last executing test programs: 1.841826646s ago: executing program 1 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004851}, 0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8102080}, 0xc, &(0x7f0000001640)={&(0x7f0000000440)={0x11f4, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf21, 0x53}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xb, 0x0, @random="ef208449c527b6"}, {0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="b76b4c34d25efcf446b1136a1c71a9c82bec6d933242"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000001}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1170, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8a, 0x1, "b0fd073274689935daa32afd3df15253395bc49d2301ba1541172b2fddb705240b3f6dd039323db0d61004d64ce1c740944372ab8253b66a95ed8cb6858f7aef6701c73070f2c91dd220358d5db5d8471c0480046a298813e0468cbf4d4d6e149106f11c84f8217386d65d4415dbdc1498e33291d3c6768a4c21b702dfe3f686245bc3d7bc00"}, @NL80211_BAND_6GHZ={0xd9, 0x3, "e3211b19c8533cd13a1a08eb97d4c8898c1674c9420a47f6529494dc1867f1b5ff3d806f9cd457f4cf3b608cabef8d251999d5edf2f68c9a0b5ecdb6cfc9c24caa5aeba416b066044d5d760a5c028897c815790aef8d8e3ae71ea2155647e0a607853f7437687b20633fe8a4a9759c250cb22a023a498819a656a4a583a8d656d52be72bde9d0ffcfe481837bfa2721688fe656654aa4b42efea89c42f40162ac4d9cd65a0c8f9f7462a13917a1d1d95b8ea4c9e8c048385146721dbe1163098a1dfeaa181ab312d8dc2dca5e66d8a363d0d398329"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x20000080}, 0x44004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x20000080) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000001800)=""/217, &(0x7f0000001900)=0xd9) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001940)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a00)={0x17c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x44, r5, 0x20, 0x70bd27, 0x7, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x840) socketpair(0x25, 0xa, 0x2, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$x25(r7, &(0x7f0000001dc0)=""/223, 0xdf, 0x0, &(0x7f0000001ec0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001f40)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001f80)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001fc0)={0x0, @multicast1, @broadcast}, &(0x7f0000002000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000020c0)={'syztnl0\x00', &(0x7f0000002040)={'gretap0\x00', 0x0, 0x80, 0x8, 0xa165, 0x2, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x64, 0x0, 0xe7, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x2, [{@multicast1, 0x1e8}, {@empty, 0x6}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000002100)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000002140)={0x0}, &(0x7f0000002180)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002300)={'tunl0\x00', &(0x7f00000021c0)={'gretap0\x00', 0x0, 0x7888, 0x8000, 0x0, 0xfffffff7, {{0x3b, 0x4, 0x2, 0x35, 0xec, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x27, 0x38, [@local, @remote, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010100, @empty, @broadcast]}, @rr={0x7, 0xb, 0x9, [@empty, @local]}, @timestamp_addr={0x44, 0x24, 0xb5, 0x1, 0x3, [{@rand_addr=0x64010102, 0x2}, {@empty, 0x6}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @ssrr={0x89, 0x1f, 0xe2, [@broadcast, @empty, @multicast2, @loopback, @multicast2, @multicast2, @local]}, @ra={0x94, 0x4}, @cipso={0x86, 0x53, 0x0, [{0x6, 0x2}, {0x0, 0xe, "4e097ff864be6ba3b3bf75fb"}, {0x6, 0x12, "e6ff9761054077ff1f33b47d303ef710"}, {0x6, 0x4, "8408"}, {0x7, 0x10, "e4aafb514987f9ef02d55ac5fd22"}, {0x1, 0xf, "7630e2c5f70419162351d0a39a"}, {0x7, 0x2}, {0x1, 0x6, "f09ffa1f"}]}, @timestamp={0x44, 0xc, 0x57, 0x0, 0xc, [0x24000, 0xffffff6e]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x6, 0xa6d, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0xf838, 0x80, 0x80000001, 0xd}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000024c0)={'erspan0\x00', &(0x7f0000002440)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x1, {{0x15, 0x4, 0x2, 0x3, 0x54, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @cipso={0x86, 0x22, 0x3, [{0x5, 0x6, "ce02dd6b"}, {0x1, 0x4, "daee"}, {0x2, 0x5, "a35baf"}, {0x7, 0xd, "12881de425958aae06f902"}]}, @generic={0x82, 0xb, "d7ab1ad5c45bb7b7f4"}, @ssrr={0x89, 0xf, 0xf8, [@rand_addr=0x64010100, @private=0xa010102, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000002800)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000027c0)={&(0x7f0000002540)={0x278, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20008000}, 0x801) 1.717256344s ago: executing program 1 (id=2328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000053384c012e0000000000950000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.591219587s ago: executing program 1 (id=2331): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.556228526s ago: executing program 2 (id=2332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x46200, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) r4 = epoll_create1(0x0) r5 = socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x20010, r1, 0xa47e9000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket(0x0, 0x6, 0x970) connect$l2tp(r7, &(0x7f0000000180)={0x2, 0x0, @empty, 0x3}, 0x10) socket$packet(0x11, 0x3, 0x300) epoll_wait(r4, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xf9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000300)={&(0x7f0000000280)=""/71, 0x47, 0x6, 0x7fffffff}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x0, 0x180, 0xffffffff, 0x0, 0x180, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, &(0x7f0000000340), {[{{@ip={@empty, @broadcast, 0xff000000, 0xffffffff, 'team_slave_0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x29, 0x0, 0xa}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @port=0x4e22, @port=0x4e20}}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff, 0x0, 'dvmrp1\x00', 'syz_tun\x00', {}, {0xff}, 0x5c, 0x2, 0x26}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x1502, 0xc4, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @icmp_id=0x68, @gre_key=0x101}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0xb25fb67cad7260ff, 0x2, 0xf, 0x5], 0x3, 0x2}, {0x2, [0x0, 0x1, 0x3, 0x4, 0x2, 0x2], 0x1, 0xa}}}}, {{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x14, @empty, @broadcast, @port=0x4e21, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='ext4_begin_ordered_truncate\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) close(r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40000, 0x0) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000000940)) write$tun(r1, &(0x7f0000000980)={@val={0x0, 0x3}, @val={0x1, 0x80, 0x9, 0x34f0, 0x1, 0xbf0d}, @x25={0x0, 0x7, 0xf, "78552d44918dc71f4013953feb0a3567ed235885e35fe81edd78904bf5115e6a1049ac8e406c0da37df07e8881b77f2de9bc080a1d2ecd3e6498b9b2b82c95121dfa0ea9f0dd2fd2448b3fa4ba3c214f925e00225ea8fe203d8cba717acabced9b427be79b7b6a480cd93eec8ff2a438049f93afe346210c2eb8068032a84152ef8c43330794fbc234a046bca0f9edf34b3d5dcf90a661977c0f8a1a2da3f2eb7097041a72440a447a2530e48d4cdfeb135b880622aac3416d836b3bffe0351d2555bf6512edf36ade0619348c354b1442928e1512b99cc6e34c8d51"}}, 0xed) sendmsg$inet(r5, &(0x7f0000001c80)={&(0x7f0000000a80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)}], 0x2, &(0x7f0000001b40)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x3, [{@private=0xa010102}, {@remote, 0x6}, {@remote, 0x10}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @broadcast}}}], 0x108}, 0x24010) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001cc0), 0x2, 0x0) close(r11) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x401) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001e40)={&(0x7f0000001d00), 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x84, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x6]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1310}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x7f, 0x9, 0x4, 0x6, 0x3ff, 0x1]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000084}, 0x4) getsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000001e80)=0x6, &(0x7f0000001ec0)=0x4) 1.15313534s ago: executing program 3 (id=2339): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000080)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="cd9488826fcf3df008002b0008000000e8f90aae0989c856f246fabb9f3ffe02d879fd7be7ca6de614d5c5ab158aa79604e7d0ef289edef909254b9986e06516edf90ae64975fed1b08f1db825cdeaea0fbb9eb404813aeab240d4e55b798bd09f3c71a0521efb07c3b284562aeb4af22546badfe877d6f767a63cd275f4847d6ff43a431709cd24366c50c617e4f7ae70fc85ce66a731f47e93d7b51a218e84dbef01b5a16506afa13fd2f9f1806834c53175031395cd381f2a280363322ddf1732cccba2eb52d60b46ad08fa3c8c8be4"], 0x24}}, 0x48000) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2c, r2, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x164, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x120, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "0c2aa1c27869b391"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x24, 0x2, "22ebbfc08a9147fa7d3cdd3a8361b09c1d15f18c39c75316d3f8ea50d1429508"}}, {0xe4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xde, 0x1, "bea53ae0b61394bba4b22e09610762d930b5344946de7dca95bc38bcd3b5e5c7b25744bf14f40dc882f6c19c2e13c80913013a7309f9f71999aca0f95d2f79b1dfacb6edf2e5f18bb57dd254cd565178dc3fa2f549b9a547fc1be5ad77458875cdbd7e37cab869769503a5eb8dff68262504ec6323cbc8e93de0b999e71707fca268afb648bd76fa433183290363dc3646e515ba8a003df5885b46a945454bbde160c53dffe0b84a668bc13c2fc04e9495b158ca17d5446df6f9821c3cd3133f6acde8068d37813e6e2fa1c13f60c94b58eeaf452970d9fc523f"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000000}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9fec}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x164}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000000)={r4, 0x2}, 0x8) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) bind$netlink(r6, 0x0, 0x0) (async) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r11, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) (async) write$tun(r9, &(0x7f0000000340)=ANY=[], 0x4b) (async, rerun: 64) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000010000000000000003c000100000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 1.089510956s ago: executing program 0 (id=2340): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x800, 0xd, 0x9, 0x2b, r2, 0x80000001, '\x00', r6, r7, 0x5, 0x2, 0x3, 0xb}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) 1.062095469s ago: executing program 2 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30}, 0x4004810) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001705000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30}, 0x4004810) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001705000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) (async) 901.351717ms ago: executing program 3 (id=2343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340100001002010000000000000000000000000096a89177928ee42e9fee7cd7befa150a29bd5760b0ead917451b4f05e48f06f6a98fb799b9761755bc7a2aa3593cff7dbc58d5ae05cbb2db7b5de0bfe2a6a98ea7b1b0773d03edac24ab", @ANYRES8=r2, @ANYRESHEX=r2], 0x134}}, 0x40808) 901.062359ms ago: executing program 0 (id=2344): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x12, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 877.202459ms ago: executing program 4 (id=2345): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000640)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x1, @none, 0xfffd, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="40e3f222914fd1d9acbf33be4e8c15", 0xf}, {&(0x7f0000000480)="4d99fc9b194adb071de59d55df86e9c4d0be7c99ce54b56a9509825f2861365129aee87b4aa34cfaa062d11c570d285b9e97d8188a59532d3b4c74dc7090752e738a40019c373492b7f37abb7ef6ee2810fcc1fd8de6d7470a17070afcebfca22fb712397c3bd8cc6c213e1588585de700fa41bbab158ccafe1fb2a1605693fed3d970267bf813097f8d3d38b76cbe579d8f47d425cbb7e81c8cb3efe86185d358b49382c0c4f36a1119fc519b0085b3afffa664a3be0af728215a6248b18ea587c807ec012f81dac95a6165e60c4c2b6e71708c5e8508d0a755627e97e3987d99385735eafb5e149126", 0xea}, {&(0x7f0000000200)="0717a739ed9662b1fdca4eec859eb8b6288caf220e69fc593ac45c40da7f054a2c30ff3413772d", 0x27}, {&(0x7f0000000580)="9abb62a40b5f057294f0c03067064eb207a53f4444e147739ec0772d4500cbab8566d6d2385808c3f2f92737bf675756838871af7b230e1f5c7e9e5897f31a444872df1b88589090f5b4406fa8a96458884e298e425742df5fde56", 0x5b}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x4f0}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000a00000000001c140000fe0000010000000008000400", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@iv={0xc8, 0x117, 0x2, 0xb0, "071f773a4d45f4623c26c9c7b24b2c79135433cda78a6ce05dd7d4a122f59228868e38eefc4d56b046ef42c12c3ee9a6e9b0f8f62e86e9d879f2f7d11b1e27bc2214013d808a99b89c0445d65c049d626dc50742775ce6a802edfa31ca47eb0226471f70a88ae3bde126f25777e8e51a9054ceae457ab2773b7b630738ed507f7e6fd764509619b178acd8ae9c22ec983d42701413b571db0736f4715d79e59434a349911bc3da33849188866050c6de"}], 0xc8, 0x890}, 0x4804) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000041580000032abd7073fedbdf250008005e00a3ff92b33d077d0ea9a97d6624594e5b6b707a6ab357936b59f5a494ec154336879b", @ANYRES32, @ANYBLOB="0800010000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x802) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'lo\x00'}) 851.900167ms ago: executing program 2 (id=2346): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xe48, 0x100, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}]}, @timestamp_prespec={0x44, 0x4, 0xc5, 0x3, 0xa}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100"], 0x38}}, 0x0) 797.436449ms ago: executing program 3 (id=2347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x510, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2b2b}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 779.895075ms ago: executing program 4 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) 771.693528ms ago: executing program 2 (id=2349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0x0) 701.490011ms ago: executing program 0 (id=2350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4051}, 0x41) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) write$cgroup_int(r8, &(0x7f0000000480)=0x8, 0x12) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x4) 682.134931ms ago: executing program 3 (id=2351): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x4e22, 0x2, 0xa, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x0, 0x0, 0x20000000000003}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x4000000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x4e22, 0x2, 0xa, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x0, 0x0, 0x20000000000003}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x4000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) 634.706181ms ago: executing program 2 (id=2352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r2 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x8000) close(r3) 627.509155ms ago: executing program 4 (id=2353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) listen(r1, 0x49) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000, 0x10}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES64=r0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/4066, 0xfe2}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) 513.419784ms ago: executing program 1 (id=2354): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r9], 0x20}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) (async) ioctl(r3, 0x8b30, &(0x7f0000000040)) 512.994363ms ago: executing program 2 (id=2355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r1, 0x79f70b28a21117bf, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000050) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r1, 0x79f70b28a21117bf, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000050) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) (async) 510.052989ms ago: executing program 4 (id=2356): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x80, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff0}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x3, 0x1, 0x4, 0x4, 0x6, 0x6, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x81, &(0x7f0000000100)=""/129, 0x41000, 0x14, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x80000000, 0xa6}, 0x10, r2, r0, 0x0, &(0x7f00000002c0)=[0x1, 0x1], 0x0, 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000003c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"9c7be6877742be6b4838776ca2954d04", 0x0, 0x0, {0x7, 0x10001}, {0x9ef, 0x1}, 0xfff, [0x0, 0x2, 0x7f, 0x53be, 0x1, 0x3, 0x6, 0xcf76, 0x4, 0xfffffffffffffff8, 0x400, 0xb, 0x6, 0x8, 0xffffffff80000001, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"f54be883729858e77966a2a4f0dde98e", r4, r5, {0x7320, 0xc}, {0x5, 0x3}, 0x1, [0x100000001, 0x2, 0x7, 0x3, 0x1, 0x3, 0x7, 0x7, 0x0, 0xefd, 0x7ff, 0x2, 0xa8e, 0x7, 0x5, 0x2]}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r2, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@exit]}, &(0x7f0000000680)='GPL\x00', 0x73ba, 0x58, &(0x7f00000006c0)=""/88, 0x41100, 0x10, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000000740)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x4, 0xd11, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x5, 0x4, 0x5, 0x5}, {0x3, 0x2, 0x6, 0x5}, {0x3, 0x4, 0x3, 0x2}, {0x2, 0x3, 0xb, 0x6}, {0x1, 0x2, 0x5}], 0x10, 0xc93}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000980)={0x5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@fallback=r0, r3, 0x0, 0x2025, r7, @void, @void, @value=r8}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000009c0)={0x3}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000a00)=0x7, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x19, 0x14, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x993}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0xf4cf, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000000c80)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r7, 0x1, &(0x7f0000000d40)=[r0, r12, r13], &(0x7f0000000d80)=[{0x4, 0x4, 0xd, 0x2}], 0x10, 0x1}, 0x94) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000ec0)={'tunl0\x00', 0x0}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000f00)=r14, 0x4) setsockopt$inet6_tcp_int(r15, 0x6, 0x11, &(0x7f0000000f40)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_MCAST_REPLICAST(r14, 0x10f, 0x86) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000fc0)={'erspan0\x00', &(0x7f0000000f80)={'ip_vti0\x00', r16, 0x700, 0x7800, 0x4, 0x1, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x65, 0x0, 0xf7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@noop]}}}}}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r14) sendmsg$NL80211_CMD_NEW_INTERFACE(r14, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, r17, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(r15, 0xc020f509, &(0x7f0000001140)={r14, 0xcaad, 0x0, 0x5}) openat$cgroup_pressure(r18, &(0x7f0000001180)='io.pressure\x00', 0x2, 0x0) 486.34075ms ago: executing program 0 (id=2357): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 485.961032ms ago: executing program 3 (id=2358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000, 0x7fff}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x100000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r0, 0x100000000) 389.677097ms ago: executing program 4 (id=2359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a40009b00060a0b0400000000000000000200000514000480100001800b00010065787468647200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) 301.566269ms ago: executing program 1 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000040010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000100ffffffff", 0x58}], 0x1) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) 299.131488ms ago: executing program 0 (id=2361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x20}, {0x4, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@private=0xa010102, 0x1, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0x6}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000dc0), 0x4) (async) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000180)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x7999, 0x5, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/683], 0x2ac}}, 0x0) r6 = socket(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340), 0x4) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) (async, rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0x6235}, 0xc0, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000a80)="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", 0x12a, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/359], 0x167}) (rerun: 32) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r11, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r10, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) (async, rerun: 64) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000f7b0be5b2a3867f2b390876919865a84be5f10621f4c47f3f64b643fba50b5dad248e0a4c73ec99b0a3bc710cc51d86a28bdcac24500be871653b3431fea7fc3abfa5aaffe21b41a71ef53a971fb0db471e2e426fe7e6c736695145b1251917ea5b3a275a5e43d2da80ddfc24e16fe974b18a12aef36e7efcf78663f61d9d20edaad96e3865c9ea4e347346847e65bd4a498dbe9fcbe3267d47d2dc93440", @ANYRES16=r9, @ANYBLOB="100029bd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r5, 0x3, {0x1, 0xff}, 0x2}, 0x18) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000020104000000000000000002140000"], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (rerun: 32) 213.413447ms ago: executing program 3 (id=2362): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) write$nci(r6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="610502040106820b238605ee3077ffe4050b050a4cd2585d05d0d3a624e20fddd142cbf209d627c6101a9c517fe433eebd1c63efdade2cfb05d346a1768678da62b5967886f5d271bba694914305dae8c54f7ec5ef13631eb6b2fa27f740b3c915"], 0x61) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r10, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r11, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x90, 0x1f, "b3082cb8794c8a2487f64a896f221e85e87023cfc524a48057f372c5027820ddfd5074bba438574116ecd558b80457af6cbe44506fad7913aebefaac71fafac6654dd5b31e48178464e833c1dcfdf4ee950dbf7a198521fd1aab2c16c34fa86e33faa9c09cd31a2cdb9972ad306da26ad461c1d5e3a3ea80b56f0d8ea0eeb1795d311169f488e3e79ba2fa9d"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r13, 0x29, 0x7, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth1_to_batadv\x00'}) r14 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r12) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="5d4528bd70a051f77e8879deeafcdbdf25080000000c0002000100000000000000100007800c000180e8ff01002fa4313343106c4c491ad50372204e07d877a171bb67896113baf09c51b613ea9d253b76f7f72713f62fec2b0831fb96dd468ebb3dc85199a138df1a3bed88f81154fd84d705865cea7c8e6c5d522ed3b6731bb07e5322f8a9123150e0894c5a5c6d5004c1756cbfc652092c1f1a138582c05895add891a7d891d29511eb4bfcefd3e4d0bc", @ANYRES32, @ANYBLOB="0c000400f6ffffffffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 130.452477ms ago: executing program 0 (id=2363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0}, 0x20) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @random, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "be79e6", 0x10, 0x21, 0x0, @empty, @rand_addr=' \x01\x00', {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0xa, 0x1, "69cd1e", 0x1, "712603"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 21.357521ms ago: executing program 4 (id=2364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000002580)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0x2}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) close(0x3) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) 0s ago: executing program 1 (id=2365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e6cbd7bf0c99099ca842917790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c18c0ba7d1e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621", 0xfc}, {&(0x7f0000002300)="efc738a16cc28c4946440ccbad4a5f1d56d06c415fd74d3f7ae7fede9df25861ac370f6d867d6672f8e7024df494ac35bd04b35f68b11663b146746ef3f58b12cfd7cd648c12a75f123d9cf5f9c10bcb48f942b34db9fbddcea5e0c3999da708bc472cd687c8f27748d1839e219628ad9687678201b445a59e0da96ecd38c0ce8bca1acbc78f9a3335e5db0eb0cd454006b4e3a5988e038b05322dad026df32c378b20fd75460e1205020d105c5115d2893e413b8b80e36946d011863b5a21472f1bd0d48b0c58211aff50a91e31112d632b56886d75ee84f49ffe015e33237150d3a3c4d871d348fa8e16f94c9e9d1e08d37c8b58f05f1a7c7133aae433f4564b8120d926c8ed8945d774620ec50deb1b3de7e66655d52f397f1811a024d870a4be151a15908b871992af52db41a28cb43633e1f9727e5373e318da8155d3e00b5b5eb28da52e8d364ec5de7614d8fd52401a6367e32464752d7379aaee4b08445ab9ca96663e47584d7470acf0312c545ffcee66d1903bc965caf4d66faf0c8e82ce4bd9c769d3440aca255e97c95a9810f33244d3963ec5610d0dcf62394ba8241351909acab1c154d1796ab44f683a08b307cc1905573642f6b2ef46e764d7f6d692de0fdefe6363a586f50d385e14b5b4209fd4efd93668ef020eaa8e3a70e6511438f81a2e6236b90628ac919ba9eeb04a9fd736a2681489427fa2fbd7f9fe559db1070fe3876e3217626fa811af2b2e3efb3587b19460f885c277e81a94277bbd3f19d4427538a4d93185e6647c4b8ffba034fe43e288dbb2eaf46299255aa246eb720a58224fc8490ed19cc40edd59552ec36b4645edc4e72e4c0ec8c48be18626f32c6aa982f821c40a0ba2d9b19c18a2e3a6b82e562c11620551de6364cc836ccd438823cbb2be8883a46d1141e136fdef2b1b19b879bd1be9a9993265758044ec33a87c625607ceda2e8245ebd7610b8c779957a1186a1611bd0caf66de3bcfbe904e28bae0174818f47eec3e79d74624b57d0b0dd173bfb5dbc4292e817bb03a0725bf11769fcf53ea95ef538be9a33c841f618fe4bc731cd8c826caec2691aee93ca57624e693947484163b3ae01d947155b499f56d7283b7d82c8000ba4a5457a1b1e40a17b7d4a54b45ebb0e8322e9dc9e2743a030c54f637381f10676d747cf8d1f982285187126b6da1e6fb374a8d87c956f9ad7c0328e8452fb6801e1c4db11dba4fd3ac3c382a05ab7148dcfb2266eac19399469c7aaf60eecbb1a92d6abf4bdda90752059106149645c6f5ea20b66c3ca634145c64b0c86ff46edc2b7d6269df97efd2f3e6fcda4cc9dc636951a9d6f0dc01f51ae273dcfeb66ec749d3cfe7cb11c45a473e126cab55450c5ffa59b3f3afb686f8258200bb8a529faff7f988d632300b890f73d51c60c64f4679cd86cc1f4602089f93ba03a51c846eed467432084f71c38413d0d9d1b83f9605207e9b28142d7bf94c7aedcd19f0fc93d4b95a1fea7babe2cb8de1a1a08f3a2d8d0aa1e718c1460e15329700e9e14c5cffff9c7a62b09df0a025e96ab03fa316e50d5b3b01ca4c5e0c6ac23f9703462e14f5fb6d5c1c2514d714746db1b5a5cee1111640114a9556cc518168b161b13e989e8f9ac51e2c01f7fbefea6ce6a8714c47279093fbb59fb760b7dd3138004343063485b506b120728d22c422324871c34f2dc7c53ce0bbab87bcd3efcf8fd4fa2bce12a10b00bdbb24791758516d02012613dd74caac26a176392ec11250e81d2566b2373a2b6536c3e2f28742cbca11b201934d19b42241d94a9da5b282eff530ddd3ed20318be47e9264b0a8fb0745e78c9c1f612ed03479ae14a176cfe52edb5eb2712c21fae58bf4c4143da57a9ee28acede9f56700bfa0f5c51da975fec9f8141b76cacdbfe69be80a325666cbd8fe458ed7f8965166b120ffb5e28dfbb5b3141cf963fd07548a4a35d2c749ce3adea69e0e0d4fd4158142fb7050d477fc51b2ef7e6f0e09cb8016a9bdfff7a200cd992a71a156339160b5757e163a14246c94fe11a0e210c5946b3147bc6870c9900e102b82e9a66a243a2e23e7ff98f7d9f017301740ac157f804afebf2f5bebbbf68583d86b01daaf02bc086bc2c4ddecf1a30795cb23a37bcff24ac3307545acc9bc7949edb2ea5b851ceb3bf2d34f049f1664100b0fc8ea326000e032bc5e50cdec80803a468e334002cfa7ccbef11f951f7679f403ce0cff42101702999218a15396952a3faa0154764c4359f037414bad967afca45285bd5ab985364e6b8bec744c00b3f95010eda041112ace0f09833c9b1049c36f03cca4e9264485d5784466e4b908b4b6216bd935abf49553dcdd4e48bc39f8b22f9b4bef1339b5121ad34ef3df4051333b8ea4ce83cff7abc863c43440ab6892281bc96fbf848ae9e82cb1a2d791b8bcf98ddb65baada7c08075dfe27cd06aedb0ff458880d600ba5bdb14c0858415c43c0aa6660298a944d568487853e7dac0c955d1268f70874756f6316e6181313f215ed3724ef760d89df82a178b51169506ada831725827c62b80f2e47fdac38b86192f68fe2fe5794f7adeac9c5bfc9e1fa8d5199fd7df202ee6e1ba38d40b7750f900771ea8e4f00d4c25065cf8867dc929c892f8e4652040862d48e8af1a48fc500882e874995c48cace7754bf0be2765be83001958946c8cb794f8813816e505de401d789223bc0af5739045751640272afb39d45d2be00cac743bfbce9a9a7f4b8f55511f3ad26264a09c19f26ed1b45b0fb254f98e5e1473bbccaa21219b327d1bbedab4a4dfdf516259feef632f72f5092bf78d886772e73ed2250f5ec20ac6fa66cf8c2626d3b5973ce9f4f95ead5c8a65db49966de0fd9e9ce97894b764ec3f75093a4f3ec4507e2507256c59a52969fdabfc100e6ae23acf121bb3acf34d190211b4001b632b10a252be0430bd107ee884a0ba16fc50eb717ae36aba0dbb130dc64b5cc21d1fe87856c8787474333c3a793fe81c9b9b56ee41fd2e1f2d6150495dc3379bf66fa4d53f868047b6c50f8c5a4c2ea2a355b5eb1ab3d3f32791b9ffcb08698dbe841f3338be19e5d927dfb14711b4aed2435fc53340162c878bee30d9d7d2409be614240540f7f5702be3e2ba38d8f999a624acdcaef37dabb86d225f35e92691de25bf68e0115e6680107f07380b28254e9df2e54a5179ed064fc9744dcb553b56720171b0325876c9b82d0120add35ac3f38b41fc28b149f944c66555051ca92341a953739a1674fae837bdb8d8d10adf7ef74092f505375c8414d82805176b680908d5c0f6c2a14bd526631c5abeccaf3469e3ae01c4db2371a77219ee109a83d62aef26efff181f240a163bc0cb253405018b69ba8d62ac582cb186c8c89e3c140bffaa4d99fab17975ccd925efab24b6a181773fe1daac55f18ab1e0264f8d1f7aabe395ce80792bb77cbd0b58fcd928ad74f0342876e098c93f9611887022a92e4d9b1da9c911bb7d762bdcdba36f749e16aad0bcf6f8596b2b50fc65a6811b709d9ad6593c2eb9867af3a276de26d6a6f87ec5173ca79e88122bf5151e98dee268fc8a79a4e83f2427a02ed702b0926ecf0b4bb1a3051f0a4d3cf31038fb600c7eb0cedc0d59ac99bff3b31a9065efecca740fcd948fb9c2eb6197b8226c397de7a4c268fa41877ca1618f77ffa93b2e17348301899bb1a5b389422d7364eb1e5ddd0daf2065894cf10886ce0d3920c0a283de54ec57942d456579851ca3590c26f8c360b7cbaa0328c29532aad80b2627b25641e613b38a2accf5881bbbc7086085a8fcf25895da9244c7dd773bff995e159ea3899487f202d97f2977e4527f75ec64a85cb21b120828b2ac24c711ea2b7cba4b0a195a1840aec7d34a4745b42596f186820584b4b75af29fba5b6d3623718efeebf52e848fe48160fbfd5a0f6511649e3e1c58e599c6d9c7597e5e12227e281204921819fbf9e0c9bd16d598aec601bbdc87e8d94225368cb65da83cbb722d79957a7c0bcea91a45f9b52558ccdcd2754da40fc0fbf78abd06c05f1fc7381eb06e4a0afcca6db7cace72aaacdf498cf9ca42c9b3c6615d9df167ef2d1b868e56a9652beea2f72530f24fe373333d9a524ed48e52e51d3784649a9b9a9f1cfdfabd3cdf832b2dda019bb4e1e1e71e75f88cbc3a16a6848ac2385024abb76249841f630008f3805462604d65eebf4e14b6c2ad9f9e2dc2a5a55d7ce5dde8307ac655b4dfcc99d0f050e838d310957915b4fc838f26f2659d72f801e8c62c6477cc33d7f60e659881422ddad61819b93f0f7817acab429b3c7d3923abce00993ada7fd7e5987cab4f4aea02acabad3f27f223c0108f44d8d5833932b4eb427f83f7b336f214293f8adc0ed2cd45d792cc69a84e01f6fe7020f96cd05c1dd792f30f1dec2c21ecf00ca956e4a2c71b52b1c298ae6e319cf845b97b60e07ab82afa30ffe94c16efb971959951746edde9639bb055feebe25611b595e23cade8420a2ee207977ab47dd559f09d17823e6184f83c44b881e4baa5d9abd6e2f8156a1fff943e61eea0e9b2fe26236e8288c5116ae9a8b0f110794f629c800d08729ea2000d56dbe404a747c149b7890bd6ac91319200b7078e2e039a29f45ffac3ecbafbc8b00db9f2e8eeb92ebf0a494bd4616925c9b289522c76f87d2c73342db85cc9a3ff09ae84c2c4b3618ba220bb6442968d9ae9eec02e577412fbedd827678a320b7dd8503d0bab20ca7fe7d982330506fc38eaaa6f1cde45377b08f0b66590b75fd6d390da80d01bf6c6dfc12f3b31312b75d1c6e8c6b86527b4f7c5464465b655b1c76a2b7dc202cf50f88f41bae5d7b8e8c38f3b254628f2418e2fe00b63f8162c60cd95fc9b0b6bba3a0989bbb858d2f1c892713e3bdc1a50bddfbb5c11f242464183ee9b85734b5683c242a264ea415df1284ffd87a36516518a09171cbad0149753e836aa41b27ff441460cf0f0d59ca9c1023b2bac5be5512827d4a64e6d7283e335682f9f4e0ad5471839e447b803c6b43d7daa2709536bc2ab955880cd25d1a50aa78fd646e31b3382426e1e77429d37712968223046698b51362b974a6c6782bfb17f40ade50c82523c1c87b59ba4cab6db7ea321b345133ef90039ddf3465043f05e0c1f0d9322aaf67408cf0c81162c17fd0a3fa195df5b6916b008110e4d713810a268d360a4056d36887765410b420101fc35833c3b0ec5b1990eaafdedcec60154fbbf8665c2ad750b4717235f3eb5f508dbc8d8119b7ccad544ff12b4837de891c0bc17d8316d1faaa1b178de7c335501d42cd03cec3cd364d48d73e1e1c19320f5d9842f746cb3cc10ce0079a9faec3f23ee2cdc84503bd2f86c175d3fd7951c4a7267908aaccde39326f4689eda42da763103ebb2383878851af1679def7bd14a78d6f387bd0042", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="00160000", @ANYRES16=r1, @ANYBLOB="f78c00000000000000000100000008000200030000001200010076657468305f6d616376746170000000"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): tdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.269607][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.301772][ T6099] Zero length message leads to an empty skb [ 83.316938][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.326600][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.339934][ T6113] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 83.356952][ T6117] team0: No ports can be present during mode change [ 84.125037][ T6147] netlink: 'syz.0.59': attribute type 7 has an invalid length. [ 84.171974][ T6147] netlink: 'syz.0.59': attribute type 8 has an invalid length. [ 84.194585][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.670071][ T6175] __nla_validate_parse: 10 callbacks suppressed [ 84.670092][ T6175] netlink: 104 bytes leftover after parsing attributes in process `syz.0.66'. [ 84.912501][ T6188] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 85.074843][ T6195] netlink: 'syz.4.72': attribute type 4 has an invalid length. [ 85.352167][ T6206] Unsupported ieee802154 address type: 0 [ 85.532276][ T6210] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 85.537027][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 85.562793][ T6213] block nbd0: Unsupported socket: should be TCP or UNIX. [ 85.626227][ T6218] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 85.881779][ T6229] netlink: 'syz.4.82': attribute type 11 has an invalid length. [ 85.883818][ T6227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.101144][ T6235] bridge2: entered promiscuous mode [ 86.106482][ T6235] bridge2: entered allmulticast mode [ 86.197591][ T6241] Bluetooth: MGMT ver 1.23 [ 86.272674][ T6244] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 86.299865][ T6246] warning: `syz.0.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.339864][ T6244] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 86.410520][ T6246] netlink: 84 bytes leftover after parsing attributes in process `syz.0.90'. [ 86.459622][ T6247] syzkaller0: entered promiscuous mode [ 86.465145][ T6247] syzkaller0: entered allmulticast mode [ 86.493142][ T6250] netlink: 'syz.1.89': attribute type 29 has an invalid length. [ 86.515924][ T6262] nbd: must specify an index to disconnect [ 86.803455][ T24] cfg80211: failed to load regulatory.db [ 86.872996][ T6275] ipt_REJECT: ECHOREPLY no longer supported. [ 86.963792][ T855] IPVS: starting estimator thread 0... [ 87.060627][ T6281] IPVS: using max 32 ests per chain, 76800 per kthread [ 88.203764][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 88.371638][ T6323] netlink: 'syz.3.101': attribute type 29 has an invalid length. [ 88.425067][ T6329] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 88.787697][ T855] IPVS: starting estimator thread 0... [ 88.861949][ T6351] bridge0: port 3(bond1) entered blocking state [ 88.888386][ T6354] IPVS: using max 29 ests per chain, 69600 per kthread [ 88.908218][ T6351] bridge0: port 3(bond1) entered disabled state [ 88.914797][ T6351] bond1: entered allmulticast mode [ 88.947214][ T6351] bond1: entered promiscuous mode [ 89.033006][ T6367] team0: Device wireguard0 is of different type [ 89.052495][ T6369] netlink: 108 bytes leftover after parsing attributes in process `syz.3.112'. [ 89.223934][ T6381] netlink: 'syz.2.116': attribute type 13 has an invalid length. [ 89.408720][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 89.418715][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 89.469783][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.478740][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.592738][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.608893][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.808547][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 89.820040][ T3501] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.828388][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 89.872574][ T6400] ip6erspan0: entered promiscuous mode [ 89.881574][ T6400] ip6erspan0: entered allmulticast mode [ 89.927896][ T3501] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.957662][ T3501] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.985780][ T3501] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.039721][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.066874][ T6407] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 90.148306][ T3501] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.208767][ T3501] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.217518][ T3501] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.293715][ T3501] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.475989][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 90.518805][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 90.568939][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 90.593893][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 90.721091][ T6449] team0: Device gtp0 is of different type [ 90.811611][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 90.838752][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 90.855827][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 91.231984][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 91.256941][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 91.286950][ T6471] netlink: 'syz.4.141': attribute type 14 has an invalid length. [ 91.316922][ T6475] netlink: 'syz.0.143': attribute type 29 has an invalid length. [ 91.332245][ T6471] netlink: 'syz.4.141': attribute type 13 has an invalid length. [ 91.391438][ T6479] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 91.537361][ T6488] netlink: 'syz.0.148': attribute type 3 has an invalid length. [ 91.541437][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 91.626095][ T6454] infiniband syz2: set active [ 91.632329][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 91.639543][ T6454] infiniband syz2: added vxcan1 [ 91.675512][ T6490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.721416][ T6454] syz2: rxe_create_cq: returned err = -12 [ 91.752162][ T6454] infiniband syz2: Couldn't create ib_mad CQ [ 91.773678][ T6454] infiniband syz2: Couldn't open port 1 [ 91.867752][ T6503] netlink: 'syz.0.151': attribute type 13 has an invalid length. [ 91.877361][ T6454] RDS/IB: syz2: added [ 91.893570][ T6454] smc: adding ib device syz2 with port count 1 [ 91.909774][ T6454] smc: ib device syz2 port 1 has no pnetid [ 91.927457][ T5979] vxcan1 speed is unknown, defaulting to 1000 [ 91.950857][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 91.957476][ T6506] netlink: 'syz.2.153': attribute type 10 has an invalid length. [ 91.976789][ T6506] veth0_virt_wifi: entered allmulticast mode [ 92.004337][ T6506] team0: Port device veth0_virt_wifi added [ 92.541553][ T6517] vlan0: entered promiscuous mode [ 92.567060][ T6517] vlan0: entered allmulticast mode [ 92.584224][ T6517] veth0_vlan: entered allmulticast mode [ 92.643395][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 92.702166][ T6520] bond1: option min_links: invalid value (18446744073709551614) [ 92.724218][ T6520] bond1: option min_links: allowed values 0 - 2147483647 [ 92.737201][ T6520] bond1 (unregistering): Released all slaves [ 93.459230][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 93.528409][ T6551] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 94.115045][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 94.687454][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.695248][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.874795][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.889986][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.978829][ T6584] ip6erspan0: left promiscuous mode [ 94.984094][ T6584] ip6erspan0: left allmulticast mode [ 95.010477][ T6454] vxcan1 speed is unknown, defaulting to 1000 [ 95.010640][ T1113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.047530][ T1113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.097289][ T1113] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.136394][ T1113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.228725][ T6608] netlink: zone id is out of range [ 95.255274][ T6608] netlink: zone id is out of range [ 95.262297][ T6605] __nla_validate_parse: 5 callbacks suppressed [ 95.262314][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.4.183'. [ 95.287600][ T6608] netlink: zone id is out of range [ 95.295923][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 95.339215][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'. [ 95.660128][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'. [ 95.882174][ T6646] netlink: 696 bytes leftover after parsing attributes in process `syz.3.194'. [ 96.280704][ T6669] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 96.308214][ T6669] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 96.318857][ T6669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.348140][ T6670] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.415949][ T6679] tipc: Started in network mode [ 96.421110][ T6679] tipc: Node identity dab1df2d2d47, cluster identity 4711 [ 96.440123][ T6679] tipc: Enabled bearer , priority 0 [ 96.466923][ T6678] syzkaller0: entered promiscuous mode [ 96.467628][ T6682] x_tables: duplicate entry at hook 2 [ 96.478191][ T6678] syzkaller0: entered allmulticast mode [ 96.497428][ T6682] IPVS: set_ctl: invalid protocol: 43 172.20.20.13:20003 [ 96.505367][ T6678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.537244][ T6674] tipc: Resetting bearer [ 96.586221][ T6674] tipc: Disabling bearer [ 97.232446][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.221'. [ 97.290027][ T6745] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 98.613562][ T6777] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 98.622904][ T6777] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 98.840697][ T6763] pim6reg1: entered promiscuous mode [ 98.846100][ T6763] pim6reg1: entered allmulticast mode [ 99.007256][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.244368][ T6798] veth1_macvtap: left promiscuous mode [ 99.269413][ T6798] macsec0: entered promiscuous mode [ 99.537578][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 100.000809][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 100.130014][ T6867] xfrm1: entered allmulticast mode [ 100.262858][ T6874] tipc: Can't bind to reserved service type 2 [ 100.297105][ T6882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.326954][ T6879] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 100.376828][ T6887] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 100.538918][ T6899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.265'. [ 100.573907][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 100.701097][ T6903] batadv1: entered allmulticast mode [ 100.711971][ T6908] netlink: 168 bytes leftover after parsing attributes in process `syz.1.267'. [ 101.189620][ T6937] netlink: 104 bytes leftover after parsing attributes in process `syz.3.274'. [ 101.276861][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 101.312901][ T6937] veth1_to_bond: entered allmulticast mode [ 101.391262][ T6938] bond0: (slave bond_slave_1): Releasing backup interface [ 101.457891][ T6938] veth1_to_bond (unregistering): left allmulticast mode [ 101.548809][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 101.744123][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 101.813968][ T6975] netlink: 332 bytes leftover after parsing attributes in process `syz.3.287'. [ 101.829567][ T6976] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 101.865133][ T6976] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 102.657850][ T6996] tipc: Enabled bearer , priority 0 [ 102.716086][ T6996] tipc: Resetting bearer [ 102.828403][ T7006] syzkaller1: entered promiscuous mode [ 102.833934][ T7006] syzkaller1: entered allmulticast mode [ 103.169279][ T7030] netlink: 277 bytes leftover after parsing attributes in process `syz.4.303'. [ 103.229349][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 103.279843][ T7033] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 103.297931][ T7033] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 103.313623][ T7032] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 103.341469][ T7032] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 103.379573][ T7040] netlink: 'syz.3.302': attribute type 16 has an invalid length. [ 103.387453][ T7040] netlink: 'syz.3.302': attribute type 17 has an invalid length. [ 103.460914][ T7040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.477581][ T7047] xt_policy: output policy not valid in PREROUTING and INPUT [ 103.496383][ T7028] vxcan1 speed is unknown, defaulting to 1000 [ 103.508977][ T7047] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 103.527666][ T7047] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 103.717674][ T7062] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 103.734310][ T855] tipc: Node number set to 2413890833 [ 103.978447][ T7075] veth1_virt_wifi: entered promiscuous mode [ 103.995079][ T7075] veth1_virt_wifi: entered allmulticast mode [ 104.033099][ T7080] tipc: Started in network mode [ 104.038921][ T7080] tipc: Node identity 8235ad986ed6, cluster identity 4711 [ 104.049311][ T7080] tipc: Enabled bearer , priority 0 [ 104.088714][ T7073] syzkaller0: entered promiscuous mode [ 104.094318][ T7073] syzkaller0: entered allmulticast mode [ 104.190604][ T7080] tipc: Resetting bearer [ 104.243321][ T7070] tipc: Resetting bearer [ 104.316037][ T7070] tipc: Disabling bearer [ 105.317915][ T7155] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 105.415013][ T7159] geneve2: entered promiscuous mode [ 105.420465][ T7159] geneve2: entered allmulticast mode [ 105.431630][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.449730][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.459803][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.478313][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.565716][ T7170] __nla_validate_parse: 6 callbacks suppressed [ 105.565735][ T7170] netlink: 88 bytes leftover after parsing attributes in process `syz.2.346'. [ 105.569145][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'. [ 105.822686][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 105.903860][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 105.931005][ T7189] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.964173][ T7189] tipc: Enabled bearer , priority 0 [ 105.992435][ T7189] syzkaller0: entered promiscuous mode [ 106.001190][ T7189] syzkaller0: entered allmulticast mode [ 106.065849][ T7187] tipc: Resetting bearer [ 106.102787][ T7187] tipc: Disabling bearer [ 106.143900][ T7198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.357'. [ 106.148666][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 106.162050][ T7201] bond1: left allmulticast mode [ 106.167223][ T7201] bond1: left promiscuous mode [ 106.173332][ T7201] bridge0: port 3(bond1) entered disabled state [ 106.248818][ T7201] bridge_slave_1: left allmulticast mode [ 106.262943][ T7201] bridge_slave_1: left promiscuous mode [ 106.282102][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.301881][ T7201] bridge_slave_0: left allmulticast mode [ 106.317167][ T7201] bridge_slave_0: left promiscuous mode [ 106.323807][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.396700][ T7209] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.360'. [ 106.496950][ T7217] bond1: option miimon: invalid value (18446744073709551585) [ 106.509437][ T7217] bond1: option miimon: allowed values 0 - 2147483647 [ 106.528602][ T7217] bond1 (unregistering): Released all slaves [ 106.586988][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 106.621745][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 106.687921][ T7227] syzkaller0: entered allmulticast mode [ 106.739460][ T7235] syzkaller1: entered promiscuous mode [ 106.744975][ T7235] syzkaller1: entered allmulticast mode [ 106.846123][ T7243] netlink: 72 bytes leftover after parsing attributes in process `syz.4.370'. [ 107.996156][ T7255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.151176][ T7268] dvmrp0: entered allmulticast mode [ 109.358418][ T7339] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 109.384902][ T7339] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 109.393713][ T5979] IPVS: starting estimator thread 0... [ 109.499404][ T7348] IPVS: using max 30 ests per chain, 72000 per kthread [ 109.606242][ T7352] erspan0: entered promiscuous mode [ 109.617090][ T7352] erspan0: entered allmulticast mode [ 109.781728][ T7376] netlink: 'syz.2.405': attribute type 26 has an invalid length. [ 109.948143][ T30] audit: type=1804 audit(1760581673.410:2): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.409" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=503 res=1 errno=0 [ 109.992110][ T30] audit: type=1800 audit(1760581673.420:3): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.409" name="cgroup.controllers" dev="tmpfs" ino=503 res=0 errno=0 [ 110.065692][ T7393] delete_channel: no stack [ 110.083087][ T7398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.170723][ T7403] batman_adv: batadv0: Adding interface: dummy0 [ 110.177125][ T7403] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.205399][ T7403] batman_adv: batadv0: Interface activated: dummy0 [ 110.240794][ T7403] batadv0: mtu less than device minimum [ 110.248162][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.260361][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.272421][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.284367][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.296282][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.308184][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.320148][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.332013][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.343928][ T7403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.504399][ T7424] xt_policy: output policy not valid in PREROUTING and INPUT [ 110.573955][ T7430] ip6erspan0: entered promiscuous mode [ 110.583639][ T7430] ip6erspan0: entered allmulticast mode [ 110.667786][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.155346][ T7465] __nla_validate_parse: 8 callbacks suppressed [ 111.155366][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 111.177026][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 111.206334][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 111.257142][ T7473] netlink: 'syz.3.434': attribute type 2 has an invalid length. [ 111.314664][ T7473] netlink: 244 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.365487][ T7473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.388705][ T7473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.395835][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 111.538229][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.437'. [ 111.599000][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 111.654430][ T7484] bond2: entered promiscuous mode [ 111.659698][ T7484] bond2: entered allmulticast mode [ 111.665268][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.855970][ T7494] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'. [ 112.419757][ T7519] hsr_slave_0 (unregistering): left promiscuous mode [ 113.113189][ T7578] netlink: 'syz.3.463': attribute type 5 has an invalid length. [ 113.284561][ T7590] wg1: entered promiscuous mode [ 113.289797][ T7590] wg1: entered allmulticast mode [ 113.465024][ T7600] Bluetooth: hci0: service_discovery: expected 4 bytes, got 70 bytes [ 113.652298][ T7610] netlink: 'syz.3.476': attribute type 9 has an invalid length. [ 114.443506][ T7684] netlink: 'syz.4.495': attribute type 2 has an invalid length. [ 114.789247][ T3501] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.806070][ T3501] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.821149][ T7690] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 114.830915][ T3501] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.868136][ T7631] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.029988][ T7702] nbd: device at index 2 is going down [ 115.139059][ T7710] geneve3: entered promiscuous mode [ 115.143858][ T7712] IPVS: length: 239 != 24 [ 115.151374][ T7710] geneve3: entered allmulticast mode [ 115.163587][ T7714] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 115.265089][ T7712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.295926][ T7620] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.429887][ T7620] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.619961][ T7726] net_ratelimit: 12 callbacks suppressed [ 115.619982][ T7726] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 115.676594][ T7620] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 115.705769][ T7727] gretap2: entered promiscuous mode [ 115.719811][ T7727] gretap2: entered allmulticast mode [ 115.828381][ T7740] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 115.836946][ T7740] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 115.938111][ T7747] tipc: Enabled bearer , priority 0 [ 115.952369][ T7747] syzkaller0: entered promiscuous mode [ 115.958163][ T7747] syzkaller0: entered allmulticast mode [ 115.981569][ T7742] tipc: Resetting bearer [ 115.997600][ T7741] tipc: Resetting bearer [ 116.022762][ T7741] tipc: Disabling bearer [ 116.343678][ T7768] __nla_validate_parse: 33 callbacks suppressed [ 116.343699][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 116.835606][ T7802] netem: unknown loss type 0 [ 116.840638][ T7802] netem: change failed [ 116.855360][ T7804] dvmrp1: entered allmulticast mode [ 116.915567][ T7712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.939917][ T7712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 117.036133][ T7712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.053534][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 117.062689][ T7712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 117.076176][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 117.110623][ T7812] bridge0: port 3(vlan2) entered blocking state [ 117.117010][ T7812] bridge0: port 3(vlan2) entered disabled state [ 117.123984][ T7812] vlan2: entered allmulticast mode [ 117.129677][ T7812] bridge0: entered allmulticast mode [ 117.136789][ T7812] vlan2: left allmulticast mode [ 117.142484][ T7812] bridge0: left allmulticast mode [ 117.190062][ T7712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.205909][ T7712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 117.254331][ T7814] tipc: Enabled bearer , priority 0 [ 117.307380][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 117.324229][ T7814] syzkaller0: entered promiscuous mode [ 117.330736][ T7814] syzkaller0: entered allmulticast mode [ 117.393094][ T7624] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 117.404886][ T7624] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 117.427382][ T7814] tipc: Resetting bearer [ 117.448195][ T7624] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 117.466698][ T7624] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 117.490204][ T7813] tipc: Resetting bearer [ 117.599846][ T7831] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 118.338901][ T10] tipc: Node number set to 3974344088 [ 118.663401][ T7813] tipc: Disabling bearer [ 118.678753][ T6930] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 118.687683][ T6930] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.761054][ T6930] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 118.788512][ T6930] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.839893][ T7862] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 118.868202][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.0.553'. [ 119.214194][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 119.228471][ T7887] syzkaller1: entered promiscuous mode [ 119.251165][ T7887] syzkaller1: entered allmulticast mode [ 119.259416][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 119.313910][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 119.339866][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.564'. [ 119.463792][ T7903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.522838][ T7913] netlink: 'syz.0.567': attribute type 29 has an invalid length. [ 119.699487][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.960092][ T7930] netlink: 'syz.3.574': attribute type 2 has an invalid length. [ 119.998527][ T7936] netlink: 'syz.1.577': attribute type 11 has an invalid length. [ 120.013957][ T7936] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 120.348906][ T7959] tipc: Enabled bearer , priority 0 [ 120.371847][ T7959] syzkaller0: entered promiscuous mode [ 120.377370][ T7959] syzkaller0: entered allmulticast mode [ 120.458107][ T7959] tipc: Resetting bearer [ 120.499456][ T7956] tipc: Resetting bearer [ 120.544371][ T7956] tipc: Disabling bearer [ 121.134885][ T5827] IPVS: starting estimator thread 0... [ 121.228338][ T8012] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.418341][ T8023] __nla_validate_parse: 7 callbacks suppressed [ 121.418361][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 121.620015][ T8028] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 121.687068][ T8028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.765399][ T8028] veth9: entered promiscuous mode [ 121.778279][ T8028] bond4: (slave veth9): Enslaving as an active interface with a down link [ 121.819534][ T8028] veth11: entered promiscuous mode [ 121.966616][ T8028] bond4: (slave veth11): Enslaving as an active interface with a down link [ 121.976606][ T8039] bond4: entered allmulticast mode [ 122.288615][ T8053] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.337208][ T8063] netlink: 92 bytes leftover after parsing attributes in process `syz.3.612'. [ 122.470343][ T8071] netlink: 104 bytes leftover after parsing attributes in process `syz.1.614'. [ 122.596307][ T8076] bond0: (slave bond_slave_0): Releasing backup interface [ 122.634282][ T8076] bond0: (slave bond_slave_1): Releasing backup interface [ 122.682988][ T8076] team0: Port device team_slave_0 removed [ 122.701963][ T8076] team0: Port device team_slave_1 removed [ 122.729313][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.758183][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.768419][ T8076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.927600][ T8086] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 123.290577][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 123.337770][ T8117] xt_l2tp: v2 sid > 0xffff: 1114112 [ 123.792705][ T8155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.633'. [ 123.852546][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 123.872418][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 123.877336][ T8166] tipc: Enabling of bearer rejected, failed to enable media [ 123.892774][ T8167] tipc: Enabling of bearer rejected, failed to enable media [ 124.006059][ T8175] tipc: Started in network mode [ 124.011944][ T8175] tipc: Node identity 7ef38fa66548, cluster identity 4711 [ 124.019776][ T8175] tipc: Enabled bearer , priority 0 [ 124.030117][ T8175] syzkaller0: entered promiscuous mode [ 124.035711][ T8175] syzkaller0: entered allmulticast mode [ 124.092646][ T8171] tipc: Resetting bearer [ 124.106497][ T8171] tipc: Disabling bearer [ 124.160649][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 124.165696][ T8186] netlink: 'syz.3.642': attribute type 13 has an invalid length. [ 124.384114][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.391617][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.538578][ T8213] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 124.565912][ T8213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 124.587615][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.604185][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.635618][ T8219] IPVS: length: 8 != 151072349488 [ 124.826652][ T8226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.899824][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 124.900148][ T8213] dummy0: entered promiscuous mode [ 124.905939][ T43] syz2: Port: 1 Link DOWN [ 124.919670][ T8213] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 124.937811][ T7624] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.953464][ T7624] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.967688][ T7624] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.977505][ T7624] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.000681][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 125.006864][ T7624] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.026809][ T7624] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.070679][ T7624] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.088446][ T7624] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.160392][ T8233] netlink: 244 bytes leftover after parsing attributes in process `syz.3.650'. [ 125.304076][ T8240] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.499149][ T8253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.519620][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 125.618265][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.637739][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.656613][ T8268] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 125.665688][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.731129][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.785123][ T8272] bond1: (slave geneve2): making interface the new active one [ 125.802591][ T8272] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.829269][ T7624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.861428][ T7624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.889767][ T7624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.922512][ T7624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 126.039945][ T8289] syzkaller0: entered promiscuous mode [ 126.061047][ T8289] syzkaller0: entered allmulticast mode [ 126.331377][ T8307] netlink: 'syz.3.676': attribute type 11 has an invalid length. [ 126.365010][ T8312] syzkaller1: entered promiscuous mode [ 126.386326][ T8312] syzkaller1: entered allmulticast mode [ 126.405520][ T8309] syzkaller0: entered promiscuous mode [ 126.412650][ T8309] syzkaller0: entered allmulticast mode [ 126.578420][ T8328] __nla_validate_parse: 2 callbacks suppressed [ 126.578437][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.681'. [ 126.599210][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 126.616880][ T8330] bond1: option all_slaves_active: invalid value (222) [ 126.630570][ T8330] bond1 (unregistering): Released all slaves [ 126.698294][ T8329] bond1: option all_slaves_active: invalid value (222) [ 126.710869][ T8329] bond1 (unregistering): Released all slaves [ 126.747039][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 126.865233][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 126.887320][ T8340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.685'. [ 127.180655][ T8348] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 127.370128][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 127.795603][ T8399] FAULT_INJECTION: forcing a failure. [ 127.795603][ T8399] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.805897][ T8394] x_tables: duplicate underflow at hook 2 [ 127.842068][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.0.707 Not tainted syzkaller #0 PREEMPT(full) [ 127.842092][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.842111][ T8399] Call Trace: [ 127.842118][ T8399] [ 127.842127][ T8399] dump_stack_lvl+0x189/0x250 [ 127.842159][ T8399] ? __pfx____ratelimit+0x10/0x10 [ 127.842182][ T8399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.842202][ T8399] ? __pfx__printk+0x10/0x10 [ 127.842236][ T8399] should_fail_ex+0x414/0x560 [ 127.842264][ T8399] _copy_to_user+0x31/0xb0 [ 127.842286][ T8399] simple_read_from_buffer+0xe1/0x170 [ 127.842319][ T8399] proc_fail_nth_read+0x1b3/0x220 [ 127.842346][ T8399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.842373][ T8399] ? rw_verify_area+0x2a6/0x4d0 [ 127.842402][ T8399] ? __lock_acquire+0xab9/0xd20 [ 127.842419][ T8399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.842444][ T8399] vfs_read+0x200/0xa30 [ 127.842468][ T8399] ? fdget_pos+0x247/0x320 [ 127.842490][ T8399] ? __pfx___mutex_lock+0x10/0x10 [ 127.842515][ T8399] ? __pfx_vfs_read+0x10/0x10 [ 127.842543][ T8399] ? __fget_files+0x2a/0x420 [ 127.842565][ T8399] ? __fget_files+0x3a0/0x420 [ 127.842581][ T8399] ? __fget_files+0x2a/0x420 [ 127.842607][ T8399] ksys_read+0x145/0x250 [ 127.842636][ T8399] ? __pfx_ksys_read+0x10/0x10 [ 127.842665][ T8399] ? do_syscall_64+0xbe/0xfa0 [ 127.842693][ T8399] do_syscall_64+0xfa/0xfa0 [ 127.842714][ T8399] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.842737][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842756][ T8399] ? clear_bhb_loop+0x60/0xb0 [ 127.842780][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842799][ T8399] RIP: 0033:0x7f244418d8dc [ 127.842820][ T8399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.842836][ T8399] RSP: 002b:00007f244503a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.842857][ T8399] RAX: ffffffffffffffda RBX: 00007f24443e5fa0 RCX: 00007f244418d8dc [ 127.842871][ T8399] RDX: 000000000000000f RSI: 00007f244503a0a0 RDI: 0000000000000004 [ 127.842884][ T8399] RBP: 00007f244503a090 R08: 0000000000000000 R09: 0000000000000000 [ 127.842896][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.842907][ T8399] R13: 00007f24443e6038 R14: 00007f24443e5fa0 R15: 00007fff066df108 [ 127.842941][ T8399] [ 128.227481][ T8414] netlink: 'syz.3.712': attribute type 11 has an invalid length. [ 128.238090][ T8414] netlink: 'syz.3.712': attribute type 11 has an invalid length. [ 128.245857][ T8414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.712'. [ 128.258277][ T8417] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 129.611006][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 129.644812][ T8454] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 129.653090][ T8454] netlink: 'syz.0.720': attribute type 3 has an invalid length. [ 129.661093][ T8452] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 129.669085][ T8454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.720'. [ 129.678791][ T8452] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 129.687423][ T8452] netlink: 'syz.1.721': attribute type 6 has an invalid length. [ 129.703767][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 130.159342][ T8495] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 130.167917][ T8495] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 130.299579][ T8497] batadv_slave_0: mtu less than device minimum [ 130.334750][ T8497] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 130.572261][ T60] tipc: Subscription rejected, illegal request [ 130.741335][ T8530] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 130.845346][ T8539] xt_hashlimit: max too large, truncated to 1048576 [ 130.850685][ T8530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.908897][ T8536] bond2: (slave gretap1): making interface the new active one [ 130.921189][ T8536] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 130.961744][ T8539] netlink: 'syz.2.751': attribute type 9 has an invalid length. [ 131.024265][ T8545] netlink: 'syz.0.752': attribute type 6 has an invalid length. [ 131.091299][ T8538] syz.1.750 (8538) used greatest stack depth: 17832 bytes left [ 131.282940][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.394119][ T8568] syzkaller0: entered promiscuous mode [ 131.399676][ T8568] syzkaller0: entered allmulticast mode [ 131.407696][ T8568] tipc: Enabled bearer , priority 0 [ 131.430293][ T8566] tipc: Resetting bearer [ 131.558240][ T8576] netlink: 'syz.2.762': attribute type 3 has an invalid length. [ 131.791747][ T8595] xt_policy: output policy not valid in PREROUTING and INPUT [ 131.958297][ T8600] netlink: 'syz.4.768': attribute type 8 has an invalid length. [ 132.421269][ T9] tipc: Node number set to 465276838 [ 132.695024][ T8566] tipc: Disabling bearer [ 132.784361][ T8608] __nla_validate_parse: 11 callbacks suppressed [ 132.784379][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.773'. [ 132.883004][ T8608] net veth1_virt_wifi .: renamed from virt_wifi0 [ 132.890272][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896593][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034533][ T8627] vxlan0: entered promiscuous mode [ 133.040606][ T8627] vxlan0: entered allmulticast mode [ 133.047448][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.066886][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.087698][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.129514][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.385676][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 133.411646][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 133.461568][ T30] audit: type=1107 audit(1760581696.940:4): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.749494][ T8676] netlink: 100 bytes leftover after parsing attributes in process `syz.4.797'. [ 133.760118][ T8679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.795'. [ 133.892962][ T8684] netlink: 64 bytes leftover after parsing attributes in process `syz.2.798'. [ 134.040789][ T8697] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 134.076552][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.800'. [ 134.102046][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 134.121252][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.131117][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.800'. [ 134.498107][ T8711] netlink: 212 bytes leftover after parsing attributes in process `syz.1.806'. [ 134.714447][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.722284][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.758690][ T8731] validate_nla: 9 callbacks suppressed [ 134.758716][ T8731] netlink: 'syz.3.808': attribute type 83 has an invalid length. [ 134.779490][ T8713] batman_adv: batadv0: Interface deactivated: dummy0 [ 134.787665][ T8731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.063151][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.091567][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.372831][ T8725] veth3: entered allmulticast mode [ 135.396562][ T7631] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.407758][ T7631] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.432148][ T7631] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.452082][ T7631] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.525198][ T7631] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.571897][ T7631] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.618022][ T7631] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.626930][ T7631] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.800386][ T8760] lo: entered promiscuous mode [ 135.815603][ T8760] tunl0: entered promiscuous mode [ 135.825881][ T8760] gre0: entered promiscuous mode [ 135.873872][ T8760] gretap0: entered promiscuous mode [ 135.897205][ T8760] erspan0: entered promiscuous mode [ 135.948303][ T8760] ip_vti0: entered promiscuous mode [ 135.953861][ T8760] ip6_vti0: entered promiscuous mode [ 135.962875][ T8760] sit0: entered promiscuous mode [ 135.969081][ T8760] ip6tnl0: entered promiscuous mode [ 135.974504][ T8760] ip6gre0: entered promiscuous mode [ 135.981934][ T8760] syz_tun: entered promiscuous mode [ 135.987451][ T8760] ip6gretap0: entered promiscuous mode [ 136.008485][ T8760] bridge0: entered promiscuous mode [ 136.020406][ T8760] vcan0: entered promiscuous mode [ 136.031177][ T8760] bond0: entered promiscuous mode [ 136.041350][ T8760] bond_slave_0: entered promiscuous mode [ 136.063482][ T8760] bond_slave_1: entered promiscuous mode [ 136.071785][ T8760] team0: entered promiscuous mode [ 136.087148][ T8760] team_slave_0: entered promiscuous mode [ 136.097456][ T8760] team_slave_1: entered promiscuous mode [ 136.107607][ T8760] veth0_virt_wifi: entered promiscuous mode [ 136.117646][ T8760] dummy0: entered promiscuous mode [ 136.123789][ T8760] nlmon0: entered promiscuous mode [ 136.129434][ T8760] caif0: entered promiscuous mode [ 136.134590][ T8760] batadv0: entered promiscuous mode [ 136.140220][ T8760] vxcan0: entered promiscuous mode [ 136.145586][ T8760] vxcan1: entered promiscuous mode [ 136.151088][ T8760] veth0: entered promiscuous mode [ 136.156268][ T8760] veth1: entered promiscuous mode [ 136.161754][ T8760] wg0: entered promiscuous mode [ 136.169453][ T8760] wg1: left allmulticast mode [ 136.183341][ T8760] wg2: entered promiscuous mode [ 136.192541][ T8760] veth0_to_bridge: entered promiscuous mode [ 136.199164][ T8760] bridge_slave_0: left allmulticast mode [ 136.205775][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.216797][ T8760] veth1_to_bridge: entered promiscuous mode [ 136.231007][ T8760] bridge_slave_1: left allmulticast mode [ 136.237076][ T8760] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.247902][ T8760] veth0_to_bond: entered promiscuous mode [ 136.257631][ T8760] bond0: (slave bond_slave_0): Releasing backup interface [ 136.266027][ T8760] veth1_to_bond: entered promiscuous mode [ 136.274274][ T8760] bond0: (slave bond_slave_1): Releasing backup interface [ 136.283587][ T8760] veth0_to_team: entered promiscuous mode [ 136.291194][ T8760] team0: Port device team_slave_0 removed [ 136.297268][ T8760] veth1_to_team: entered promiscuous mode [ 136.305415][ T8760] team0: Port device team_slave_1 removed [ 136.311709][ T8760] veth0_to_batadv: entered promiscuous mode [ 136.317880][ T8760] batadv_slave_0: entered promiscuous mode [ 136.324080][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.331974][ T8760] veth1_to_batadv: entered promiscuous mode [ 136.338202][ T8760] batadv_slave_1: entered promiscuous mode [ 136.344219][ T8760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.352340][ T8760] xfrm0: entered promiscuous mode [ 136.357581][ T8760] veth0_to_hsr: entered promiscuous mode [ 136.364010][ T8760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.494156][ T8790] netlink: 'syz.1.825': attribute type 16 has an invalid length. [ 136.508495][ T8790] netlink: 'syz.1.825': attribute type 17 has an invalid length. [ 136.627300][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.636809][ T8790] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.649627][ T8790] dummy0: left promiscuous mode [ 136.657282][ T8790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.066644][ T8828] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 137.675413][ T8867] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 137.701865][ T8867] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 137.720075][ T8867] team0: left promiscuous mode [ 137.729823][ T8867] veth0_virt_wifi: left promiscuous mode [ 137.737255][ T8867] batman_adv: batadv0: Adding interface: team0 [ 137.743602][ T8867] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.769668][ T8867] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 137.816547][ T8872] __nla_validate_parse: 9 callbacks suppressed [ 137.816565][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 137.884780][ T8877] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 137.897630][ T8882] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 137.937355][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 137.947476][ T8878] rdma_rxe: rxe_newlink: failed to add syz_tun [ 138.088876][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 138.254415][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 138.308878][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 138.406392][ T8925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'. [ 138.417501][ T8927] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 138.449479][ T8925] TCP: TCP_TX_DELAY enabled [ 138.474765][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 138.485814][ T8927] bond1: entered promiscuous mode [ 138.492216][ T8927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.505640][ T8927] bond1: left promiscuous mode [ 138.607033][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 138.659801][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 138.721542][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 138.744753][ T8950] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 139.252719][ T8990] dvmrp0: entered allmulticast mode [ 139.287139][ T8978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.310064][ T8977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.140276][ T9041] netlink: 'syz.4.903': attribute type 28 has an invalid length. [ 140.158087][ T9041] netlink: 'syz.4.903': attribute type 3 has an invalid length. [ 140.815624][ T9084] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 140.878233][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 141.008269][ T9085] macvlan3: entered promiscuous mode [ 141.025767][ T9085] macvlan3: entered allmulticast mode [ 141.036562][ T9085] bond3: entered promiscuous mode [ 141.042822][ T9085] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 141.053220][ T9085] bond3: left promiscuous mode [ 141.112437][ T9089] macvlan3: entered promiscuous mode [ 141.119199][ T9089] macvlan3: entered allmulticast mode [ 141.127347][ T9089] bond3: entered promiscuous mode [ 141.133965][ T9089] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 141.146891][ T9089] bond3: left promiscuous mode [ 141.370363][ T9109] bond4: entered promiscuous mode [ 141.421859][ T9120] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 141.483850][ T9124] Cannot find set identified by id 65534 to match [ 141.527396][ T9124] bond0: Error: Cannot enslave bond to itself. [ 141.869040][ T9155] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 141.877047][ T9155] bridge_slave_1: left promiscuous mode [ 141.889028][ T9155] bridge_slave_1: entered promiscuous mode [ 141.896307][ T9155] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.907197][ T9155] netlink: 'syz.2.937': attribute type 21 has an invalid length. [ 141.990409][ T9163] rdma_op ffff888024f251f0 conn xmit_rdma 0000000000000000 [ 142.476403][ T9197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.519836][ T9197] batadv_slave_0: entered promiscuous mode [ 142.525722][ T9197] batadv_slave_0: entered allmulticast mode [ 142.847882][ T9215] __nla_validate_parse: 77 callbacks suppressed [ 142.847902][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 142.874540][ T9215] raw_sendmsg: syz.0.955 forgot to set AF_INET. Fix it! [ 142.940100][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 143.021857][ T9225] tipc: Trying to set illegal importance in message [ 143.043207][ T9225] netlink: 2372 bytes leftover after parsing attributes in process `syz.3.958'. [ 143.055585][ T9229] delete_channel: no stack [ 143.081187][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 143.104777][ T9222] bridge3: port 1(bond5) entered blocking state [ 143.111916][ T9222] bridge3: port 1(bond5) entered disabled state [ 143.121243][ T9222] bond5: entered allmulticast mode [ 143.126678][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 143.140656][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 143.152377][ T9222] bond5: entered promiscuous mode [ 143.158945][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.958'. [ 143.199629][ T9232] IPVS: Error connecting to the multicast addr [ 143.744989][ T9261] netlink: 216 bytes leftover after parsing attributes in process `syz.3.970'. [ 143.866863][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.972'. [ 143.871094][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 144.492347][ T9312] netlink: 'syz.1.986': attribute type 8 has an invalid length. [ 144.646892][ T9326] vxcan1 speed is unknown, defaulting to 1000 [ 144.770517][ T9337] netlink: 'syz.1.993': attribute type 26 has an invalid length. [ 144.781082][ T9339] netlink: 'syz.1.993': attribute type 26 has an invalid length. [ 144.823573][ T9341] netlink: 'syz.3.995': attribute type 21 has an invalid length. [ 145.035141][ T9358] netlink: 'syz.3.1001': attribute type 11 has an invalid length. [ 145.085903][ T9361] vcan1: entered promiscuous mode [ 145.091142][ T9361] vcan1: entered allmulticast mode [ 145.492482][ T9383] validate_nla: 1 callbacks suppressed [ 145.492496][ T9383] netlink: 'syz.2.1011': attribute type 12 has an invalid length. [ 145.568278][ T9386] netlink: 'syz.3.1012': attribute type 11 has an invalid length. [ 145.667870][ T9390] bond2: option miimon: invalid value (18446744073709551585) [ 145.676028][ T9390] bond2: option miimon: allowed values 0 - 2147483647 [ 145.687291][ T9390] bond2 (unregistering): Released all slaves [ 145.732034][ T9386] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 145.743410][ T9386] bond2 (unregistering): Released all slaves [ 146.104563][ T9417] vxcan1 speed is unknown, defaulting to 1000 [ 146.857546][ T9472] netlink: 'syz.4.1039': attribute type 6 has an invalid length. [ 146.865938][ T9472] netlink: 'syz.4.1039': attribute type 1 has an invalid length. [ 147.076912][ T9484] xt_connbytes: Forcing CT accounting to be enabled [ 147.086276][ T9484] Cannot find set identified by id 0 to match [ 147.374446][ T9498] xt_HMARK: spi-set and port-set can't be combined [ 147.589261][ T9508] netlink: 'syz.4.1048': attribute type 10 has an invalid length. [ 147.621284][ T9508] veth0_virt_wifi: entered allmulticast mode [ 147.673715][ T9508] team0: Port device veth0_virt_wifi added [ 147.874410][ T9521] __nla_validate_parse: 20 callbacks suppressed [ 147.874429][ T9521] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1054'. [ 147.919563][ T9521] netlink: 1952 bytes leftover after parsing attributes in process `syz.3.1054'. [ 148.131777][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 148.182672][ T9541] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 148.232792][ T9541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.257798][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 148.268492][ T9540] netlink: 'syz.3.1062': attribute type 83 has an invalid length. [ 148.499610][ T9556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1064'. [ 148.531328][ T9560] netlink: 'syz.1.1065': attribute type 58 has an invalid length. [ 148.543754][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 148.557823][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 148.599926][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 148.633146][ T9572] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1069'. [ 148.657631][ T9572] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1069'. [ 148.677793][ T9572] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 149.369008][ T9615] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 149.380625][ T9615] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.447274][ T9619] ieee802154 phy0 wpan0: encryption failed: -126 [ 149.465901][ T9619] netlink: 'syz.0.1083': attribute type 21 has an invalid length. [ 149.539971][ T9632] IPv6: sit1: Disabled Multicast RS [ 149.555587][ T9632] sit1: entered allmulticast mode [ 150.734595][ T9690] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 150.879706][ T9690] SET target dimension over the limit! [ 151.198369][ T9714] syzkaller1: entered promiscuous mode [ 151.204042][ T9714] syzkaller1: entered allmulticast mode [ 151.764763][ T9754] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 151.812281][ T9748] pimreg3: entered allmulticast mode [ 151.960745][ T9768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 151.987201][ T9768] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.014487][ T9771] validate_nla: 1 callbacks suppressed [ 152.014507][ T9771] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 152.061679][ T9771] netlink: 'syz.2.1128': attribute type 3 has an invalid length. [ 152.204421][ T9793] xt_TCPMSS: Only works on TCP SYN packets [ 152.295029][ T9799] dvmrp1: entered allmulticast mode [ 153.081672][ T30] audit: type=1804 audit(1760581716.560:5): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1140" name="/newroot/238/cgroup.controllers" dev="tmpfs" ino=1235 res=1 errno=0 [ 153.138497][ T30] audit: type=1800 audit(1760581716.560:6): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1140" name="cgroup.controllers" dev="tmpfs" ino=1235 res=0 errno=0 [ 153.247741][ T9827] tc_dump_action: action bad kind [ 153.546891][ T9858] netlink: 'syz.2.1153': attribute type 25 has an invalid length. [ 153.735979][ T9872] __nla_validate_parse: 51 callbacks suppressed [ 153.735996][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 153.856556][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 153.915428][ T9885] netlink: 'syz.3.1161': attribute type 9 has an invalid length. [ 153.916894][ T9879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.010188][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 154.020477][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 154.114238][ T9896] netlink: 'syz.1.1167': attribute type 11 has an invalid length. [ 154.122516][ T9896] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1167'. [ 154.135106][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 154.290742][ T9904] tipc: Invalid UDP bearer configuration [ 154.290792][ T9904] tipc: Enabling of bearer rejected, failed to enable media [ 154.433623][ T9918] netlink: 'syz.1.1173': attribute type 4 has an invalid length. [ 154.459659][ T9918] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1173'. [ 154.506918][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 154.523591][ T9918] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.619696][ T9932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.748136][ T9941] tipc: Started in network mode [ 154.753049][ T9941] tipc: Node identity 6ed048250aa7, cluster identity 4711 [ 154.760701][ T9941] tipc: Enabled bearer , priority 0 [ 154.795961][ T9938] syzkaller0: entered promiscuous mode [ 154.811573][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1181'. [ 154.820782][ T9938] syzkaller0: entered allmulticast mode [ 154.853222][ T9941] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.864559][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 154.929158][ T9938] tipc: Resetting bearer [ 154.950786][ T9937] tipc: Resetting bearer [ 155.015295][ T9937] tipc: Disabling bearer [ 155.167530][ T9966] openvswitch: netlink: Missing key (keys=40, expected=80) [ 155.270270][ T9971] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 155.705838][T10013] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 155.719431][T10006] bond2 (unregistering): Released all slaves [ 155.926864][T10017] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 155.962342][T10022] xfrm1: entered allmulticast mode [ 156.029877][T10026] sctp: [Deprecated]: syz.2.1208 (pid 10026) Use of int in max_burst socket option deprecated. [ 156.029877][T10026] Use struct sctp_assoc_value instead [ 156.051463][T10021] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 156.072485][T10021] bond6 (unregistering): Released all slaves [ 156.393809][T10045] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.560928][T10058] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 156.595758][T10058] netlink: 'syz.2.1218': attribute type 2 has an invalid length. [ 156.620370][T10058] netlink: 'syz.2.1218': attribute type 2 has an invalid length. [ 156.649836][T10058] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 157.192644][T10102] validate_nla: 1 callbacks suppressed [ 157.192662][T10102] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 157.212613][T10102] bridge0: port 3(team0) entered blocking state [ 157.219572][T10102] bridge0: port 3(team0) entered disabled state [ 157.226115][T10102] team0: entered allmulticast mode [ 157.236399][T10102] team_slave_0: entered allmulticast mode [ 157.247454][T10102] team_slave_1: entered allmulticast mode [ 157.256865][T10102] team0: entered promiscuous mode [ 157.262441][T10102] team_slave_0: entered promiscuous mode [ 157.268693][T10102] team_slave_1: entered promiscuous mode [ 157.274583][T10102] veth0_virt_wifi: entered promiscuous mode [ 157.281984][T10102] bridge0: port 3(team0) entered blocking state [ 157.288413][T10102] bridge0: port 3(team0) entered forwarding state [ 157.328392][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.338806][T10102] netlink: 'syz.4.1233': attribute type 23 has an invalid length. [ 157.378404][T10107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 157.609831][T10127] tipc: Enabled bearer , priority 0 [ 157.643972][T10127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.656037][T10126] tipc: Disabling bearer [ 157.812809][T10146] team0: left allmulticast mode [ 157.820188][T10146] team_slave_0: left allmulticast mode [ 157.830268][T10146] team_slave_1: left allmulticast mode [ 157.862574][T10146] team0: left promiscuous mode [ 157.867405][T10146] team_slave_0: left promiscuous mode [ 157.904254][T10146] team_slave_1: left promiscuous mode [ 157.919845][T10146] veth0_virt_wifi: left promiscuous mode [ 157.952693][T10146] bridge0: port 3(team0) entered disabled state [ 157.968621][T10153] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 158.124838][T10146] bridge_slave_0: left allmulticast mode [ 158.130821][T10146] bridge_slave_0: left promiscuous mode [ 158.136664][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.159021][T10146] bridge_slave_1: left allmulticast mode [ 158.169392][T10146] bridge_slave_1: left promiscuous mode [ 158.175195][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.192667][T10146] bond0: (slave bond_slave_0): Releasing backup interface [ 158.213580][T10146] bond0: (slave bond_slave_1): Releasing backup interface [ 158.239758][T10146] team0: Port device team_slave_0 removed [ 158.262915][T10146] team0: Port device team_slave_1 removed [ 158.270442][T10146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.297685][T10146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.308131][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.321835][T10146] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 158.507897][T10172] netem: change failed [ 158.563776][T10170] vxcan1 speed is unknown, defaulting to 1000 [ 158.713545][T10190] sctp: [Deprecated]: syz.0.1255 (pid 10190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.713545][T10190] Use struct sctp_sack_info instead [ 158.819473][T10196] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 158.922105][T10192] veth3: entered allmulticast mode [ 159.272112][T10218] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 159.333511][T10223] netlink: 'syz.2.1263': attribute type 8 has an invalid length. [ 159.355390][T10218] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 159.368565][T10223] __nla_validate_parse: 18 callbacks suppressed [ 159.368585][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 159.410335][T10223] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 159.420600][T10218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 159.614934][T10218] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 159.803867][T10208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.817791][T10235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.275165][T10277] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.424642][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 160.553230][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 160.751582][T10322] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.802174][T10327] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1293'. [ 160.898801][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1295'. [ 161.223333][T10348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.285232][T10353] sctp: [Deprecated]: syz.4.1302 (pid 10353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.285232][T10353] Use struct sctp_sack_info instead [ 161.366420][T10348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.459541][T10348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.552359][T10348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.704471][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 161.822964][ T7633] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.877799][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 161.908133][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.924189][T10367] syzkaller1: entered promiscuous mode [ 161.929992][T10367] syzkaller1: entered allmulticast mode [ 161.957569][ T60] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.073854][T10389] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1312'. [ 162.089367][ T7633] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.399605][T10399] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 162.407883][T10407] C: renamed from team_slave_0 [ 162.420559][T10407] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 162.439111][T10407] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 162.488892][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1318'. [ 162.728414][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 162.761743][T10432] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 162.772132][T10435] netlink: 'syz.0.1326': attribute type 2 has an invalid length. [ 162.778065][T10432] netlink: 'syz.3.1324': attribute type 11 has an invalid length. [ 162.965518][T10458] tipc: Enabling of bearer rejected, failed to enable media [ 163.470373][T10498] vlan3: entered promiscuous mode [ 163.475711][T10498] vlan3: entered allmulticast mode [ 163.481438][T10498] hsr_slave_1: entered allmulticast mode [ 163.606673][T10509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.619620][T10509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.252137][T10540] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.702320][T10553] __nla_validate_parse: 6 callbacks suppressed [ 164.702339][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 164.723983][T10553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1360'. [ 164.809815][T10562] netlink: 'syz.2.1360': attribute type 23 has an invalid length. [ 165.024117][T10575] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1366'. [ 165.309090][T10597] syzkaller1: entered promiscuous mode [ 165.326370][T10597] syzkaller1: entered allmulticast mode [ 165.339581][T10601] netlink: 'syz.1.1372': attribute type 21 has an invalid length. [ 165.347502][T10595] syzkaller1: left promiscuous mode [ 165.378365][T10595] syzkaller1: left allmulticast mode [ 165.388757][T10601] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1372'. [ 165.413739][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 165.594578][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 165.643439][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 165.861185][T10634] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 165.964215][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 165.973490][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 166.068937][T10643] IPVS: Error connecting to the multicast addr [ 166.347380][T10669] nftables ruleset with unbound set [ 166.486319][T10675] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 166.511592][T10675] team0: Port device dummy0 added [ 166.526135][T10675] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 166.537099][T10675] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.550357][T10675] team0: Failed to send options change via netlink (err -105) [ 166.561106][T10675] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.572755][T10675] team0: Port device dummy0 removed [ 166.583232][T10675] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.656463][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 167.194544][T10699] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 167.224179][T10709] netlink: zone id is out of range [ 167.258251][T10709] netlink: zone id is out of range [ 167.263418][T10709] netlink: zone id is out of range [ 167.291845][T10709] netlink: zone id is out of range [ 167.296999][T10709] netlink: zone id is out of range [ 167.302290][T10709] netlink: zone id is out of range [ 167.308879][T10709] netlink: zone id is out of range [ 167.314294][T10709] netlink: zone id is out of range [ 167.319533][T10709] netlink: zone id is out of range [ 167.390037][T10715] tipc: MTU too low for tipc bearer [ 167.406061][T10715] sch_fq: defrate 0 ignored. [ 167.479653][T10722] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 167.493219][T10722] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 167.730917][T10740] netlink: 'syz.3.1413': attribute type 6 has an invalid length. [ 167.758472][T10744] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 167.785104][T10744] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 168.149386][ T7624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.164001][ T7624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.173389][T10773] IPVS: Unknown mcast interface: vcan0 [ 168.253411][T10779] dvmrp0: entered allmulticast mode [ 168.759649][T10818] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 168.871465][T10827] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 168.921413][T10827] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 169.088771][T10847] syzkaller1: entered promiscuous mode [ 169.118187][T10847] syzkaller1: entered allmulticast mode [ 169.641035][T10898] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 169.822059][T10913] __nla_validate_parse: 12 callbacks suppressed [ 169.822078][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 169.944489][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 169.951156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 169.959012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 169.966920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 169.974801][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 169.982784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 169.990635][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 169.998573][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.006403][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.014353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.022209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.030177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.038038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.045949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.053900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.061872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.069741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.077649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.085525][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.093493][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.101350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.109291][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.117112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.125110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.132989][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.141112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.149221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.157223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.165179][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.173222][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.181099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.189019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.196990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.204872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.212696][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.220649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.228472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.236342][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.244209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.252108][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.259959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.267881][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.275741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.283782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.291669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.299549][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.307434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.315321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.323307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.331195][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.339012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.346902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.354729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.362611][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.370436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.378389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.386277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.394236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.402093][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.410046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.417855][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.425842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.433670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.441571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.449402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.457274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.465124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.473057][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.481069][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.488948][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.496748][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.504640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.512462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.520395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.528237][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.536161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.544081][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.551964][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 170.559780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 170.800126][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 170.885374][T10936] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 170.999469][T10940] veth5: entered promiscuous mode [ 171.164926][T10953] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 171.178772][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 171.244681][T10953] bond6: entered promiscuous mode [ 171.253062][T10953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.290116][T10963] bond6: (slave bridge5): making interface the new active one [ 171.297788][T10963] bridge5: entered promiscuous mode [ 171.307689][T10963] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 171.380722][T10965] tipc: Enabling of bearer rejected, failed to enable media [ 171.453930][T10972] xt_recent: Unsupported userspace flags (000000b1) [ 171.521546][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1481'. [ 171.592175][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 171.606214][T10981] net_ratelimit: 16 callbacks suppressed [ 171.606232][T10981] openvswitch: netlink: IPv6 tunnel dst address is zero [ 171.818749][T10997] tipc: Enabled bearer , priority 0 [ 171.832373][T10997] syzkaller0: entered promiscuous mode [ 171.839119][T10997] syzkaller0: entered allmulticast mode [ 171.847557][T10997] sch_tbf: peakrate 9 is lower than or equals to rate 13678482955595031386 ! [ 171.895209][T11001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1490'. [ 171.917795][T10997] tipc: Resetting bearer [ 171.943389][T10996] tipc: Resetting bearer [ 171.994906][T10996] tipc: Disabling bearer [ 172.050667][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1493'. [ 172.119855][T11011] syz.4.1495: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 172.160204][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.4.1495 Not tainted syzkaller #0 PREEMPT(full) [ 172.160233][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.160245][T11011] Call Trace: [ 172.160253][T11011] [ 172.160263][T11011] dump_stack_lvl+0x189/0x250 [ 172.160293][T11011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.160313][T11011] ? __pfx__printk+0x10/0x10 [ 172.160333][T11011] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.160361][T11011] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.160384][T11011] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 172.160412][T11011] warn_alloc+0x214/0x310 [ 172.160438][T11011] ? stack_depot_save_flags+0x40/0x860 [ 172.160466][T11011] ? __pfx_warn_alloc+0x10/0x10 [ 172.160511][T11011] ? kasan_save_track+0x3e/0x80 [ 172.160614][T11011] ? __kasan_kmalloc+0x93/0xb0 [ 172.160643][T11011] ? xsk_setsockopt+0x4dc/0x8d0 [ 172.160662][T11011] ? do_sock_setsockopt+0x179/0x1b0 [ 172.160683][T11011] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 172.160702][T11011] ? do_syscall_64+0xfa/0xfa0 [ 172.160723][T11011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.160752][T11011] __vmalloc_node_range_noprof+0x125/0x12d0 [ 172.160812][T11011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.160841][T11011] ? __kasan_kmalloc+0x93/0xb0 [ 172.160872][T11011] vmalloc_user_noprof+0xad/0xf0 [ 172.160898][T11011] ? xskq_create+0xbf/0x170 [ 172.160921][T11011] xskq_create+0xbf/0x170 [ 172.160946][T11011] xsk_init_queue+0xb0/0x110 [ 172.160969][T11011] xsk_setsockopt+0x4dc/0x8d0 [ 172.160989][T11011] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.161013][T11011] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.161041][T11011] ? aa_sock_opt_perm+0xff/0x1b0 [ 172.161072][T11011] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 172.161089][T11011] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.161173][T11011] do_sock_setsockopt+0x179/0x1b0 [ 172.161208][T11011] __x64_sys_setsockopt+0x13f/0x1b0 [ 172.161242][T11011] do_syscall_64+0xfa/0xfa0 [ 172.161272][T11011] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.161295][T11011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.161313][T11011] ? clear_bhb_loop+0x60/0xb0 [ 172.161337][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.161354][T11011] RIP: 0033:0x7fce6398eec9 [ 172.161372][T11011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.161388][T11011] RSP: 002b:00007fce64751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.161409][T11011] RAX: ffffffffffffffda RBX: 00007fce63be5fa0 RCX: 00007fce6398eec9 [ 172.161424][T11011] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 172.161435][T11011] RBP: 00007fce63a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 172.161448][T11011] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.161460][T11011] R13: 00007fce63be6038 R14: 00007fce63be5fa0 R15: 00007ffdd2c0f8b8 [ 172.161493][T11011] [ 172.164492][T11011] Mem-Info: [ 172.453000][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1500'. [ 172.458513][T11011] active_anon:4721 inactive_anon:0 isolated_anon:0 [ 172.458513][T11011] active_file:3007 inactive_file:39911 isolated_file:0 [ 172.458513][T11011] unevictable:768 dirty:93 writeback:0 [ 172.458513][T11011] slab_reclaimable:12216 slab_unreclaimable:142809 [ 172.458513][T11011] mapped:29014 shmem:1356 pagetables:1209 [ 172.458513][T11011] sec_pagetables:0 bounce:0 [ 172.458513][T11011] kernel_misc_reclaimable:0 [ 172.458513][T11011] free:1280966 free_pcp:12834 free_cma:0 [ 172.526000][T11011] Node 0 active_anon:18884kB inactive_anon:0kB active_file:12028kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116056kB dirty:372kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13872kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.561228][T11011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.565198][T11026] tipc: Enabled bearer , priority 0 [ 172.598134][T11011] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.628946][T11011] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 172.636093][T11011] Node 0 DMA32 free:1215144kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18884kB inactive_anon:0kB active_file:12028kB inactive_file:159444kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:32456kB local_pcp:16636kB free_cma:0kB [ 172.698709][T11011] lowmem_reserve[]: 0 0 1 1 1 [ 172.703666][T11011] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.766472][T11011] lowmem_reserve[]: 0 0 0 0 0 [ 172.780371][T11026] tipc: Disabling bearer [ 172.807895][T11011] Node 1 Normal free:3893360kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19592kB local_pcp:10792kB free_cma:0kB [ 172.849297][T11035] syzkaller0: entered promiscuous mode [ 172.855785][T11035] syzkaller0: entered allmulticast mode [ 172.864516][T11044] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 172.884191][T11011] lowmem_reserve[]: 0 0 0 0 0 [ 172.894311][T11011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.907462][T11011] Node 0 DMA32: 458*4kB (ME) 394*8kB (M) 205*16kB (ME) 293*32kB (UM) 93*64kB (UME) 67*128kB (ME) 45*256kB (UM) 20*512kB (UME) 6*1024kB (UM) 10*2048kB (UME) 277*4096kB (UM) = 1215144kB [ 172.941216][T11044] team0: Port device dummy0 added [ 172.959733][T11011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.985543][T11011] Node 1 Normal: 194*4kB (UE) 49*8kB (UME) 46*16kB (UME) 84*32kB (UME) 24*64kB (UME) 13*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893360kB [ 173.041505][T11011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.067507][T11011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.095544][T11011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.117194][T11011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.134594][T11011] 44276 total pagecache pages [ 173.137171][T11059] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1507'. [ 173.139595][T11011] 0 pages in swap cache [ 173.152951][T11011] Free swap = 124996kB [ 173.157116][T11011] Total swap = 124996kB [ 173.176555][T11011] 2097051 pages RAM [ 173.181114][T11011] 0 pages HighMem/MovableOnly [ 173.190433][T11011] 424543 pages reserved [ 173.200537][T11011] 0 pages cma reserved [ 173.213996][T11062] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 173.560598][T11084] bond0: Error: Cannot enslave bond to itself. [ 173.842343][T11109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.897380][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1526'. [ 174.076968][T11127] syzkaller0: entered promiscuous mode [ 174.082778][T11127] syzkaller0: entered allmulticast mode [ 174.093159][T11127] netlink: 'syz.2.1532': attribute type 12 has an invalid length. [ 174.112573][T11130] netem: unknown loss type 0 [ 174.122766][T11127] netlink: 'syz.2.1532': attribute type 2 has an invalid length. [ 174.127859][T11130] netem: change failed [ 174.506901][T11151] vlan2: entered allmulticast mode [ 174.522444][T11151] bridge0: entered allmulticast mode [ 174.751566][T11163] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.833886][T11170] tipc: Enabled bearer , priority 0 [ 174.848933][T11167] syzkaller0: entered promiscuous mode [ 174.883429][T11167] syzkaller0: entered allmulticast mode [ 174.911045][T11167] syzkaller0: left allmulticast mode [ 174.936746][T11166] tipc: Resetting bearer [ 174.988883][T11166] tipc: Disabling bearer [ 175.158588][T11189] __nla_validate_parse: 3 callbacks suppressed [ 175.158606][T11189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1553'. [ 175.503820][T11213] tipc: Enabled bearer , priority 0 [ 175.512488][T11214] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1561'. [ 175.523049][T11213] syzkaller0: entered promiscuous mode [ 175.538261][T11213] syzkaller0: entered allmulticast mode [ 175.561208][T11210] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 175.630756][T11221] tipc: Resetting bearer [ 175.696087][T11221] tipc: Resetting bearer [ 175.731230][T11221] tipc: Disabling bearer [ 175.886084][T11242] netlink: 'syz.2.1571': attribute type 32 has an invalid length. [ 176.097722][T11259] netlink: 'syz.0.1574': attribute type 19 has an invalid length. [ 176.403981][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 176.723295][T11300] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1586'. [ 176.931930][T11319] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.1593'. [ 176.944855][T11319] openvswitch: netlink: Key type 30 is not supported [ 176.995330][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 177.046763][T11330] netlink: 'syz.0.1598': attribute type 4 has an invalid length. [ 177.059991][T11330] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1598'. [ 177.102096][T11330] `: renamed from bond0 [ 177.304869][T11350] sch_fq: defrate 0 ignored. [ 177.397099][T11355] netlink: 'syz.3.1603': attribute type 29 has an invalid length. [ 177.449654][T11356] netlink: 'syz.3.1603': attribute type 29 has an invalid length. [ 177.459602][T11355] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1603'. [ 177.770899][T11366] bond3 (unregistering): Released all slaves [ 178.001240][T11383] tipc: Enabled bearer , priority 0 [ 178.012584][T11385] syzkaller0: entered promiscuous mode [ 178.019104][T11385] syzkaller0: entered allmulticast mode [ 178.071148][T11395] tipc: Resetting bearer [ 178.088338][T11382] tipc: Resetting bearer [ 178.149210][T11382] tipc: Disabling bearer [ 178.382465][T11418] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1622'. [ 178.423943][T11420] sctp: [Deprecated]: syz.4.1625 (pid 11420) Use of int in max_burst socket option. [ 178.423943][T11420] Use struct sctp_assoc_value instead [ 178.459809][T11423] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 178.490818][T11423] netlink: 'syz.2.1626': attribute type 2 has an invalid length. [ 178.980726][T11458] syzkaller1: entered promiscuous mode [ 178.986401][T11458] syzkaller1: entered allmulticast mode [ 179.033715][T11465] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.1642'. [ 179.067049][T11469] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 179.267263][T11486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.371016][T11493] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 179.631953][T11517] tipc: Enabled bearer , priority 0 [ 179.639641][T11517] syzkaller0: entered promiscuous mode [ 179.645314][T11517] syzkaller0: entered allmulticast mode [ 179.669777][T11517] tipc: Resetting bearer [ 179.691357][T11516] tipc: Resetting bearer [ 179.712583][T11516] tipc: Disabling bearer [ 180.354955][T11567] __nla_validate_parse: 3 callbacks suppressed [ 180.354995][T11567] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1670'. [ 180.420070][T11572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 180.436092][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.445930][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.455377][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.466340][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.467495][T11570] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 180.476003][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.493284][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.502971][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1673'. [ 180.514863][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 180.821142][T11592] sctp: [Deprecated]: syz.1.1681 (pid 11592) Use of int in max_burst socket option. [ 180.821142][T11592] Use struct sctp_assoc_value instead [ 180.841214][T11592] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 180.969453][T11598] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 181.001985][T11600] netlink: 'syz.1.1685': attribute type 11 has an invalid length. [ 181.291208][T11618] Cannot find del_set index 4 as target [ 181.397210][T11623] netlink: 'syz.4.1694': attribute type 3 has an invalid length. [ 181.521038][T11638] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 181.883783][ T5833] Bluetooth: hci4: link tx timeout [ 181.890713][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.205991][T11678] syzkaller0: entered promiscuous mode [ 182.224538][T11678] syzkaller0: entered allmulticast mode [ 182.233445][T11685] netlink: 'syz.0.1715': attribute type 2 has an invalid length. [ 182.234211][T11677] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 182.249600][T11676] tipc: Enabled bearer , priority 0 [ 182.308447][T11676] tipc: Resetting bearer [ 182.355755][T11676] tipc: Disabling bearer [ 182.671618][T11704] netlink: 'syz.3.1720': attribute type 8 has an invalid length. [ 183.548373][T11746] veth1_to_bond: entered allmulticast mode [ 183.644039][T11747] veth1_to_bond (unregistering): left allmulticast mode [ 183.920440][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 183.948584][T11774] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 184.029501][T11778] Unsupported ieee802154 address type: 0 [ 184.155393][T11783] syzkaller0: entered promiscuous mode [ 184.161681][T11783] syzkaller0: entered allmulticast mode [ 184.471592][T11789] syzkaller0: entered promiscuous mode [ 184.506628][T11789] syzkaller0: entered allmulticast mode [ 184.657828][T11795] netlink: 'syz.1.1744': attribute type 29 has an invalid length. [ 184.689697][T11795] netlink: 'syz.1.1744': attribute type 29 has an invalid length. [ 185.259343][T11830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.284390][T11834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.291532][T11834] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.303375][T11834] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 185.464101][T11850] __nla_validate_parse: 78 callbacks suppressed [ 185.464119][T11850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1760'. [ 185.545375][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 185.562096][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1762'. [ 185.607252][T11855] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1761'. [ 185.627705][T11855] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1761'. [ 185.642138][T11855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 185.764491][T11870] ipt_REJECT: TCP_RESET invalid for non-tcp [ 186.003847][T11881] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 186.032342][T11881] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 186.044575][T11881] gretap2: entered promiscuous mode [ 186.055888][T11881] gretap2: entered allmulticast mode [ 186.285112][T11899] tipc: Enabled bearer , priority 0 [ 186.387614][T11901] syzkaller0: entered promiscuous mode [ 186.396899][T11901] syzkaller0: entered allmulticast mode [ 186.486105][T11901] tipc: Resetting bearer [ 186.600381][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 186.709183][T11890] infiniband syz0: set down [ 186.714132][T11890] infiniband syz0: added bond_slave_0 [ 186.793837][T11890] RDS/IB: syz0: added [ 186.797913][T11890] smc: adding ib device syz0 with port count 1 [ 186.804316][T11890] smc: ib device syz0 port 1 has no pnetid [ 187.671044][T11901] tipc: Disabling bearer [ 187.708099][T11920] vlan0: entered allmulticast mode [ 187.713266][T11920] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 187.883301][T11932] netlink: 'syz.4.1787': attribute type 2 has an invalid length. [ 187.996817][T11939] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1789'. [ 188.077288][T11945] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 188.085380][T11945] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 188.245119][T11956] netlink: 'syz.3.1794': attribute type 12 has an invalid length. [ 188.517910][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1799'. [ 188.529701][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1799'. [ 188.579793][T11972] netlink: 'syz.3.1800': attribute type 4 has an invalid length. [ 188.708991][T11975] netlink: 'syz.4.1802': attribute type 2 has an invalid length. [ 188.727714][T11979] netlink: 'syz.3.1804': attribute type 12 has an invalid length. [ 188.784427][T11983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 189.332967][T12018] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 189.959867][T12055] syzkaller0: entered promiscuous mode [ 189.965440][T12055] syzkaller0: entered allmulticast mode [ 189.974235][T12055] sch_tbf: burst 127 is lower than device veth0_to_team mtu (1514) ! [ 190.243037][T12038] netlink: 'syz.2.1823': attribute type 23 has an invalid length. [ 190.713891][T12082] __nla_validate_parse: 14 callbacks suppressed [ 190.713909][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 190.814993][T12090] tipc: Enabling of bearer rejected, already enabled [ 190.853101][T12098] veth1_to_bond: entered allmulticast mode [ 190.887703][T12095] veth1_to_bond: left allmulticast mode [ 191.083459][T12109] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 192.157654][T12106] erspan0: entered allmulticast mode [ 192.169370][T12109] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.329980][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1843'. [ 192.379328][T12119] openvswitch: netlink: Flow key attr not present in new flow. [ 192.632064][T12149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1852'. [ 192.716242][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 192.810584][T12173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1858'. [ 192.992826][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 193.242865][T12194] can: request_module (can-proto-4) failed. [ 193.265533][T12198] syzkaller1: entered promiscuous mode [ 193.271646][T12198] syzkaller1: entered allmulticast mode [ 193.524549][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 193.645998][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1874'. [ 193.751591][T12227] bond6 (unregistering): Released all slaves [ 193.917612][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 193.931368][T12241] only policy match revision 0 supported [ 193.931388][T12241] unable to load match [ 194.324261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.447171][T12247] netlink: 'syz.4.1880': attribute type 6 has an invalid length. [ 194.774212][T12270] netlink: 'syz.1.1886': attribute type 3 has an invalid length. [ 196.403288][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 196.404018][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 196.411681][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 196.415688][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 232.169245][T12281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1889'. [ 232.351941][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 232.383036][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 232.393161][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 232.681929][T12309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 232.693403][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 232.754290][T12315] veth0_macvtap: left promiscuous mode [ 233.091116][T12343] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1907'. [ 233.129039][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 233.138869][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1907'. [ 233.161753][T12348] netlink: 'syz.2.1908': attribute type 62 has an invalid length. [ 233.462701][T12363] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1914'. [ 233.771114][T12388] erspan0: left promiscuous mode [ 233.786374][T12388] erspan0: entered allmulticast mode [ 233.904793][T12403] atomic_op ffff88806faf6998 conn xmit_atomic 0000000000000000 [ 233.965471][T12406] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 234.006476][T12406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.161925][T12425] openvswitch: netlink: Flow key attr not present in new flow. [ 235.164984][T12499] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 237.671577][T12506] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 237.674632][T12508] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 237.682556][T12506] __nla_validate_parse: 8 callbacks suppressed [ 237.682571][T12506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1954'. [ 237.703863][T12508] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1954'. [ 238.028724][T12537] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 238.059157][T12534] vlan4: entered allmulticast mode [ 238.064983][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'. [ 238.068463][T12534] hsr0: entered allmulticast mode [ 238.084774][T12534] hsr_slave_0: entered allmulticast mode [ 238.229880][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 238.448251][T12566] netlink: 'syz.4.1972': attribute type 10 has an invalid length. [ 238.496987][T12566] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.655954][T12581] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1975'. [ 238.667861][T12581] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1975'. [ 238.742516][T12587] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 238.756183][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 238.836522][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 238.846103][T12590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1980'. [ 238.930036][T12591] bond6: (slave bridge7): making interface the new active one [ 238.938604][T12591] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 238.971205][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1982'. [ 239.296205][T12622] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 239.462353][T12628] bond9: option resend_igmp: invalid value (32767) [ 239.496921][T12628] bond9: option resend_igmp: allowed values 0 - 255 [ 239.562946][T12628] bond9 (unregistering): Released all slaves [ 240.522209][T12696] tipc: Enabled bearer , priority 0 [ 240.599085][T12696] netlink: 'syz.2.2007': attribute type 21 has an invalid length. [ 240.637718][T12696] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 240.765501][T12695] tipc: Disabling bearer [ 241.479453][T12766] netlink: 'syz.3.2022': attribute type 12 has an invalid length. [ 241.519583][T12766] netlink: 'syz.3.2022': attribute type 29 has an invalid length. [ 241.546873][T12759] "syz.3.2022" (12759) uses obsolete ecb(arc4) skcipher [ 241.811922][T12782] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 241.845113][T12786] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 241.911836][T12790] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 241.923462][T12789] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 242.029769][T12798] bond0 (unregistering): Released all slaves [ 242.247091][T12813] netlink: 'syz.0.2042': attribute type 33 has an invalid length. [ 242.342854][T12813] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 242.367656][T12813] bond0 (unregistering): Released all slaves [ 242.464681][T12826] netlink: 'syz.2.2044': attribute type 10 has an invalid length. [ 242.529801][T12826] dummy0: left promiscuous mode [ 242.535726][T12833] netlink: 'syz.4.2046': attribute type 8 has an invalid length. [ 242.550735][T12826] team0: Port device dummy0 added [ 242.707477][T12832] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 242.743066][T12845] __nla_validate_parse: 22 callbacks suppressed [ 242.743087][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2049'. [ 242.896298][T12855] vlan1: entered allmulticast mode [ 242.910639][T12855] bridge_slave_0: entered allmulticast mode [ 242.935687][T12862] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2054'. [ 243.113868][T12873] block nbd0: Unsupported socket: should be TCP or UNIX. [ 243.250917][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 243.352157][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 243.375466][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2063'. [ 243.522151][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 243.693718][T12914] veth0: entered promiscuous mode [ 243.701278][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 243.745349][T12914] veth0 (unregistering): left promiscuous mode [ 243.967509][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 244.014715][T12931] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2076'. [ 244.025086][T12931] validate_nla: 1 callbacks suppressed [ 244.025104][T12931] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 244.098567][T12938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2080'. [ 244.340674][T12897] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 244.487391][T12964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.557549][T12966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 244.579243][T12966] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 244.705585][T12982] C: renamed from lo [ 244.721604][T12982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.858830][T12993] netlink: 'syz.0.2098': attribute type 5 has an invalid length. [ 244.914917][T12998] syzkaller0: entered promiscuous mode [ 244.931362][T12998] syzkaller0: entered allmulticast mode [ 245.323386][T13020] xt_ecn: cannot match TCP bits for non-tcp packets [ 245.541101][T13027] netlink: 'syz.1.2110': attribute type 19 has an invalid length. [ 245.560228][T13027] netlink: 'syz.1.2110': attribute type 19 has an invalid length. [ 245.598088][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 245.599111][T13034] sctp: [Deprecated]: syz.2.2111 (pid 13034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.599111][T13034] Use struct sctp_sack_info instead [ 245.780199][T13043] tipc: Enabled bearer , priority 0 [ 245.789325][T13043] syzkaller0: entered promiscuous mode [ 245.794833][T13043] syzkaller0: entered allmulticast mode [ 245.842010][T13043] tipc: Resetting bearer [ 245.858616][T13050] IPv6: Can't replace route, no match found [ 245.874159][T13042] tipc: Resetting bearer [ 245.916711][T13055] xt_NFQUEUE: number of total queues is 0 [ 245.930660][T13042] tipc: Disabling bearer [ 245.944069][T13056] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 246.047065][T13062] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 246.450867][T13091] bond0: (slave rose0): Error: Device can not be enslaved while up [ 246.866826][T13122] vlan0: entered allmulticast mode [ 246.881556][T13122] veth0_vlan: entered allmulticast mode [ 246.893582][T13126] netlink: 'syz.1.2137': attribute type 1 has an invalid length. [ 247.001203][T13126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.046201][T13140] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 247.259205][T13146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.289171][T13146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.303799][T13146] batman_adv: batadv0: Removing interface: dummy0 [ 247.559827][T13178] netlink: 'syz.0.2152': attribute type 15 has an invalid length. [ 247.853411][T13195] tipc: Enabled bearer , priority 0 [ 247.879977][T13195] syzkaller0: entered promiscuous mode [ 247.887076][T13195] syzkaller0: entered allmulticast mode [ 247.928536][T13195] tipc: Resetting bearer [ 247.938481][T13194] tipc: Resetting bearer [ 247.993221][T13194] tipc: Disabling bearer [ 248.482266][T13241] __nla_validate_parse: 13 callbacks suppressed [ 248.482320][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2171'. [ 248.575346][T13251] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2172'. [ 248.667670][T13254] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2174'. [ 248.678304][T13254] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2174'. [ 248.730548][T13258] veth3: left allmulticast mode [ 248.740003][T13258] bond4: left promiscuous mode [ 248.756727][T13258] bond6: left promiscuous mode [ 248.762731][T13258] bridge5: left promiscuous mode [ 248.781217][T13258] gretap2: left promiscuous mode [ 248.801921][T13258] gretap2: left allmulticast mode [ 249.166003][T13290] gre2: entered promiscuous mode [ 249.180835][T13290] gre2: entered allmulticast mode [ 249.206165][T13293] can: request_module (can-proto-0) failed. [ 249.295709][T13300] vxcan1 speed is unknown, defaulting to 1000 [ 249.341431][T13303] delete_channel: no stack [ 249.441810][T13312] netlink: 'syz.0.2193': attribute type 29 has an invalid length. [ 249.528336][T13312] netlink: 'syz.0.2193': attribute type 29 has an invalid length. [ 249.695075][T13321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 249.742562][T13322] netlink: 'syz.4.2196': attribute type 8 has an invalid length. [ 249.758772][T13323] netlink: 'syz.4.2196': attribute type 8 has an invalid length. [ 249.866047][T13331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2195'. [ 250.368633][T13348] netlink: 'syz.3.2201': attribute type 4 has an invalid length. [ 250.388504][T13348] netlink: 'syz.3.2201': attribute type 4 has an invalid length. [ 250.414648][T13348] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 250.422983][T13348] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2201'. [ 250.818862][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 250.831304][T13371] netlink: zone id is out of range [ 250.836471][T13371] netlink: zone id is out of range [ 250.877285][T13371] netlink: zone id is out of range [ 250.919643][T13371] netlink: zone id is out of range [ 250.924807][T13371] netlink: zone id is out of range [ 250.970892][T13371] netlink: zone id is out of range [ 251.008171][T13371] netlink: zone id is out of range [ 251.014446][T13371] netlink: zone id is out of range [ 251.020688][T13371] netlink: zone id is out of range [ 251.039077][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2210'. [ 251.048274][T13371] netlink: zone id is out of range [ 251.064341][T13379] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2210'. [ 251.114125][T13381] netlink: 'syz.0.2211': attribute type 3 has an invalid length. [ 251.217169][T13389] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 251.473209][T13403] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 3, id = 0 [ 252.345877][T13460] netlink: 'syz.4.2235': attribute type 2 has an invalid length. [ 253.369290][T13526] xt_HMARK: spi-set and port-set can't be combined [ 253.935832][T13603] __nla_validate_parse: 6 callbacks suppressed [ 253.935850][T13603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2273'. [ 253.978605][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 253.993562][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 254.360979][T13643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 254.403731][T13640] geneve1: entered promiscuous mode [ 254.421443][T13640] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 254.431068][ T7617] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.440024][ T7617] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.449898][ T7617] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.462664][ T7617] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.565866][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 254.704036][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 254.885802][T13679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2295'. [ 255.108178][T13688] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 255.396980][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 255.418179][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 255.484430][T13722] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2307'. [ 255.762000][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.876205][T13749] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2314'. [ 255.963653][T13752] validate_nla: 4 callbacks suppressed [ 255.963671][T13752] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 256.230669][T13768] syzkaller0: entered promiscuous mode [ 256.237015][T13768] syzkaller0: entered allmulticast mode [ 256.246071][T13764] tipc: Enabled bearer , priority 0 [ 256.262450][T13768] tipc: Resetting bearer [ 256.300879][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.310342][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.334663][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.362051][T13771] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.378535][T13772] tipc: Resetting bearer [ 256.386028][T13771] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.403074][T13772] tipc: Disabling bearer [ 256.425799][T13775] net_ratelimit: 331 callbacks suppressed [ 256.425817][T13775] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 256.447709][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.489231][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.505458][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.530153][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.556518][T13771] hsr0 speed is unknown, defaulting to 1000 [ 256.561162][T13780] tipc: Enabled bearer , priority 0 [ 256.571069][T13780] syzkaller0: entered promiscuous mode [ 256.576672][T13780] syzkaller0: entered allmulticast mode [ 256.587294][T13780] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.629442][T13780] tipc: Resetting bearer [ 256.660928][T13779] tipc: Resetting bearer [ 256.685239][T13779] tipc: Disabling bearer [ 256.992182][T13802] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 257.007089][T13806] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.090210][T13806] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.130925][T13806] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.142658][T13806] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 257.161750][T13806] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 258.032906][T13890] netlink: 'syz.1.2360': attribute type 7 has an invalid length. [ 258.034070][T13872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.078712][T13872] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 258.161530][T13872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.171710][T13901] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 258.189146][T13872] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 258.224717][T13872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.253088][T13872] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 258.303545][T13872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.331136][T13872] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 258.369396][T13872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.385590][T13872] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 258.466359][T13872] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 258.478288][T13872] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 258.486725][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.2.2355 Not tainted syzkaller #0 PREEMPT(full) [ 258.496107][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.506189][T13872] RIP: 0010:klist_remove+0x14a/0x340 [ 258.511504][T13872] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 54 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 54 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 258.531119][T13872] RSP: 0018:ffffc90003627800 EFLAGS: 00010202 [ 258.537197][T13872] RAX: 000000000000000b RBX: ffff888056eb3c80 RCX: 0000000000000000 [ 258.545156][T13872] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 258.553112][T13872] RBP: ffffc90003627900 R08: ffffffff8f84bec3 R09: 1ffffffff1f097d8 [ 258.561070][T13872] R10: dffffc0000000000 R11: fffffbfff1f097d9 R12: 0000000000000000 [ 258.569028][T13872] R13: 1ffff110062aae0c R14: ffff888031557060 R15: dffffc0000000000 [ 258.577080][T13872] FS: 00007f26b635f6c0(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 258.586011][T13872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.592580][T13872] CR2: 00007f00e45f7f98 CR3: 000000007dbd6000 CR4: 00000000003526f0 [ 258.600542][T13872] Call Trace: [ 258.603855][T13872] [ 258.606780][T13872] ? __pfx_klist_remove+0x10/0x10 [ 258.611798][T13872] ? __pfx_kobject_move+0x10/0x10 [ 258.616824][T13872] ? do_raw_spin_unlock+0x122/0x240 [ 258.622017][T13872] ? get_device_parent+0x366/0x3a0 [ 258.627166][T13872] device_move+0x193/0x700 [ 258.631574][T13872] hci_conn_del_sysfs+0xb8/0x170 [ 258.636512][T13872] hci_conn_del+0xc33/0x11b0 [ 258.641120][T13872] hci_conn_hash_flush+0x191/0x230 [ 258.646231][T13872] hci_dev_close_sync+0xaef/0x1330 [ 258.651347][T13872] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 258.656892][T13872] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.662776][T13872] hci_dev_do_close+0x2f/0x90 [ 258.667448][T13872] hci_rfkill_set_block+0x21d/0x2e0 [ 258.672638][T13872] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 258.678377][T13872] rfkill_set_block+0x1d2/0x440 [ 258.683221][T13872] rfkill_fop_write+0x44b/0x570 [ 258.688066][T13872] ? __pfx_rfkill_fop_write+0x10/0x10 [ 258.693432][T13872] ? security_kernfs_init_security+0x220/0x290 [ 258.699583][T13872] ? rw_verify_area+0x255/0x4d0 [ 258.704430][T13872] ? __lock_acquire+0xab9/0xd20 [ 258.709269][T13872] ? __pfx_rfkill_fop_write+0x10/0x10 [ 258.714635][T13872] vfs_write+0x27b/0xb30 [ 258.718893][T13872] ? __pfx_vfs_write+0x10/0x10 [ 258.723652][T13872] ? __fget_files+0x2a/0x420 [ 258.728230][T13872] ? __fget_files+0x2a/0x420 [ 258.732893][T13872] ? __fget_files+0x3a0/0x420 [ 258.737555][T13872] ? __fget_files+0x2a/0x420 [ 258.742221][T13872] ksys_write+0x145/0x250 [ 258.746546][T13872] ? __pfx_ksys_write+0x10/0x10 [ 258.751445][T13872] ? do_syscall_64+0xbe/0xfa0 [ 258.756120][T13872] do_syscall_64+0xfa/0xfa0 [ 258.760614][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.765803][T13872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.771861][T13872] ? clear_bhb_loop+0x60/0xb0 [ 258.776541][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.782511][T13872] RIP: 0033:0x7f26b558eec9 [ 258.786916][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.806513][T13872] RSP: 002b:00007f26b635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.814916][T13872] RAX: ffffffffffffffda RBX: 00007f26b57e5fa0 RCX: 00007f26b558eec9 [ 258.822891][T13872] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 258.830873][T13872] RBP: 00007f26b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.838848][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.846812][T13872] R13: 00007f26b57e6038 R14: 00007f26b57e5fa0 R15: 00007fff6cdc55d8 [ 258.854784][T13872] [ 258.857793][T13872] Modules linked in: [ 258.862353][T13872] ---[ end trace 0000000000000000 ]--- [ 258.868844][T13872] RIP: 0010:klist_remove+0x14a/0x340 [ 258.893942][T13872] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 54 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 54 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 258.915283][T13872] RSP: 0018:ffffc90003627800 EFLAGS: 00010202 [ 258.941144][T13872] RAX: 000000000000000b RBX: ffff888056eb3c80 RCX: 0000000000000000 [ 258.949364][T13872] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 258.957439][T13872] RBP: ffffc90003627900 R08: ffffffff8f84bec3 R09: 1ffffffff1f097d8 [ 258.966682][T13872] R10: dffffc0000000000 R11: fffffbfff1f097d9 R12: 0000000000000000 [ 258.974951][T13872] R13: 1ffff110062aae0c R14: ffff888031557060 R15: dffffc0000000000 [ 258.989029][T13872] FS: 00007f26b635f6c0(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 258.998061][T13872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.004653][T13872] CR2: 00007fce60f6bf98 CR3: 000000007dbd6000 CR4: 00000000003526f0 [ 259.012791][T13872] Kernel panic - not syncing: Fatal exception [ 259.019118][T13872] Kernel Offset: disabled [ 259.023429][T13872] Rebooting in 86400 seconds..