last executing test programs: 4.180280116s ago: executing program 0 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 4.10783579s ago: executing program 2 (id=2784): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000001c0)="3bdbd5dae297dcad0b61dff24d20b8100a2225dd2c275b692547acb5082de69edc0c27a933ae7294f95466901301c6ff824358f6e956c22137a750c8958bdc253d68a80bbc3cdf7ed88bfe9850dd0e07d25b14a7691fa3fcdc509276f0962881c4af7803d02249b6fbd3ad"}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000001f0000000000000005100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r0, 0x0, 0x1) socketpair(0x0, 0x80000, 0xf7f3, &(0x7f0000000080)) (async) socketpair(0x0, 0x80000, 0xf7f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x148, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 3.756739025s ago: executing program 1 (id=2786): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x4c, 0x12, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x7, 0x3, 0xf, {0x4e20, 0x4e24, [0x8000, 0x7, 0x3, 0x400], [0x80000001, 0xffffff8a, 0x3, 0x1f0], 0x0, [0xf, 0xb82]}, 0x8, 0x6}}, 0x4c}, 0x1, 0x0, 0x0, 0x40891}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r1}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7, 0x20, 0xd, 0xffe, {{0x2b, 0x4, 0x3, 0x3, 0xac, 0x65, 0x0, 0x66, 0x4, 0x0, @empty, @remote, {[@rr={0x7, 0x17, 0x84, [@multicast1, @remote, @broadcast, @multicast2, @multicast1]}, @ssrr={0x89, 0xb, 0x26, [@loopback, @private=0xa010100]}, @lsrr={0x83, 0x7, 0xaa, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0xfe, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x1000}, {@multicast1, 0x1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@private=0xa010102, 0x81}, {@empty}, {@private=0xa010100, 0x40}, {@multicast2, 0x3}]}, @generic={0x4a, 0x7, "1feae0f472"}, @generic={0x83, 0x9, "1e85430cbede6c"}, @generic={0x89, 0x12, "9688cf044e461c5349fb363c516f35dc"}, @ra={0x94, 0x4}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000100)=r5, 0x8) socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r8}, 0x20) connect$unix(r7, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) r10 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 3.475489787s ago: executing program 0 (id=2787): r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200da185a17150cf17a6b0531faf33a52201bfc9addbb50ef9acbd9b7b940605fdb82125286f793d20e3cb51e86280e014324b7beb26e7a2114c1b9c56d800095421e38fae44a4c727accd96482f70dd3078366c0279add9f1a9efa96ba5c9faa470c7fb144a2b48d1457694cf96aab2c8613ec1b00c2eb54131c9d3c7d1783e3627ea1b5c7e006948799623fc997a6e043dba94a48fe19cb098279ae41b68bd1ed487aace40dce3877315e1da5b35ee02cdad4c05b750fb5e8b21dff1769490f4ac06b5480c001e4719f5f21e5787479c4a2baa229fbbf8ec6a88d18b69abad4f5caac9032e3e9ee2fb4ae6fdb", @ANYRES32=r9, @ANYBLOB="06000600000000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r10) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100fedbdf25210000004c1c1f0070687931000000000c000500200000000000000000000f0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r13, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$ieee802154(0x0, r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFINDEX(r15, 0x400454da, 0x0) connect$bt_l2cap(r0, &(0x7f0000000840)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 3.223248598s ago: executing program 4 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x70bd2b, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @private=0xa010102}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000005) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e0027763d1e36b9d2332792db0300000003000000"], 0x40}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) recvmsg$can_bcm(r4, &(0x7f00000025c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000002500)=[{&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2, &(0x7f0000002540)=""/94, 0x5e}, 0x40000101) 3.222212s ago: executing program 3 (id=2789): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x2, [0xc0b, 0x9f6, 0xe56, 0xeb5]}) (async) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x2, [0xc0b, 0x9f6, 0xe56, 0xeb5]}) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000280)) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001580)=@filter={'filter\x00', 0xe, 0x5, 0x1146, [0x0, 0x200000000400, 0x200000000864, 0x200000000894], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x11, 0x6006, 'dvmrp1\x00', 'batadv0\x00', 'bridge0\x00', 'veth0_to_batadv\x00', @local, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x196, 0x1e6, 0x236, [@comment={{'comment\x00', 0x0, 0x100}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1, {0xd190}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0x2}}}}}, {0x11, 0x10, 0x88a2, 'geneve0\x00', 'gre0\x00', 'veth1_to_bond\x00', 'veth1_virt_wifi\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x196, 0x1c6, 0x1fe, [@comment={{'comment\x00', 0x0, 0x100}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x8, 0xf5, 'ip6erspan0\x00', 'pim6reg\x00', 'wlan0\x00', 'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x886, 0x886, 0x9b6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x7}, {0x909, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x3, 0x2}, {0xff, 0x1}, {0x1ff}, {0x573, 0x3}, {0x40, 0x1}, {0xfffff4a6, 0x1}, {0x7}], [{0xfffffff8, 0xd99}, {0x3, 0x5}, {0x8, 0xd54d}, {0x0, 0x1}, {0x1, 0x6}, {0x3, 0xd}, {0x7, 0x2}, {0x5, 0x8}, {0x5, 0x5}, {0xb, 0x2}, {0xd, 0x81}], 0x2, 0x2}, {[{0xffffffff, 0x1}, {0xfffffffb, 0x2}, {0x2, 0x2}, {0x5}, {0x2, 0x1}, {0xd, 0x3}, {0x0, 0x1}, {0x8001, 0x1}, {0x1ff}, {0x9, 0x2}, {0x5, 0x2}], [{0x3ff, 0x6}, {0x4, 0x10001}, {0x0, 0xb5}, {0x1000, 0x401}, {0x9, 0xfffffffd}, {0x3, 0x8000}, {0xe75, 0xc60}, {0x6, 0x9}, {0x6, 0x400}, {0x20000, 0x7}, {0x81}], 0x1}, {[{0x80000000, 0x3}, {0x9}, {0xfffffffa, 0x1}, {0x61, 0x1}, {0x4}, {0x2}, {0x86f9, 0x1}, {0xdefc}, {0x5}, {0x4, 0x3}, {0x8000, 0x3}], [{0x2}, {0x5, 0x200}, {0x6, 0x5}, {0x4, 0x10001}, {0x3, 0x200}, {0x3, 0xa7a}, {0x1, 0x10001}, {0x1}, {0x2, 0x2}, {0x400, 0x80000001}, {0x5, 0x200}], 0xa, 0x4}, {[{0x1, 0x3}, {0xfffffffa}, {0x1, 0x1}, {0x1}, {0x2}, {0x504, 0x2}, {0xb, 0x3}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x2d32}], [{0x6b031ccd, 0x7}, {0x8, 0x1ff}, {0x100, 0x7}, {0xfe, 0x8}, {0xad7, 0x375}, {0x1, 0x8}, {0x9, 0x8000}, {0x6, 0xb}, {0x4, 0x6}, {0xfffffffd, 0x74d}, {0x81, 0x2}], 0x5, 0xa}, {[{0x4, 0x3}, {0x1, 0x3}, {0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x100, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x8, 0x1}], [{0x3, 0xf}, {0x12000000, 0xe}, {0x6, 0x5}, {0x9655, 0x4b4bc3fc}, {0xc, 0xb}, {0x8, 0xfffff22e}, {0xffff, 0x4}, {0x8000, 0x6}, {0x2, 0x6ee8}, {0xe, 0x8}, {0xfab, 0xd}], 0x2, 0x6}, {[{0x2, 0x2}, {0x87, 0x3}, {0xa0, 0x3aeb9471dc4e53b0}, {0x6}, {0x7, 0x1}, {0x8, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0xb0, 0x2}, {0x9, 0x1}, {0x40}], [{0x6, 0x2}, {0x2, 0x9}, {0x5, 0xb}, {0x8, 0x8}, {0x1ff, 0x9}, {0xffffff2f, 0x2}, {0x5, 0x5}, {0xca, 0x5}, {0x5b2a, 0x2}, {0xe, 0xbd22}, {0x6d7, 0x4}], 0xb, 0x7}, {[{0xfff, 0x2}, {0xd4dd, 0x1}, {0xb, 0x1}, {0x80000000, 0x2}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x7}, {0x8, 0x2}, {}, {0x8}], [{0x0, 0x3}, {0x9, 0x13}, {0x3, 0x100}, {0x200, 0x1}, {0x91b, 0xa}, {0x287, 0xa11}, {0x748, 0x6}, {0x8001, 0x3}, {0x1, 0xd0}, {0x9, 0xffffff6d}, {0xbd, 0x8}], 0x1, 0x6}, {[{0x5, 0x3}, {0x9, 0x1}, {0x9}, {0x1, 0x3}, {0xb, 0x1}, {0x81, 0x3}, {0x5, 0x3}, {0xc, 0x1}, {0x7fffffff, 0x3}, {0x2, 0x3}, {0xf, 0x1}], [{0x5, 0x5}, {0x4, 0x1}, {0x7ff}, {0xd, 0x1}, {0x6}, {0x3, 0x400}, {0xffff8001}, {0xfffffffa, 0x69}, {0x5}, {0x5, 0x1}, {0x6, 0x6}], 0x7, 0xb}, {[{0xfffffff8}, {0x59, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0xfffffffb, 0x2}, {0x8, 0x1}, {0x80000001, 0x1}, {0x0, 0x2}, {0x7f, 0x2}, {0x8, 0x1}, {0xe, 0x3}], [{0x7, 0xb2f7}, {0x6, 0x9}, {0x1000, 0x7ff}, {0x4, 0x1}, {0x7, 0x1c9}, {0x7fffffff, 0x8}, {0x4, 0x3}, {0x50000000, 0x3ff}, {0x4, 0xb244}, {0x5f, 0x6}, {0xb, 0x7}], 0x9, 0xb}, {[{0x3, 0x3}, {0x0, 0xee9f16c2a499a442}, {0x1, 0x2}, {0x400, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0xc}, {0x7ff, 0x2}, {0x3, 0x3}, {0x44f, 0x2}, {0xfffffffd, 0x1}], [{0x1d, 0xdd25070}, {0x9, 0xb}, {0x8001, 0x3}, {0x0, 0x9a67}, {0x1, 0x5}, {0xfffffffe}, {0xffffff82, 0x5}, {0x8001, 0x1}, {0x40, 0x3}, {0xfffffff2, 0x5}, {0x2, 0x8}], 0x2, 0x7}, {[{0x800, 0x1}, {0x6, 0x3}, {0x10001, 0x1}, {0x8, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {}, {0xff9, 0x3}, {0x10000}], [{0xffffffff, 0x81}, {0x200, 0x7f}, {0x400, 0x100}, {0x0, 0x7}, {0xd32, 0x1}, {0x8, 0x8001}, {0x0, 0x4}, {0x9, 0x80000}, {0x7, 0x7}, {0x51c1197}, {0x4, 0x6}], 0x4, 0x9}], 0x2, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x2}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:hald_acl_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x9, 0x18, 0x17, 'wlan0\x00', 'team_slave_0\x00', 'bond_slave_1\x00', 'tunl0\x00', @random="ee0f7613201f", [0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x19e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'bond_slave_1\x00', 'team_slave_0\x00', 0x0, 0x1, 0x755e, 0x81, 0xe6b5, 0x1, {0x9}, {0x9}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x4}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x31c2, 0x200, 0x1, 0x0, "5d5b1bcc4892d1d054299d8ed8c7ec12b6f444d14400e8450466678dc97607d9bb7e198463c69379dac3db7c38298e7848d365c3f62ebd50a3e4e6c09182b34a"}}}}, {0x3, 0x8, 0x6005, 'ipvlan1\x00', 'batadv0\x00', 'veth1_vlan\x00', 'geneve0\x00', @random="6451f33ccb80", [0xcdc88b47882f053a, 0xff, 0x0, 0x0, 0xff, 0xff], @link_local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}]}, 0x11be) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000680)) (async) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000680)) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea", 0x30}], 0x1}, 0x4000804) 3.218631213s ago: executing program 1 (id=2790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x49}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x34fd, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e24, @in=@remote}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.199146497s ago: executing program 2 (id=2791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x52e}, 0x94) 3.062487026s ago: executing program 1 (id=2792): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvfrom(r0, 0x0, 0x3f, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) unshare(0x4000400) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000080)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)=ANY=[], 0x2c}}, 0x0) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 2.900127941s ago: executing program 2 (id=2793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25030000000c0006000300eaffffffffff07000100000000000c0005000001000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, r5, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x2, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x700, 0x66b6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) 2.421031829s ago: executing program 3 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1d0, 0x27, 0x301, 0x70bd25, 0x25dfdbff, {0xd}, [@nested={0x122, 0x78, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x12f}, @nested={0x4f, 0x162, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @uid=0xee00}, @generic="1f1feead6cea67c6a5f8b4ba6d03cfe14a29133ba25bbc6fdb669fe3ee0ac17b14708970c024a8f97f7e2ea84c0cf178a2cce3d6e2b3abaddce09f9b2e5d1f18373f40"]}, @generic="b22c41bd9901208dea00a2d131e1f004e69de616d013b19abf432e132f454446f4333835dc7def30c3e47314d43aed9e5adf7f78d16a84402d6890da34a266df3370acab2602ea87b67cd747ad719aa0ed650c55eee5d338176c35bf07594f098183732104b3442fd4348c265547425d291cab9acdfd4e109f7f169d454ded58c735275b59b35ff8d2c193173b7b6fb1317d175f49756affd8e9b28ada22e4ca097002323e6b1a86580e85a01b507685917ce2a873e3aa6e5891b295973e49b690d5"]}, @generic="fee1eb900f5d44e20cb59179a472e50f732bd2a19b6a657928b05f5b5bb26909721efa1489ebf1d6ce96bceb543d0f8df3aab321f59af22fd97d35c754d9c2be38dbd242a8873511221781733b7fd2ad93f9e18028084df393101f6bca7d3944e5021deed610adccd2ddd402bbe3b7046100a9c5cf26a68b933ece4508f3cdaf84ec2dd182f2f45de28512aa8df2974c296c089b02"]}, 0x1d0}, 0x1, 0x0, 0x0, 0x24044010}, 0x404c000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@can_newroute={0x17c, 0x18, 0x200, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x4, 0x3f, 0xf0, 0x7, "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", 0x0, "ad70a3c9c648dc4f188d4308311d1551ddcf4b12"}}, @CGW_LIM_HOPS={0x5, 0xd, 0xb0}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "e3ef058f22632b44"}}}, @CGW_MOD_OR={0xfffffffffffffe5b, 0x2, {{{0x4, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "649ed46004f072b2"}, 0x6}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.049836652s ago: executing program 0 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000eb5e12c000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfe100000000000007010000f8ffffffb702000005000000b703000000000000850000007300400095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x200080) (async) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='.\x00\x00\x00\x00'], 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100d0000000fbdbdf252500000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="63896e1f", @ANYRES16=r9, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0x8a08, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1.915888435s ago: executing program 4 (id=2796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) close(r0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e28, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="e22e161da45968fb022a760a80ec38db06d7fc9ca4", 0x15}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007070000ac1414aa000b8900000020"], 0x38, 0x4855}, 0x24000052) 1.394566459s ago: executing program 2 (id=2797): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=r5], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="a1bf32ddedc4e944fa2c9796613475ed61edcca44e26e024815f9683376ad12aa6efa8b3b8d98ba72e15613b005092b79c575258caa1d37d2c7aecf5ad02ef9125ad0f4434b9e35f1c53047f5373b51d25530851b3ff4d2dd2960319f4f9846bb7b9267191a0b08006f1a067604562f3c60fafbf9a445a939f3f383a9a2da33d3fdfb5a6cc9de4d807c36020dbfff9b95d1fc78f1a4fd3e5c24ec20a2a61d202b90e78efec8f2c196a7944fc1dd4019192c22fa9f11d68508cf787409202c494b4ef894900e57ec9d82636a57f00ec6b5fbe8748a9601f856d3084"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES64=r1, @ANYBLOB="0e95d2caca1516347e688f97138220b97b7f46a22d4ebcd3ccf797c5d972e10817cca8960796c4243a0e682d2789f022428047c55e3f70c45ea3dc3c5693459ce75501a0b3c32dcf4aae47e1137640a60c11d07288eff15e4bf50f6d2695dc28e979a2e36f66824d6c9bc3a08404629e1f0d3805efff1c68df7dff23529022bc17db0e8c7c3f2e7e9ddc9a9900ef4e84e14b70e845b607ee146ba833ff", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=0x0, @ANYRESDEC=r9, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r8}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004700070128bd500000000000017c000007000480360a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000840)=""/70, 0x46, 0x0, &(0x7f00000008c0)=""/127, 0x7f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r14, @ANYRES32=r15, @ANYBLOB="01000000030000000000000000000000000000000000000000000080", @ANYRESDEC=r7, @ANYRES32=r3], 0x50) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r16, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r16, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) sendmmsg$inet(r16, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="1793", 0x2}], 0x1}}], 0x1, 0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r18 = openat$cgroup_int(r17, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r18, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB='E'], 0x31) 1.292908751s ago: executing program 4 (id=2798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x24048150}, 0x8000) 1.195675209s ago: executing program 3 (id=2799): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001031dbd700afadbdf250200"], 0x14}}, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000000600000008000000e439000000900000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/20, @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00'], 0x50) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x70bd2d, 0x259fdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x2c}}, 0x64000) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r10) sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r11, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xc0}}, 0x0) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x80) (async, rerun: 32) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r12, &(0x7f0000000400)={0xa, 0x4e22}, 0x1c) (async) listen(r12, 0x80010040) (async) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async, rerun: 64) setsockopt$inet6_tcp_int(r12, 0x6, 0xa, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080a2cf4002800670000020690386400ff01ac1414aa00004e2262f6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000006800090300230000000000000a0000000000000004200400ec3638bda01fef83339b6b4e7b68cb8b042911a72e374463103d4b7e07d8166698c7ef0de051b93e75734c4df8a469a9c753"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000140007800800080000000000080006400000000405000400020000fdd848d169c02a66b8752e000500050002000073797a310000000015000300686173683a69702c706f72742c6e6574000000000000"], 0x64}}, 0x0) (rerun: 64) 1.116417179s ago: executing program 0 (id=2800): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x99, 0x6}, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa}}, [0x0, 0x1, 0x9, 0x8, 0x10, 0x0, 0x0, 0x400, 0x3ff, 0x7, 0x6, 0x3, 0x2, 0x1b3, 0x6]}, &(0x7f0000000100)=0x100) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 1.023292189s ago: executing program 4 (id=2801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fffffff, 0x9, 0xffffffffffffffff, 0x5c8e, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x80}}, 0x0) 1.020013383s ago: executing program 1 (id=2802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!_\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0c4}, 0xc800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x708, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x7f, 0xffffffff, {{0xb, 0x4, 0x1, 0x6, 0x2c, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@lsrr={0x83, 0x17, 0xf7, [@local, @private=0xa010102, @empty, @multicast2, @remote]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f00000005c0)=""/124, 0x7c, 0x0, &(0x7f0000000640)=""/79, 0x4f}}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4030}, 0x18) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x3, 0xabcc, 0x3, 0x10, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x3, &(0x7f00000003c0)=@raw=[@ldst={0x2, 0x2, 0x0, 0x8, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000400)='syzkaller\x00', 0xda, 0x76, &(0x7f0000000440)=""/118, 0x61780, 0x0, '\x00', r6, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x7, &(0x7f0000000840)=[0x1, r9], &(0x7f0000000880)=[{0x3, 0x4, 0xb, 0x9}, {0x0, 0x4, 0x2, 0x7}, {0x0, 0x2, 0xa, 0x2}, {0x5, 0x1, 0xd, 0xb}, {0x4, 0x2, 0x2, 0x6}, {0x1, 0x2, 0x6, 0x7}, {0x3, 0x4, 0xb, 0x2}], 0x10, 0x2}, 0x94) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000009c0)) (async) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000a80)=0x619) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r11, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%+9llu \x00'}, 0x20) (async) setsockopt$inet_sctp_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000000b80)=0xf2, 0x4) (async) sendmsg$inet(r11, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="0e52162c9053d41bfd8780b979a082cc0628793adaa32449f2d12a178f83fd67d98aa40ff3738db0c6322645b3fd71ffb868d7f067fef16e94fa547968806fe743358c5f64ab72d5e3ac083c26ec376e190eb159b6b3650f91a9644d9bd2ea019628de35a6e90fecbfdf0026a7545b1686505a2577a216743d8831a03c7391c7bb0f4e411e3545dcc17f4528e82a3be001e22baa67a3879cea082a9a4922d20b2a681f464ab963efc35ca322c8944d3af1c80f149735528fb52956f440a0fa6f0f9ceecb5952", 0xc6}, {&(0x7f0000000d00)="ca422321f5a65102203af02bb38e6327d1053c979cf3e0c60c1c991d1923a8bf5068510d9cfa9fa3558fb131995c5a5607ac3994e494120b6fa87f63201597b0b08d7316f5c18c928e30d0af6c483e9dfee3efaa320eeca6321a0b8204cbfd5407db5826c07518f73e6ea6dab26738064b43a669d3ce97a0e308d01c29310c5d524fc3110bb662d4204304219789b89161567b4010b62df8fad302", 0x9b}], 0x2}, 0x20000020) sendfile(r8, r11, &(0x7f0000000e40)=0xffffffff, 0x5) (async) ioctl$TUNSETLINK(r11, 0x400454cd, 0x313) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000e80)={'vlan0\x00'}) (async, rerun: 64) ioctl$FITHAW(r12, 0xc0045878) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r11) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r13, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x4040) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000001000)={{0x2, 0x4e21, @multicast2}, {0x306, @remote}, 0x22, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ipvlan1\x00'}) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r11) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x5c, r14, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r11, 0x89f4, &(0x7f0000001240)={'sit0\x00', &(0x7f0000001200)={@local, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@broadcast}]}}) 659.915717ms ago: executing program 0 (id=2803): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x40, 0x8, 0x800, 0x7fff, {{0xc, 0x4, 0x3, 0x3, 0x30, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, {[@end, @cipso={0x86, 0x1a, 0x0, [{0x1, 0xb, "2e83d8ff9cd5ab020c"}, {0x2, 0x9, "06992ad9b390b4"}]}]}}}}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call, @jmp={0x5, 0x1, 0x7, 0x5, 0x8, 0xfffffffffffffff0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x22}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fb}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x12d7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x60}, @generic={0x7f, 0x9, 0x3, 0x3, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x101, 0xed, &(0x7f0000000540)=""/237, 0x40f00, 0x0, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc820}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e001400028008000300030000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r2, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/176, 0xb0}], 0x1, &(0x7f00000002c0)=""/34, 0x22}, 0x5}], 0x1, 0x10042, &(0x7f0000000340)) 589.440671ms ago: executing program 1 (id=2804): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) splice(0xffffffffffffffff, &(0x7f0000000080), r0, &(0x7f00000000c0)=0x1, 0x8, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000008000061190900000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 564.493815ms ago: executing program 4 (id=2805): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="01154e000100000b2233445588fb7eb156611448", 0x14, 0x0, &(0x7f0000000200)={0x11, 0x1a, r1, 0x0, 0x4, 0x0, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 496.402471ms ago: executing program 3 (id=2806): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4022}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x5, 0x5, 0x0, 0x80, 0x4}, @exit, @alu={0x4, 0x0, 0x3, 0x6, 0x2, 0x30, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x400, 0x63, &(0x7f0000000200)=""/99, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x30, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x1, 0x6, 0x9}, {0x1, 0x3, 0x5, 0x7}, {0x0, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x6, 0xc}, {0x2, 0x4, 0x7, 0x8}, {0x0, 0x1, 0xd, 0x4}], 0x10, 0xc}, 0x94) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x225}, {r0, 0x4400}, {r1, 0x10}, {r2, 0x4080}, {0xffffffffffffffff, 0x80}, {r3, 0x1}, {0xffffffffffffffff, 0x9}, {r4, 0x2a0}], 0x8, &(0x7f0000000500), &(0x7f0000000540)={[0x7]}, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@getae={0x88, 0x1f, 0x100, 0x70bd2b, 0x25dfdbfd, {{@in=@local, 0x4d3, 0xa, 0x2b}, @in6=@remote, 0x8, 0x3506}, [@iptfs_dont_frag={0x4}, @iptfs_reorder_window={0x6, 0x25, 0x101}, @replay_thresh={0x8, 0xb, 0x8}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@mcast1, 0x0, 0x2}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008000}, 0x11) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000740)='net_cls.classid\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x12010, r0, 0x8cd67000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x0, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0xa, [@ptr={0xf}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x28, 0x6}, @fwd={0x4}, @union={0x4, 0x7, 0x0, 0x5, 0x0, 0xc, [{0x9, 0x1, 0x2000000}, {0x10, 0x5}, {0x7, 0x4, 0x50}, {0xd, 0x5, 0x9}, {0x2, 0x3, 0x85a1}, {0x0, 0x3, 0x2}, {0xb, 0x1, 0x8}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x30, 0x30, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000840)=""/4096, 0xaa, 0x1000, 0x0, 0xffffff9c}, 0x28) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000001880)) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6gre0\x00', &(0x7f0000001940)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x10, 0x0, 0x61, @private0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7, 0x10, 0x4, 0x4}}) recvfrom$packet(r8, &(0x7f0000001900)=""/5, 0x5, 0x43, &(0x7f0000001a00)={0x11, 0x1, r9, 0x1, 0x29, 0x6, @broadcast}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x10040010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001bc0)={'ip_vti0\x00', r9, 0x80, 0x7800, 0x1, 0xffffff01, {{0x3b, 0x4, 0x0, 0x1f, 0xec, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@timestamp_addr={0x44, 0x44, 0x2b, 0x1, 0x2, [{@private=0xa010100, 0x8}, {@rand_addr=0x64010100, 0x9}, {@empty, 0xa}, {@loopback, 0x3}, {@multicast1, 0x2}, {@remote, 0xf0000000}, {@remote, 0xa778}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}]}, @lsrr={0x83, 0xf, 0xfb, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x44, 0xd, "5085584b85817dbcd1caf6"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x68, [@loopback, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @empty, @local, @remote]}, @end, @end, @timestamp_addr={0x44, 0x24, 0x42, 0x1, 0x1, [{@private=0xa010101, 0x6}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0xae7}, {@remote, 0xfffffff6}]}, @ssrr={0x89, 0x27, 0x94, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, @remote, @broadcast, @remote, @empty, @local, @multicast2]}, @end]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb}, {0x5, 0x4}, {0x0, 0xffe0}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x66e}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000001e40)) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000001ec0)={0xb, 0x30, '\x00', 0x1, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r8, r2, &(0x7f0000001f00)=0xaa0, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r13, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x5, 0x101, @l2={'eth', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, r10, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r4, 0xab44a000) 444.952511ms ago: executing program 2 (id=2807): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xffffffffffffffb5}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32, @ANYBLOB="080003"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 325.77148ms ago: executing program 0 (id=2808): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) socket$kcm(0x11, 0x200000000000003, 0x300) bind(r3, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) listen(r3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socket$inet(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0xdb, @local, 0x8}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 251.977992ms ago: executing program 1 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000240)) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r6, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$phonet_pipe(r5, &(0x7f00000000c0)={0x23, 0x6, 0x2d, 0xff}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x6, 0x91, "8b72"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x15}, 0x94) 221.796217ms ago: executing program 4 (id=2810): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) socket$inet_sctp(0x2, 0x1, 0x84) 180.578826ms ago: executing program 3 (id=2811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltfilter={0x658, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x628, 0x2, [@TCA_BASIC_EMATCHES={0x624, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x7}, {0x6, 0x8, 0xff, 0x0, 0x6, 0x2, 0x1}}}, @TCF_EM_META={0x68, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x99}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='V']}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="a15d49ca8b4b4fb20f", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="dbb977c5a2e935", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_VAR="698faadf4b4dd3", @TCF_META_TYPE_VAR="cd51eaa2e5", @TCF_META_TYPE_VAR='Y', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="7b298e1a4c9cf339ed2e", @TCF_META_TYPE_VAR="8121286b", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="438a8d31", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x7}, "566bda1569985929484b7dad0f3c5a911c4c30ca2e96fcaef5ce0c6cece39a331c44510d9fb44633f7c2ffcf48407c0b9056e85c161a1c51fac42a701510131ad73db5d5cb928c4d730e5d72f7d99ea16a32cfc4162f85552f839a816841b0d9c65c8147fe66d3be066139ae915b43bb588508a2bda27f20929db949b5cb"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x79, 0x2, 0x20}, {0x74, 0x3, 0x2, '_s$'}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x2}, {0xffffffffffffffff, 0x6}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x24c2, 0x7, 0xc}, {{0x4, 0x1, 0x0, 0x1}, {0x2}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3ff}, {0x3, 0x6, 0x1, "7ef9e22a0b93"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xac}}, @TCA_EMATCH_TREE_LIST={0x334, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x6c, 0x1, 0x0, 0x0, {{0x1a14, 0x0, 0x4}, "e0db89d77ff99c270184d1e6a0c3435d43327c9c662dfe478a6b4f0a0a6df4e403b386b0d1fba34b69ccaf3a2f9bba5f3660c8b9c8e6a20f444e38b7ec2c9a3ad04f7dfb8bcfce843090e03db55430735540c9eee32933f438ae07848a86"}}, @TCF_EM_IPT={0x110, 0x2, 0x0, 0x0, {{0x7, 0x9, 0xf3c}, [@TCA_EM_IPT_MATCH_DATA={0x102, 0x5, "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"}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2f9f, 0x3, 0x7}, {0x1, 0x7fff, 0x40, 0x41855c1e}}}, @TCF_EM_U32={0x1c, 0x5, 0x0, 0x0, {{0x2, 0x3, 0x7081}, {0x4, 0x0, 0x8001, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x100}, {0x3, 0x7, 0x6, 0x3, 0x9, 0x2, 0x1}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x101, 0x4, 0x1ff}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8a6c71", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1a4b77022f3f24b6"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x6, 0x1}, {0x7c75, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0xb0, 0x1}, {0x3c9, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="bb4f74", @TCF_META_TYPE_VAR="6010", @TCF_META_TYPE_VAR="a1"]}]}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="cfd64bfc4ace2075d1b8", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ddde29c9", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7}, {0x6, 0x0, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x5}, {0x9, 0xbc, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR='-', @TCF_META_TYPE_VAR="139c", @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0xfffe}, "1872bec891ac8a29846556d0969faf7a"}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="b6150704017e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="a639c410f268db639bb6"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="708ae62dea64e47b36"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="ae77237fd21aa7576d8d"]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="42f4", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x1}, {0x10, 0x80}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="740a0f3a6ce4377d71", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c9"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0xc, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3bfdb9d0"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="d86c0f404fec759117e9"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="32420fd703c2", @TCF_META_TYPE_VAR="a3ff604dfebd5ad79bd2", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x47f, 0x7, 0xfff}, {{0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x58, 0x1, 0x0, 0x0, {{0x90e, 0x0, 0xc}, "281fa41f8d77f574b639bf3de2e12f10888229221ece28c83bf11f524bf453f9fdddc9fdf14aa1c32c1d40e04f0bc88c1d283eea4fe3f5579de4c0b30f74b40e53910ba0b1ba78021a"}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8b176c3719746fdf", @TCF_META_TYPE_VAR="18812913", @TCF_META_TYPE_VAR="7a4a80f1c969a7c63db9", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="be365854de75e9"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="15a2109136a9c0e563b0"]}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xffd8, 0x2, 0x9}, {0xd2c6, 0xa, 0x2, "24aeb113b4e1ffe5a3a0"}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x7}, {0x9, 0x8, 0x8001, 0x2}}}]}]}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x40005}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f00000001c0)="658f4943930cbaa85a0b30d85931c78dd62549b096a96c2044a428b5bfcc1565d6b1806bd0a9be1b4bc40fd1f53a49c90db6015eeab2cfd77c6badf9de6b31dc631b6463a99d6da22ff078682be23887613c9cee40b5545f70707aab6376c3745c47b7f0ab3e276df81798d64b6ecf438cbffbc1531fd54462f7c6f3a70bca", 0x7f, 0x0, &(0x7f0000000240)=@in6={0xa, 0x4e23, 0x9023, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002500090025bd7000fddbdfff06000000080001", @ANYRESDEC=r3], 0x1c}}, 0x4000080) 4.109024ms ago: executing program 2 (id=2812): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) r6 = accept4(r0, &(0x7f00000003c0)=@un=@abs, &(0x7f0000000440)=0x80, 0x80800) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x1402, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x80014) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000340)={0x2}) getsockopt$sock_buf(r0, 0x1, 0x69, &(0x7f0000000100)=""/155, &(0x7f00000001c0)=0x9b) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r9], 0x0) epoll_pwait(r9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x5, 0x5, &(0x7f0000000380)={[0x3]}, 0x8) 0s ago: executing program 3 (id=2813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32, @ANYRES8=r0, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20054040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d0, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x80, 0x0, 0x0, 0x0, {0xe7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x6, 0x9}}]}, @NL80211_ATTR_IE={0xb8, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x5}}, @supported_rates={0x1, 0x6, [{0x6, 0x1}, {0x1}, {0x16}, {0x1b, 0x1}, {0x48}, {0x6, 0x1}]}, @random={0x8, 0x3b, "9e862dfe8e1edd20593277626cd21689697b379251773a68993ca2b2c7789f5201c9be58dbb372ff76e55a8a09e289af410087d6a158dfe5fd0c6b"}, @preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x9, 0x4, 0x0, @device_b, 0x7, @void, 0x9, 0x7f, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x9}]}}, @prep={0x83, 0x1f, {{}, 0xc5, 0x0, @device_a, 0x8, @void, 0xfffffffe, 0x5, @broadcast, 0xa}}, @challenge={0x10, 0x1, 0x5e}, @supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x18, 0x1}, {0x6c}, {0x5, 0x1}]}, @mic={0x8c, 0x10, {0x366, "4d9dbea4e049", @short="26046902decf5abd"}}, @chsw_timing={0x68, 0x4, {0x2, 0x9}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_IE={0x8c, 0x2a, [@preq={0x82, 0x62, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x2, 0x2, 0x0, @device_a, 0x8000, @value, 0x1, 0x81, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{}, @device_a, 0x101}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{}, @device_b, 0xff}, {{0x1}, @device_b, 0xf6c5}, {{0x1}, @device_b, 0x1}]}}, @challenge={0x10, 0x1, 0xbd}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @ibss={0x6, 0x2, 0xff}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x9a, 0xd461084e129d1d78}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x22004044}, 0x4000010) kernel console output (not intermixed with test programs): rocess `syz.2.1038'. [ 226.910447][ T9811] macsec1: entered promiscuous mode [ 226.910471][ T9811] bridge0: entered promiscuous mode [ 226.910664][ T9811] macsec1: entered allmulticast mode [ 226.910679][ T9811] bridge0: entered allmulticast mode [ 226.912256][ T9811] bridge0: port 3(macsec1) entered blocking state [ 226.912376][ T9811] bridge0: port 3(macsec1) entered disabled state [ 226.971061][ T9811] bridge0: left allmulticast mode [ 227.018466][ T5349] bridge0: left promiscuous mode [ 227.135994][ T9818] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1041'. [ 227.195474][ T9823] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 1, id = 0 [ 227.286437][ T9827] sctp: [Deprecated]: syz.0.1047 (pid 9827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.286437][ T9827] Use struct sctp_sack_info instead [ 227.497525][ T9834] IPVS: Unknown mcast interface: nr0 [ 227.735022][ T9840] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1050'. [ 228.121803][ T9827] bond2: entered promiscuous mode [ 228.525254][ T9874] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 228.525282][ T9874] netlink: 'syz.2.1061': attribute type 268 has an invalid length. [ 228.525301][ T9874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1061'. [ 228.575152][ T9881] netlink: 'syz.0.1064': attribute type 4 has an invalid length. [ 228.804431][ T9892] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1067'. [ 228.853744][ T9892] netlink: 11291 bytes leftover after parsing attributes in process `syz.2.1067'. [ 228.910228][ T9899] netlink: 'syz.0.1068': attribute type 26 has an invalid length. [ 229.460942][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1075'. [ 229.892663][ T5814] net_ratelimit: 15 callbacks suppressed [ 229.892694][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.948048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.201281][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.201529][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.407093][ T9966] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1087'. [ 230.463144][ T9976] netlink: 'syz.3.1091': attribute type 30 has an invalid length. [ 230.584029][ T9974] bond3: entered promiscuous mode [ 230.584101][ T9974] bond3: entered allmulticast mode [ 230.584461][ T9974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.903329][ T9993] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1093'. [ 230.941699][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.997743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.311942][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.312192][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.347200][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.593933][T10004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.593986][T10004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.728721][T10021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.794344][T10029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.806757][T10030] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 231.950333][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.055526][T10004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.055565][T10004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.200148][T10058] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1105'. [ 232.475494][T10004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.476266][T10004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.630468][T10004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.630505][T10004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.665814][T10074] bond0: (slave gretap0): Opening slave failed [ 232.666548][T10075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1108'. [ 232.838637][ T27] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.838676][ T27] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.838716][ T27] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.838755][ T27] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.900248][ T762] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.900288][ T762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.909200][ T1367] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.909317][ T1367] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.983001][T10044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.069614][ T5814] net_ratelimit: 14 callbacks suppressed [ 235.069639][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.155820][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.166826][T10096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1119'. [ 235.300182][T10103] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.301433][T10102] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.342045][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 235.372167][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.372367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.648296][T10130] bridge0: port 3(veth1_to_bridge) entered blocking state [ 235.650012][T10130] bridge0: port 3(veth1_to_bridge) entered disabled state [ 235.650171][T10130] veth1_to_bridge: entered allmulticast mode [ 235.673278][T10130] veth1_to_bridge: entered promiscuous mode [ 235.726064][T10118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 235.726095][T10118] nbd: nbd64 already in use [ 235.800436][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.800686][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.114429][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.179053][ T9264] udevd[9264]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.422647][T10151] geneve2: entered promiscuous mode [ 236.422675][T10151] geneve2: entered allmulticast mode [ 236.458229][ T50] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 236.458963][ T50] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 236.459021][ T50] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 236.470250][ T1152] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 236.749808][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 236.749838][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 236.920597][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.925744][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.007219][T10178] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 237.070056][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.085853][T10146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.368053][T10199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1141'. [ 239.369931][T10200] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1141'. [ 239.417057][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'. [ 239.417100][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 239.440568][T10201] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1139'. [ 239.677295][T10213] block nbd1: not configured, cannot reconfigure [ 239.694247][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 239.872289][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.874405][T10223] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.187901][ C1] net_ratelimit: 10 callbacks suppressed [ 240.187927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.238316][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.238584][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.279359][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.409468][T10243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.698215][T10254] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 240.811884][T10260] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1162'. [ 241.197981][T10270] xt_policy: output policy not valid in PREROUTING and INPUT [ 241.227682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.229204][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.314253][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.337921][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.338207][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.638753][T10281] syzkaller0: entered promiscuous mode [ 241.638776][T10281] syzkaller0: entered allmulticast mode [ 241.686712][T10281] bond2: entered allmulticast mode [ 241.697193][T10287] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 241.697218][T10287] netlink: 'syz.0.1170': attribute type 2 has an invalid length. [ 241.697233][T10287] netlink: 'syz.0.1170': attribute type 3 has an invalid length. [ 241.697247][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 241.738849][T10281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1169'. [ 241.746979][T10280] bond2: left allmulticast mode [ 242.124270][T10304] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1177'. [ 242.172386][T10302] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 242.172485][T10302] syzkaller1: Refused to change device type [ 242.299274][T10313] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 242.334998][T10302] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 242.345485][T10302] bond5 (unregistering): Released all slaves [ 242.517140][T10310] vlan0: left allmulticast mode [ 242.517167][T10310] veth0_vlan: left allmulticast mode [ 242.545933][T10310] team0: Port device vlan0 added [ 243.025941][T10327] syzkaller0: entered promiscuous mode [ 243.025969][T10327] syzkaller0: entered allmulticast mode [ 245.390969][ C1] net_ratelimit: 14 callbacks suppressed [ 245.390995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.391842][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.393309][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.433538][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.452444][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.473671][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.659744][T10357] __nla_validate_parse: 3 callbacks suppressed [ 245.659768][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 245.773430][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.773703][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.905088][T10371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 246.047965][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 246.154977][T10381] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1196'. [ 246.479227][T10390] syzkaller0: entered promiscuous mode [ 246.479254][T10390] syzkaller0: entered allmulticast mode [ 246.515535][T10406] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 246.517351][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.568498][T10406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.869974][ T762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.915270][T10412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 248.795648][T10400] bond3: (slave gretap1): making interface the new active one [ 248.796744][T10400] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 249.098249][T10425] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1207'. [ 249.182412][T10430] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1212'. [ 249.565189][T10450] tipc: Started in network mode [ 249.565226][T10450] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 249.915874][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 249.915911][T10467] netlink: 'syz.1.1224': attribute type 5 has an invalid length. [ 249.915928][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1224'. [ 250.006129][T10467] geneve2: entered promiscuous mode [ 250.006153][T10467] geneve2: entered allmulticast mode [ 250.026592][T10472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1225'. [ 250.050199][ T27] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 250.050260][ T27] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 250.050298][ T27] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 250.059657][ T27] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 250.279677][T10481] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 250.301743][T10481] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 250.428032][ C0] net_ratelimit: 14 callbacks suppressed [ 250.428058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.698291][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.727856][T10499] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1234'. [ 250.727891][T10499] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1234'. [ 250.791449][T10503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1233'. [ 250.796258][T10503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1233'. [ 251.011519][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1236'. [ 251.113073][T10518] syzkaller0: entered promiscuous mode [ 251.113099][T10518] syzkaller0: entered allmulticast mode [ 251.369393][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.369652][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.467695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.549023][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.622711][ T5620] block nbd0: Receive control failed (result -32) [ 251.703843][T10541] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.704457][T10541] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.704674][T10541] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.704762][T10541] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 251.856030][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 251.950825][T10552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1246'. [ 252.142258][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 252.142620][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 252.666617][T10577] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 252.935781][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 253.323633][T10618] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 253.951659][T10648] Bluetooth: hci0: unsupported parameter 5161 [ 253.951687][T10648] Bluetooth: hci0: unsupported parameter 8192 [ 253.951702][T10648] Bluetooth: hci0: unsupported parameter 5161 [ 253.951716][T10648] Bluetooth: hci0: unsupported parameter 8192 [ 254.298773][T10667] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.871673][T10685] vlan3: entered allmulticast mode [ 254.871698][T10685] bond0: entered allmulticast mode [ 254.871714][T10685] bond_slave_0: entered allmulticast mode [ 254.874236][T10685] bond1: entered allmulticast mode [ 255.632972][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.596032][T10738] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 256.596057][T10738] __nla_validate_parse: 7 callbacks suppressed [ 256.596071][T10738] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1287'. [ 256.596106][T10738] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 256.660366][T10738] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1287'. [ 257.152128][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 257.809392][T10785] net_ratelimit: 62 callbacks suppressed [ 257.809419][T10785] ip_tables: iptables: counters copy to user failed while replacing table [ 257.823886][T10781] netlink: 'syz.0.1295': attribute type 10 has an invalid length. [ 257.896858][T10781] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 258.065389][T10785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1299'. [ 258.095559][T10789] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1296'. [ 258.095590][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 258.366678][T10801] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 258.366704][T10801] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 258.391472][T10802] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 258.391499][T10802] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 258.785309][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 259.432863][T10818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1306'. [ 259.448070][T10828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1306'. [ 260.454288][T10861] tipc: Enabling of bearer rejected, failed to enable media [ 260.629408][T10873] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 260.653407][T10875] netlink: 'syz.0.1317': attribute type 10 has an invalid length. [ 260.893698][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.039799][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 261.554398][T10904] netlink: Failed to add helper -22 [ 261.554459][T10904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.951579][T10919] FAULT_INJECTION: forcing a failure. [ 261.951579][T10919] name failslab, interval 1, probability 0, space 0, times 1 [ 261.951630][T10919] CPU: 1 UID: 0 PID: 10919 Comm: syz.3.1327 Not tainted syzkaller #0 PREEMPT(full) [ 261.951655][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.951677][T10919] Call Trace: [ 261.951689][T10919] [ 261.951699][T10919] dump_stack_lvl+0xe8/0x150 [ 261.951738][T10919] should_fail_ex+0x410/0x560 [ 261.951768][T10919] ? __alloc_skb+0x1db/0x7a0 [ 261.951794][T10919] should_failslab+0xa8/0x100 [ 261.951823][T10919] ? __alloc_skb+0x1db/0x7a0 [ 261.951846][T10919] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 261.951881][T10919] ? __alloc_skb+0x18d/0x7a0 [ 261.951907][T10919] ? __alloc_skb+0x1db/0x7a0 [ 261.951938][T10919] __alloc_skb+0x1db/0x7a0 [ 261.951968][T10919] netlink_sendmsg+0x5d4/0xb40 [ 261.952011][T10919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.952051][T10919] ? apparmor_socket_sendmsg+0x98/0x360 [ 261.952079][T10919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.952111][T10919] sock_sendmsg_nosec+0x13a/0x180 [ 261.952150][T10919] ____sys_sendmsg+0x54e/0x850 [ 261.952186][T10919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.952224][T10919] ? import_iovec+0x73/0xa0 [ 261.952253][T10919] ___sys_sendmsg+0x2a5/0x360 [ 261.952279][T10919] ? __lock_acquire+0x747/0x2de0 [ 261.952310][T10919] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.952378][T10919] ? __fget_files+0x2a/0x420 [ 261.952409][T10919] ? __fget_files+0x3a2/0x420 [ 261.952449][T10919] __x64_sys_sendmsg+0x1b1/0x290 [ 261.952501][T10919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.952562][T10919] do_syscall_64+0x166/0x520 [ 261.952588][T10919] ? trace_irq_disable+0x3b/0x140 [ 261.952611][T10919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.952636][T10919] ? clear_bhb_loop+0x70/0xc0 [ 261.952665][T10919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.952689][T10919] RIP: 0033:0x7f8460f9e159 [ 261.952718][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.952737][T10919] RSP: 002b:00007f8461db1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.952767][T10919] RAX: ffffffffffffffda RBX: 00007f8461225fa0 RCX: 00007f8460f9e159 [ 261.952783][T10919] RDX: 0000000004000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 261.952798][T10919] RBP: 00007f8461db1090 R08: 0000000000000000 R09: 0000000000000000 [ 261.952811][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.952823][T10919] R13: 00007f8461226038 R14: 00007f8461225fa0 R15: 00007fff8a45b738 [ 261.952855][T10919] [ 262.621099][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1331'. [ 262.627213][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'. [ 262.659985][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 263.288227][T10953] Cannot find set identified by id 0 to match [ 263.380760][T10952] Cannot find set identified by id 0 to match [ 263.614576][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.711508][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'. [ 263.981463][T10976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1346'. [ 263.992637][T10976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.198473][T10978] netlink: 'syz.0.1349': attribute type 9 has an invalid length. [ 264.706773][T11002] FAULT_INJECTION: forcing a failure. [ 264.706773][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 264.706808][T11002] CPU: 1 UID: 0 PID: 11002 Comm: syz.2.1356 Not tainted syzkaller #0 PREEMPT(full) [ 264.706834][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.706847][T11002] Call Trace: [ 264.706856][T11002] [ 264.706866][T11002] dump_stack_lvl+0xe8/0x150 [ 264.706904][T11002] should_fail_ex+0x410/0x560 [ 264.706936][T11002] should_failslab+0xa8/0x100 [ 264.706965][T11002] ? skb_clone+0x212/0x3a0 [ 264.706998][T11002] kmem_cache_alloc_noprof+0xa1/0x600 [ 264.707037][T11002] ? skb_clone+0x212/0x3a0 [ 264.707075][T11002] skb_clone+0x212/0x3a0 [ 264.707111][T11002] __netlink_deliver_tap+0x413/0x860 [ 264.707165][T11002] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.707201][T11002] netlink_deliver_tap+0x19c/0x1b0 [ 264.707237][T11002] netlink_unicast+0x781/0x940 [ 264.707281][T11002] netlink_sendmsg+0x813/0xb40 [ 264.707327][T11002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.707371][T11002] ? apparmor_socket_sendmsg+0x98/0x360 [ 264.707400][T11002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.707433][T11002] sock_sendmsg_nosec+0x13a/0x180 [ 264.707473][T11002] ____sys_sendmsg+0x54e/0x850 [ 264.707511][T11002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.707555][T11002] ? import_iovec+0x73/0xa0 [ 264.707586][T11002] ___sys_sendmsg+0x2a5/0x360 [ 264.707616][T11002] ? __lock_acquire+0x747/0x2de0 [ 264.707643][T11002] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.707713][T11002] ? __fget_files+0x2a/0x420 [ 264.707742][T11002] ? __fget_files+0x3a2/0x420 [ 264.707799][T11002] __x64_sys_sendmsg+0x1b1/0x290 [ 264.707832][T11002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.707886][T11002] do_syscall_64+0x166/0x520 [ 264.707911][T11002] ? trace_irq_disable+0x3b/0x140 [ 264.707933][T11002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.707956][T11002] ? clear_bhb_loop+0x70/0xc0 [ 264.707984][T11002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.708007][T11002] RIP: 0033:0x7fc39419e159 [ 264.708028][T11002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.708046][T11002] RSP: 002b:00007fc394fdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.708070][T11002] RAX: ffffffffffffffda RBX: 00007fc394425fa0 RCX: 00007fc39419e159 [ 264.708087][T11002] RDX: 0000000004000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 264.708102][T11002] RBP: 00007fc394fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 264.708116][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.708136][T11002] R13: 00007fc394426038 R14: 00007fc394425fa0 R15: 00007ffce23cc278 [ 264.708172][T11002] [ 265.274292][T11012] syz_tun: entered allmulticast mode [ 265.669595][T11011] syz_tun: left allmulticast mode [ 265.971416][T11054] Bluetooth: hci0: unsupported parameter 5161 [ 265.971440][T11054] Bluetooth: hci0: unsupported parameter 8192 [ 265.971454][T11054] Bluetooth: hci0: unsupported parameter 5161 [ 265.971467][T11054] Bluetooth: hci0: unsupported parameter 8192 [ 265.973713][T11054] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1365'. [ 266.117162][T11056] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1366'. [ 266.250869][T11056] 0·: renamed from hsr0 (while UP) [ 266.293353][T11063] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1368'. [ 266.326353][T11056] 0·: entered allmulticast mode [ 266.326379][T11056] hsr_slave_0: entered allmulticast mode [ 266.326779][T11056] hsr_slave_1: entered allmulticast mode [ 266.347531][T11056] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 266.686153][T11074] netlink: 'syz.4.1369': attribute type 8 has an invalid length. [ 266.821578][T11081] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 266.880119][T11081] team0: Device veth0_macvtap failed to register rx_handler [ 266.931751][T11083] FAULT_INJECTION: forcing a failure. [ 266.931751][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 266.931787][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.0.1372 Not tainted syzkaller #0 PREEMPT(full) [ 266.931813][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.931826][T11083] Call Trace: [ 266.931835][T11083] [ 266.931844][T11083] dump_stack_lvl+0xe8/0x150 [ 266.931883][T11083] should_fail_ex+0x410/0x560 [ 266.931923][T11083] should_failslab+0xa8/0x100 [ 266.931951][T11083] ? skb_clone+0x212/0x3a0 [ 266.931982][T11083] kmem_cache_alloc_noprof+0xa1/0x600 [ 266.932020][T11083] ? skb_clone+0x212/0x3a0 [ 266.932057][T11083] skb_clone+0x212/0x3a0 [ 266.932092][T11083] __netlink_deliver_tap+0x413/0x860 [ 266.932139][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.932174][T11083] netlink_deliver_tap+0x19c/0x1b0 [ 266.932209][T11083] netlink_unicast+0x781/0x940 [ 266.932251][T11083] netlink_sendmsg+0x813/0xb40 [ 266.932295][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.932339][T11083] ? apparmor_socket_sendmsg+0x98/0x360 [ 266.932367][T11083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.932399][T11083] sock_sendmsg_nosec+0x13a/0x180 [ 266.932438][T11083] ____sys_sendmsg+0x54e/0x850 [ 266.932475][T11083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.932515][T11083] ? import_iovec+0x73/0xa0 [ 266.932547][T11083] ___sys_sendmsg+0x2a5/0x360 [ 266.932575][T11083] ? __lock_acquire+0x747/0x2de0 [ 266.932604][T11083] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.932674][T11083] ? __fget_files+0x2a/0x420 [ 266.932705][T11083] ? __fget_files+0x3a2/0x420 [ 266.932748][T11083] __x64_sys_sendmsg+0x1b1/0x290 [ 266.932781][T11083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.932836][T11083] do_syscall_64+0x166/0x520 [ 266.932861][T11083] ? trace_irq_disable+0x3b/0x140 [ 266.932883][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.932914][T11083] ? clear_bhb_loop+0x70/0xc0 [ 266.932943][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.932966][T11083] RIP: 0033:0x7fdf6a99e159 [ 266.932986][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.933006][T11083] RSP: 002b:00007fdf6b839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.933030][T11083] RAX: ffffffffffffffda RBX: 00007fdf6ac25fa0 RCX: 00007fdf6a99e159 [ 266.933047][T11083] RDX: 0000000004000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 266.933062][T11083] RBP: 00007fdf6b839090 R08: 0000000000000000 R09: 0000000000000000 [ 266.933076][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.933090][T11083] R13: 00007fdf6ac26038 R14: 00007fdf6ac25fa0 R15: 00007ffc4d4c8468 [ 266.933126][T11083] [ 267.371781][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1376'. [ 268.749192][T11134] FAULT_INJECTION: forcing a failure. [ 268.749192][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 268.749229][T11134] CPU: 1 UID: 0 PID: 11134 Comm: syz.3.1387 Not tainted syzkaller #0 PREEMPT(full) [ 268.749254][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.749269][T11134] Call Trace: [ 268.749277][T11134] [ 268.749287][T11134] dump_stack_lvl+0xe8/0x150 [ 268.749326][T11134] should_fail_ex+0x410/0x560 [ 268.749359][T11134] should_failslab+0xa8/0x100 [ 268.749397][T11134] __kmalloc_noprof+0xfe/0x720 [ 268.749422][T11134] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 268.749450][T11134] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 268.749486][T11134] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 268.749523][T11134] genl_family_rcv_msg_doit+0xda/0x340 [ 268.749559][T11134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.749595][T11134] ? apparmor_capable+0x126/0x170 [ 268.749632][T11134] ? bpf_lsm_capable+0x9/0x20 [ 268.749652][T11134] ? security_capable+0x7e/0x2c0 [ 268.749684][T11134] genl_rcv_msg+0x614/0x7a0 [ 268.749717][T11134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.749742][T11134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 268.749770][T11134] ? __pfx_nl80211_del_pmksa+0x10/0x10 [ 268.749793][T11134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 268.749838][T11134] netlink_rcv_skb+0x226/0x4a0 [ 268.749873][T11134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.749906][T11134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.749957][T11134] ? down_read+0x2be/0x330 [ 268.749991][T11134] genl_rcv+0x28/0x40 [ 268.750014][T11134] netlink_unicast+0x7bd/0x940 [ 268.750058][T11134] netlink_sendmsg+0x813/0xb40 [ 268.750103][T11134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.750146][T11134] ? apparmor_socket_sendmsg+0x98/0x360 [ 268.750173][T11134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.750205][T11134] sock_sendmsg_nosec+0x13a/0x180 [ 268.750245][T11134] ____sys_sendmsg+0x54e/0x850 [ 268.750282][T11134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.750325][T11134] ? import_iovec+0x73/0xa0 [ 268.750358][T11134] ___sys_sendmsg+0x2a5/0x360 [ 268.750388][T11134] ? __lock_acquire+0x747/0x2de0 [ 268.750424][T11134] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.750498][T11134] ? __fget_files+0x2a/0x420 [ 268.750530][T11134] ? __fget_files+0x3a2/0x420 [ 268.750574][T11134] __x64_sys_sendmsg+0x1b1/0x290 [ 268.750609][T11134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.750665][T11134] do_syscall_64+0x166/0x520 [ 268.750690][T11134] ? trace_irq_disable+0x3b/0x140 [ 268.750713][T11134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.750737][T11134] ? clear_bhb_loop+0x70/0xc0 [ 268.750767][T11134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.750790][T11134] RIP: 0033:0x7f8460f9e159 [ 268.750812][T11134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.750831][T11134] RSP: 002b:00007f8461db1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.750856][T11134] RAX: ffffffffffffffda RBX: 00007f8461225fa0 RCX: 00007f8460f9e159 [ 268.750873][T11134] RDX: 0000000004000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 268.750888][T11134] RBP: 00007f8461db1090 R08: 0000000000000000 R09: 0000000000000000 [ 268.750902][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.750916][T11134] R13: 00007f8461226038 R14: 00007f8461225fa0 R15: 00007fff8a45b738 [ 268.750954][T11134] [ 269.283077][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1388'. [ 269.283139][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 269.305779][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 269.670050][T11146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1389'. [ 269.820405][T11146] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1389'. [ 270.001031][T11162] Cannot find map_set index 135 as target [ 270.005465][T11162] xt_hashlimit: overflow, try lower: 3/0 [ 270.125407][T11166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1395'. [ 270.404556][T11181] FAULT_INJECTION: forcing a failure. [ 270.404556][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 270.404591][T11181] CPU: 1 UID: 0 PID: 11181 Comm: syz.4.1398 Not tainted syzkaller #0 PREEMPT(full) [ 270.404616][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.404630][T11181] Call Trace: [ 270.404639][T11181] [ 270.404649][T11181] dump_stack_lvl+0xe8/0x150 [ 270.404693][T11181] should_fail_ex+0x410/0x560 [ 270.404727][T11181] should_failslab+0xa8/0x100 [ 270.404765][T11181] ? skb_clone+0x212/0x3a0 [ 270.404798][T11181] kmem_cache_alloc_noprof+0xa1/0x600 [ 270.404837][T11181] ? skb_clone+0x212/0x3a0 [ 270.404876][T11181] skb_clone+0x212/0x3a0 [ 270.404910][T11181] __netlink_deliver_tap+0x413/0x860 [ 270.404957][T11181] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.404993][T11181] netlink_deliver_tap+0x19c/0x1b0 [ 270.405029][T11181] netlink_sendskb+0x68/0x140 [ 270.405083][T11181] netlink_rcv_skb+0x2a4/0x4a0 [ 270.405118][T11181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.405146][T11181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.405196][T11181] ? down_read+0x2be/0x330 [ 270.405229][T11181] genl_rcv+0x28/0x40 [ 270.405253][T11181] netlink_unicast+0x7bd/0x940 [ 270.405295][T11181] netlink_sendmsg+0x813/0xb40 [ 270.405340][T11181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.405383][T11181] ? apparmor_socket_sendmsg+0x98/0x360 [ 270.405410][T11181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.405443][T11181] sock_sendmsg_nosec+0x13a/0x180 [ 270.405483][T11181] ____sys_sendmsg+0x54e/0x850 [ 270.405519][T11181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.405560][T11181] ? import_iovec+0x73/0xa0 [ 270.405592][T11181] ___sys_sendmsg+0x2a5/0x360 [ 270.405630][T11181] ? __lock_acquire+0x747/0x2de0 [ 270.405658][T11181] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.405728][T11181] ? __fget_files+0x2a/0x420 [ 270.405766][T11181] ? __fget_files+0x3a2/0x420 [ 270.405808][T11181] __x64_sys_sendmsg+0x1b1/0x290 [ 270.405841][T11181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.405896][T11181] do_syscall_64+0x166/0x520 [ 270.405920][T11181] ? trace_irq_disable+0x3b/0x140 [ 270.405942][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.405966][T11181] ? clear_bhb_loop+0x70/0xc0 [ 270.405994][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.406017][T11181] RIP: 0033:0x7f1ab079e159 [ 270.406038][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.406056][T11181] RSP: 002b:00007f1ab158a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.406082][T11181] RAX: ffffffffffffffda RBX: 00007f1ab0a25fa0 RCX: 00007f1ab079e159 [ 270.406098][T11181] RDX: 0000000004000084 RSI: 0000200000000400 RDI: 0000000000000003 [ 270.406113][T11181] RBP: 00007f1ab158a090 R08: 0000000000000000 R09: 0000000000000000 [ 270.406127][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.406140][T11181] R13: 00007f1ab0a26038 R14: 00007f1ab0a25fa0 R15: 00007ffcc67f4ef8 [ 270.406179][T11181] [ 270.901175][T11191] team0 (unregistering): Port device team_slave_0 removed [ 270.964630][T11191] team0 (unregistering): Port device team_slave_1 removed [ 271.084512][T11194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1404'. [ 271.100001][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 271.100035][T11194] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 271.494916][T11207] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 272.393849][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'. [ 272.592062][T11245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1413'. [ 273.516394][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.516605][T11258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.536637][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.536850][T11258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.976405][T11270] netlink: 'syz.1.1423': attribute type 23 has an invalid length. [ 274.319944][T11279] vlan0: entered promiscuous mode [ 274.319970][T11279] 0·: entered promiscuous mode [ 274.361975][T11279] vlan0: entered allmulticast mode [ 274.567302][T11288] netlink: 'syz.4.1426': attribute type 32 has an invalid length. [ 274.567326][T11288] __nla_validate_parse: 5 callbacks suppressed [ 274.567340][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 274.847788][T11288] bond5: Setting coupled_control to off (0) [ 274.851532][T11288] netlink: 'syz.4.1426': attribute type 32 has an invalid length. [ 274.851555][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 274.961663][T11309] netlink: 'syz.3.1428': attribute type 20 has an invalid length. [ 274.961692][T11309] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.086038][T11288] bond6: Setting coupled_control to off (0) [ 275.113595][T11311] FAULT_INJECTION: forcing a failure. [ 275.113595][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 275.113643][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT(full) [ 275.113669][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.113683][T11311] Call Trace: [ 275.113692][T11311] [ 275.113702][T11311] dump_stack_lvl+0xe8/0x150 [ 275.113741][T11311] should_fail_ex+0x410/0x560 [ 275.113773][T11311] _copy_to_user+0x31/0xb0 [ 275.113805][T11311] simple_read_from_buffer+0xe1/0x170 [ 275.113845][T11311] proc_fail_nth_read+0x1bb/0x230 [ 275.113880][T11311] ? common_file_perm+0x20e/0x2b0 [ 275.113911][T11311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.113969][T11311] ? rw_verify_area+0x24a/0x4c0 [ 275.114006][T11311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.114043][T11311] vfs_read+0x213/0xa80 [ 275.114095][T11311] ? __pfx___mutex_lock+0x10/0x10 [ 275.114122][T11311] ? __pfx_vfs_read+0x10/0x10 [ 275.114157][T11311] ? __fget_files+0x2a/0x420 [ 275.114193][T11311] ? __fget_files+0x3a2/0x420 [ 275.114223][T11311] ? __fget_files+0x2a/0x420 [ 275.114264][T11311] ksys_read+0x150/0x270 [ 275.114299][T11311] ? __pfx_ksys_read+0x10/0x10 [ 275.114345][T11311] do_syscall_64+0x166/0x520 [ 275.114368][T11311] ? trace_irq_disable+0x3b/0x140 [ 275.114390][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.114414][T11311] ? clear_bhb_loop+0x70/0xc0 [ 275.114441][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.114464][T11311] RIP: 0033:0x7fdf6a95e98e [ 275.114484][T11311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.114503][T11311] RSP: 002b:00007fdf6b838fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.114527][T11311] RAX: ffffffffffffffda RBX: 00007fdf6b8396c0 RCX: 00007fdf6a95e98e [ 275.114543][T11311] RDX: 000000000000000f RSI: 00007fdf6b8390a0 RDI: 0000000000000005 [ 275.114557][T11311] RBP: 00007fdf6b839090 R08: 0000000000000000 R09: 0000000000000000 [ 275.114572][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.114592][T11311] R13: 00007fdf6ac26038 R14: 00007fdf6ac25fa0 R15: 00007ffc4d4c8468 [ 275.114645][T11311] [ 275.631122][T11319] pim6reg: left allmulticast mode [ 275.654155][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 275.654194][T11320] netlink: 'syz.0.1432': attribute type 12 has an invalid length. [ 275.654210][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 275.739738][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 275.739784][T11320] netlink: 'syz.0.1432': attribute type 12 has an invalid length. [ 275.739799][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 275.770762][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.773729][ T762] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.773773][ T762] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.773820][ T762] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.164370][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 277.021688][T11361] lo: entered promiscuous mode [ 277.024186][T11361] tunl0: entered promiscuous mode [ 277.048860][T11361] gre0: entered promiscuous mode [ 277.054038][T11333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.219608][T11361] erspan0: entered promiscuous mode [ 277.245447][T11361] ip_vti0: entered promiscuous mode [ 279.496457][T11437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.521874][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.521900][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.556235][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.702259][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1466'. [ 279.703679][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 279.811310][T11445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.816738][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 280.001521][T11448] macvlan2: entered promiscuous mode [ 280.002337][T11448] macvlan2: entered allmulticast mode [ 280.007443][T11448] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 280.712037][T11479] syzkaller1: entered promiscuous mode [ 280.712072][T11479] syzkaller1: entered allmulticast mode [ 281.294750][T11485] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 281.393283][T11498] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1478'. [ 281.520855][T11495] netlink: Failed to add batadv0 helper -22 [ 281.520925][T11495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.093723][T11527] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 285.094760][T11527] tipc: Enabled bearer , priority 10 [ 285.449490][T11556] netlink: 'syz.1.1495': attribute type 10 has an invalid length. [ 285.449516][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1495'. [ 285.457362][T11556] dummy0: entered promiscuous mode [ 285.457409][T11556] dummy0: entered allmulticast mode [ 285.499470][T11556] bridge0: port 4(dummy0) entered blocking state [ 285.499766][T11549] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 285.499949][T11556] bridge0: port 4(dummy0) entered disabled state [ 285.502834][T11556] bridge0: port 4(dummy0) entered blocking state [ 285.502928][T11556] bridge0: port 4(dummy0) entered forwarding state [ 285.692831][T11549] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.945833][T11576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1496'. [ 285.983414][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 286.218677][ T5750] tipc: Node number set to 2035774871 [ 286.602688][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 287.065487][ T27] nci: nci_rsp_packet: unsupported rsp opcode 0xf04 [ 287.276805][T11620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.307395][T11622] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1506'. [ 289.857348][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.599640][T11657] lo: left promiscuous mode [ 290.600475][T11657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.781220][T11660] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 290.782929][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.783754][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.816120][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.816906][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.836251][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.836926][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 290.857831][T11660] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 291.521694][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 292.391776][T11718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1529'. [ 293.209941][T11750] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1539'. [ 293.661313][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 293.723077][T11767] ieee802154 phy1 wpan1: encryption failed: -90 [ 293.823961][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1546'. [ 293.975369][T11767] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 294.040584][T11767] bond3 (unregistering): Released all slaves [ 296.763057][T11771] geneve3: entered allmulticast mode [ 296.773531][T11781] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 297.162533][ T5620] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 297.996152][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 298.131486][T11831] net_ratelimit: 28 callbacks suppressed [ 298.131509][T11831] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 298.131545][T11831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.616228][T11812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1555'. [ 298.623263][T11812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1555'. [ 298.661503][T11812] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1555'. [ 298.794123][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 298.820356][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 298.883744][ T5635] Bluetooth: hci3: connection err: -111 [ 299.021332][T11860] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 299.057264][T11860] 8021q: VLANs not supported on ip_vti0 [ 299.307955][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 299.339003][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1568'. [ 299.490676][T11883] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 300.131188][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1576'. [ 300.186427][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 300.197584][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 301.055954][T11936] netlink: 'syz.0.1584': attribute type 21 has an invalid length. [ 301.186382][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.399062][T11943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.564370][T11949] netlink: 'syz.3.1587': attribute type 4 has an invalid length. [ 304.037192][T11938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.496610][T12006] Cannot find add_set index 0 as target [ 304.560635][T12011] netlink: 'syz.2.1600': attribute type 39 has an invalid length. [ 304.814829][T12013] __nla_validate_parse: 3 callbacks suppressed [ 304.814854][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 305.373303][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 305.409172][T12044] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1605'. [ 306.240159][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 306.653950][T12077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 306.653981][T12077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 306.653999][T12077] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1617'. [ 307.489944][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 307.489985][T12097] netlink: 'syz.2.1624': attribute type 26 has an invalid length. [ 307.490001][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'. [ 307.490769][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 307.490796][T12097] netlink: 'syz.2.1624': attribute type 26 has an invalid length. [ 307.527464][T12097] sctp: [Deprecated]: syz.2.1624 (pid 12097) Use of int in max_burst socket option deprecated. [ 307.527464][T12097] Use struct sctp_assoc_value instead [ 307.837442][T12101] bond8: option downdelay: invalid value (18446744073709551615) [ 307.837473][T12101] bond8: option downdelay: allowed values 0 - 2147483647 [ 307.879121][T12101] bond8 (unregistering): Released all slaves [ 308.331859][T12119] gretap0: entered promiscuous mode [ 308.354887][T12119] 0ªî{X¹¦: renamed from gretap0 [ 308.392561][T12119] 0ªî{X¹¦: left promiscuous mode [ 308.392587][T12119] 0ªî{X¹¦: entered allmulticast mode [ 308.435076][T12119] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 308.653083][T12125] veth7: entered allmulticast mode [ 308.786312][T12135] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 309.065804][T12143] veth5: entered allmulticast mode [ 309.201986][T12153] netlink: 'syz.4.1641': attribute type 7 has an invalid length. [ 309.202012][T12153] netlink: 'syz.4.1641': attribute type 8 has an invalid length. [ 309.252524][T12153] syz_tun: entered promiscuous mode [ 309.273948][T12153] syz_tun: left promiscuous mode [ 309.479814][T12131] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 309.843154][T12168] __nla_validate_parse: 9 callbacks suppressed [ 309.843178][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 310.086635][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 310.492985][T12193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1652'. [ 310.582973][T12197] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1652'. [ 311.313543][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 311.314722][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 311.362936][T12220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1661'. [ 311.465315][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465343][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465359][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465374][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465388][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465403][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465417][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465432][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465447][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465461][T12222] tc action pedit unable to extract header offset for header type (0x5) [ 311.465490][T12222] 0: reclassify loop, rule prio 0, protocol 800 [ 312.088397][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 312.103477][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 312.162892][ T762] IPVS: starting estimator thread 0... [ 312.208766][T12239] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 312.250322][T12238] IPVS: using max 28 ests per chain, 67200 per kthread [ 312.266987][T12236] netlink: 6408 bytes leftover after parsing attributes in process `syz.4.1666'. [ 312.422142][T12233] team0 (unregistering): Port device team_slave_0 removed [ 312.502047][T12233] team0 (unregistering): Port device team_slave_1 removed [ 312.639626][T12231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.763434][T12250] : renamed from bond0 (while UP) [ 312.936946][T12256] netlink: 'syz.1.1672': attribute type 25 has an invalid length. [ 313.018781][T12263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.736393][T12278] x_tables: duplicate underflow at hook 2 [ 314.719549][T12319] netlink: 'syz.3.1684': attribute type 3 has an invalid length. [ 314.719583][T12319] netlink: 'syz.3.1684': attribute type 3 has an invalid length. [ 315.505171][T12338] netlink: Conntrack attr has 1 unknown bytes [ 315.505210][T12338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.674896][T12388] erspan0: entered allmulticast mode [ 316.815161][T12395] sctp: [Deprecated]: syz.2.1703 (pid 12395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.815161][T12395] Use struct sctp_sack_info instead [ 316.816996][T12395] __nla_validate_parse: 3 callbacks suppressed [ 316.817017][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 317.072873][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.845440][T11046] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/2 [ 317.910859][T11046] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 318.235095][T12422] smbdirect: ib_dev[syz0] renamed to [syz2] [ 318.336819][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 318.471134][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.226938][T12465] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1719'. [ 319.495351][T12468] veth1_macvtap: left promiscuous mode [ 319.580646][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 319.580676][T12470] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1721'. [ 319.580728][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 319.895884][T12479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1725'. [ 320.253060][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 320.253094][T12492] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1727'. [ 321.954223][ T32] audit: type=1800 audit(1789352095.299:3): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1740" name="memory.events" dev="tmpfs" ino=1706 res=0 errno=0 [ 322.777235][T12571] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 322.850675][T12576] netlink: 'syz.1.1749': attribute type 9 has an invalid length. [ 322.850701][T12576] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 322.887264][T12576] netlink: 'syz.1.1749': attribute type 9 has an invalid length. [ 322.887322][T12576] netlink: 'syz.1.1749': attribute type 4 has an invalid length. [ 323.397324][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 324.510810][T12618] netlink: 'syz.3.1758': attribute type 32 has an invalid length. [ 324.703590][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 324.784887][T12621] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1761'. [ 324.953030][T12631] ip_tables: iptables: counters copy to user failed while replacing table [ 325.043177][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 325.204378][T12638] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 325.204407][T12638] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1764'. [ 325.257835][T12640] netlink: 'syz.4.1764': attribute type 4 has an invalid length. [ 325.257861][T12640] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1764'. [ 325.913640][T12661] syzkaller0: entered promiscuous mode [ 325.913851][T12661] syzkaller0: entered allmulticast mode [ 325.982511][T12663] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.436397][T12682] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1772'. [ 326.508336][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 326.515054][T12686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1773'. [ 326.593050][T12691] netlink: 'syz.1.1774': attribute type 9 has an invalid length. [ 326.593505][ T32] audit: type=1800 audit(1789352099.949:4): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1774" name="memory.events" dev="tmpfs" ino=1914 res=0 errno=0 [ 326.594493][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 327.103995][T12706] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 327.392684][T12712] syzkaller1: entered promiscuous mode [ 327.392883][T12712] syzkaller1: entered allmulticast mode [ 327.616724][T12723] xt_nat: multiple ranges no longer supported [ 327.716353][T12718] Set syz1 is full, maxelem 2076 reached [ 327.844015][T12728] syz.4.1785 (12728) used obsolete PPPIOCDETACH ioctl [ 328.407589][T12742] __nla_validate_parse: 6 callbacks suppressed [ 328.407611][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 328.407627][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 328.408929][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 328.408949][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 328.514764][T12748] xfrm2: entered allmulticast mode [ 328.675772][T12751] ip6t_srh: unknown srh invflags 4000 [ 328.858772][T12761] nft_compat: unsupported protocol 1 [ 328.916721][T12764] 8021q: VLANs not supported on ip_vti0 [ 329.111993][T12767] veth7: entered allmulticast mode [ 329.113832][T12771] lo: left promiscuous mode [ 329.596687][T12789] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 330.125295][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 330.138821][T12812] netlink: 'syz.0.1807': attribute type 11 has an invalid length. [ 330.138846][T12812] netlink: 'syz.0.1807': attribute type 11 has an invalid length. [ 330.138862][T12812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1807'. [ 330.185238][T12813] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1807'. [ 330.997787][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1813'. [ 331.641458][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1819'. [ 331.663766][T12848] netlink: NAT attribute has 4 unknown bytes [ 331.663804][T12848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.861894][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 331.936017][T12853] netlink: 'syz.4.1820': attribute type 32 has an invalid length. [ 332.105812][T12853] bond8: Setting coupled_control to off (0) [ 332.124037][T12864] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 332.226332][T12864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.684306][T12875] netlink: 'syz.4.1827': attribute type 12 has an invalid length. [ 332.684330][T12875] netlink: 'syz.4.1827': attribute type 29 has an invalid length. [ 332.829330][T12884] ip_tables: iptables: counters copy to user failed while replacing table [ 332.830031][T12886] ip_tables: iptables: counters copy to user failed while replacing table [ 333.083543][T12889] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20002 [ 333.975628][T12915] __nla_validate_parse: 7 callbacks suppressed [ 333.975652][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1840'. [ 334.167269][T12926] netlink: 'syz.1.1844': attribute type 2 has an invalid length. [ 334.177377][T12924] dvmrp8: entered allmulticast mode [ 334.195280][T12926] : entered promiscuous mode [ 334.945025][T12934] wlan0 speed is unknown, defaulting to 1000 [ 335.026833][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 335.026863][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 335.324174][T12952] x_tables: unsorted underflow at hook 4 [ 335.425018][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1848'. [ 335.700211][T12966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1856'. [ 336.826418][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 337.004730][T12991] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1861'. [ 337.175083][T13010] xt_bpf: check failed: parse error [ 337.248398][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 337.248433][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1865'. [ 337.762483][T13027] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 337.762509][T13027] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1869'. [ 337.762528][T13027] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 337.804858][T13027] Bluetooth: hci0: unsupported parameter 5135 [ 337.804884][T13027] Bluetooth: hci0: unsupported parameter 8192 [ 337.804899][T13027] Bluetooth: hci0: unsupported parameter 5135 [ 337.804914][T13027] Bluetooth: hci0: unsupported parameter 8192 [ 337.806475][T13027] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 338.466566][T13057] xt_ecn: cannot match TCP bits for non-tcp packets [ 339.085768][T13084] __nla_validate_parse: 4 callbacks suppressed [ 339.085792][T13084] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1887'. [ 339.149516][T13078] TC_ACT_REPEAT abuse ? [ 339.245384][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 339.334181][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'. [ 339.643501][T13104] ip6_vti0: entered promiscuous mode [ 339.730673][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 339.746415][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 339.820302][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1891'. [ 340.273572][T13125] gretap3: entered promiscuous mode [ 340.373591][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 340.475777][T13135] bond6: entered allmulticast mode [ 340.492369][T13137] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 340.903053][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 340.922550][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 341.128540][T13155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.279385][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.279410][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.516837][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 342.028638][T13180] veth0_virt_wifi: default FDB implementation only supports local addresses [ 342.033199][T13180] netlink: 'syz.0.1910': attribute type 354 has an invalid length. [ 342.924942][T13205] pimreg: entered allmulticast mode [ 343.553788][T13203] pimreg: left allmulticast mode [ 344.212636][T13241] ipt_REJECT: ECHOREPLY no longer supported. [ 344.685205][T13258] vlan2: entered allmulticast mode [ 344.685232][T13258] bond0: entered allmulticast mode [ 344.685249][T13258] bond_slave_1: entered allmulticast mode [ 344.685629][T13258] veth0_to_bond: entered allmulticast mode [ 345.017267][T13274] netlink: 'syz.0.1937': attribute type 4 has an invalid length. [ 345.017293][T13274] __nla_validate_parse: 4 callbacks suppressed [ 345.017306][T13274] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1937'. [ 345.145043][T13274] .`: renamed from bond0 (while UP) [ 345.280064][T13281] IPVS: stopping master sync thread 6104 ... [ 345.327938][T13281] atomic_op ffff888076da31e0 conn xmit_atomic 0000000000000000 [ 345.560302][T13285] netlink: Unknown conntrack attr (type=1030, max=9) [ 345.560342][T13285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.734390][T13292] netlink: 'syz.3.1944': attribute type 8 has an invalid length. [ 345.854843][T13292] netlink: 'syz.3.1944': attribute type 8 has an invalid length. [ 345.922851][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1943'. [ 345.922885][T13302] block nbd1: Unsupported socket: should be TCP or UNIX. [ 345.943403][T13305] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 346.058188][T13292] netlink: 'syz.3.1944': attribute type 8 has an invalid length. [ 346.312945][T13292] netlink: 'syz.3.1944': attribute type 8 has an invalid length. [ 346.412977][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 346.473264][T13292] netlink: 'syz.3.1944': attribute type 8 has an invalid length. [ 346.585333][T13328] netlink: 'syz.4.1949': attribute type 4 has an invalid length. [ 346.585360][T13328] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1949'. [ 346.625028][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 346.638111][T13320] openvswitch: netlink: IPv4 tunnel dst address is zero [ 346.638146][T13320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.665377][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 346.720056][T13327] openvswitch: netlink: IPv4 tunnel dst address is zero [ 346.720093][T13327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.439145][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 347.439175][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 350.849110][T13358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1953'. [ 350.849552][T13358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1953'. [ 351.709156][T13371] netlink: 'syz.2.1956': attribute type 11 has an invalid length. [ 351.771625][T13376] veth3: entered allmulticast mode [ 352.254507][T13396] netlink: 'syz.2.1963': attribute type 17 has an invalid length. [ 352.254531][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1963'. [ 352.301394][T13396] bond0: option all_slaves_active: invalid value (28) [ 352.325030][ T1367] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 352.902432][T13414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1967'. [ 352.940661][T13420] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 353.114350][T13420] veth5: entered allmulticast mode [ 353.162843][T13420] bond9: (slave veth5): Enslaving as an active interface with a down link [ 353.195121][T13423] bond9: (slave veth0_to_bond): making interface the new active one [ 353.196419][T13423] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 353.355945][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 353.355970][T13445] openvswitch: netlink: Flow key attr not present in new flow. [ 353.446338][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 353.678687][T13452] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1978'. [ 353.922988][T13468] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1980'. [ 354.002010][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 354.025436][T13464] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 354.098361][T13473] syzkaller0: entered promiscuous mode [ 354.098571][T13473] syzkaller0: entered allmulticast mode [ 354.488637][T13487] ipvlan2: entered allmulticast mode [ 354.488665][T13487] virt_wifi0: entered allmulticast mode [ 354.495356][T13487] batman_adv: batadv0: Adding interface: ipvlan2 [ 354.495377][T13487] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.495426][T13487] batman_adv: batadv0: Interface activated: ipvlan2 [ 354.821742][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 355.471618][T13528] netlink: 'syz.1.1993': attribute type 3 has an invalid length. [ 355.622670][T13531] netlink: 'syz.4.1995': attribute type 12 has an invalid length. [ 355.909757][T13540] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 356.075749][T13543] __nla_validate_parse: 4 callbacks suppressed [ 356.075786][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1998'. [ 356.075807][T13543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1998'. [ 356.642557][T13554] tipc: New replicast peer: 10.1.33.0 [ 356.643210][T13554] tipc: Enabled bearer , priority 10 [ 356.752359][T13563] netlink: 'syz.2.2003': attribute type 21 has an invalid length. [ 356.752392][T13563] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.752532][T13563] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 356.785802][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 356.965428][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 357.198335][T13579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2007'. [ 357.244797][T13574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.296313][T13576] vlan3: entered promiscuous mode [ 357.296340][T13576] bond4: entered promiscuous mode [ 357.296524][T13576] vlan3: entered allmulticast mode [ 357.296538][T13576] bond4: entered allmulticast mode [ 357.312029][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 357.347378][T13577] bond4: (slave gtp1): refused to change device type [ 357.434919][T13582] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.519042][T13584] bond11: Unable to set up delay as MII monitoring is disabled [ 357.522772][T13584] bond11 (unregistering): Released all slaves [ 357.577960][T13589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2008'. [ 357.758598][T11046] tipc: Node number set to 2767766159 [ 357.782076][T13599] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2011'. [ 357.809330][T13599] syzkaller1: entered promiscuous mode [ 357.809357][T13599] syzkaller1: entered allmulticast mode [ 358.043788][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 358.043816][T13607] bridge: RTM_NEWNEIGH with invalid ether address [ 358.215469][T13607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2013'. [ 359.303528][T13635] bond6: option lp_interval: invalid value (0) [ 359.303558][T13635] bond6: option lp_interval: allowed values 1 - 2147483647 [ 359.333219][T13635] bond6 (unregistering): Released all slaves [ 359.509544][T13648] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 359.753982][T13648] bridge0: entered allmulticast mode [ 359.766579][T13650] xt_IDLETIMER: label is empty or not nul-terminated [ 359.777192][T13648] : (slave bridge0): Enslaving as an active interface with an up link [ 360.244302][T13643] syz.4.2018 (13643) used greatest stack depth: 17376 bytes left [ 360.524165][T13680] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 360.653195][T13686] netlink: 'syz.1.2027': attribute type 10 has an invalid length. [ 360.788977][T13680] bond6: option mode: invalid value (7) [ 360.814572][T13680] bond6 (unregistering): Released all slaves [ 361.145981][T13686] dummy0: left allmulticast mode [ 361.146376][T13686] bridge0: port 4(dummy0) entered disabled state [ 361.452041][T13704] __nla_validate_parse: 5 callbacks suppressed [ 361.452065][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 362.111506][T13737] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2036'. [ 362.671243][T13746] netlink: 4720 bytes leftover after parsing attributes in process `syz.4.2040'. [ 362.671271][T13746] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.475161][T13769] IPVS: sh: FWM 3 0x00000003 - no destination available [ 364.498891][T13802] netlink: 'syz.4.2054': attribute type 12 has an invalid length. [ 364.628786][T13812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.661253][T13811] netlink: Failed to add batadv0 helper -22 [ 364.661312][T13811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.664354][T13802] bond11: option primary_reselect: invalid value (255) [ 364.698306][T13802] bond11 (unregistering): Released all slaves [ 364.956556][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 365.033977][T13828] bridge0: Device is already in use. [ 365.172402][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 365.509876][T13828] bond0: Removing last ns target with arp_interval on [ 365.585309][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 365.858747][T13852] lo: left promiscuous mode [ 365.859470][T13852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.172645][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 367.213643][T13890] tipc: Trying to set illegal importance in message [ 367.625291][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 367.658945][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2080'. [ 367.845216][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 368.028919][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2081'. [ 368.028956][T13920] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 368.031426][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 368.902337][T13956] batadv_slave_0: entered promiscuous mode [ 369.142366][T13955] batadv_slave_0: left promiscuous mode [ 369.390312][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 370.263715][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 370.732953][T14003] sch_fq: defrate 0 ignored. [ 371.395174][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 371.866205][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 371.882271][T14044] veth1_to_bridge: left allmulticast mode [ 371.882678][T14044] veth1_to_bridge: left promiscuous mode [ 371.883560][T14044] bridge0: port 3(veth1_to_bridge) entered disabled state [ 371.894970][T14041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.987468][T14044] bridge_slave_1: left allmulticast mode [ 371.997855][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.012612][T14044] bridge_slave_0: left allmulticast mode [ 372.012643][T14044] bridge_slave_0: left promiscuous mode [ 372.012873][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.245497][T14044] : (slave bridge0): Releasing backup interface [ 372.247443][T14044] bridge0 (unregistering): left allmulticast mode [ 372.352471][T14056] netlink: 'syz.2.2117': attribute type 2 has an invalid length. [ 372.717824][T14067] __nla_validate_parse: 4 callbacks suppressed [ 372.717848][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'. [ 373.601560][T14061] syzkaller0: entered promiscuous mode [ 373.601591][T14061] syzkaller0: entered allmulticast mode [ 373.899456][T14081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2123'. [ 377.143641][T14122] xt_hashlimit: size too large, truncated to 1048576 [ 377.343021][T14124] syzkaller0: entered promiscuous mode [ 377.343047][T14124] syzkaller0: entered allmulticast mode [ 377.522867][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.706336][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2132'. [ 377.780468][T14141] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 377.811706][T14124] bridge_slave_0 (unregistering): left allmulticast mode [ 377.812097][T14124] bridge_slave_0 (unregistering): left promiscuous mode [ 377.812548][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.103364][T14145] netlink: 'syz.2.2132': attribute type 11 has an invalid length. [ 378.103406][T14145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2132'. [ 378.522727][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.098673][T14172] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 379.107372][T14172] bond5 (unregistering): Released all slaves [ 379.482342][T14189] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 379.483598][T14190] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2140'. [ 379.514106][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 379.609131][T14198] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 379.609293][T14198] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2142'. [ 379.609313][T14198] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 379.772897][T14202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2144'. [ 379.845613][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2143'. [ 379.979122][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 379.979161][T14210] netlink: 'syz.2.2145': attribute type 8 has an invalid length. [ 380.229570][T14214] bond0: entered allmulticast mode [ 380.229597][T14214] bond_slave_0: entered allmulticast mode [ 380.230015][T14214] bond_slave_1: entered allmulticast mode [ 380.651951][T14238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.778299][T14232] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2153'. [ 381.306742][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 381.814681][T14267] syzkaller0: entered promiscuous mode [ 381.814717][T14267] syzkaller0: entered allmulticast mode [ 381.846622][T14268] netlink: 'syz.0.2160': attribute type 33 has an invalid length. [ 381.869495][T14264] netlink: 'syz.4.2159': attribute type 23 has an invalid length. [ 381.992443][T14268] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 382.015871][T14268] bond0 (unregistering): Released all slaves [ 382.656708][T14284] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 382.796283][T14289] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2164'. [ 383.125569][T14284] veth7: entered allmulticast mode [ 383.161506][T14284] bond11: (slave veth7): Enslaving as an active interface with a down link [ 383.199644][T14286] bond9: (slave veth0_to_bond): Releasing active interface [ 383.252103][T14286] bond11: (slave veth0_to_bond): making interface the new active one [ 383.255441][T14286] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 383.820457][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'. [ 384.066392][T14317] Bluetooth: MGMT ver 1.23 [ 384.305042][T14320] syzkaller0: entered promiscuous mode [ 384.305250][T14320] syzkaller0: entered allmulticast mode [ 384.601094][T14327] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 384.601123][T14327] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2177'. [ 384.601141][T14327] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 384.601157][T14327] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.2177'. [ 384.670502][T14330] openvswitch: netlink: Tunnel attr 0 has unexpected len 10 expected 8 [ 386.039741][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 386.129784][T14340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 386.241018][T14340] vlan4: entered promiscuous mode [ 386.241043][T14340] bond5: entered promiscuous mode [ 386.241220][T14340] vlan4: entered allmulticast mode [ 386.241235][T14340] bond5: entered allmulticast mode [ 386.511906][T14345] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 386.983011][T14359] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 387.060820][T14363] pimreg: entered allmulticast mode [ 387.112111][T14364] pimreg: left allmulticast mode [ 387.456533][T14375] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2192'. [ 388.346405][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 388.418514][T14410] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 388.423945][T14410] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 388.424019][T14410] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 388.948968][T14424] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 389.025925][T14424] 8021q: adding VLAN 0 to HW filter on device bond12 [ 389.119114][T14425] bond12: (slave bridge6): making interface the new active one [ 389.123769][T14425] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 389.775975][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.776001][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.894313][T14450] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2207'. [ 390.704007][T14471] x_tables: unsorted entry at hook 2 [ 390.741003][T14478] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2211'. [ 390.741038][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 391.043751][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 391.167690][T14484] syzkaller1: entered promiscuous mode [ 391.168033][T14484] syzkaller1: entered allmulticast mode [ 391.259120][T14488] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2216'. [ 391.454441][T14492] sctp: [Deprecated]: syz.2.2217 (pid 14492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.454441][T14492] Use struct sctp_sack_info instead [ 391.502025][T14490] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2215'. [ 391.504273][T14484] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2215'. [ 391.739692][T14501] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2219'. [ 391.962732][T14501] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2219'. [ 391.963327][T14501] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2219'. [ 392.136256][T14513] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.390398][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.390425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.530773][T14521] xt_hashlimit: size too large, truncated to 1048576 [ 395.648793][T14615] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 395.648824][T14615] bond5: option packets_per_slave: allowed values 0 - 65535 [ 395.685828][T14615] bond5 (unregistering): Released all slaves [ 395.827225][T14625] __nla_validate_parse: 10 callbacks suppressed [ 395.827248][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 395.840441][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 395.964940][T14627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 395.965178][T14627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 396.474719][T14640] syzkaller1: entered promiscuous mode [ 396.474744][T14640] syzkaller1: entered allmulticast mode [ 396.498393][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 396.506029][T14639] macvlan0: left promiscuous mode [ 396.638978][T14639] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 396.639006][T14639] netlink: 'syz.4.2247': attribute type 2 has an invalid length. [ 396.739790][T14645] x_tables: duplicate underflow at hook 1 [ 397.518570][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2254'. [ 397.691389][T14670] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:0 [ 397.736736][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 397.864113][T14670] macsec0: entered promiscuous mode [ 397.864148][T14670] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 397.893912][T14670] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 398.788887][T14706] ip_tables: iptables: counters copy to user failed while replacing table [ 399.090032][T14710] netdevsim netdevsim3 : renamed from netdevsim0 [ 399.271852][T14723] netlink: 'syz.2.2269': attribute type 8 has an invalid length. [ 399.271877][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 399.272247][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.274144][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.392855][T14713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2270'. [ 399.514306][T14713] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.235636][T14764] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2275'. [ 400.293109][T14764] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 400.296263][T14764] 0ªî{X¹¦: entered allmulticast mode [ 400.296893][T14764] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 400.297144][T14734] syzkaller1: entered promiscuous mode [ 400.297163][T14734] syzkaller1: entered allmulticast mode [ 401.217128][T14783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.214440][T14815] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2289'. [ 402.576875][T14820] xt_hashlimit: size too large, truncated to 1048576 [ 402.611046][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2293'. [ 402.631636][T14826] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 402.860318][T14836] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.2295'. [ 402.860347][T14836] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 403.102204][T14835] bond6: (slave veth9): Enslaving as an active interface with a down link [ 403.289526][ T25] bridge0: entered promiscuous mode [ 403.744441][T14861] xt_IDLETIMER: label is empty or not nul-terminated [ 404.522286][T14885] netlink: 'syz.2.2305': attribute type 2 has an invalid length. [ 404.523999][T14884] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 404.644978][T14881] bond6: entered promiscuous mode [ 404.645058][T14881] bond6: entered allmulticast mode [ 404.645489][T14881] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.815301][T14884] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 404.815331][T14884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2304'. [ 404.964889][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 405.011265][T14884] dummy0: entered promiscuous mode [ 405.053288][T14897] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 405.246347][T14897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.303550][T14931] bond13: option downdelay: invalid value (18446744073709551615) [ 406.303579][T14931] bond13: option downdelay: allowed values 0 - 2147483647 [ 406.385404][T14944] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 406.396992][T14931] bond13 (unregistering): Released all slaves [ 406.562927][T14953] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2320'. [ 406.741351][T14953] gretap0: entered promiscuous mode [ 407.753785][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 407.892629][T14982] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2328'. [ 407.913306][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2331'. [ 407.991706][T15002] syz_tun: entered allmulticast mode [ 408.496183][T15001] syz_tun: left allmulticast mode [ 409.148457][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'. [ 409.365831][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2342'. [ 409.706865][T15069] team0: entered promiscuous mode [ 409.706894][T15069] team_slave_0: entered promiscuous mode [ 409.710815][T15069] team_slave_1: entered promiscuous mode [ 409.812159][T15077] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2348'. [ 409.821190][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 410.058613][T15075] bond0: (slave gretap0): Opening slave failed [ 410.272641][T15066] team0: left promiscuous mode [ 410.272668][T15066] team_slave_0: left promiscuous mode [ 410.272933][T15066] team_slave_1: left promiscuous mode [ 410.310588][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 410.340593][T15083] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2350'. [ 410.342247][T15083] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2350'. [ 412.093146][T15134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.900504][T15174] __nla_validate_parse: 1 callbacks suppressed [ 412.900525][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2372'. [ 412.900552][T15174] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2372'. [ 412.900571][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2372'. [ 412.917289][T15174] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 413.064174][T15184] xt_hashlimit: invalid interval [ 413.085058][T15184] No such timeout policy "syz0" [ 413.679001][T15198] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2378'. [ 413.823925][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 413.987150][T15206] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 414.162819][T15212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2382'. [ 414.295035][T15216] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 414.295061][T15216] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 414.296404][T15216] xt_LOG: prefix is not null-terminated [ 414.475781][T15226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2385'. [ 414.883928][T15213] syzkaller1: entered promiscuous mode [ 414.884072][T15213] syzkaller1: entered allmulticast mode [ 415.203910][T15237] syzkaller0: entered promiscuous mode [ 415.204371][T15237] syzkaller0: entered allmulticast mode [ 415.339070][T15242] syzkaller1: left promiscuous mode [ 415.339281][T15242] syzkaller1: left allmulticast mode [ 415.347410][T15242] netlink: 'syz.2.2390': attribute type 39 has an invalid length. [ 415.810997][T15260] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 415.811024][T15260] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2394'. [ 415.814055][T15256] ieee802154 phy1 wpan1: encryption failed: -90 [ 415.845996][T15260] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 415.846020][T15260] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2394'. [ 415.976756][T15269] ieee802154 phy1 wpan1: encryption failed: -90 [ 416.477022][T15294] vlan4: entered promiscuous mode [ 416.477049][T15294] bridge0: entered promiscuous mode [ 416.477216][T15294] vlan4: entered allmulticast mode [ 416.477233][T15294] bridge0: entered allmulticast mode [ 417.013563][T15310] netlink: 'syz.2.2405': attribute type 8 has an invalid length. [ 417.035637][T15314] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 417.802922][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 417.828392][T15342] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 418.570554][T15357] netlink: 'syz.4.2415': attribute type 10 has an invalid length. [ 418.570580][T15357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2415'. [ 418.853069][T15364] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2417'. [ 419.745058][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.745093][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 423.041831][T15410] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2432'. [ 423.302230][T15417] netlink: 'syz.4.2434': attribute type 2 has an invalid length. [ 423.738737][T15437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2438'. [ 423.771564][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 423.813757][T15443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2438'. [ 424.210172][T15458] netlink: 'syz.3.2443': attribute type 7 has an invalid length. [ 424.366771][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2445'. [ 424.366813][T15465] netlink: 'syz.3.2445': attribute type 7 has an invalid length. [ 424.366829][T15465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2445'. [ 424.424774][T15466] netlink: 'syz.3.2445': attribute type 2 has an invalid length. [ 424.498821][T15466] : entered promiscuous mode [ 424.585301][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2447'. [ 424.624510][T15470] netlink: 'syz.3.2447': attribute type 15 has an invalid length. [ 424.624538][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2447'. [ 424.939604][T15474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2450'. [ 424.940583][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2448'. [ 425.027152][T15481] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 425.113426][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'. [ 425.116050][T15474] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 425.195604][T15492] GUP no longer grows the stack in syz.1.2452 (15492): 200000003000-20000000a000 (200000001000) [ 425.195661][T15492] CPU: 0 UID: 0 PID: 15492 Comm: syz.1.2452 Not tainted syzkaller #0 PREEMPT(full) [ 425.195690][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.195715][T15492] Call Trace: [ 425.195803][T15492] [ 425.195875][T15492] dump_stack_lvl+0xe8/0x150 [ 425.196041][T15492] __get_user_pages+0x23b6/0x2750 [ 425.196103][T15492] ? lock_acquire+0x115/0x350 [ 425.196175][T15492] ? __gup_longterm_locked+0xc3b/0x15c0 [ 425.196217][T15492] __gup_longterm_locked+0xd52/0x15c0 [ 425.196252][T15492] ? lock_acquire+0x115/0x350 [ 425.196295][T15492] gup_fast_fallback+0x1d92/0x20e0 [ 425.196372][T15492] ? __pfx_gup_fast_fallback+0x10/0x10 [ 425.196407][T15492] ? lock_acquire+0x115/0x350 [ 425.196427][T15492] ? is_valid_gup_args+0x11f/0x200 [ 425.196460][T15492] ? get_user_pages_fast+0x4d/0xb0 [ 425.196494][T15492] __iov_iter_get_pages_alloc+0x378/0xa40 [ 425.196630][T15492] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 425.196675][T15492] iov_iter_get_pages2+0x5e/0xa0 [ 425.196709][T15492] __se_sys_vmsplice+0x7b5/0x1660 [ 425.196765][T15492] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 425.196801][T15492] ? __pfx_futex_wait+0x10/0x10 [ 425.196940][T15492] do_syscall_64+0x166/0x520 [ 425.197041][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.197087][T15492] ? clear_bhb_loop+0x70/0xc0 [ 425.197117][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.197142][T15492] RIP: 0033:0x7f22d399e159 [ 425.197197][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.197223][T15492] RSP: 002b:00007f22d47d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 425.197282][T15492] RAX: ffffffffffffffda RBX: 00007f22d3c25fa0 RCX: 00007f22d399e159 [ 425.197313][T15492] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 425.197328][T15492] RBP: 00007f22d3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 425.197343][T15492] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 425.197358][T15492] R13: 00007f22d3c26038 R14: 00007f22d3c25fa0 R15: 00007ffc76c22b48 [ 425.197396][T15492] [ 425.822037][T15503] 0ªî{X¹¦: renamed from gretap0 [ 425.844451][T15503] 0ªî{X¹¦: entered allmulticast mode [ 425.855790][T15503] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 425.936572][T15507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.936593][T15507] IPv6: NLM_F_CREATE should be set when creating new route [ 426.065722][T15512] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 426.189456][T15521] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 426.232972][T15512] bond8: option mode: invalid value (7) [ 426.235651][T15512] bond8 (unregistering): Released all slaves [ 426.471600][T15521] 8021q: adding VLAN 0 to HW filter on device bond13 [ 426.536200][T15522] bond13: (slave veth9): Enslaving as an active interface with a down link [ 427.462710][T15563] netlink: 'syz.4.2471': attribute type 2 has an invalid length. [ 427.530654][T15563] : entered promiscuous mode [ 427.638994][T15564] x_tables: duplicate underflow at hook 1 [ 427.645009][T15564] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20002 [ 428.763782][T15606] __nla_validate_parse: 6 callbacks suppressed [ 428.763807][T15606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2479'. [ 428.863930][T15603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2478'. [ 429.384416][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.401099][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.403795][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2485'. [ 429.429552][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.453701][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.457110][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.480828][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.482211][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 429.673853][ T5635] block nbd1: Receive control failed (result -107) [ 429.777803][T15632] netlink: 'syz.0.2485': attribute type 1 has an invalid length. [ 429.821795][T15634] syzkaller0: entered promiscuous mode [ 429.822266][T15634] syzkaller0: entered allmulticast mode [ 429.925378][T15647] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 429.993386][T15649] IPVS: length: 30 != 8 [ 429.993422][T15649] IPVS: length: 30 != 8 [ 429.993445][T15649] IPVS: length: 30 != 8 [ 429.993468][T15649] IPVS: length: 30 != 8 [ 429.993491][T15649] IPVS: length: 30 != 8 [ 429.993514][T15649] IPVS: length: 30 != 8 [ 429.993536][T15649] IPVS: length: 30 != 8 [ 429.993559][T15649] IPVS: length: 30 != 8 [ 429.993582][T15649] IPVS: length: 30 != 8 [ 429.993605][T15649] IPVS: length: 30 != 8 [ 429.993627][T15649] IPVS: length: 30 != 8 [ 429.993650][T15649] IPVS: length: 30 != 8 [ 429.993672][T15649] IPVS: length: 30 != 8 [ 429.993694][T15649] IPVS: length: 30 != 8 [ 429.996532][T15649] IPVS: length: 30 != 8 [ 429.996634][T15649] IPVS: length: 30 != 8 [ 429.996660][T15649] IPVS: length: 30 != 8 [ 429.996683][T15649] IPVS: length: 30 != 8 [ 429.996706][T15649] IPVS: length: 30 != 8 [ 429.996728][T15649] IPVS: length: 30 != 8 [ 429.996752][T15649] IPVS: length: 30 != 8 [ 429.996774][T15649] IPVS: length: 30 != 8 [ 429.996797][T15649] IPVS: length: 30 != 8 [ 429.996820][T15649] IPVS: length: 30 != 8 [ 429.996843][T15649] IPVS: length: 30 != 8 [ 429.996865][T15649] IPVS: length: 30 != 8 [ 429.996888][T15649] IPVS: length: 30 != 8 [ 429.996910][T15649] IPVS: length: 30 != 8 [ 429.996933][T15649] IPVS: length: 30 != 8 [ 429.996955][T15649] IPVS: length: 30 != 8 [ 429.996977][T15649] IPVS: length: 30 != 8 [ 429.997000][T15649] IPVS: length: 30 != 8 [ 429.997051][T15649] IPVS: length: 30 != 8 [ 429.997074][T15649] IPVS: length: 30 != 8 [ 429.997097][T15649] IPVS: length: 30 != 8 [ 429.997119][T15649] IPVS: length: 30 != 8 [ 429.997142][T15649] IPVS: length: 30 != 8 [ 429.997164][T15649] IPVS: length: 30 != 8 [ 429.997187][T15649] IPVS: length: 30 != 8 [ 429.997209][T15649] IPVS: length: 30 != 8 [ 429.997232][T15649] IPVS: length: 30 != 8 [ 429.997255][T15649] IPVS: length: 30 != 8 [ 429.997277][T15649] IPVS: length: 30 != 8 [ 429.997300][T15649] IPVS: length: 30 != 8 [ 429.997330][T15649] IPVS: length: 30 != 8 [ 429.997354][T15649] IPVS: length: 30 != 8 [ 429.997376][T15649] IPVS: length: 30 != 8 [ 429.997398][T15649] IPVS: length: 30 != 8 [ 429.997420][T15649] IPVS: length: 30 != 8 [ 429.997443][T15649] IPVS: length: 30 != 8 [ 429.997465][T15649] IPVS: length: 30 != 8 [ 430.139528][T15649] IPVS: length: 30 != 8 [ 430.169805][T15649] IPVS: length: 30 != 8 [ 430.215954][T15649] IPVS: length: 30 != 8 [ 430.216919][T15649] IPVS: length: 30 != 8 [ 430.217613][T15649] IPVS: length: 30 != 8 [ 430.218862][T15649] IPVS: length: 30 != 8 [ 430.219822][T15649] IPVS: length: 30 != 8 [ 430.220850][T15649] IPVS: length: 30 != 8 [ 430.221803][T15649] IPVS: length: 30 != 8 [ 430.222757][T15649] IPVS: length: 30 != 8 [ 430.223710][T15649] IPVS: length: 30 != 8 [ 430.224587][T15649] IPVS: length: 30 != 8 [ 430.225618][T15649] IPVS: length: 30 != 8 [ 430.226588][T15649] IPVS: length: 30 != 8 [ 432.481579][T15670] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 432.913802][T15691] netlink: 'syz.0.2494': attribute type 33 has an invalid length. [ 434.409266][T15734] __nla_validate_parse: 55 callbacks suppressed [ 434.409290][T15734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2500'. [ 435.033985][T15762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2508'. [ 435.069006][T15762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2508'. [ 435.178960][T15767] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2509'. [ 435.331388][T15772] ip_tables: iptables: counters copy to user failed while replacing table [ 435.335785][T15772] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:21 [ 436.147327][T15793] netlink: 'syz.0.2518': attribute type 5 has an invalid length. [ 436.147352][T15793] netlink: 'syz.0.2518': attribute type 9 has an invalid length. [ 436.147368][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 436.214703][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 436.249790][T15793] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2518'. [ 436.361081][T15807] bond7: entered promiscuous mode [ 436.361108][T15807] bond7: entered allmulticast mode [ 436.438006][T15793] vlan0: left allmulticast mode [ 436.984188][T15813] netlink: 'syz.2.2521': attribute type 3 has an invalid length. [ 437.020635][T15815] nft_compat: unsupported protocol 0 [ 437.099270][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.139774][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 437.160846][T15829] xt_hashlimit: size too large, truncated to 1048576 [ 437.179945][T15827] netlink: 'syz.1.2525': attribute type 4 has an invalid length. [ 437.284890][T15821] xt_hashlimit: size too large, truncated to 1048576 [ 437.641407][T15848] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2528'. [ 437.655632][T15848] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2528'. [ 437.696576][T15849] netlink: 'syz.2.2528': attribute type 12 has an invalid length. [ 438.039142][T15860] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 438.785239][T15880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.024922][T15892] Bluetooth: hci0: unsupported parameter 5135 [ 439.024948][T15892] Bluetooth: hci0: unsupported parameter 8192 [ 439.024991][T15892] Bluetooth: hci0: unsupported parameter 5135 [ 439.025006][T15892] Bluetooth: hci0: unsupported parameter 8192 [ 439.570695][T15904] lo: entered promiscuous mode [ 439.612644][T15904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.836727][T15921] __nla_validate_parse: 10 callbacks suppressed [ 439.836753][T15921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2547'. [ 439.953359][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.496108][T15905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.840908][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 442.840934][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 442.840962][T15949] netlink: 'syz.2.2553': attribute type 12 has an invalid length. [ 442.840977][T15949] netlink: 'syz.2.2553': attribute type 11 has an invalid length. [ 442.937878][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2557'. [ 443.107257][T15956] netlink: 'syz.1.2557': attribute type 13 has an invalid length. [ 443.107284][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 443.202210][T15965] netlink: 'syz.2.2558': attribute type 21 has an invalid length. [ 443.273041][T15965] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2558'. [ 443.299179][T15956] netlink: 'syz.1.2557': attribute type 13 has an invalid length. [ 443.299204][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 443.411195][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'. [ 443.505791][T15968] netlink: 'syz.3.2559': attribute type 2 has an invalid length. [ 443.721836][T15974] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2560'. [ 443.721896][T15974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2560'. [ 444.011580][T15980] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 444.539377][T15991] x_tables: unsorted underflow at hook 2 [ 444.664069][T15994] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 445.039999][T16016] __nla_validate_parse: 4 callbacks suppressed [ 445.040023][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 445.201514][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 445.201542][T16020] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2569'. [ 445.949817][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2574'. [ 445.991034][T16035] bond5: (slave vlan4): making interface the new active one [ 445.995918][T16035] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 446.019205][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.019430][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.597960][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 447.143087][T16095] netlink: zone id is out of range [ 447.147154][T16095] netlink: zone id is out of range [ 447.147171][T16095] netlink: zone id is out of range [ 447.147198][T16095] netlink: zone id is out of range [ 447.147208][T16095] netlink: zone id is out of range [ 447.147217][T16095] netlink: zone id is out of range [ 447.147226][T16095] netlink: zone id is out of range [ 447.155127][T16095] netlink: zone id is out of range [ 447.155166][T16095] netlink: zone id is out of range [ 447.155576][T16095] netlink: zone id is out of range [ 447.393478][T16099] syzkaller0: entered promiscuous mode [ 447.393504][T16099] syzkaller0: entered allmulticast mode [ 447.487451][T16099] simple: /dev/video#_1 [ 448.651316][T16153] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.057719][T16159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2606'. [ 449.391117][T16162] bond14: entered allmulticast mode [ 449.396823][T16162] 8021q: adding VLAN 0 to HW filter on device bond14 [ 451.800443][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 451.800481][T16218] netlink: 'syz.1.2621': attribute type 8 has an invalid length. [ 452.254539][T16230] bond7: option resend_igmp: invalid value (32767) [ 452.254569][T16230] bond7: option resend_igmp: allowed values 0 - 255 [ 452.303651][T16230] bond7 (unregistering): Released all slaves [ 452.905580][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 454.413924][T16207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.778208][T16318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.184622][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 456.421574][ T32] audit: type=1800 audit(1789352229.779:5): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2637" name="memory.events" dev="tmpfs" ino=2807 res=0 errno=0 [ 456.456215][ T32] audit: type=1804 audit(1789352229.809:6): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2637" name="/newroot/544/memory.events" dev="tmpfs" ino=2807 res=1 errno=0 [ 456.648059][T16336] syzkaller1: entered promiscuous mode [ 456.648085][T16336] syzkaller1: entered allmulticast mode [ 456.855766][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 457.892163][T16379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2644'. [ 457.955571][T16373] xt_CT: No such helper "snmp_trap" [ 458.184212][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2646'. [ 458.184253][T16391] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 458.675674][T16404] No such timeout policy "syz0" [ 458.775169][T16415] veth0: left allmulticast mode [ 458.775198][T16415] veth0: left promiscuous mode [ 458.775590][T16415] bridge0: port 3(veth0) entered disabled state [ 458.945861][T16415] batman_adv: batadv0: Adding interface: veth0 [ 458.952992][T16415] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.953036][T16415] batman_adv: batadv0: Interface activated: veth0 [ 459.122913][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 459.122942][T16423] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2654'. [ 459.122992][T16423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 459.460939][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 459.741201][T16434] hsr_slave_1 (unregistering): left promiscuous mode [ 459.811383][T16437] team0: No ports can be present during mode change [ 459.838155][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 460.136129][T16441] bond7: entered promiscuous mode [ 460.402155][T16449] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2658'. [ 460.402400][T16456] veth0: entered promiscuous mode [ 460.653645][T16463] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 460.653673][T16463] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2662'. [ 460.719288][T16467] nftables ruleset with unbound set [ 461.187374][T16455] veth0: left promiscuous mode [ 461.722443][T16488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.157275][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 462.183776][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 462.672238][T16515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2677'. [ 462.675136][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2677'. [ 462.800357][T16512] netlink: 'syz.0.2675': attribute type 2 has an invalid length. [ 462.868312][T16519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2680'. [ 462.981367][T16531] netlink: 'syz.2.2680': attribute type 8 has an invalid length. [ 463.096970][T16537] netlink: 193 bytes leftover after parsing attributes in process `syz.1.2679'. [ 463.126147][T16541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2679'. [ 463.193434][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 463.485586][T16545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.680336][T16547] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2682'. [ 463.854043][T16554] gretap0: entered promiscuous mode [ 463.870632][T16554] vlan2: entered promiscuous mode [ 463.904558][T16560] xt_hashlimit: size too large, truncated to 1048576 [ 463.904887][T16560] xt_hashlimit: max too large, truncated to 1048576 [ 463.905033][T16560] xt_hashlimit: invalid rate [ 463.927088][T16558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.967010][T16560] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 463.967037][T16560] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2687'. [ 463.967056][T16560] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 464.624748][T16565] vlan2: entered promiscuous mode [ 468.553104][T16616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.556711][T16625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.033456][T16659] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.036667][T16659] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 469.063859][T16665] __nla_validate_parse: 5 callbacks suppressed [ 469.065984][T16665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 469.437392][T16679] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 469.876256][T16702] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 470.207373][T16708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2717'. [ 470.476603][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 470.534010][T16708] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2717'. [ 470.593052][T16714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2718'. [ 470.593083][T16714] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2718'. [ 470.593101][T16714] netlink: 'syz.2.2718': attribute type 6 has an invalid length. [ 470.593116][T16714] netlink: 'syz.2.2718': attribute type 5 has an invalid length. [ 470.593129][T16714] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2718'. [ 470.704169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.704195][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.859890][T11043] wlan0 speed is unknown, defaulting to 1000 [ 470.860066][T11043] syz2: Port: 1 Link ACTIVE [ 471.779658][T16759] hsr0 speed is unknown, defaulting to 1000 [ 471.779803][T16759] hsr0 speed is unknown, defaulting to 1000 [ 471.785921][T16757] syzkaller0: entered promiscuous mode [ 471.786115][T16757] syzkaller0: entered allmulticast mode [ 471.836112][T16759] hsr0 speed is unknown, defaulting to 1000 [ 471.847895][T16759] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 471.847938][T16759] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 471.847984][T16759] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 471.912343][T16754] wlan0 speed is unknown, defaulting to 1000 [ 471.917168][T16754] hsr0 speed is unknown, defaulting to 1000 [ 472.056765][T16759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 473.356717][T16759] hsr0 speed is unknown, defaulting to 1000 [ 473.749480][T16759] hsr0 speed is unknown, defaulting to 1000 [ 473.753752][T16791] netlink: 'syz.2.2732': attribute type 3 has an invalid length. [ 473.906033][T16759] hsr0 speed is unknown, defaulting to 1000 [ 473.923525][T16759] hsr0 speed is unknown, defaulting to 1000 [ 473.940131][T16759] hsr0 speed is unknown, defaulting to 1000 [ 474.221972][T16808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.585645][T16822] netlink: 'syz.4.2739': attribute type 23 has an invalid length. [ 474.886502][T16815] ip_tables: iptables: counters copy to user failed while replacing table [ 475.658120][T16864] openvswitch: netlink: IP tunnel dst address not specified [ 476.081815][T16874] veth1_macvtap: left promiscuous mode [ 476.081847][T16874] macsec0: entered allmulticast mode [ 476.293155][T16879] openvswitch: netlink: IP tunnel dst address not specified [ 476.293194][T16879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.639645][T16885] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2749'. [ 477.038051][T16895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2752'. [ 477.164133][T16889] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 477.164171][T16889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.348907][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 479.716463][T16984] netlink: 'syz.2.2768': attribute type 64 has an invalid length. [ 479.716488][T16984] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2768'. [ 479.743968][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2768'. [ 480.255515][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 480.299323][T16997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2771'. [ 480.373434][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 480.411485][T16999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2773'. [ 480.485985][ T5278] v: left promiscuous mode [ 480.507017][ T5754] v: entered promiscuous mode [ 480.552480][T16997] netlink: 'syz.4.2771': attribute type 1 has an invalid length. [ 480.552502][T16997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2771'. [ 481.121705][T17022] IPv6: addrconf: prefix option has invalid lifetime [ 481.121725][T17022] IPv6: addrconf: prefix option has invalid lifetime [ 481.523818][T16960] IPVS: starting estimator thread 0... [ 481.538003][T17030] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 481.541258][T17034] netlink: 'syz.4.2783': attribute type 2 has an invalid length. [ 481.621173][T17036] IPVS: using max 24 ests per chain, 57600 per kthread [ 482.190216][T14476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.191981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.370753][T16975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.371046][T16975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.451435][T17066] __nla_validate_parse: 2 callbacks suppressed [ 482.451459][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2787'. [ 482.753192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.828268][T17078] netlink: 'syz.2.2793': attribute type 1 has an invalid length. [ 483.479946][T16977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.480190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.591663][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.591907][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.592132][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.592590][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.592789][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.592970][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.595019][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.595250][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 484.595447][T17126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2799'. [ 485.598484][T17167] wlan0 speed is unknown, defaulting to 1000 [ 485.618976][ C0] ------------[ cut here ]------------ [ 485.618994][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 485.619026][ C0] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: syz.2.2812/17170 [ 485.647309][ C0] Modules linked in: [ 485.652807][ C0] CPU: 0 UID: 0 PID: 17170 Comm: syz.2.2812 Not tainted syzkaller #0 PREEMPT(full) [ 485.662378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.672620][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 485.679044][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 485.698926][ C0] RSP: 0000:ffffc9000e1d75f8 EFLAGS: 00010246 [ 485.705115][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 485.713258][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff908c3210 [ 485.721445][ C0] RBP: ffff888067c00f40 R08: 0000000000000000 R09: 0000000000000000 [ 485.729577][ C0] R10: 0000000000000004 R11: 8000000000000100 R12: ffff8880748387a8 [ 485.737802][ C0] R13: dffffc0000000000 R14: ffffffff908c3210 R15: ffff888067c03258 [ 485.745915][ C0] FS: 000055558f88e500(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 485.755023][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.761774][ C0] CR2: 00007fdf6a9eb840 CR3: 0000000074414000 CR4: 00000000003526f0 [ 485.769910][ C0] Call Trace: [ 485.773283][ C0] [ 485.776326][ C0] rate_control_send_low+0x1a7/0x7b0 [ 485.781778][ C0] rate_control_get_rate+0x20b/0x5d0 [ 485.787208][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 485.793297][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 485.799791][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 485.805988][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 485.809604][T17167] hsr0 speed is unknown, defaulting to 1000 [ 485.817865][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 485.823629][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 485.829768][ C0] ? lock_acquire+0x115/0x350 [ 485.834587][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 485.840279][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 485.845939][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 485.851640][ C0] ? __lock_acquire+0x747/0x2de0 [ 485.856686][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 485.862305][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 485.868561][ C0] ? debug_mutex_add_waiter+0x1b0/0x1f0 [ 485.874241][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 485.880107][ C0] __iterate_interfaces+0x2af/0x5a0 [ 485.885441][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 485.891708][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 485.899085][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 485.905279][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 485.912512][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 485.918506][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 485.923953][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 485.929920][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 485.935304][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 485.940601][ C0] handle_softirqs+0x226/0x860 [ 485.945518][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 485.950441][ C0] __irq_exit_rcu+0xcb/0x220 [ 485.955185][ C0] irq_exit_rcu+0x9/0x30 [ 485.959545][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 485.965277][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.971414][ C0] RIP: 0033:0x7fc39406b3aa [ 485.975935][ C0] Code: 24 00 01 00 00 48 69 d2 e8 03 00 00 48 29 d1 ba 80 00 00 00 48 69 c9 40 42 0f 00 48 89 8c 24 08 01 00 00 31 c9 e8 96 2d 13 00 <41> 8b 45 00 85 c0 0f 84 52 ff ff ff 4c 8b 7c 24 78 4c 8b 44 24 58 [ 485.995824][ C0] RSP: 002b:00007ffce23cc3e0 EFLAGS: 00000217 [ 486.002044][ C0] RAX: 0000000000000000 RBX: 00000000000768bf RCX: 00007fc39419e159 [ 486.010210][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc394425fac [ 486.018348][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 486.026450][ C0] R10: 00007ffce23cc4e0 R11: 0000000000000246 R12: 00007ffce23cc500 [ 486.034633][ C0] R13: 00007fc394425fac R14: 00000000000768f1 R15: 00007ffce23cc4e0 [ 486.042803][ C0] [ 486.045923][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.053244][ C0] CPU: 0 UID: 0 PID: 17170 Comm: syz.2.2812 Not tainted syzkaller #0 PREEMPT(full) [ 486.062660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.072762][ C0] Call Trace: [ 486.076094][ C0] [ 486.079066][ C0] vpanic+0x56d/0xa60 [ 486.083179][ C0] ? __pfx__printk+0x10/0x10 [ 486.087820][ C0] ? __pfx_vpanic+0x10/0x10 [ 486.092383][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 486.097937][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 486.103203][ C0] panic+0xc5/0xd0 [ 486.106992][ C0] ? __pfx_panic+0x10/0x10 [ 486.111577][ C0] __warn+0x315/0x4c0 [ 486.115609][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 486.121304][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 486.127001][ C0] __report_bug+0x276/0x570 [ 486.131672][ C0] ? __kernel_text_address+0xd/0x30 [ 486.136958][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 486.142660][ C0] ? __pfx___report_bug+0x10/0x10 [ 486.147754][ C0] ? stack_trace_save+0xa9/0x100 [ 486.152754][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 486.158188][ C0] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 486.163967][ C0] report_bug_entry+0x19b/0x290 [ 486.168867][ C0] ? __rate_control_send_low+0x638/0x8a0 [ 486.174569][ C0] ? __rate_control_send_low+0x63d/0x8a0 [ 486.180298][ C0] handle_bug+0xce/0x200 [ 486.184607][ C0] exc_invalid_op+0x1a/0x50 [ 486.189161][ C0] asm_exc_invalid_op+0x1a/0x20 [ 486.194065][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 486.200378][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 486.220032][ C0] RSP: 0000:ffffc9000e1d75f8 EFLAGS: 00010246 [ 486.226155][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 486.234184][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff908c3210 [ 486.242296][ C0] RBP: ffff888067c00f40 R08: 0000000000000000 R09: 0000000000000000 [ 486.250316][ C0] R10: 0000000000000004 R11: 8000000000000100 R12: ffff8880748387a8 [ 486.258337][ C0] R13: dffffc0000000000 R14: ffffffff908c3210 R15: ffff888067c03258 [ 486.266389][ C0] ? __rate_control_send_low+0x600/0x8a0 [ 486.272105][ C0] rate_control_send_low+0x1a7/0x7b0 [ 486.277463][ C0] rate_control_get_rate+0x20b/0x5d0 [ 486.282821][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 486.288694][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 486.295075][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 486.301215][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 486.307004][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 486.312722][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 486.319140][ C0] ? lock_acquire+0x115/0x350 [ 486.323880][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 486.329489][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 486.335092][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 486.340697][ C0] ? __lock_acquire+0x747/0x2de0 [ 486.345689][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 486.351292][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 486.357407][ C0] ? debug_mutex_add_waiter+0x1b0/0x1f0 [ 486.363071][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 486.368863][ C0] __iterate_interfaces+0x2af/0x5a0 [ 486.374140][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 486.380273][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 486.387542][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 486.393682][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 486.400783][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 486.406658][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 486.411928][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 486.417882][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 486.423175][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 486.428407][ C0] handle_softirqs+0x226/0x860 [ 486.433237][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 486.438072][ C0] __irq_exit_rcu+0xcb/0x220 [ 486.442723][ C0] irq_exit_rcu+0x9/0x30 [ 486.447021][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 486.452710][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.458737][ C0] RIP: 0033:0x7fc39406b3aa [ 486.463200][ C0] Code: 24 00 01 00 00 48 69 d2 e8 03 00 00 48 29 d1 ba 80 00 00 00 48 69 c9 40 42 0f 00 48 89 8c 24 08 01 00 00 31 c9 e8 96 2d 13 00 <41> 8b 45 00 85 c0 0f 84 52 ff ff ff 4c 8b 7c 24 78 4c 8b 44 24 58 [ 486.482847][ C0] RSP: 002b:00007ffce23cc3e0 EFLAGS: 00000217 [ 486.488959][ C0] RAX: 0000000000000000 RBX: 00000000000768bf RCX: 00007fc39419e159 [ 486.496988][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc394425fac [ 486.505011][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 486.513030][ C0] R10: 00007ffce23cc4e0 R11: 0000000000000246 R12: 00007ffce23cc500 [ 486.521067][ C0] R13: 00007fc394425fac R14: 00000000000768f1 R15: 00007ffce23cc4e0 [ 486.529114][ C0] [ 486.532801][ C0] Kernel Offset: disabled [ 486.537196][ C0] Rebooting in 86400 seconds..