 0 [ 333.775376][T16296] syzkaller0: entered promiscuous mode [ 333.786938][T16296] syzkaller0: entered allmulticast mode [ 334.104495][T16311] netlink: 'syz.1.3006': attribute type 83 has an invalid length. [ 334.303815][T16306] tipc: Resetting bearer [ 334.313755][T16295] tipc: Resetting bearer [ 334.374544][T16295] tipc: Disabling bearer [ 334.535388][T16320] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 334.576772][T16320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.632993][T16326] sctp: [Deprecated]: syz.2.3010 (pid 16326) Use of int in maxseg socket option. [ 334.632993][T16326] Use struct sctp_assoc_value instead [ 334.691299][T16323] netlink: 'syz.1.3008': attribute type 29 has an invalid length. [ 334.760421][T16327] netlink: 'syz.1.3008': attribute type 29 has an invalid length. [ 334.854817][T16330] tipc: Enabled bearer , priority 0 [ 334.884814][T16330] syzkaller0: entered promiscuous mode [ 334.898283][T16330] syzkaller0: entered allmulticast mode [ 334.935675][T16330] __nla_validate_parse: 4 callbacks suppressed [ 334.935697][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3012'. [ 335.065807][T16345] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 335.096964][T16330] tipc: Resetting bearer [ 335.132449][T16329] tipc: Resetting bearer [ 335.164738][T16329] tipc: Disabling bearer [ 335.185714][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 335.196951][T16350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3017'. [ 335.220456][T16026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.243572][T16026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.259985][T16350] netlink: 'syz.0.3017': attribute type 1 has an invalid length. [ 335.288324][T16026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.314454][T16026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.345849][T16353] syzkaller1: entered promiscuous mode [ 335.353975][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3019'. [ 335.363201][T16353] syzkaller1: entered allmulticast mode [ 335.639396][T16026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.723828][T16373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.735611][T16373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.842233][T16386] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 335.853165][T16386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3026'. [ 335.956152][T16373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.976730][T16373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.042670][T16026] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.110463][T16373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.126097][T16373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.178838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.186082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.212531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.219892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.293895][T16373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.309388][T16373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.321452][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 336.494586][T16411] erspan0: entered allmulticast mode [ 336.527333][T16414] IPVS: length: 157 != 24 [ 336.564586][T16414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3036'. [ 336.580257][T10236] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.593628][T16414] netlink: zone id is out of range [ 336.600619][T16414] netlink: zone id is out of range [ 336.606085][T16414] netlink: zone id is out of range [ 336.606515][T10236] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.611818][T16414] netlink: zone id is out of range [ 336.642744][T16414] netlink: zone id is out of range [ 336.659198][T16414] netlink: zone id is out of range [ 336.679226][T16414] netlink: zone id is out of range [ 336.684513][T16414] netlink: zone id is out of range [ 336.699638][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.716377][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.732853][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.746172][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.813017][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.837654][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.905530][T16026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.129183][T16441] netlink: 'syz.2.3043': attribute type 1 has an invalid length. [ 337.193595][T16441] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.264178][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 337.510297][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 337.511669][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 337.848090][T16026] veth0_vlan: entered promiscuous mode [ 337.904477][T16026] veth1_vlan: entered promiscuous mode [ 338.084025][T16026] veth0_macvtap: entered promiscuous mode [ 338.134495][T16026] veth1_macvtap: entered promiscuous mode [ 338.222219][T16026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.254878][T16026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.294769][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.329454][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.375915][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.385618][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.585643][T16520] netlink: 'syz.1.3062': attribute type 10 has an invalid length. [ 338.654970][T10234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.673478][T10234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.753151][T10236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.777269][T10236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.864451][T16532] netlink: 'syz.1.3070': attribute type 1 has an invalid length. [ 338.921746][T16532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.553327][T16561] netlink: 'syz.3.3078': attribute type 39 has an invalid length. [ 339.638459][T16560] netlink: 'syz.2.3079': attribute type 10 has an invalid length. [ 339.693456][T16560] veth1_macvtap: left promiscuous mode [ 339.715625][T16567] netlink: 'syz.1.3081': attribute type 1 has an invalid length. [ 339.791473][T16572] netlink: 'syz.4.3080': attribute type 10 has an invalid length. [ 339.927891][T16571] bond11: (slave bridge11): making interface the new active one [ 339.967520][T16571] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 339.968013][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.988710][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.998563][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.019908][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.034838][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.051248][T16572] team0: Port device geneve0 added [ 340.119737][ T5873] syz_tun (unregistering): left allmulticast mode [ 340.253469][T10236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.265518][T10236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.314799][T16575] wlan1 speed is unknown, defaulting to 1000 [ 340.415620][T10236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.447863][T10236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.619017][T16601] __nla_validate_parse: 11 callbacks suppressed [ 340.619038][T16601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3087'. [ 340.620673][T10236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.672558][T10236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.683932][T16602] net_ratelimit: 724 callbacks suppressed [ 340.683955][T16602] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 340.855525][T10236] netdevsim netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.871788][T10236] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.241651][T10236] bridge_slave_1: left allmulticast mode [ 341.255788][T10236] bridge_slave_1: left promiscuous mode [ 341.265360][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.290635][T10236] bridge_slave_0: left allmulticast mode [ 341.301908][T10236] bridge_slave_0: left promiscuous mode [ 341.308245][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.673116][T10236] bond1 (unregistering): (slave gretap1): Releasing active interface [ 342.152973][ T5882] Bluetooth: hci0: command tx timeout [ 342.188396][T10236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.200624][T10236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.212273][T10236] bond0 (unregistering): (slave team0): Releasing backup interface [ 342.225219][T10236] bond0 (unregistering): Released all slaves [ 342.242397][T10236] bond1 (unregistering): Released all slaves [ 342.260407][T10236] bond2 (unregistering): Released all slaves [ 342.275984][T10236] bond3 (unregistering): Released all slaves [ 342.430875][T10236] team0: Port device bond4 removed [ 342.438738][T10236] bond4 (unregistering): Released all slaves [ 342.456462][T10236] bond5 (unregistering): Released all slaves [ 342.633763][T10236] bond6 (unregistering): Released all slaves [ 342.766428][T10236] team0: Port device bond7 removed [ 342.772981][T10236] bond7 (unregistering): Released all slaves [ 342.898136][T10236] bond8 (unregistering): Released all slaves [ 343.022647][T10236] bond9 (unregistering): Released all slaves [ 343.236879][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3100'. [ 343.390367][T10236] tipc: Left network mode [ 344.240165][ T5882] Bluetooth: hci0: command tx timeout [ 345.541150][T16575] chnl_net:caif_netlink_parms(): no params data found [ 345.785310][T10232] smc: removing ib device syz0 [ 345.873411][ T10] wlan1 speed is unknown, defaulting to 1000 [ 345.881103][ T10] syz0: Port: 1 Link DOWN [ 345.890079][T16676] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 345.900913][ T44] wlan1 speed is unknown, defaulting to 1000 [ 346.077680][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.103242][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.126178][T16575] bridge_slave_0: entered allmulticast mode [ 346.150120][T16575] bridge_slave_0: entered promiscuous mode [ 346.183482][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.217497][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.240097][T16575] bridge_slave_1: entered allmulticast mode [ 346.262822][T16575] bridge_slave_1: entered promiscuous mode [ 346.307208][ T5882] Bluetooth: hci0: command tx timeout [ 346.509124][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.557302][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.735514][T16575] team0: Port device team_slave_0 added [ 346.784452][T16575] team0: Port device team_slave_1 added [ 347.143499][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.173654][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.244742][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.299398][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.325899][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.385253][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.745060][T16750] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3125'. [ 347.862384][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 347.875174][T16575] hsr_slave_0: entered promiscuous mode [ 347.889176][T16575] hsr_slave_1: entered promiscuous mode [ 347.903365][T16575] debugfs: 'hsr0' already exists in 'hsr' [ 347.912310][T16575] Cannot create hsr debugfs directory [ 348.249675][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 348.387969][ T5875] Bluetooth: hci0: command tx timeout [ 348.464459][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 348.480585][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 348.513994][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 348.824454][T16778] openvswitch: netlink: Message has 8 unknown bytes. [ 348.867412][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.954000][T10236] hsr_slave_0: left promiscuous mode [ 348.963204][T10236] hsr_slave_1: left promiscuous mode [ 348.971870][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.985094][T10236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.995223][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3137'. [ 349.015521][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.024095][T10236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.026607][T16786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3138'. [ 349.053604][T10236] veth0_macvtap: left allmulticast mode [ 349.058339][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 349.059717][T10236] veth0_macvtap: left promiscuous mode [ 349.075372][T10236] veth1_vlan: left promiscuous mode [ 349.081129][T10236] veth0_vlan: left promiscuous mode [ 349.752730][T10236] team0 (unregistering): Port device team_slave_1 removed [ 349.808918][T10236] team0 (unregistering): Port device team_slave_0 removed [ 350.523224][ T5875] block nbd4: Receive control failed (result -107) [ 350.567571][T16809] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3144'. [ 350.580932][T16809] netlink: zone id is out of range [ 350.586718][T16803] nbd4: detected capacity change from 0 to 63 [ 350.594019][T16809] netlink: zone id is out of range [ 350.599458][T16809] netlink: zone id is out of range [ 350.604794][T16809] netlink: get zone limit has 8 unknown bytes [ 350.749829][T10236] IPVS: stop unused estimator thread 0... [ 351.083034][T16575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.112133][T16575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.135828][T16821] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 351.145492][T16575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.172363][T16821] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 351.186426][T16821] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 351.194193][T16575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.214468][T16821] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.236839][T16837] netlink: 'syz.4.3153': attribute type 10 has an invalid length. [ 351.280329][T16837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.331145][T16837] dvmrp8: entered allmulticast mode [ 351.362692][T16821] tun0: tun_chr_ioctl cmd 1074025675 [ 351.370864][T16821] tun0: persist disabled [ 351.534720][T16575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.571283][T16575] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.609391][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.616780][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.634862][T16862] syz.1.3159 uses old SIOCAX25GETINFO [ 351.648334][T16861] 0{X: renamed from gretap0 (while UP) [ 351.658320][T16861] 0{X: entered allmulticast mode [ 351.671020][T16861] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 351.699114][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.706397][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.855927][T16575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.114462][T16880] sctp: [Deprecated]: syz.4.3163 (pid 16880) Use of int in max_burst socket option deprecated. [ 352.114462][T16880] Use struct sctp_assoc_value instead [ 352.301449][ T30] audit: type=1107 audit(1757281087.856:8): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 352.499165][T16894] dump_stack_lvl+0x189/0x250 [ 352.499202][T16894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.499229][T16894] ? __pfx__printk+0x10/0x10 [ 352.499265][T16894] ? kernfs_path_from_node+0x2f/0x290 [ 352.499288][T16894] ? kernfs_path_from_node+0x250/0x290 [ 352.499310][T16894] ? kernfs_path_from_node+0x2f/0x290 [ 352.499338][T16894] sysfs_warn_dup+0x8e/0xa0 [ 352.499361][T16894] sysfs_do_create_link_sd+0xc0/0x110 [ 352.499388][T16894] device_add_class_symlinks+0x1cf/0x240 [ 352.499417][T16894] device_add+0x475/0xb50 [ 352.499445][T16894] wiphy_register+0x1ba6/0x28d0 [ 352.499499][T16894] ? __pfx_wiphy_register+0x10/0x10 [ 352.499530][T16894] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 352.499572][T16894] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 352.499603][T16894] ieee80211_register_hw+0x3484/0x4100 [ 352.499648][T16894] ? ieee80211_register_hw+0x1411/0x4100 [ 352.499687][T16894] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 352.499722][T16894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.499762][T16894] ? __hrtimer_setup+0x187/0x210 [ 352.499782][T16894] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 352.499818][T16894] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 352.499885][T16894] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 352.499912][T16894] ? trace_kmalloc+0x1f/0xd0 [ 352.499936][T16894] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 352.499965][T16894] ? kstrndup+0xbf/0x160 [ 352.499999][T16894] hwsim_new_radio_nl+0xea4/0x1b10 [ 352.500032][T16894] ? __pfx___nla_validate_parse+0x10/0x10 [ 352.500082][T16894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 352.500131][T16894] ? __nla_parse+0x40/0x60 [ 352.500168][T16894] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 352.500206][T16894] genl_family_rcv_msg_doit+0x212/0x300 [ 352.500241][T16894] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.500285][T16894] ? bpf_lsm_capable+0x9/0x20 [ 352.500312][T16894] ? security_capable+0x7e/0x2e0 [ 352.500351][T16894] genl_rcv_msg+0x60e/0x790 [ 352.500386][T16894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.500410][T16894] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 352.500456][T16894] netlink_rcv_skb+0x205/0x470 [ 352.500486][T16894] ? __lock_acquire+0xab9/0xd20 [ 352.500518][T16894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.500557][T16894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.500614][T16894] ? down_read+0x1ad/0x2e0 [ 352.500640][T16894] genl_rcv+0x28/0x40 [ 352.500662][T16894] netlink_unicast+0x82c/0x9e0 [ 352.500705][T16894] ? __pfx_netlink_unicast+0x10/0x10 [ 352.500737][T16894] ? netlink_sendmsg+0x642/0xb30 [ 352.500754][T16894] ? skb_put+0x11b/0x210 [ 352.500781][T16894] netlink_sendmsg+0x805/0xb30 [ 352.500814][T16894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.500839][T16894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 352.500862][T16894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.500883][T16894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.500905][T16894] __sock_sendmsg+0x21c/0x270 [ 352.500938][T16894] ____sys_sendmsg+0x505/0x830 [ 352.500969][T16894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.501005][T16894] ? import_iovec+0x74/0xa0 [ 352.501035][T16894] ___sys_sendmsg+0x21f/0x2a0 [ 352.501062][T16894] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.501133][T16894] ? __fget_files+0x2a/0x420 [ 352.501151][T16894] ? __fget_files+0x3a0/0x420 [ 352.501183][T16894] __x64_sys_sendmsg+0x19b/0x260 [ 352.501210][T16894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.501248][T16894] ? rcu_is_watching+0x15/0xb0 [ 352.501277][T16894] ? do_syscall_64+0xbe/0x3b0 [ 352.501302][T16894] do_syscall_64+0xfa/0x3b0 [ 352.501321][T16894] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.501352][T16894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.501373][T16894] ? clear_bhb_loop+0x60/0xb0 [ 352.501399][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.501419][T16894] RIP: 0033:0x7fca8fd8ebe9 [ 352.501439][T16894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.501457][T16894] RSP: 002b:00007fca90b3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.501480][T16894] RAX: ffffffffffffffda RBX: 00007fca8ffc5fa0 RCX: 00007fca8fd8ebe9 [ 352.501495][T16894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 352.501508][T16894] RBP: 00007fca8fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.501521][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.501534][T16894] R13: 00007fca8ffc6038 R14: 00007fca8ffc5fa0 R15: 00007fff73bffe28 [ 352.501578][T16894] [ 353.053460][T16575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.210470][T16913] netlink: 'syz.3.3172': attribute type 1 has an invalid length. [ 353.218774][T16913] __nla_validate_parse: 3 callbacks suppressed [ 353.218794][T16913] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3172'. [ 353.234966][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 353.250264][T16913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3172'. [ 353.255885][T16575] veth0_vlan: entered promiscuous mode [ 353.290509][T16575] veth1_vlan: entered promiscuous mode [ 353.354093][T16575] veth0_macvtap: entered promiscuous mode [ 353.374947][T16575] veth1_macvtap: entered promiscuous mode [ 353.445053][T16918] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 353.469243][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3176'. [ 353.498078][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 353.524565][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 353.549871][T16575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.598409][T16575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.638100][T10236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.657690][T16937] netlink: 'syz.4.3178': attribute type 10 has an invalid length. [ 353.665700][T10236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.684433][T16937] bridge0: port 3(team0) entered blocking state [ 353.697096][T16937] bridge0: port 3(team0) entered disabled state [ 353.719394][T16937] team0: entered allmulticast mode [ 353.724836][T16937] team_slave_0: entered allmulticast mode [ 353.785643][T16937] team_slave_1: entered allmulticast mode [ 353.792881][T16945] nbd: must specify a size in bytes for the device [ 353.821829][T16937] geneve0: entered allmulticast mode [ 353.851585][T16937] team0: entered promiscuous mode [ 353.857811][T16937] team_slave_0: entered promiscuous mode [ 353.866694][T16937] team_slave_1: entered promiscuous mode [ 353.880408][T16937] geneve0: entered promiscuous mode [ 353.897524][T16937] bridge0: port 3(team0) entered blocking state [ 353.904000][T16937] bridge0: port 3(team0) entered forwarding state [ 353.919701][T10236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.972990][T10236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.986155][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 354.025196][T16955] netlink: 'syz.2.3185': attribute type 33 has an invalid length. [ 354.041603][T16955] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3185'. [ 354.223170][T10234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.250812][T10234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.312297][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 354.343963][T16972] bond0: invalid ARP target 0.0.0.0 specified for addition [ 354.368496][T16972] bond0: option arp_ip_target: invalid value (0) [ 354.419487][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.448159][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.635283][T16996] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3196'. [ 354.665987][T16996] netlink: 'syz.4.3196': attribute type 6 has an invalid length. [ 354.713872][T17000] netlink: 'syz.0.3072': attribute type 1 has an invalid length. [ 354.732491][T16996] netlink: 'syz.4.3196': attribute type 5 has an invalid length. [ 354.771670][T17002] syzkaller1: entered promiscuous mode [ 354.811669][T17002] syzkaller1: entered allmulticast mode [ 355.020840][T17011] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 355.433101][T17026] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.474755][T17026] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.585662][T17027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.654707][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.665021][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.675012][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.719861][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.720478][T17026] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.756824][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.818639][T17026] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.057740][T17026] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.081972][T17026] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.146650][ T5883] bond0: (slave syz_tun): Releasing backup interface [ 356.201653][T17026] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.213180][T17026] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.262297][T17055] tipc: Enabled bearer , priority 0 [ 356.407427][T17056] syzkaller0: entered promiscuous mode [ 356.413048][T17056] syzkaller0: entered allmulticast mode [ 356.419439][T17056] tipc: Resetting bearer [ 356.434960][T17054] tipc: Resetting bearer [ 356.555547][T17074] netlink: 'syz.0.3215': attribute type 8 has an invalid length. [ 356.591719][T17074] delete_channel: no stack [ 357.906958][ T5875] Bluetooth: hci5: command tx timeout [ 358.423356][T17054] tipc: Disabling bearer [ 358.441830][T10230] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.452112][T10230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.462175][T10230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.572304][T17077] delete_channel: no stack [ 358.582076][T10230] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.584989][T17077] delete_channel: no stack [ 358.612425][T10230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.623700][T17077] delete_channel: no stack [ 358.623891][T17077] delete_channel: no stack [ 358.624068][T17077] delete_channel: no stack [ 358.632089][T10230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.646777][T17077] delete_channel: no stack [ 358.661636][T17077] delete_channel: no stack [ 358.667014][T17077] delete_channel: no stack [ 358.671916][T17077] delete_channel: no stack [ 358.681247][T17077] delete_channel: no stack [ 358.686610][T17077] delete_channel: no stack [ 358.691389][T17077] delete_channel: no stack [ 358.696239][T17077] delete_channel: no stack [ 358.709350][T10230] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.719527][T17077] delete_channel: no stack [ 358.724643][T17077] delete_channel: no stack [ 358.735645][T17077] delete_channel: no stack [ 358.740644][T17077] delete_channel: no stack [ 358.743681][T10230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 358.745547][T17077] delete_channel: no stack [ 358.766813][T17077] delete_channel: no stack [ 358.771674][T17077] delete_channel: no stack [ 358.777932][T10230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.782046][T17077] delete_channel: no stack [ 358.792758][T17077] delete_channel: no stack [ 358.802908][T17077] delete_channel: no stack [ 358.808309][T17077] delete_channel: no stack [ 358.813182][T17077] delete_channel: no stack [ 358.831558][T17077] delete_channel: no stack [ 358.840532][T17077] delete_channel: no stack [ 358.845356][T17077] delete_channel: no stack [ 358.850523][T17077] delete_channel: no stack [ 358.855389][T17077] delete_channel: no stack [ 358.859572][T17094] Bluetooth: MGMT ver 1.23 [ 358.860385][T17077] delete_channel: no stack [ 358.869947][T17077] delete_channel: no stack [ 358.874864][T17077] delete_channel: no stack [ 358.879647][T17077] delete_channel: no stack [ 358.884387][T17077] delete_channel: no stack [ 358.889376][T17077] delete_channel: no stack [ 358.894390][T17077] delete_channel: no stack [ 358.899144][T17077] delete_channel: no stack [ 358.903836][T17077] delete_channel: no stack [ 358.912164][ T148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.922077][T17077] delete_channel: no stack [ 358.931391][T17077] delete_channel: no stack [ 358.936143][ T148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.945764][T17077] delete_channel: no stack [ 358.956104][T17077] delete_channel: no stack [ 358.961150][T17077] delete_channel: no stack [ 358.965799][T17077] delete_channel: no stack [ 358.974786][T17077] delete_channel: no stack [ 358.980357][T17077] delete_channel: no stack [ 358.985373][T17077] delete_channel: no stack [ 358.994078][T17077] delete_channel: no stack [ 359.000845][T17077] delete_channel: no stack [ 359.007023][T17077] delete_channel: no stack [ 359.009255][T10230] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.021214][T17077] delete_channel: no stack [ 359.025476][T10230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.032492][T17077] delete_channel: no stack [ 359.040672][T10230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.062999][ T148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.070053][T17099] __nla_validate_parse: 10 callbacks suppressed [ 359.070077][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3223'. [ 359.076413][ T148] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.080826][T17077] delete_channel: no stack [ 359.106106][T17077] delete_channel: no stack [ 359.114525][T17077] delete_channel: no stack [ 359.119492][T17077] delete_channel: no stack [ 359.124157][T17077] delete_channel: no stack [ 359.129794][T17077] delete_channel: no stack [ 359.134648][T17077] delete_channel: no stack [ 359.150034][T17077] delete_channel: no stack [ 359.154735][T17077] delete_channel: no stack [ 359.169964][T17077] delete_channel: no stack [ 359.174686][T17077] delete_channel: no stack [ 359.184988][T10234] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.205075][T10234] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.430595][T10234] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.444314][T10234] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.498449][T17114] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 359.524281][T17039] chnl_net:caif_netlink_parms(): no params data found [ 359.815132][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 359.991564][ T5875] Bluetooth: hci5: command tx timeout [ 362.072073][ T5875] Bluetooth: hci5: command tx timeout [ 362.220213][T10230] dvmrp1 (unregistering): left allmulticast mode [ 362.544738][T10230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.555482][T10230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.565869][T10230] bond0 (unregistering): Released all slaves [ 362.584762][T10230] bond1 (unregistering): Released all slaves [ 362.600793][T10230] bond2 (unregistering): Released all slaves [ 362.731787][T10230] bond3 (unregistering): (slave veth1): Releasing active interface [ 362.742017][T10230] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 362.753477][T10230] bond3 (unregistering): (slave veth3): Releasing active interface [ 362.763306][T10230] bond3 (unregistering): Released all slaves [ 362.893615][T10230] bond4 (unregistering): Released all slaves [ 362.911637][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.919215][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.926953][T17039] bridge_slave_0: entered allmulticast mode [ 362.934517][T17039] bridge_slave_0: entered promiscuous mode [ 362.944848][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.955229][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.964894][T17039] bridge_slave_1: entered allmulticast mode [ 362.974631][T17039] bridge_slave_1: entered promiscuous mode [ 363.106945][T10230] tipc: Disabling bearer [ 363.125983][T10230] tipc: Disabling bearer [ 363.133246][T10230] tipc: Disabling bearer [ 363.193118][T10230] tipc: Left network mode [ 363.304360][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.359300][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.546961][T17160] 8021q: VLANs not supported on ip6_vti0 [ 363.640532][T17039] team0: Port device team_slave_0 added [ 363.740398][T17179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3245'. [ 363.766181][T17179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3245'. [ 363.811967][T17179] pim6reg1: entered promiscuous mode [ 363.824223][T17179] pim6reg1: entered allmulticast mode [ 363.839312][T17039] team0: Port device team_slave_1 added [ 363.853640][T17181] gretap1: entered promiscuous mode [ 363.966153][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 364.096038][T10230] hsr_slave_0: left promiscuous mode [ 364.111487][T10230] hsr_slave_1: left promiscuous mode [ 364.130682][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.146458][ T5875] Bluetooth: hci5: command tx timeout [ 364.153304][T10230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.174078][T10230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.182028][T10230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.190659][T10230] batman_adv: batadv0: Removing interface: dummy0 [ 364.211162][T10230] veth0_macvtap: left allmulticast mode [ 364.217540][T10230] veth1_macvtap: left promiscuous mode [ 364.223272][T10230] veth0_macvtap: left promiscuous mode [ 364.229630][T10230] veth1_vlan: left promiscuous mode [ 364.235213][T10230] veth0_vlan: left promiscuous mode [ 365.315824][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.323530][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.350958][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.383310][T17196] bridge1: entered promiscuous mode [ 365.389022][T17196] bridge1: entered allmulticast mode [ 365.413172][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.433451][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.470521][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.665110][T17039] hsr_slave_0: entered promiscuous mode [ 365.684957][T17039] hsr_slave_1: entered promiscuous mode [ 365.718875][T17039] debugfs: 'hsr0' already exists in 'hsr' [ 365.738048][T17039] Cannot create hsr debugfs directory [ 365.751600][T17231] bridge0: entered allmulticast mode [ 365.758644][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 365.810934][T17231] team0: left allmulticast mode [ 365.815962][T17231] team_slave_0: left allmulticast mode [ 365.836800][T17231] team_slave_1: left allmulticast mode [ 365.851463][T17231] geneve0: left allmulticast mode [ 365.862426][T17231] team0: left promiscuous mode [ 365.870160][T17231] team_slave_0: left promiscuous mode [ 365.876008][T17231] team_slave_1: left promiscuous mode [ 365.882297][T17231] geneve0: left promiscuous mode [ 365.888355][T17231] bridge0: port 3(team0) entered disabled state [ 365.897522][T17231] bridge_slave_1: left allmulticast mode [ 365.903274][T17231] bridge_slave_1: left promiscuous mode [ 365.909522][T17231] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.921461][T17231] bridge_slave_0: left allmulticast mode [ 365.927763][T17231] bridge_slave_0: left promiscuous mode [ 365.935400][T17231] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.964380][T17231] bridge0 (unregistering): left allmulticast mode [ 366.019771][T17232] tipc: Enabled bearer , priority 0 [ 366.035586][T17237] syzkaller0: entered promiscuous mode [ 366.043042][T17237] syzkaller0: entered allmulticast mode [ 366.058546][T17234] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3259'. [ 366.068503][T17234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.162741][T17232] tipc: Resetting bearer [ 366.181638][T17228] tipc: Resetting bearer [ 366.198826][T17228] tipc: Disabling bearer [ 366.295359][T10230] IPVS: stop unused estimator thread 0... [ 366.378430][T17252] netlink: 'syz.0.3263': attribute type 12 has an invalid length. [ 366.593746][T17263] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 366.620105][T17263] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3266'. [ 366.672099][T17263] netlink: 'syz.1.3266': attribute type 2 has an invalid length. [ 366.694714][T17263] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 366.773819][T17271] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3268'. [ 367.250381][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 367.686415][T17039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.720092][T17039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.743448][T17303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 367.757956][T17039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.785378][T17039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.008718][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.053381][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.082466][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.090195][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.117265][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.125900][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.364808][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3287'. [ 368.394255][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3287'. [ 368.530482][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.622819][T17039] veth0_vlan: entered promiscuous mode [ 368.654483][T17039] veth1_vlan: entered promiscuous mode [ 368.729912][T17039] veth0_macvtap: entered promiscuous mode [ 368.749626][T17039] veth1_macvtap: entered promiscuous mode [ 368.768360][T17354] syzkaller1: entered promiscuous mode [ 368.775244][T17354] syzkaller1: entered allmulticast mode [ 368.817304][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.843761][T17360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3294'. [ 368.849822][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.896196][T10230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.911573][T10230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.941420][T10230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.972606][T10230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.068130][T17365] netlink: 'syz.1.3297': attribute type 19 has an invalid length. [ 369.113771][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.156658][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.301528][T17372] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 369.312566][T10230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.327025][T10230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.334725][T17377] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 369.341529][T17372] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 369.354885][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 369.498812][T17384] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 369.583976][T17388] bond1: entered allmulticast mode [ 369.590495][T17388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.685038][T17394] netlink: 'syz.3.3198': attribute type 2 has an invalid length. [ 369.957249][T17404] syzkaller1: left promiscuous mode [ 369.962520][T17404] syzkaller1: left allmulticast mode [ 370.290850][T17420] netlink: 'syz.4.3314': attribute type 10 has an invalid length. [ 370.301763][T17420] veth0_vlan: entered allmulticast mode [ 370.345445][T17420] veth0_vlan: left promiscuous mode [ 370.378561][T17420] veth0_vlan: entered promiscuous mode [ 370.435177][T17420] team0: Device veth0_vlan failed to register rx_handler [ 370.794389][T17441] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 370.799055][T17440] bond0: Device is already in use. [ 370.924640][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.937667][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.955089][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.968437][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.978695][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.016092][T17447] __nla_validate_parse: 7 callbacks suppressed [ 371.016117][T17447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3321'. [ 371.132540][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 371.434866][T17442] chnl_net:caif_netlink_parms(): no params data found [ 371.757547][T17498] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 371.831402][T17500] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 371.864730][T17497] tipc: Started in network mode [ 371.870404][T17497] tipc: Node identity 422cd06ed665, cluster identity 4711 [ 371.889042][T17497] tipc: Enabled bearer , priority 0 [ 371.954062][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.973582][T17442] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.984414][T17442] bridge_slave_0: entered allmulticast mode [ 371.995023][T17442] bridge_slave_0: entered promiscuous mode [ 372.005034][T17497] tipc: Disabling bearer [ 372.015766][T17442] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.023907][T17442] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.032067][T17442] bridge_slave_1: entered allmulticast mode [ 372.040314][T17442] bridge_slave_1: entered promiscuous mode [ 372.161977][T17442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.191226][T17442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.294331][T17442] team0: Port device team_slave_0 added [ 372.315886][T17442] team0: Port device team_slave_1 added [ 372.422536][T17442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.437176][T17442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.471227][T17442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.484694][T17442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.491952][T17442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.545136][T17442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.622140][T17442] hsr_slave_0: entered promiscuous mode [ 372.629694][T17442] hsr_slave_1: entered promiscuous mode [ 372.636209][T17442] debugfs: 'hsr0' already exists in 'hsr' [ 372.642237][T17442] Cannot create hsr debugfs directory [ 372.851945][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 372.863747][T17518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3338'. [ 373.035464][ T5882] Bluetooth: hci2: command tx timeout [ 373.300704][T17442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.326149][T17442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.334424][T17536] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3344'. [ 373.350142][T17442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.382320][T17442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.724873][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 373.787712][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 373.793147][T17442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.834933][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 373.865594][T17571] bridge_slave_0: left allmulticast mode [ 373.872272][T17571] bridge_slave_0: left promiscuous mode [ 373.881634][T17571] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.912630][T17571] bridge_slave_1: left allmulticast mode [ 373.921279][T17571] bridge_slave_1: left promiscuous mode [ 373.928156][T17571] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.946156][T17571] bond0: (slave bond_slave_0): Releasing backup interface [ 373.961601][T17571] bond0: (slave bond_slave_1): Releasing backup interface [ 373.994700][T17571] team0: Port device team_slave_0 removed [ 374.009356][T17571] team0: Port device team_slave_1 removed [ 374.027202][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.034733][T17571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.055084][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.062894][T17571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.093047][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 374.126184][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 374.156171][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 374.168974][T17442] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.189730][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 374.214254][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.221686][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.251906][T17563] netlink: 'syz.4.3351': attribute type 7 has an invalid length. [ 374.254203][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.267243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.275477][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 374.324532][T17587] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3357'. [ 374.372766][T17587] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3357'. [ 374.965448][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 375.038477][T17609] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 375.094513][T17609] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 375.106891][ T5882] Bluetooth: hci2: command tx timeout [ 375.134282][T17609] gretap1: entered promiscuous mode [ 375.139772][T17609] gretap1: entered allmulticast mode [ 375.274941][T17442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.354067][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3365'. [ 375.444606][T17442] veth0_vlan: entered promiscuous mode [ 375.510226][T17442] veth1_vlan: entered promiscuous mode [ 375.631075][T17442] veth0_macvtap: entered promiscuous mode [ 375.660532][T17442] veth1_macvtap: entered promiscuous mode [ 375.730139][T17442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.772625][T17442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.824973][T10232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.896745][T10232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.905884][T10232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.954169][T10232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.024931][T17653] __nla_validate_parse: 4 callbacks suppressed [ 376.024953][T17653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3374'. [ 376.149841][T17660] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3377'. [ 376.200024][T10230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.246071][T10230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.414111][T17673] gtp0: entered promiscuous mode [ 376.436879][T17673] gtp0: entered allmulticast mode [ 376.449762][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.473119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.512100][ T30] audit: type=1107 audit(1757281112.106:9): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 376.769871][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3386'. [ 376.779405][T17692] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3386'. [ 377.181545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d730400: rx timeout, send abort [ 377.198984][ T5882] Bluetooth: hci2: command tx timeout [ 377.496156][T17713] netlink: 'syz.3.3391': attribute type 11 has an invalid length. [ 377.543675][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3391'. [ 377.618851][T17723] 8021q: VLANs not supported on vxcan1 [ 377.681704][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c844800: rx timeout, send abort [ 377.692439][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d730400: abort rx timeout. Force session deactivation [ 377.907626][T17728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3398'. [ 378.067547][T17730] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3399'. [ 378.190241][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c844800: abort rx timeout. Force session deactivation [ 378.404216][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'. [ 378.493186][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 378.604574][ T5876] bond0: (slave syz_tun): Releasing backup interface [ 378.612720][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.617765][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.632171][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.641224][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.649474][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.689909][T10232] bond6: (slave macvlan2): speed changed to 0 on port 1 [ 378.828342][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.862058][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.075449][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.115767][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.268062][ T5882] Bluetooth: hci2: command tx timeout [ 379.328496][T17773] openvswitch: netlink: IP tunnel TTL not specified. [ 379.344149][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.392783][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.513214][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.548276][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.619398][T10230] bond6: (slave macvlan2): link status definitely down, disabling slave [ 379.966087][T17788] batadv_slave_0: entered promiscuous mode [ 380.023359][T17805] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3421'. [ 380.033588][T17787] batadv_slave_0: left promiscuous mode [ 380.052984][T17751] chnl_net:caif_netlink_parms(): no params data found [ 380.096390][ T12] dummy0: left allmulticast mode [ 380.101760][ T12] dummy0: left promiscuous mode [ 380.109896][ T12] bridge0: port 1(dummy0) entered disabled state [ 380.706794][ T5882] Bluetooth: hci1: command tx timeout [ 380.798010][ T12] bridge3 (unregistering): left allmulticast mode [ 381.080956][ T12] bond6 (unregistering): (slave macvlan2): Releasing backup interface [ 381.100263][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 381.117981][ T12] bond0 (unregistering): Released all slaves [ 381.243894][ T12] bond1 (unregistering): Released all slaves [ 381.371574][ T12] bond2 (unregistering): Released all slaves [ 381.497593][ T12] bond3 (unregistering): Released all slaves [ 381.514662][ T12] bond4 (unregistering): Released all slaves [ 381.639964][ T12] bond5 (unregistering): Released all slaves [ 381.758125][ T12] bond6 (unregistering): Released all slaves [ 381.878642][ T12] bond7 (unregistering): Released all slaves [ 381.996138][ T12] bond8 (unregistering): Released all slaves [ 382.124669][ T12] bond9 (unregistering): (slave bond10): Releasing backup interface [ 382.133589][ T12] bond10 (unregistering): left promiscuous mode [ 382.140185][ T12] bond10 (unregistering): left allmulticast mode [ 382.153552][ T12] bond9 (unregistering): Released all slaves [ 382.271082][ T12] bond10 (unregistering): Released all slaves [ 382.286381][ T12] bond11 (unregistering): Released all slaves [ 382.414084][ T12] bond12 (unregistering): Released all slaves [ 382.801934][ T5882] Bluetooth: hci1: command tx timeout [ 382.848997][T17751] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.877858][T17837] __nla_validate_parse: 2 callbacks suppressed [ 382.877880][T17837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3428'. [ 382.906008][T17751] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.924634][T17751] bridge_slave_0: entered allmulticast mode [ 382.948198][T17751] bridge_slave_0: entered promiscuous mode [ 382.983910][ T12] tipc: Left network mode [ 382.984822][T17751] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.013886][T17751] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.033243][T17751] bridge_slave_1: entered allmulticast mode [ 383.055664][T17751] bridge_slave_1: entered promiscuous mode [ 383.066326][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 383.227302][T17859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.327603][T17751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.368999][T17859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.410993][T17751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.429887][T17871] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3433'. [ 383.545663][T17859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.704075][T17859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.726655][T17884] validate_nla: 58 callbacks suppressed [ 383.726676][T17884] netlink: 'syz.0.3439': attribute type 4 has an invalid length. [ 383.756057][T17751] team0: Port device team_slave_0 added [ 383.801915][T17751] team0: Port device team_slave_1 added [ 383.966165][T17751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.986359][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.028883][T17751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.066074][T17751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.075815][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 384.090848][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.108284][T17899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.118894][T17751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.280298][T10228] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.289590][T10228] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.462921][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.530611][ T12] hsr_slave_0: left promiscuous mode [ 384.538189][ T12] hsr_slave_1: left promiscuous mode [ 384.569924][T17908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3446'. [ 384.577329][ T12] veth0_macvtap: left promiscuous mode [ 384.586019][ T12] veth1_vlan: left promiscuous mode [ 384.591590][ T12] veth0_vlan: left promiscuous mode [ 384.854649][T17897] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 384.866367][ T5882] Bluetooth: hci1: command tx timeout [ 385.645045][T17751] hsr_slave_0: entered promiscuous mode [ 385.653468][T17751] hsr_slave_1: entered promiscuous mode [ 385.782462][T17916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3449'. [ 385.813825][T17918] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3448'. [ 385.875271][T10228] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.896047][T17914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3448'. [ 385.919313][T17922] netlink: 'syz.1.3451': attribute type 8 has an invalid length. [ 386.149456][ T5882] Bluetooth: hci0: command 0x0401 tx timeout [ 386.228434][T17936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3455'. [ 386.253861][T17938] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 386.310048][ T12] IPVS: stop unused estimator thread 0... [ 386.800528][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 386.948545][ T5882] Bluetooth: hci1: command tx timeout [ 387.076766][T17751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.102461][T17751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.149649][T17973] netlink: 'syz.3.3466': attribute type 2 has an invalid length. [ 387.163007][T17751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.218738][T17751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.438038][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 387.709414][T17751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.770890][T18003] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 387.779782][T18003] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 387.833602][T17751] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.891522][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.898970][T10234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.956963][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.964244][T10232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.984675][T18013] __nla_validate_parse: 3 callbacks suppressed [ 387.984699][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'. [ 388.203602][T18022] geneve2: entered promiscuous mode [ 388.214393][T18022] geneve2: entered allmulticast mode [ 388.239114][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 388.239464][T10230] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 388.329207][T18020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.361205][T10230] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 388.389445][T10230] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 388.410459][T10230] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 388.766231][T17751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.820341][T17751] veth0_vlan: entered promiscuous mode [ 388.840151][T17751] veth1_vlan: entered promiscuous mode [ 388.853616][T18057] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3487'. [ 388.885699][T17751] veth0_macvtap: entered promiscuous mode [ 388.903247][T17751] veth1_macvtap: entered promiscuous mode [ 388.927379][T17751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.941193][T17751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.955304][T10232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.966072][T10232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.981552][T10232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.990424][T10232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.339811][T10228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.369510][T10228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.482192][T10228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.499119][T10228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.668015][T18073] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3492'. [ 390.005066][T18091] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.178307][T18099] tipc: Started in network mode [ 390.187235][T18099] tipc: Node identity 56220e4b3af4, cluster identity 4711 [ 390.199994][T18104] ------------[ cut here ]------------ [ 390.205964][T18104] WARNING: CPU: 1 PID: 18104 at net/ipv4/route.c:1269 ip_rt_bug+0x2c/0x110 [ 390.212236][T18099] tipc: Enabled bearer , priority 0 [ 390.214704][T18104] Modules linked in: [ 390.225519][T18099] syzkaller0: entered promiscuous mode [ 390.225555][T18104] CPU: 1 UID: 0 PID: 18104 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) [ 390.232038][T18099] syzkaller0: entered allmulticast mode [ 390.240673][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.240710][T18104] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 390.240751][T18104] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 390.240773][T18104] RSP: 0018:ffffc90004527180 EFLAGS: 00010286 [ 390.240797][T18104] RAX: a73e87f069a6d200 RBX: ffff88806daab140 RCX: a73e87f069a6d200 [ 390.295670][T18104] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 390.303753][T18104] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 390.312186][T18104] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 390.320520][T18104] R13: dffffc0000000000 R14: ffff88806daab140 R15: ffff88801a5ca300 [ 390.328575][T18104] FS: 00007f64c9bf66c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 390.337649][T18104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.344279][T18104] CR2: 000000110c26309b CR3: 000000005a3bc000 CR4: 00000000003526f0 [ 390.352602][T18104] Call Trace: [ 390.355940][T18104] [ 390.358995][T18104] ip_push_pending_frames+0xbe/0x150 [ 390.364351][T18104] __icmp_send+0xf87/0x12d0 [ 390.369051][T18104] ? __icmp_send+0x1b9/0x12d0 [ 390.373865][T18104] ? __pfx___icmp_send+0x10/0x10 [ 390.378941][T18104] ? ip_route_input_noref+0x98/0x250 [ 390.384384][T18104] ? __pfx_ip_route_input_noref+0x10/0x10 [ 390.390228][T18104] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 390.395475][T18104] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 390.400963][T18104] ip_options_compile+0x80/0xb0 [ 390.405876][T18104] ip_rcv_finish_core+0xaa2/0x1c00 [ 390.411107][T18104] ip_rcv_finish+0x14c/0x2f0 [ 390.415758][T18104] NF_HOOK+0x309/0x3a0 [ 390.419942][T18104] ? __pfx_ip_rcv_finish+0x10/0x10 [ 390.425106][T18104] ? NF_HOOK+0x9a/0x3a0 [ 390.429377][T18104] ? __pfx_NF_HOOK+0x10/0x10 [ 390.434026][T18104] ? ip_rcv_core+0x7f7/0xd00 [ 390.438741][T18104] ? __pfx_ip_rcv_finish+0x10/0x10 [ 390.443917][T18104] ? __pfx_ip_rcv+0x10/0x10 [ 390.448541][T18104] __netif_receive_skb+0x143/0x380 [ 390.453713][T18104] ? read_tsc+0x9/0x20 [ 390.457898][T18104] ? netif_receive_skb+0x115/0x790 [ 390.463062][T18104] netif_receive_skb+0x1cb/0x790 [ 390.468121][T18104] ? __pfx_netif_receive_skb+0x10/0x10 [ 390.473651][T18104] ? tun_rx_batched+0x160/0x730 [ 390.478616][T18104] tun_rx_batched+0x1b9/0x730 [ 390.483348][T18104] ? __lock_acquire+0xab9/0xd20 [ 390.488313][T18104] ? __pfx_tun_rx_batched+0x10/0x10 [ 390.493570][T18104] ? tun_get_user+0x266c/0x3e20 [ 390.498534][T18104] tun_get_user+0x2aa2/0x3e20 [ 390.503591][T18104] ? tun_get_user+0x6f6/0x3e20 [ 390.508494][T18104] ? tun_get_user+0x266c/0x3e20 [ 390.513405][T18104] ? aa_file_perm+0x44d/0x1550 [ 390.518280][T18104] ? __pfx_tun_get_user+0x10/0x10 [ 390.523400][T18104] ? ref_tracker_alloc+0x318/0x460 [ 390.528721][T18104] ? __lock_acquire+0xab9/0xd20 [ 390.533660][T18104] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 390.539238][T18104] ? tun_get+0x1c/0x2f0 [ 390.543452][T18104] ? tun_get+0x1c/0x2f0 [ 390.547701][T18104] ? tun_get+0x1c/0x2f0 [ 390.551913][T18104] tun_chr_write_iter+0x113/0x200 [ 390.557028][T18104] vfs_write+0x5c6/0xb30 [ 390.561327][T18104] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 390.566968][T18104] ? __pfx_vfs_write+0x10/0x10 [ 390.571801][T18104] ? __fget_files+0x2a/0x420 [ 390.576494][T18104] ksys_write+0x145/0x250 [ 390.580876][T18104] ? __pfx_ksys_write+0x10/0x10 [ 390.585772][T18104] ? rcu_is_watching+0x15/0xb0 [ 390.590639][T18104] ? do_syscall_64+0xbe/0x3b0 [ 390.595367][T18104] do_syscall_64+0xfa/0x3b0 [ 390.599970][T18104] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.605225][T18104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.611387][T18104] ? clear_bhb_loop+0x60/0xb0 [ 390.616128][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.622132][T18104] RIP: 0033:0x7f64cb98d69f [ 390.626626][T18104] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 390.646431][T18104] RSP: 002b:00007f64c9bf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 390.647940][T18115] netlink: 'syz.3.3500': attribute type 1 has an invalid length. [ 390.654888][T18104] RAX: ffffffffffffffda RBX: 00007f64cbbc5fa0 RCX: 00007f64cb98d69f [ 390.654910][T18104] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 390.654926][T18104] RBP: 00007f64cba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 390.654941][T18104] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 390.654956][T18104] R13: 00007f64cbbc6038 R14: 00007f64cbbc5fa0 R15: 00007ffef9d8a508 [ 390.654992][T18104] [ 390.706090][T18104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.713401][T18104] CPU: 1 UID: 0 PID: 18104 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) [ 390.722802][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.733069][T18104] Call Trace: [ 390.736370][T18104] [ 390.739323][T18104] dump_stack_lvl+0x99/0x250 [ 390.743945][T18104] ? __asan_memcpy+0x40/0x70 [ 390.748575][T18104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.753795][T18104] ? __pfx__printk+0x10/0x10 [ 390.758442][T18104] vpanic+0x281/0x750 [ 390.762469][T18104] ? __pfx__printk+0x10/0x10 [ 390.767097][T18104] ? __pfx_vpanic+0x10/0x10 [ 390.771654][T18104] ? is_bpf_text_address+0x26/0x2b0 [ 390.776893][T18104] panic+0xb9/0xc0 [ 390.780641][T18104] ? __pfx_panic+0x10/0x10 [ 390.785097][T18104] __warn+0x31b/0x4b0 [ 390.789142][T18104] ? ip_rt_bug+0x2c/0x110 [ 390.793523][T18104] ? ip_rt_bug+0x2c/0x110 [ 390.797892][T18104] report_bug+0x2be/0x4f0 [ 390.802248][T18104] ? ip_rt_bug+0x2c/0x110 [ 390.806620][T18104] ? ip_rt_bug+0x2c/0x110 [ 390.811035][T18104] ? ip_rt_bug+0x2e/0x110 [ 390.815404][T18104] handle_bug+0x84/0x160 [ 390.819661][T18104] exc_invalid_op+0x1a/0x50 [ 390.824207][T18104] asm_exc_invalid_op+0x1a/0x20 [ 390.829066][T18104] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 390.834142][T18104] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 7b 3a d5 f7 66 90 e8 74 3a d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 05 8e 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 390.853778][T18104] RSP: 0018:ffffc90004527180 EFLAGS: 00010286 [ 390.859961][T18104] RAX: a73e87f069a6d200 RBX: ffff88806daab140 RCX: a73e87f069a6d200 [ 390.868058][T18104] RDX: 0000000000000002 RSI: ffffffff8d9b8bbd RDI: ffffffff8be33880 [ 390.876046][T18104] RBP: 0000000000000001 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 390.884041][T18104] R10: dffffc0000000000 R11: fffffbfff1f472e7 R12: dffffc0000000000 [ 390.892330][T18104] R13: dffffc0000000000 R14: ffff88806daab140 R15: ffff88801a5ca300 [ 390.900359][T18104] ip_push_pending_frames+0xbe/0x150 [ 390.906195][T18104] __icmp_send+0xf87/0x12d0 [ 390.910761][T18104] ? __icmp_send+0x1b9/0x12d0 [ 390.915491][T18104] ? __pfx___icmp_send+0x10/0x10 [ 390.920559][T18104] ? ip_route_input_noref+0x98/0x250 [ 390.925872][T18104] ? __pfx_ip_route_input_noref+0x10/0x10 [ 390.931641][T18104] ? tcp_v4_early_demux+0x4e1/0x9d0 [ 390.936887][T18104] ? tcp_v4_early_demux+0x5ec/0x9d0 [ 390.942101][T18104] ip_options_compile+0x80/0xb0 [ 390.946975][T18104] ip_rcv_finish_core+0xaa2/0x1c00 [ 390.952112][T18104] ip_rcv_finish+0x14c/0x2f0 [ 390.956762][T18104] NF_HOOK+0x309/0x3a0 [ 390.960893][T18104] ? __pfx_ip_rcv_finish+0x10/0x10 [ 390.966033][T18104] ? NF_HOOK+0x9a/0x3a0 [ 390.970212][T18104] ? __pfx_NF_HOOK+0x10/0x10 [ 390.975032][T18104] ? ip_rcv_core+0x7f7/0xd00 [ 390.979646][T18104] ? __pfx_ip_rcv_finish+0x10/0x10 [ 390.984780][T18104] ? __pfx_ip_rcv+0x10/0x10 [ 390.989321][T18104] __netif_receive_skb+0x143/0x380 [ 390.994472][T18104] ? read_tsc+0x9/0x20 [ 390.998589][T18104] ? netif_receive_skb+0x115/0x790 [ 391.003754][T18104] netif_receive_skb+0x1cb/0x790 [ 391.008750][T18104] ? __pfx_netif_receive_skb+0x10/0x10 [ 391.014282][T18104] ? tun_rx_batched+0x160/0x730 [ 391.019177][T18104] tun_rx_batched+0x1b9/0x730 [ 391.023985][T18104] ? __lock_acquire+0xab9/0xd20 [ 391.028867][T18104] ? __pfx_tun_rx_batched+0x10/0x10 [ 391.034081][T18104] ? tun_get_user+0x266c/0x3e20 [ 391.038958][T18104] tun_get_user+0x2aa2/0x3e20 [ 391.043656][T18104] ? tun_get_user+0x6f6/0x3e20 [ 391.048435][T18104] ? tun_get_user+0x266c/0x3e20 [ 391.053306][T18104] ? aa_file_perm+0x44d/0x1550 [ 391.058083][T18104] ? __pfx_tun_get_user+0x10/0x10 [ 391.063139][T18104] ? ref_tracker_alloc+0x318/0x460 [ 391.068270][T18104] ? __lock_acquire+0xab9/0xd20 [ 391.073146][T18104] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.078728][T18104] ? tun_get+0x1c/0x2f0 [ 391.082901][T18104] ? tun_get+0x1c/0x2f0 [ 391.087116][T18104] ? tun_get+0x1c/0x2f0 [ 391.091288][T18104] tun_chr_write_iter+0x113/0x200 [ 391.096331][T18104] vfs_write+0x5c6/0xb30 [ 391.100605][T18104] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 391.106448][T18104] ? __pfx_vfs_write+0x10/0x10 [ 391.111285][T18104] ? __fget_files+0x2a/0x420 [ 391.115918][T18104] ksys_write+0x145/0x250 [ 391.120272][T18104] ? __pfx_ksys_write+0x10/0x10 [ 391.125157][T18104] ? rcu_is_watching+0x15/0xb0 [ 391.130422][T18104] ? do_syscall_64+0xbe/0x3b0 [ 391.135417][T18104] do_syscall_64+0xfa/0x3b0 [ 391.139965][T18104] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.145285][T18104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.151376][T18104] ? clear_bhb_loop+0x60/0xb0 [ 391.156089][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.162000][T18104] RIP: 0033:0x7f64cb98d69f [ 391.166431][T18104] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 391.186580][T18104] RSP: 002b:00007f64c9bf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 391.195108][T18104] RAX: ffffffffffffffda RBX: 00007f64cbbc5fa0 RCX: 00007f64cb98d69f [ 391.203136][T18104] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 391.211141][T18104] RBP: 00007f64cba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 391.219574][T18104] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 391.228503][T18104] R13: 00007f64cbbc6038 R14: 00007f64cbbc5fa0 R15: 00007ffef9d8a508 [ 391.236901][T18104] [ 391.240329][T18104] Kernel Offset: disabled [ 391.245837][T18104] Rebooting in 86400 seconds..