last executing test programs: 7.732648766s ago: executing program 2 (id=5859): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x4, 0x2a40}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) sendfile(r6, r4, &(0x7f0000000080)=0x3, 0x5) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r8, 0x0, 0x80, 0x4) write(r6, 0x0, 0x0) write(r2, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write(r0, &(0x7f0000000140)="53535e4239d89dc9c5f3194bd10d70c75f33da4e93a0081afaa658eec39e7491f55e135ab6f10c54bad7a01e05b93421aeeeeb1846ad7f0cc83b479cf2dfe365c25c38665e268ada957524ee816fb131617060fc493836908d7ffa5d5d5c64edf997d4e6b863e1233bc6501f9ab4cab0ea10aa583c34e87a1ba4d4e52a44b065b6ba59885c405f090580765e4e1ea236d8e5ce3b1c2badb97eb57572738310032e4b3913af626524dc784d00efa45acd7cb2604e3d4a0e069c395e4d8871ecc27b1b0f4ff9f5ac281b0ee5865b5e", 0xce) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r9, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x81, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) 6.653859754s ago: executing program 2 (id=5872): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x0) close(0x4) 6.367300321s ago: executing program 2 (id=5876): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@setneightbl={0x20, 0x43, 0xc19, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xc, 0x1, 'ip_vti0\x00'}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@setneightbl={0x20, 0x43, 0xc19, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xc, 0x1, 'ip_vti0\x00'}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)={[{0x2b, 'perf_event'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2b, 'pids'}, {0x2d, 'net'}, {0x2d, 'cpuset'}, {0x2b, 'net'}]}, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$tipc(r2, &(0x7f0000002f40)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000000880)="7d2ae6e4de735006528586637e0fac2934228269e0cfb44da512886fd7b25690fcdbe34b0702eae7c6ba51d9fe15f0b928ddf7d723ec8266da474be0d629abf3b0ca4dc17133fea4fded4514a7324f860763b303ffaa7adc59029273013f", 0x5e}, {&(0x7f0000000900)="4544e1872a9869c11ebe95c5c1b12f48d2cbb917b1d7", 0x16}, {&(0x7f0000000940)="4d8f05645a3fc4e197bb1b2130", 0xd}, {&(0x7f0000000980)="07fb661f4053b160123941407516e461e6e11d65cb767ab701c93b1aaf79fbc2d4fc4bfba71398b6a6a0e438ab2f17f01ea6c927e94878c695ccde1220ecc3731e76bb1fd53e6dead2fab4d149f938c19cca3ec0a16cc39272fa0d191b049396254f736e5444cc192db553035e34a6343bc658438c9f5eb553aa9595d7f8cea2967edc3c23084a998387", 0x8a}, {&(0x7f0000001cc0)="9c9dc09238223fb31a44e83e88bd2040863c5fb6358ebd2c99c9cf8ed5137ce84e1a12a851b37e237675db515ba11787e32cb7f72ae2d1ee98a58048948e42b94f926d23f915c01b04c163191f01a96d03cb5a5c45dc5accfb5f4d5184f65dde7267bfa60b5b6f4f10b9a1a538fe6da747a90ec21238d438d24bd6c2c1ea1725974320bc9c44d20327c3a0a7f71cd5c147b7dce3a1015d56816e970983094bc29e750dc2e90787b2f22b115c3fcb8651e85cf5eed4d22e176d986c9fd5b34cfa78f3120351be5c1cbf5edf14053dd9d33121fb26846995b3e2eafe8f3651f4d320cb39694db65c34163d5c3553dc3469ab1b1fd3d691ff589dad1703eaa4d4b5ced05dd6ab8b549b9bcc883f1ac82fe4d3ed03c6c439cd858d3aa9dc17532259d46f1818a4130aae43a5def2cd2ec5b4466c4d6e8acf29eb2b5723258aeb25b448fb51b55bbc732f6bc38c652708de490cd418d0a208c1ea502743ccf9efb6f7121654ca33f833ebc8d643995887e145a52cb899a4204b2877eeb178c82580d4818ff5ee983ce3c8e99c999834f4e9bc2384883563ce94590a8b76a4a6a197b21b494950e4e0222f6dc7b37991ada2b484bc34a287abb8b7fbc5f6cb73f0a2ca34f5aa84f3392c6ddb4f3028bbf6e4687902fb0d6a71ffafcd1f71185546b2f0b89207dd44e9350b2e9aebc8cb51006dcee2a036b5485d6fcdcde4fd198b8864809b3ac59dfe7a48d06343e4e2fcc5c07941eed392cb619309859e82f4ec12291c9589ce0484da394920aca3ea316f27ec6a94678b12684f7b5dd29346d08cfa5a7aa813c7cd5cc94ae1abcebb20c31e83eb91cf9297e07b7a054613d09ad57be6cc6751f3e1bcdb2f3865cc89192f3d3472cc8a59f125cdb4986418acd5702f5fb7d50a4c2344c29e533f0d19e0ad630038861fd06a2b7c6e6ae52d2777ad394e90a8814a24ea981a6ea496a6500e9a7d76a58f2d3fac1d8fba18386fef8c141c44633ffdf7fac9719c6b2fc9e097ea7442b8bdbcc871feb9b212f212d31c7bab9abf97523d7426736ec769342b07f9a79475a8dea140b77ac5a36ed116139ee3dba58a3d3dfa509ade2923c8a0dc71c1768a0f98cb15e7e03d0319982ef63db48b454092eee820f2e899a4c0cdc0434a18bc0e379938bc2348b0e3f5de048ff226d3e21ee7477e8cd89225707b3a37167a4d7ea4c725f97761e496728fd591eee0c23d5be6337b48024461dcff7ea968ea922c8ac0674a16d9147d20ac7303ac4c8a709d649f6873938a3147728ab69cac265fd9760e6f1ac278caf83f95f55f52eee1dc449a973ffacf0d3606c0ba0e66614a8a0b0f3abf5e3a9d865c4720b0d140d987602b75f4d25471bf50343141d4dd0860491f72b7221534544ab51979693151f9a0905b9b524a46e6fc8f3f0034cf2366e6967fb2ea136d0accdd2343f1e5598900d1ad7e2e3e341c73cb975b177d2c36f6f4f61590a99d146b6b11666bfa7e48c439f1361165bf0f7c967040af99afb1919eb6406301efea72be78d551f501f76da566560e117b34f64cd272935c892a7b57144b71d6acb1f8dfbbd3513feb7d1e0ff65dba46c69337504ed3dcb35408bc7a3c00e785384dee289b3ef2b897b164fab16bc37dffae8fd3606e41b3158205b31bc64526d102d36ce53144c0ee2d35405950c59034eabb5d18e0f1218079bcc0149d850ea0a70b81a78676b8542c46e73f73252bc4b7b59a7b927c5b9acaac2edf0e58eb00472f8093e917de292ba40bbec5f6302e1401aeb552ff8802bb251cfec6818071be9435ddcfa8b61948507eb0ed5681b9be19665b99e9801299361e60689766ae23a988e7dbbf577b2330bf659280c0737eac56df531f28b746bac3f2a3480378922cf8420aff47ebed26b8112507cd361af26c660d4afad4a33825202cfa7de29248952fae171d99c625ccf1f375959e4c8e6aa0315d60d8b69206f03460d3dff58a7504da181c4643f1dc6c259a8b46060e3173b3fb00f031e9211dfa1ba772ddb31fc5864223d2fdca8440f4586b974c3c0b835f7ec264b5522eb7ba355c02c3c04d4bf9a32f7d67ac370817e2e7ea9f26b4e99119a242159490fe1888a34b702bb947c71dedf9fe6a15a173988a3273d1e61c401076b8a03a1425803ec1286ea9f70e0740e1644655bc5cf9968eb6777f4e444431f24025578b3e0f28f407160539172ddac20872c4ac1233bc0825ff58dbc9bcb9c7b7c443a37688a7b414be33c5cf4985702257d6165f45ed8fea75216bf877da23aed283a56afc3875d702f816af57f2a484d574e5a44e6a2f9a565de0f1472c44538fba1be1829c12aa0ab89fd00c2cdba99def833d029a1fe35c8bfbb5b474c8ced7e2a71dd0268976b9c58607c5a9fcf85ed750772c0b96db692a859158e2cb4e4e55decfb1ca051d902bf8ded49f6a3f83c5498b7101fcef3a130f2028acf73739e1e938ef9d1b34d9c8c2f2dc49b053a70f45fbc1958751db438b28897b336fffb286dbe69a698c06e0b6176000fea4ede09364eb1073ace4cbc2d8ff29c05a21066a59e1073636c1f826d5bafc851f870d96ff643aecacbdb081cc9489748db4a1a4ba6a1fbd4f557fecc5e09be2f35bd002696db8d6c9166de918cfd2872b4774d5dce0c65e4d7faaff3ba02df46bfe503492c07df133f06953af98d7043dbaf3d44e3bb4185343df45bcb09ea767844f1fae62421090566198f3f035e3216360e226860513b20f54ce05b4fc60b5f490f3cc249d5ca469252b9451bf7d9f3083f77c71a9ed2824fe5934a8767c91731a46d144476952abfacc293b357720d28ab57dec45e0f17ab018ea3944f33a29164d0ed37be321420b3b76eedc3ae23dc82d3f1769086504fa09126aad4d313983f27b345231b5c9116315962365b4f61c974e9a4813376c3116bb7b2fa62807590e823bc8f1d55d75e1b7ef5d3f9bb3180baf8807865dd777f749ea818273f8ca421753f55231213b9c2dd55753832d6ff683a82fe144730d7bf158b137cd8104d0ce726f7cd5ccceef436c936d19c28a8f43bab58407392a81808a5be077026705080b44da17ab1fa8017578566cab28c6a8551757cec31c31e17860583bf879c0281315f088d37b4d45e0d8aa32399afaf00499755e9c7fd58287f6435213162745e6a044448604efa160ecca0c4c8ffcc96e57f1740a4acbd85517de140f55c7b8170c283c7c7565cc5e0113ca1dd0331e355cf19ce7c912011fead498b98d40594aad45718f8a8b62f536fb9c861853a445396fc1e1c1ef38b40063e97a40a7094f96374e4a7c523e687366e009f191fe2056fdcb9e2068bd019fb0e6aaf914cd450f5961a1639f80c51df181267fa629b1bd815811d852fd2dd4fb4164c0d4e1931bdbc60f35e57b1a190c58d4ec5db2d5a8a63ecef3a3a940f2b2f526598af37ea76141b7bbf7150afee99518a6217027c994309797e4899d586bb13dad9133602ce16d3cac3401b4008ca0afcd55a1ee72636f32d3b6ed72d443a9836d2dbb6df6cd66c7f02f6e5a8c34fe45e86563fafff38823cbc0a04008544e5c6c3d5e0c7ee748d5a23ebb0e39394175f27b4dbd2abe38914b7b1ac8beb7085a119c57bb91005bc2125e63c09c89051bb009b20338d66970e9be34d971c86fb6ccea97ecaf8b1abbaeeb2b6d2c20357330bd944f3087b2fe63668b835bad8ff657ff6479037840d6da96569a3c81eeafd8392b364e755e5bab750a2d134e2b0419fada7be2734a6a75ede8209389f25dfb0e6f29a75248f826f161aac14113b1e36f997bc77e04b4b0ab92067f8d660d320912fb040538b8af04e1978c72e15f5bbd75657afab56b34c4bae1f1db9821333039624171547bb79d8db2ebcd0da47f9cc8106b48303d22172281e0ee063313b0e770f1fd06914871b9c93a0436654bf070a8d5179fa7cccd35189675ff7622149376634dab650683b61b667431bb351a8f63aeb392b3de905bf273f1f0a25501a1f130f09ddb9795e55a04ef9d1b43f6f052477d5c6d5f8b1f21a37e14feb29658eedd239565878641434b40308a3ae8d5a0776d0427642fc48c9626ca60297534c16ba05f0ae8dbb5416fd43b7bef3184d97bc004e8e60d6a4029afd44457bd3f14eba4540c5aada2e9837c033205055e0561f69dc44a6559d411a14b0443e18ff078921c241d6ead32b766376022ff4e225465a79c5830cafe890e996006846e32e7d20c8ebe31f28fdd323f59f614c4543e08808a6033b8a7be43a2fa02317170b7aa1623e1cb571533d5155fbe062f8fd233b5c2885e7bb8b3d01ddc87bc18393c05af368c566a8e8348b2ad085674c057d189579a0738b6a70623ff11d60902c61de6656acc0330351c745dcf106e97bf96b88d0a05f0718e03348681a7f1ef46cfa1282effcb2775f2da803c11a2d7d626f837a442957a7c8cb5220688a6005eb0ff50a27ef883449f81dcfd8130c6c2c66272684c9c52cb74f0eb85a135bdb0e430eea71be6dc089865a12eefaaef9f066002f7851ace09b9f034f099548f8d14f5002ad5e8b582a197a204a85b9368b969f6ba7408e9b4a5150f994d359d97b2c05211625edd4db413b25be10051a5323d817ba7518618cf8f3b68653e6ca68600a77bc2de79e9d2f585699bac39eebb5ec6cf73d2d7a29ae34769d00233940bec65c66af6082b952f789afc219234f271e3fb46375c691c6ae5de41b9b631ac4c41f527b92384b5aaa39bd9e7744af75a087c8c4de31e3c50880eb7816095c62701fec4cf2b76c5698077f14fc607e5776ef56417619c7568fc94cf880624818bffbb5b5dfbefae48ea3c96eb54b3f063dde0fe716b753441d6dd9e7361b65fa1fa084ea6a041699034e275f47c3b0c528f79c63c8a5b1d96183786de8812356ce78938c8650f39442a1cc539ccfd923b5930ef627fdb4d01c1173969c633c8c451d270b577bdef2105411e27b15d9c9ba7607ca3878c21f96b709bf5ebf6fa3e972f1e90d5031c029541c76ba063434a4a0cd496ef1a34d73867f88b25cc0be07c347ca6893ddafa0647b8f256983ba7449590697f16c4f535fc092f096540803014edd6148ea97560faa396f7beb236ac75adcf786726afadd40d499e1e601b3cd3d4a281b9349b0e8e3d4653934a88b05f7a7d82fb93a1f03c8f2b8cccb61c03c460f29baa4e237153098fdfd7aed92506f412050113ad59c14598b2719956cdaae32ea788ea9211e74b3532f86eedacfff9c035a476ef11dbd3653a4cdd35808f44eeb27c369dd329d95db4ae0b6d102a1eb345f2c55c4ab3c2c6987cfce3ded82973a61e5c29fe4348002c8d963b2d9d6ec281ecaedba6a676dcd7968d8b42c34759ab20f2c2275b1a8a95f156fd361c49ed9a8ff350f22e9556f9b458447520f5891891b2d6dce0c28bf4df35029af03d655a2f53ea94547c558a09598eb9a7f46eb63429765116fd5ad53ba2c1fcd76673eee41ee5dec638103c7dbf59b16f5327b84a5dac18498146385a7d27eaafa5ab441b9d7b05df9071db5e80b04e1a5682a8172b0b3bed5e225f7e3e99174afcbc5cb7143301b20cbfc18c23f0ce4dc01796baacb64932a8bae2aacca1d25af7c74de3d872a1c869abcbf8206fec71cf2536fa0df666032b9a6c20c34b2be5a7a68a27e53332a2b1df8236390a296b881aa2f33baf99e19e177a89e0dac3dd4a94e8db6033069db6a9b68b2f90447b440f03ea7de2bd1b9bf317e4e81d0409ffd1b5c9b70afaad39a29cca5d3e876fe5af", 0x1000}, {&(0x7f0000002cc0)="1e6db86862538cf0b27464827465659373ee154a88bfbda387d40ba6b5234a50592bb27b2eb226a401ee364a7cfbd82d95e6ec0ce851cf7a39f11b683c760be6b326a532d97380c8096586054342ed22951311d5a713433afa5b66562fe91e15a3c2bdd2e7091705c445df84d5986d0d6108451c67879fff6eae0520104b062d742da548037e73c2d0657c1c397fbd6a5a8b567b46d943c50875a7fc7880817fe601df0fbc3f1580d0cf66ee5221c99cfd32f62eb767233dc7108bd84350d94b56863b3291b7310f5e111d7d8d1bb5a09471de", 0xd3}, {&(0x7f0000002dc0)="13dfae84a70cf11dd26e721b52d3e9a12579dc903e3c7ab379da8ebe9181d640f41969ad49f7b14deb668a34d40bee50a8376e68a6222aa2c22f1ed12f7f00df506fcf8a9dd72993c28e92b63615761655f8d02442cd28a1d225f6ffa28f52c440b1e7c4358ff59ced9a54f00076a1daa7cdb0563a0902cb6a5cd9e1bcfb2b8ecbc43d2a5b101dd4f4", 0x89}], 0x7, &(0x7f0000002f00), 0x0, 0x4001}, 0x4080) (async) sendmsg$tipc(r2, &(0x7f0000002f40)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000000880)="7d2ae6e4de735006528586637e0fac2934228269e0cfb44da512886fd7b25690fcdbe34b0702eae7c6ba51d9fe15f0b928ddf7d723ec8266da474be0d629abf3b0ca4dc17133fea4fded4514a7324f860763b303ffaa7adc59029273013f", 0x5e}, {&(0x7f0000000900)="4544e1872a9869c11ebe95c5c1b12f48d2cbb917b1d7", 0x16}, {&(0x7f0000000940)="4d8f05645a3fc4e197bb1b2130", 0xd}, {&(0x7f0000000980)="07fb661f4053b160123941407516e461e6e11d65cb767ab701c93b1aaf79fbc2d4fc4bfba71398b6a6a0e438ab2f17f01ea6c927e94878c695ccde1220ecc3731e76bb1fd53e6dead2fab4d149f938c19cca3ec0a16cc39272fa0d191b049396254f736e5444cc192db553035e34a6343bc658438c9f5eb553aa9595d7f8cea2967edc3c23084a998387", 0x8a}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="1e6db86862538cf0b27464827465659373ee154a88bfbda387d40ba6b5234a50592bb27b2eb226a401ee364a7cfbd82d95e6ec0ce851cf7a39f11b683c760be6b326a532d97380c8096586054342ed22951311d5a713433afa5b66562fe91e15a3c2bdd2e7091705c445df84d5986d0d6108451c67879fff6eae0520104b062d742da548037e73c2d0657c1c397fbd6a5a8b567b46d943c50875a7fc7880817fe601df0fbc3f1580d0cf66ee5221c99cfd32f62eb767233dc7108bd84350d94b56863b3291b7310f5e111d7d8d1bb5a09471de", 0xd3}, {&(0x7f0000002dc0)="13dfae84a70cf11dd26e721b52d3e9a12579dc903e3c7ab379da8ebe9181d640f41969ad49f7b14deb668a34d40bee50a8376e68a6222aa2c22f1ed12f7f00df506fcf8a9dd72993c28e92b63615761655f8d02442cd28a1d225f6ffa28f52c440b1e7c4358ff59ced9a54f00076a1daa7cdb0563a0902cb6a5cd9e1bcfb2b8ecbc43d2a5b101dd4f4", 0x89}], 0x7, &(0x7f0000002f00), 0x0, 0x4001}, 0x4080) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x4f, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_MULTI_BOOLOPT={0x0, 0x2e, {0x1}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000) listen(r7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000007c0)={'bond_slave_1\x00', &(0x7f0000000740)=@ethtool_coalesce={0xf, 0x1, 0x0, 0x9, 0x4, 0x8, 0x9, 0x7, 0xa, 0x3, 0x408d2a14, 0x3, 0x8, 0x101, 0x5, 0x1, 0x7, 0xffff77d6, 0x4570, 0x70, 0x5, 0x8, 0x4}}) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r10 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f0000000280)={0x0, 0x6cda83faea3171fc, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f00000004c0)=""/93}, {&(0x7f0000000340)=""/63}, {&(0x7f0000000680)=""/151}], 0x44}, 0x4c2103a0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006a2e2899a6e7dfeed3770015613fbc2d51111e154da76c92a0e9b7d6d7f507f3c10e4d7e5b421641224dc5241af9009cfa873749e061a237c4313b8c59748d930f17c7e840292248f4cc436a75959192fc283c6ada6f39187b3407119ada1c9d020b107ae2edb9f30c4d55d47c642e149ae973200acd6ecf7b1b376f2c8170e32f1e279bf1eb87d2c208776838e3f56579241be0e5678d34029d2f5ad11c812844eb1a3372d2a8c1da163b688138f7b26ada47d46e7870ac7c60f720fbd0f3a0734c6ba4a63388ea0c17db852951940509f5a023c74ba8077", @ANYRES32=r1], 0x3c}}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006a2e2899a6e7dfeed3770015613fbc2d51111e154da76c92a0e9b7d6d7f507f3c10e4d7e5b421641224dc5241af9009cfa873749e061a237c4313b8c59748d930f17c7e840292248f4cc436a75959192fc283c6ada6f39187b3407119ada1c9d020b107ae2edb9f30c4d55d47c642e149ae973200acd6ecf7b1b376f2c8170e32f1e279bf1eb87d2c208776838e3f56579241be0e5678d34029d2f5ad11c812844eb1a3372d2a8c1da163b688138f7b26ada47d46e7870ac7c60f720fbd0f3a0734c6ba4a63388ea0c17db852951940509f5a023c74ba8077", @ANYRES32=r1], 0x3c}}, 0x4000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 5.855112026s ago: executing program 2 (id=5880): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x1c, 0x68, 0x162ceceb15c17209, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0xb725) socket(0x8, 0x3, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x28}}, 0x0) 5.166563618s ago: executing program 1 (id=5888): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000240)=0x200, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x1e, 0x12, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x5e, &(0x7f00000016c0)=""/94, 0x41100, 0x12, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0xb, 0x10, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000019c0)=[0x1], &(0x7f0000001a00)=[{0x5, 0x1, 0xe, 0xb}, {0x2, 0x5, 0x2}], 0x10, 0xff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x24000887}, 0x20000040) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001b00)={r2, r3, 0x4, r4}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa00000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00e4dcf23a986323cee36ba89b0904a02aff744fadee6f0423f83009cfa95c24f3af8d20e0ad080000004be3177e29cdc5e7852bcd47d19f569c85364e999ac7af7bb09d4a951ac30f41c3083241750a56d39698f8d80d1619bf1b69595d3fc8d65b64735fe717c4f6ffadd2fd3410f655f6374b790cc1b3eb59d1e573dd8b13a7fb680d4e6e0b62192f811388e42e3970aea3dca13965f9ec583cee7a264d11d06da01169486cc434f6929d112f717fc9575f0dabd9edba9ce4722f9b3e5af73c1656"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='\xf3[-\\#)({@^\xb3\x19-\x8c\x00', 0x511202, &(0x7f0000000040)={@align=0x6, {0x1, 0x4, 0x0, 0x2}}, 0x80000001, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xba}) sendmsg$kcm(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)="90fb9efedd5af723fc9fe17b1eb035dc5dd03391fea04c618f99ab3de2c3b56ef1eacd32182f8f4f6ce1f13676af09f77276ff5f222bf8349ab8c11ea8245027839dd24ec1eb41a146abf7a8131a022ab2fff0b9a6878511ab777073ffc19786791cedd2fe09149b3e9cf29799c929bda16b336e94dc3a4f85196e0cf6be6f7e13ce68", 0x83}, {&(0x7f0000000680)="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", 0x1000}], 0x2, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0xd0}, 0x4) 4.903712685s ago: executing program 4 (id=5891): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000100)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x14008004) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a6bf5}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, 0x0, 0x0, 0x804, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r5, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x20000040}, 0x20020014) sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800002ba9996d9b204ea547ce003ff89255a2405230317030c05b7c83ef14eef5d6e3a2198a296e304a13f268a12b17dce748d4638416b25fec66f686b4a1740aef99533a0ac149bce703", @ANYRES32=r8, @ANYRES32=r8], 0x18, 0x2000ccd0}, 0x10) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.705575425s ago: executing program 3 (id=5894): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) (async) r2 = socket$inet(0x2, 0x3, 0x33) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) (async) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 4.592190374s ago: executing program 3 (id=5895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000000)=0xffffff8e, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0xfffffffd, 0xfffffffd, 0x7, 0x7, 0x1}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r5, 0xdc, "07a3f05682e602aa2887a03327ca0f712c894bfdd8f5bd6137a95a798b8d1f76af5ab9e320c8268092ddb394e3b7f132a40b8bcebf0dfaecf332e4fd579d06ae5dee9631b427ac71cf1dfe4e771ca5e27926f71d973b45e80c1b98e638c7203dfb858947dbcdcb9c616754464451b70ca4d7bf0186cf8832bc2fc563fb90dad82e5b8daa23ba99720073ae5171d4821a8ce8e62187f9f00b3acb1170ec5f0e5e028362ec1366be39685a634177e897435fc108fc0ded70ea659f79e26bac0abf570a5d76f99a955cfb1d17f871b19241bb0cb039f033614bceb4f5cc"}, &(0x7f0000000380)=0xe4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.300886585s ago: executing program 1 (id=5896): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r4, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback={0x3f7}, 0xb578}}}, 0x84) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) socket$netlink(0x10, 0x3, 0x7) 2.195921329s ago: executing program 4 (id=5898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.837471623s ago: executing program 4 (id=5899): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x11, 0xcc, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000080)=0x9447, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, r1, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.476689588s ago: executing program 3 (id=5901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="04ea00000b769da53b542c9a5787546d800a7bc9d769428c2b28c76ab93f27e06fd5b58ebe939baed216d92495cf90"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa0}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x24000894) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcd, 0x4, 0xaf4585f225cdc3e8, 0x64, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) accept$alg(r8, 0x0, 0x0) close(r6) r10 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) r14 = getgid() setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000780)={r12, r13, r14}, 0xc) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb060f", 0x2f}], 0x1}, 0x4005) 1.40806256s ago: executing program 0 (id=5902): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000080)=',@\x00', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x7]}, {0x8, 0x4, 0x8000, 0x3}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x9}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @remote}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x9, 0x40000, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x7, 0x2, 0x10}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000600)={0x648, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x7f, 0x4, 0x4}, {0x2, 0x17, 0x4, 0x6}, {0x7, 0x3, 0x5, 0x7}, {0xfffd, 0x8, 0x0, 0x68}, {0x0, 0x2, 0x8, 0xb}, {0x3, 0x1, 0x1b, 0x7fff}, {0x8001, 0x8, 0x9, 0x4}, {0xffff, 0x7, 0x0, 0xfffffff8}, {0x80, 0x4, 0x10, 0xfc0}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x98a5}}}]}}, {{0x8, 0x1, r7}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x174, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x3f, 0x3, 0x1}, {0x3, 0xdc, 0x40, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r13}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r16}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x648}, 0x1, 0x0, 0x0, 0x4000}, 0x80002) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x2010, r2, 0x100000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000e00)) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000e40)={'ipvlan1\x00', 0x8}) r18 = openat$cgroup(r4, &(0x7f0000000e80)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r18, &(0x7f0000000ec0)='tasks\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000f00)=0x2, 0x4) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000f40)) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000f80)=0x10, 0x4) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000fc0)={0x2000}) 1.181737675s ago: executing program 2 (id=5903): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="044a4b77d19a491415a6a0e2c2efa3d1a30229350f59804ab55fe9cfb52313e4afacee76446edcaf8431c0e14aa45c89d4d76d61f9a47e28e5988e3f5ccc38a8f86a5155d02b6c000dbdf9e10ab595e315ceae05c96837814c9172ccb79fc5350c43edbd0a35c939ae5a0bd7861d0b435a84af6cce289d9a684fe98c5912703bfc33", 0x82}, {&(0x7f00000002c0)="e207f1cce9f8e996f34dffb66b6e9dcdcd4014c7c08edb0bcb42f6acf9364fa8737d6ad9d33982cae3034abe3006cd74e2fbb8e2cc753a2e42a5c64e081587d84256d4b638c332925aaf5954a2e42ef1577fce0860739be89a3089d30f876698b02e53a01630d8afed100fcb3ee8f0e304af6f8efa5bffdca83bc56e12b60427c37cff9ac2da890299e8ea0f89df85dc9dedcf9918d608c33f749ffe1e3aa245cea75095eaf889306c0f5dd5db7f08d59a418f", 0xb3}, {&(0x7f0000000380)="e2f888e7fd1129e1faa38b207a51ab874b016a9bebb294952fc3b00fd0452cd625e60fcc51e0dd0abe45e6d212c9b1daf6464f3629e20248f3ec070ece1fdbd58d7254e40f38b3d6f27afa8a0ed37290f9d972d2fc", 0x55}], 0x3, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x2000000000000000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7a20}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0xa8}, 0x8880) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r1, &(0x7f0000000640)="05", 0x1, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24054007, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) recvfrom(r5, &(0x7f0000000040)=""/53, 0x35, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.127340969s ago: executing program 3 (id=5904): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r10, 0x533, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00028006"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.060227226s ago: executing program 0 (id=5905): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) 1.059664391s ago: executing program 1 (id=5906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4cc, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x2f, 0x7f, [@dsss={0x3, 0x1, 0xd}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x5, 0x0, {0xffffffffffffffff, 0x41, 0x0, 0x39a}, 0xb02, 0x5, 0x7f}}, @dsss={0x3, 0x1, 0xaf}, @supported_rates={0x1, 0x7, [{0x5, 0x1}, {0x36}, {0x4}, {0x24, 0x1}, {0x0, 0x1}, {0x6c, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_BEACON_HEAD={0x3a5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_a, @device_b, @from_mac=@broadcast, {0xe, 0x88d}, @value=@ver_80211n={0x0, 0x473, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x2, @default, 0x40, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xa9}, @val={0x4, 0x6, {0x9, 0x18, 0x7fff}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x7, 0x0, {0x2, 0x1, 0x0, 0x173, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x800, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x48}}, @void, [{0xdd, 0x6e, "fd9012617660dbd161d1a886b2337075a7f70f2071a6095247ab4706815ded478da9a3f4207194df3011237be631e20d449222dfd2f2b9cfa2a11a0874b75823bff9685e88611c80c88263d09f5c22c82bce8f44e854803c2b74df9dbb2abd9420d4c88d899380382717c1d70d34"}, {0xdd, 0x9, "335d2f67d9bf33082c"}, {0xdd, 0x48, "4888f94007a8370339dd01478ef68a578ade83f0a240fbc249847d7e17a461cb660e80ad860edb669e0c71a61fe154410bd56f03d60077e2cd36afe2d856249e8b661363c7d4055c"}, {0xdd, 0xb3, "b828a9a344fa39503f10112c5ad2b81798740f3482e7eebb5a4c348af800006cd1cdfc70163a0a59ea5d3fa7358a5cb9ef95e29b466505963b983bb457c82bccf6422be6a7c510b49a61765d8ee0f1cf99a8cb71690fd4caee04286e5978692027fe7b543a167d635acd7bfc533957b39fde3185eb24f03238243c8d23dac2b167ecf99c4759ccd3a6bab142ecd134a632d2e9fdc404eca7f8d5e51cc3a0ead394c9216830d9defd2de3546b1a851ae87e539e"}, {0xdd, 0x5b, "205a51767f0c2e3f9c6f068442ae894be51d9b0f06e36e5ad61fb2282a166e6b4f3f333524c5a31c57a9d7ca133b66e456fe1d85388ff0c8b0fe0d454ce7abc6c5ee660af22bab454b96155fa8a72f7fce3d86f961d733c8817367"}, {0xdd, 0x7d, "180d0ea75ee948460b5b794961e1dc07f6e08ad419dc7c4a596c4bc88c04fc1a29058eff3e03692977ebea4e19c864f05b0c579eb3d75596f780471ecef64e622770534f405af375355066cc912912a52e9d85bb37d86843f742b9406550df5aa3558206641896ff1ba1bd0501f4ce8e3776f4e6f95751a5de7b301dd7"}, {0xdd, 0x1e, "1a66cac964b91c27a2c8a29578db599b30357a939e08f556c3cdf2317edc"}, {0xdd, 0xbe, "1e216ba6d0d775ddae654af9a2cf85c46b7a65ed735651ffe80e3e11218db765e16ea417036d8e448bda9ea216f8c97291347b0dc27a0d1a2459831db667ce66237877d3e612c1227100d715cf1c5a1c7e31e821c43959046a7854c28ba068efb7790f452e30641110c9c8025d2684f4f791fe4a9ee50b908fd8f8600543a86e0461375a28b7e3e865ddf1e86d593e26fe7591d53f7b4bf6ad9bcc2770ec037cc21fba6588dcb2657afd0047779a935d61c1935f52864d48ee68fe41a05d"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xbd, 0x7f, [@tim={0x5, 0xb7, {0xc, 0x51, 0x7, "5bac9be49015f43d0d2f7f340ba96d0a4826600375f5fb2b1b652adb17ab0794983c3e434cc2ab05ff6898c6764fcf2dee192ffa310ab944817b3921cd2bae346204292a27baaab49db38a2900792cc19a762b0abed51131b5155fc8465a6079310c718b13bdce5e382d50f2df3ead04f7ee4c3e1e97a84421a55a27512c473d5a7f2bb462a5c73dd9825fa0d16898a1da7ed9053a29b3d5d5141e4b129fbee7307cf12c7395f04436c4346e648928e838b0c274"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@preq={0x82, 0x1a, {{}, 0x9, 0x10, 0x2040, @broadcast, 0x5, @void, 0x800, 0x8}}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4) 967.619703ms ago: executing program 0 (id=5907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000016c0)={0x10, 0x26, 0x1}, 0x10}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000), 0x8) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0x6, 0x9c}) sendmmsg$sock(r2, &(0x7f0000002280)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8800) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @hci={0x1f, 0x3}, @llc={0x1a, 0x10e, 0x92, 0x8, 0xc, 0x8, @multicast}, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, 0x3ff}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB="10f9febf7b674a81e8533d8b786fe7b45a2035fb57e1b0bcdd466d08f6f8cdb4b19df8aa5fbc478633fe6f7984374a17b449b7cab19239ee6b02236be315815fe2d569901d979a", @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 881.514495ms ago: executing program 1 (id=5908): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @remote, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) 733.823922ms ago: executing program 0 (id=5909): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)={0x18, r2, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff38f65c79682a3052ae1f461bd278dbfb9fc5d6ef51a0f24d7bbeff70c3fc9ea6a4735f999310a1e004f8103f1793da9d5025b02aa2280eddd5c39038ccc2aba4514188007fa7e856e03bce2210749fe2081b637a06c6a6bceb6d94055800"/119], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) 732.813611ms ago: executing program 4 (id=5910): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r2, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)="d4339a45d350bf80b3ea7af5fd2aa0d92b3c3e377739b24d24affcf105f29a1c95f8a5e0c1391ad665195fb62dbd918e575eeda72709aa51056c78f591095a6520d9a872c3470f1e1d07e1fa336f95519baec480e0", 0x55}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="0ee2bf19b279d008b4b3c2c0f33c56838598f6e56a1f5076d1641b3bf377471fcee2bdfd5568f42fc1114bdeecc92a1ed3641688291ff6a3a6a2bfcda34bf3184e8ac60c074e2cb905095f4d275defd87618b5631bc4fd8ce8e266a5d9a265d0dddc0834de29a67d03d6b39fd0704d3360dedc094c26f4c00a7a4ebc623d52f3f718862507abe11d2cce0112805408f503bc595b5801ff3d8b6cea6151fcf5a0e95463b168b95ebb07f84ae76f", 0xad}, {&(0x7f0000000ac0)="74f3ac24c2adedcc42eb25fe17780208c12494dfff178344ed7f5e3ae3d6e6d0b5ac4728ee29da63e992", 0x2a}, {&(0x7f0000000b00)="75450873a1feaca6456a7c6a375dd74ba104eb8d6e884577b2cb7ea624093ca78c7788cd249fb34fadf054e992c3a269d21f8bbd77a2", 0x36}, {&(0x7f0000000b40)="d2004ec9c445f5b0d3aaab13192712dc813c107c181167442f1cf54de77c5511f9e315c222978f6a3fdc937fcc49fbdfcd39fce1f29778613afd1ea86e1ade3c1ed04a86ec97e76204159292cf952142bf4ca2dac184620d1b41de1b4731a897efb90c5639c87b8d850cf527df5eec91162fdbb4da50d3fe73fdcc09264540ce5347e51e51deadc571e26644630fd513de5629fa380728e52255284a79d9a79bb19889fa37f384c5ebfe3b095a2a9e18498058f017c356e74f8c8f2f95a0", 0xbe}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="1debd9659435fb0b35d4fd87cb488adf9011412ff107ae126376c45bcb260eac232707a014dec1f8024eb3fec09df51c6936aaf24c01678701756a38be2cea8fc54eec883891932198833378508aba906c6e9d74e3fcf6a059d75ccab6060c56f782c2b0303c313870bad3e0840bffadd67bc198df749038e072477cd92b50c80d433a77e0002cedbcd544faeee7e04afa5713cffa46e4a667", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000037c0)="0c73c649f55dafa9f64c2a3570d21628ed6126bfdfd7621b37a46ec947aa51e01c4f4523da29a6c597a7ce809c8335e2f88bf399ede02fd5c9469210b8ae0de5b6ab3b96dc8e2f366565df76d48eea2f814e274e266b8c066a6257ff65fb845b15acf663986204c0c5d609d1627a67440bb00cbb2a7c0ec5cab10b8fbe7769d2179b144fe84fb713b4cc34bbec005eab206d6a2fca10d88ee941f1df34ae3933edcf04a00febd0b0d27e605a6455b380421e835bb245b4a85cf23f8a21f77cfe03d89025c0464f1e67c89d65697dc3c80058a96dbbda5d994ffd3fdb85b32e37c02c28dfd2f9", 0xe6}, {&(0x7f00000038c0)="30806623109122bf8ef478e9700010607388d558c15e29", 0x17}, {&(0x7f0000003900)="d0a709d2f4b6f73c606c2da8fe783eea52b158d64b8ed3310b5ebf1ef9dea4f1fce50c542946d43b9ecf61c01b9841d93b1a13f187c85aad639ac9ae4b21530e5f62aeb9f49b8e3aec4ff5e41d470ba8cc08bca4e9cacafc5900737a57663c42d13b2e454799286c466bd7b46de19750a4ec24721fe26a033b6b5b", 0x7b}, {&(0x7f0000003980)="0095a25eaa11f77977beb0f20b1689a1fe6dae588c2f17bf2df2b06256fe0ce447a1cfb1ae90642ffb3c20dd42094bd63017e6bf3082d9b1ab4aa61d98207d95103424fd75dff679acb5571b5aec46b812f03c94c7781bfc0c23be64b2378ab12825a20c47877c6e678590fbf84ed86c2478edac10f55fffaf100362c9e8a1fd19e0a8335acde1ca77e44acd2bf2bc803ae0441aba63f4282ca08c660faf0313ca991024c1d4ab54fa452cf8d73e912797880a7d3e42f321f885dd2193488b37eac0a0", 0xc3}, {&(0x7f0000003a80)="3aa3d6392a0e2043b90e25554d28fba6a8b1750346eca2dbf1910e559e2ab7659a36f4ff6c2c179b67b9dc4370279d497ceb08f1b4f1bcb8d0bd27bb2bcd93e90ac6b1eb9fbea03d447fb79a83", 0x4d}, {&(0x7f0000003b00)="da3d0b87765e00f1cd34dd94493d87c2947c9ea4c73f4c867f5b0b96c73a3eb4fac786faa21b629e1ef7cc94af48c3f147b0bb7dad2085dd2b2ea2cb5fa00b3baaa7853b74cf842d03e2cc62d88c4cda2ce730c70fbec25e57f71c57efb3e5d671be6046b93e342c3ca871c488d87cc0c8dd600a755816492bc0817493eee7", 0x7f}], 0x6}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000003e80)="3e14bec6a9849d53b58946b0f857c747c8b8898c3fc0a8dc932e72b243ac979ab8412750e138ffa12076ec3d2a4d35602648523e118b669d9c879a6677cf016fa047a9a2062df1d527adeba4c3820654467d4477860111fe30a28e3173ae6a5eda41432f6d069ef043b81c98aca63071122973", 0x73}, {&(0x7f0000003f00)="d3e76306f06aa8ece7bf15a02bc1947614aafdd8bb021535958ec27e0707ad932697b7c3e7d4bedc84e0", 0x2a}, {&(0x7f0000003f40)="84aedd1a4a856657d4f570561e760724ef55eac47e721f43699b8788f0b85e36cb1489e67ef37b0a65583c9e7d47534539a7e935308b8ff09785847be9333ae834842366db33791a9c632aa93571d6565ee90e81bb126fcc502e090399ee8335d04d99fdd5fd6ffa82b2230a47b2fd2e702b1d9923bd2276a547866dc478053ba5f5b7b77f48d54cab8b2057349f9ab3b4", 0x91}, {&(0x7f0000004000)="a4dbda1bd8f9c72a0756a5cea0614558cc186c561b1dbf3f82435c2a7d55b924dadd93268bd086c7315ef880f899ec36", 0x30}, {&(0x7f0000004040)="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", 0x7a3}], 0x5}}], 0x5, 0x24040001) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getae={0x40, 0x1f, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, 0x4d3, 0xa, 0x2b}, @in6=@private2, 0x80000000, 0x3502}}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)='\n6', 0x2}], 0x1}}], 0x1, 0x4c800) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 600.242443ms ago: executing program 1 (id=5911): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x412900, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'pim6reg\x00', 0x600}) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8854) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB='0\x003'], 0x64}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x6, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0xd, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0x5, 0x1, {{0x1a, 0x4, 0x3, 0x39, 0x68, 0x66, 0x0, 0xfa, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x62, 0x3, 0x5, [{@local, 0x7fffffff}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xfffffffb}, {@remote, 0x2}, {@multicast2, 0x11ad}, {@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010100, 0x9ad}, {@empty, 0xdb0}]}, @rr={0x7, 0x7, 0x59, [@multicast2]}]}}}}}) 528.183899ms ago: executing program 3 (id=5912): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) close(r0) 432.064638ms ago: executing program 0 (id=5913): syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x9, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9}, 0x94) 279.137363ms ago: executing program 4 (id=5914): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 255.059087ms ago: executing program 3 (id=5915): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 252.610737ms ago: executing program 0 (id=5916): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000070000000000000001000010"], 0x0, 0x47}, 0x20) pipe(&(0x7f00000055c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x6, 0xc, 0x0, 0x10000, r1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xf, @void, @value, @value=r2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r5, &(0x7f0000001180)="c6cbbf299097fd2e6493d5b510de2bbb5c217a8889556bd68236585c2773c56c0f184eee808090ae16f1", &(0x7f00000011c0)=""/204}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r8, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x9, 0x81}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1b00000000400000000020005300000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000000000000700"/28], 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f00)=@o_path={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="078c0700060000007c50cab83774a47cd64dfa58c4851e11bc43eece8f90d6bba756ae25dfbe8f47d72ebb45e65aa3cdee456be406355ba22a294d466d1dd12c614c5e9281b3036482cf056d5b67dfc25bd1c278a3c7876e"], &(0x7f0000000100)='GPL\x00', 0x4b98, 0x7c, &(0x7f0000000140)=""/124, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xd, 0x2, 0xd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f40)=[r1, r3, r4, r10, r11], &(0x7f0000000f80)=[{0x4, 0x3, 0x0, 0x8}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001300)=r13, 0x4) 119.440502ms ago: executing program 2 (id=5917): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3400000040000100fcff1700040000000100000004004880100001800c00108005000880a80000000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async, rerun: 64) write(r1, &(0x7f0000000340)='#\x00\x00\x00', 0x4) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 108.571096ms ago: executing program 4 (id=5918): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000002010100000000000045b80000000006fa06400000000004cbf911ccce06489b82f813"], 0x28}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x1d}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc71e16e819ce1f22}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc0, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x7f}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xd1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffffb}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0xf0b7, 0x83, 0xec2a, 0x7f}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="545d8fa02a7f"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc71e16e819ce1f22}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xc0, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x50, 0xe3, 0x0, 0x1, {0x4c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x7f}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xd1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffffb}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0xf0b7, 0x83, 0xec2a, 0x7f}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="545d8fa02a7f"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) 0s ago: executing program 1 (id=5919): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7f, 0xa0000, 0x101, 0x803, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x3}, 0x50) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r10, 0x107, 0x2, &(0x7f00000003c0)={r11, 0x1, 0x4, @remote}, 0x10) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): icast mode [ 508.739292][T20463] xt_hashlimit: size too large, truncated to 1048576 [ 508.879797][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 508.927840][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 508.991004][T20474] : entered promiscuous mode [ 509.021162][T20478] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3884'. [ 509.033531][T20477] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3884'. [ 509.052487][T20481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3885'. [ 509.379855][T20499] mac80211_hwsim hwsim26 ’: renamed from wlan1 [ 509.415095][T20507] tipc: New replicast peer: 255.255.255.255 [ 509.425663][T20507] tipc: Enabled bearer , priority 10 [ 509.458186][T20509] syzkaller1: entered promiscuous mode [ 509.464289][T20509] syzkaller1: entered allmulticast mode [ 509.807297][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3895'. [ 510.311202][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3904'. [ 510.407417][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 510.437644][T20566] syzkaller1: entered promiscuous mode [ 510.445930][T20566] syzkaller1: entered allmulticast mode [ 510.930095][T20591] __nla_validate_parse: 1 callbacks suppressed [ 510.930117][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3913'. [ 511.516195][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 511.738302][T20636] syzkaller1: entered promiscuous mode [ 511.754742][T20636] syzkaller1: entered allmulticast mode [ 512.150077][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3927'. [ 512.278585][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3929'. [ 512.519368][T20683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3933'. [ 512.585926][T20687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3933'. [ 513.423287][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3934'. [ 513.693758][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 514.979299][T20649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.336132][T20709] syzkaller1: entered promiscuous mode [ 515.344384][T20709] syzkaller1: entered allmulticast mode [ 515.684710][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3946'. [ 515.712795][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 515.998725][T20753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3950'. [ 516.015180][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3950'. [ 516.027372][T20753] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3950'. [ 516.055976][T20753] netlink: 'syz.2.3950': attribute type 3 has an invalid length. [ 516.064930][T20753] netlink: 'syz.2.3950': attribute type 2 has an invalid length. [ 516.073402][T20753] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3950'. [ 520.037603][T20760] netlink: 'syz.2.3953': attribute type 3 has an invalid length. [ 520.419087][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'. [ 520.548875][T20786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3961'. [ 520.584123][T20789] netlink: 'syz.2.3962': attribute type 32 has an invalid length. [ 520.726786][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 520.765378][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 520.825676][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 520.849655][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.017816][T20796] __nla_validate_parse: 53 callbacks suppressed [ 521.017836][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.079829][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.125935][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.150818][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.162095][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.179639][T20815] netlink: 'syz.4.3968': attribute type 1 has an invalid length. [ 521.192409][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.312427][T20815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.402966][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.417987][T20796] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3963'. [ 521.645178][T20828] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 521.664706][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3973'. [ 524.589487][T20828] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 525.136434][T20872] netlink: 'syz.1.3984': attribute type 4 has an invalid length. [ 525.199047][T20872] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3984'. [ 525.559263][T20895] netlink: 'syz.3.3989': attribute type 12 has an invalid length. [ 525.687541][T20895] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 526.003549][T20927] netem: change failed [ 526.644768][T20952] __nla_validate_parse: 1 callbacks suppressed [ 526.644789][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4004'. [ 526.905408][T20970] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4010'. [ 526.934204][T20970] xt_l2tp: v2 doesn't support IP mode [ 527.158262][T20970] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 527.218733][T20970] bond3 (unregistering): Released all slaves [ 527.227155][T20991] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 527.340446][T20996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4013'. [ 527.419952][T20991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.494718][T20993] bond2: (slave veth0_to_bond): making interface the new active one [ 527.507104][T20993] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 527.558801][ T30] audit: type=1800 audit(1779326723.554:11): pid=21005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4018" name="memory.events" dev="tmpfs" ino=905 res=0 errno=0 [ 527.583435][T20996] bond2: entered allmulticast mode [ 527.600324][T20996] veth0_to_bond: entered allmulticast mode [ 527.636545][T20983] macvlan2: entered promiscuous mode [ 527.650234][T20983] macvlan2: entered allmulticast mode [ 527.674286][T20983] bond2: entered promiscuous mode [ 527.693175][T20983] veth0_to_bond: entered promiscuous mode [ 527.709810][T20983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.732798][T20983] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 527.749436][T20983] bond2: left promiscuous mode [ 527.755120][T20983] veth0_to_bond: left promiscuous mode [ 527.788878][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'. [ 527.829668][T20995] sit2: entered promiscuous mode [ 527.844605][T20995] sit2: entered allmulticast mode [ 527.951039][ T5761] IPVS: starting estimator thread 0... [ 527.960909][T21013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4020'. [ 527.998335][T21013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4020'. [ 528.034807][T21016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.052499][T21021] IPVS: using max 24 ests per chain, 57600 per kthread [ 528.063671][ T1126] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.090496][ T1126] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.146849][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4026'. [ 528.284654][T21038] netlink: 'syz.1.4028': attribute type 4 has an invalid length. [ 528.305907][T21039] netlink: 'syz.1.4028': attribute type 4 has an invalid length. [ 528.425734][T21043] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4030'. [ 528.483622][T21050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4032'. [ 528.679169][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4035'. [ 528.693918][T21059] syzkaller0: entered promiscuous mode [ 528.708903][T21059] syzkaller0: entered allmulticast mode [ 528.990830][T21075] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 529.020862][T21075] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.061027][T21075] xt_connbytes: Forcing CT accounting to be enabled [ 529.355766][T21082] bond1: (slave bond_slave_1): Device is not our slave [ 529.384200][T21082] bond1: option active_slave: invalid value (bond_slave_1) [ 529.431759][T21082] bond1 (unregistering): Released all slaves [ 529.526693][T21102] xt_hashlimit: size too large, truncated to 1048576 [ 529.555769][T21087] netlink: 'syz.2.4041': attribute type 1 has an invalid length. [ 529.624905][T21098] vlan3: entered allmulticast mode [ 529.846766][T21112] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 529.877042][T21112] netlink: 'syz.4.4048': attribute type 2 has an invalid length. [ 529.888803][T21112] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 530.427357][T21149] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 530.504472][T21124] nbd4: detected capacity change from 0 to 63 [ 530.518450][ T5648] block nbd4: Receive control failed (result -32) [ 530.520073][ T5639] block nbd4: Receive control failed (result -32) [ 530.549341][T20845] block nbd4: Dead connection, failed to find a fallback [ 530.572184][T20845] block nbd4: shutting down sockets [ 530.603082][T20845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.618782][T20845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.652695][T20845] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.688038][T20845] Buffer I/O error on dev nbd4, logical block 1, async page read [ 530.714620][T20845] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.726588][T20845] Buffer I/O error on dev nbd4, logical block 2, async page read [ 530.753815][T20845] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.770042][T20845] Buffer I/O error on dev nbd4, logical block 3, async page read [ 530.797883][T20845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.825665][T20845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 530.840367][T20845] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.856682][T20845] Buffer I/O error on dev nbd4, logical block 1, async page read [ 530.866611][T20845] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.883833][T21164] H: renamed from dummy0 (while UP) [ 530.889359][T20845] Buffer I/O error on dev nbd4, logical block 2, async page read [ 530.919798][T20845] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.946604][T20845] Buffer I/O error on dev nbd4, logical block 3, async page read [ 530.972815][T20845] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 530.997245][T20845] Buffer I/O error on dev nbd4, logical block 0, async page read [ 531.014275][T20845] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 531.034067][T20845] Buffer I/O error on dev nbd4, logical block 1, async page read [ 531.075054][T20845] ldm_validate_partition_table(): Disk read failed. [ 531.103483][T20845] Dev nbd4: unable to read RDB block 0 [ 531.125340][T20845] nbd4: unable to read partition table [ 531.160987][T20845] ldm_validate_partition_table(): Disk read failed. [ 531.179865][T20845] Dev nbd4: unable to read RDB block 0 [ 531.193802][T20845] nbd4: unable to read partition table [ 531.839850][T21207] netlink: 'syz.1.4076': attribute type 21 has an invalid length. [ 531.869802][T21209] netlink: 'syz.1.4076': attribute type 21 has an invalid length. [ 531.879280][T21207] __nla_validate_parse: 11 callbacks suppressed [ 531.879300][T21207] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.879383][T21207] netlink: 'syz.1.4076': attribute type 5 has an invalid length. [ 531.879398][T21207] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.914859][T21209] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.925419][T21209] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4076'. [ 531.978971][T21213] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4080'. [ 531.983076][T21215] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 531.989219][T21213] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4080'. [ 532.010725][T21213] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4080'. [ 532.046722][T21213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4080'. [ 532.148444][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4083'. [ 532.220280][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 532.368488][T21246] validate_nla: 3 callbacks suppressed [ 532.368506][T21246] netlink: 'syz.4.4090': attribute type 14 has an invalid length. [ 532.457038][T21249] pim6reg527: entered allmulticast mode [ 533.020793][T21281] bond3: Invalid ad_actor_system MAC address. [ 533.030111][T21281] bond3: option ad_actor_system: invalid value (1) [ 533.048634][T21281] bond3 (unregistering): Released all slaves [ 533.306309][T21299] veth0_macvtap: entered allmulticast mode [ 533.317085][T21299] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 533.698696][T21327] netlink: Unknown conntrack attr (0) [ 534.079959][T21347] netlink: 'syz.1.4119': attribute type 3 has an invalid length. [ 534.762405][T21381] netlink: 'syz.0.4129': attribute type 5 has an invalid length. [ 535.177039][T21398] block nbd0: NBD_DISCONNECT [ 535.185491][T21398] block nbd0: Send disconnect failed -32 [ 535.204241][T21394] syzkaller0: entered promiscuous mode [ 535.207712][T21398] block nbd0: shutting down sockets [ 535.209795][T21394] syzkaller0: entered allmulticast mode [ 535.286607][T21409] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 535.361161][T21409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.658527][T21415] __nla_validate_parse: 14 callbacks suppressed [ 538.658544][T21415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4140'. [ 538.728434][T21409] bond3: (slave ip6gretap1): making interface the new active one [ 538.766830][T21409] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 538.983127][T21435] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4146'. [ 539.025411][T21435] netlink: 'syz.1.4146': attribute type 2 has an invalid length. [ 539.073148][T21425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.233501][ T1054] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 539.390776][T21456] bridge_slave_0: left allmulticast mode [ 539.415978][T21456] bridge_slave_0: left promiscuous mode [ 539.427137][T21456] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.460107][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 539.488259][T21456] bridge_slave_1: left allmulticast mode [ 539.521522][T21456] bridge_slave_1: left promiscuous mode [ 539.536327][T21456] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.589177][T21456] bond2: (slave veth0_to_bond): Releasing active interface [ 539.609954][T21456] veth0_to_bond: left allmulticast mode [ 539.645022][T21456] bond0: (slave bond_slave_0): Releasing backup interface [ 539.664164][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 539.740920][T21456] bond0: (slave bond_slave_1): Releasing backup interface [ 539.790675][T21456] team0: Port device team_slave_0 removed [ 539.807460][T21456] team0: Port device team_slave_1 removed [ 539.824719][T21456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.835892][T21456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.846792][T21456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.856522][T21456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.870987][T21456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.916933][T21483] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4158'. [ 539.950389][T21485] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4158'. [ 540.160752][T21494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4162'. [ 540.549808][T21507] xt_policy: too many policy elements [ 540.633096][T21511] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4167'. [ 540.707525][T21515] lo speed is unknown, defaulting to 1000 [ 540.738911][T21515] lo speed is unknown, defaulting to 1000 [ 540.829919][T21515] lo speed is unknown, defaulting to 1000 [ 540.918077][T21515] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 541.001285][T21515] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 541.061726][T21515] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 541.146077][T21515] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 541.267287][T21515] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 541.622741][T21515] lo speed is unknown, defaulting to 1000 [ 541.666393][T21515] lo speed is unknown, defaulting to 1000 [ 541.694128][T21515] lo speed is unknown, defaulting to 1000 [ 541.719051][T21515] lo speed is unknown, defaulting to 1000 [ 541.730067][T21515] lo speed is unknown, defaulting to 1000 [ 541.756147][T21515] lo speed is unknown, defaulting to 1000 [ 541.779982][T21515] lo speed is unknown, defaulting to 1000 [ 541.795572][T21515] lo speed is unknown, defaulting to 1000 [ 542.014919][T21568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4184'. [ 542.043712][T21568] tipc: Invalid UDP bearer configuration [ 542.043796][T21568] tipc: Enabling of bearer rejected, failed to enable media [ 542.063505][T21572] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.4185'. [ 542.114755][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 542.678421][T21598] netlink: 'syz.4.4195': attribute type 7 has an invalid length. [ 542.690431][T21594] xt_hashlimit: size too large, truncated to 1048576 [ 543.491678][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.568992][T21642] openvswitch: netlink: Key 25 has unexpected len 15 expected 16 [ 543.646928][T21646] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 543.678807][T21645] __nla_validate_parse: 6 callbacks suppressed [ 543.678847][T21645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4208'. [ 543.925509][T21659] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4213'. [ 543.939790][T21658] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4213'. [ 544.427309][T21683] netlink: 'syz.1.4223': attribute type 21 has an invalid length. [ 544.439237][T21686] gtp1: entered promiscuous mode [ 544.444734][T21683] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4223'. [ 544.450129][T21686] gtp1: entered allmulticast mode [ 545.021891][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 545.061942][T21721] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4235'. [ 545.652699][T21755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.054446][T21777] netlink: 'syz.0.4252': attribute type 15 has an invalid length. [ 546.279795][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4256'. [ 546.319664][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'. [ 546.333039][T21795] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 546.735744][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4265'. [ 546.779543][T21821] syzkaller1: entered promiscuous mode [ 546.789596][T21821] syzkaller1: entered allmulticast mode [ 546.836105][T21830] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4268'. [ 547.039161][T21836] veth0: entered promiscuous mode [ 547.046417][T21836] veth0: left promiscuous mode [ 547.135696][T21841] nbd: must specify at least one socket [ 547.490666][T21861] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 547.537123][T21861] netlink: 'syz.3.4278': attribute type 8 has an invalid length. [ 547.906362][T21890] veth0: entered promiscuous mode [ 547.914749][T21890] veth0: left promiscuous mode [ 547.979038][T21895] mac80211_hwsim hwsim31 ’: renamed from wlan1 (while UP) [ 548.076319][T21899] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.511923][T21914] syzkaller1: entered promiscuous mode [ 548.517736][T21914] syzkaller1: entered allmulticast mode [ 548.687494][T21920] netem: change failed [ 548.702560][T21921] netem: change failed [ 548.766283][T21924] __nla_validate_parse: 6 callbacks suppressed [ 548.766303][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4298'. [ 548.886894][T21931] C: renamed from lo (while UP) [ 548.898861][T21931] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 548.916486][T21931] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4300'. [ 549.378185][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.394971][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.404060][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.412875][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.428633][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.437676][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.446659][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.455098][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.464124][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.472649][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.480996][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.525516][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.538469][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.550459][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.558916][T21948] netlink: 'syz.4.4306': attribute type 24 has an invalid length. [ 549.583955][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 549.594775][T21950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4307'. [ 549.604267][T21950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4307'. [ 549.838137][T21957] xt_hashlimit: size too large, truncated to 1048576 [ 549.894370][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4309'. [ 550.176643][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 550.441040][T21985] x_tables: duplicate entry at hook 2 [ 550.483922][T21993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.491268][T21993] IPv6: NLM_F_CREATE should be set when creating new route [ 550.596750][T21993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4314'. [ 551.628777][T22040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4327'. [ 551.893670][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'. [ 552.285064][T22064] bond1: entered promiscuous mode [ 552.291894][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 552.300698][T22064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.309542][T22074] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.325869][T22074] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.338700][T22074] bridge_slave_0: entered allmulticast mode [ 552.348950][T22074] bridge_slave_0: entered promiscuous mode [ 552.383745][T22075] bridge0: Device is already in use. [ 553.190735][T22111] team0: Device gtp2 is up. Set it down before adding it as a team port [ 553.966952][T22160] __nla_validate_parse: 4 callbacks suppressed [ 553.966975][T22160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4356'. [ 554.290054][T22160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.589929][T22193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.645092][T22196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4363'. [ 554.909743][T22199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.966011][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 555.134572][T22218] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4370'. [ 555.188224][T22224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4371'. [ 555.297978][T22227] openvswitch: netlink: Message has 1 unknown bytes. [ 555.320081][T22227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.343877][T22232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4373'. [ 555.363183][T22232] nbd: must specify a size in bytes for the device [ 555.789389][T22249] macvtap1: entered promiscuous mode [ 555.801185][T22249] team0: entered promiscuous mode [ 555.825235][T22249] team_slave_0: entered promiscuous mode [ 555.846191][T22249] team_slave_1: entered promiscuous mode [ 555.869975][T22249] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 555.889135][T22249] team0: Device macvtap1 is already an upper device of the team interface [ 555.927200][T22249] team0: left promiscuous mode [ 555.993728][ T5753] team_slave_0: left promiscuous mode [ 555.999236][ T5753] team_slave_1: left promiscuous mode [ 556.189463][T22270] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4382'. [ 556.268334][T22274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4385'. [ 556.325579][T22280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4386'. [ 556.714778][T22299] syzkaller0: entered promiscuous mode [ 556.742427][T22299] syzkaller0: entered allmulticast mode [ 556.807595][T22302] validate_nla: 21 callbacks suppressed [ 556.807616][T22302] netlink: 'syz.3.4392': attribute type 10 has an invalid length. [ 557.019776][T22308] netlink: 'syz.2.4394': attribute type 3 has an invalid length. [ 557.323791][T22339] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4395'. [ 557.329410][T22338] netem: incorrect gi model size [ 557.450578][T22339] bond4 (unregistering): Released all slaves [ 557.688760][T22352] gretap0: entered promiscuous mode [ 557.699828][T22352] vlan3: entered promiscuous mode [ 557.700093][T22355] xt_ipcomp: unknown flags 1D [ 557.759190][T22348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 557.818502][T22348] syzkaller0: entered promiscuous mode [ 557.833495][T22348] syzkaller0: entered allmulticast mode [ 558.225706][T22376] syzkaller0: entered promiscuous mode [ 558.246763][T22376] syzkaller0: entered allmulticast mode [ 558.273803][T22386] netlink: zone id is out of range [ 558.292991][T22386] netlink: zone id is out of range [ 558.309909][T22386] netlink: zone id is out of range [ 558.331844][T22386] netlink: zone id is out of range [ 558.350950][T22386] netlink: zone id is out of range [ 558.372525][T22386] netlink: zone id is out of range [ 558.396758][T22386] netlink: zone id is out of range [ 558.677999][ T1025] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.716496][ T1025] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.747879][ T1025] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.797412][ T144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.995728][T22401] syzkaller0: entered promiscuous mode [ 559.010836][T22401] syzkaller0: entered allmulticast mode [ 559.022614][T22419] __nla_validate_parse: 6 callbacks suppressed [ 559.022634][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4416'. [ 559.743650][T22458] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 562.793813][T22452] ip6gretap0: entered promiscuous mode [ 563.085995][T22486] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4431'. [ 563.096092][T22490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4430'. [ 563.243993][T22490] ip6erspan0 speed is unknown, defaulting to 1000 [ 563.279472][T22502] netlink: 'syz.2.4432': attribute type 23 has an invalid length. [ 563.587214][T22515] tipc: Enabled bearer , priority 10 [ 563.600967][T22516] tipc: Enabling of bearer rejected, already enabled [ 563.713056][T22518] syzkaller0: entered promiscuous mode [ 563.721011][T22520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4439'. [ 563.726500][T22518] syzkaller0: entered allmulticast mode [ 563.757518][T22520] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4439'. [ 563.789605][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4439'. [ 564.030129][T22490] lo speed is unknown, defaulting to 1000 [ 564.033568][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'. [ 564.490638][T22561] netlink: 'syz.3.4449': attribute type 23 has an invalid length. [ 564.656695][T22567] netem: change failed [ 564.952380][T22580] syzkaller0: entered promiscuous mode [ 564.963397][T22580] syzkaller0: entered allmulticast mode [ 565.010104][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 565.217252][T22591] netlink: 'syz.0.4457': attribute type 11 has an invalid length. [ 565.226916][T22591] netlink: 'syz.0.4457': attribute type 5 has an invalid length. [ 565.236626][T22591] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.4457'. [ 565.315823][T22595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'. [ 565.472636][T22601] net_ratelimit: 137 callbacks suppressed [ 565.472657][T22601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.481089][T22604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4461'. [ 565.525436][T22604] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.533333][T22604] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.765427][ T30] audit: type=1804 audit(1779326761.764:12): pid=22617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4463" name="/newroot/220/cgroup.controllers" dev="tmpfs" ino=1143 res=1 errno=0 [ 565.768277][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4466'. [ 565.831483][ T30] audit: type=1800 audit(1779326761.764:13): pid=22617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4463" name="cgroup.controllers" dev="tmpfs" ino=1143 res=0 errno=0 [ 565.861592][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4466'. [ 565.870807][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4466'. [ 565.873004][T22622] openvswitch: netlink: Missing key (keys=40, expected=80) [ 565.941494][T22624] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4467'. [ 566.148702][T22638] netlink: 'syz.4.4471': attribute type 1 has an invalid length. [ 566.174303][T22638] netlink: 'syz.4.4471': attribute type 1 has an invalid length. [ 566.192882][T22638] netlink: 'syz.4.4471': attribute type 1 has an invalid length. [ 566.202041][T22638] netlink: 'syz.4.4471': attribute type 2 has an invalid length. [ 566.203578][T22640] netlink: 'syz.1.4472': attribute type 2 has an invalid length. [ 566.218106][T22638] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4471'. [ 566.224068][T22642] Unknown options in mask b7f2 [ 566.514108][T22658] syzkaller1: entered promiscuous mode [ 566.547816][T22658] syzkaller1: entered allmulticast mode [ 567.055529][T22679] netlink: 'syz.1.4481': attribute type 2 has an invalid length. [ 567.104590][T22674] netlink: 'syz.1.4481': attribute type 2 has an invalid length. [ 567.197251][T22685] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4484'. [ 567.382965][T22694] veth1_to_team: entered promiscuous mode [ 567.408916][T22694] gretap0: entered promiscuous mode [ 567.442435][T22694] hsr1: entered promiscuous mode [ 567.628194][T22709] xt_CONNSECMARK: invalid mode: 0 [ 568.297560][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.668868][T22756] macsec1: entered promiscuous mode [ 568.695918][T22756] bridge0: entered promiscuous mode [ 568.719309][T22756] macsec1: entered allmulticast mode [ 568.745451][T22756] bridge0: entered allmulticast mode [ 568.768941][T22756] bridge0: port 3(macsec1) entered blocking state [ 568.787532][T22756] bridge0: port 3(macsec1) entered disabled state [ 568.831701][T22756] bridge0: left allmulticast mode [ 568.856495][ T5753] bridge0: left promiscuous mode [ 569.024952][T22771] siw: device registration error -23 [ 569.824241][T22820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.373425][ T5648] Bluetooth: hci2: command tx timeout [ 570.374294][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 570.678261][T22826] __nla_validate_parse: 9 callbacks suppressed [ 570.678277][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4520'. [ 570.699290][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4520'. [ 572.187943][T22782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.450666][T22844] netlink: 'syz.1.4524': attribute type 1 has an invalid length. [ 572.465079][T22844] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4524'. [ 572.668353][T22856] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4529'. [ 572.696165][T22859] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4529'. [ 572.786889][T22867] netlink: 'syz.0.4528': attribute type 4 has an invalid length. [ 572.806869][T22867] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4528'. [ 572.978993][T22878] veth1_to_bond: entered allmulticast mode [ 573.033471][T22876] veth1_to_bond: left allmulticast mode [ 573.163564][T22889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4536'. [ 573.255683][T22893] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 573.317549][T22892] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.324876][T22892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.332829][T22892] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.340056][T22892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.364956][T22892] 8021q: adding VLAN 0 to HW filter on device .` [ 573.388093][ T5637] lo speed is unknown, defaulting to 1000 [ 573.402675][T22893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 573.423025][ T5637] syś2: Port: 1 Link ACTIVE [ 574.249234][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4543'. [ 574.279088][T22908] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.339774][T22918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4544'. [ 574.550422][T22922] bond5: option min_links: invalid value (18446744073709551614) [ 574.565634][T22922] bond5: option min_links: allowed values 0 - 2147483647 [ 574.623318][T22922] bond5 (unregistering): Released all slaves [ 574.717907][T22924] syzkaller0: entered promiscuous mode [ 574.723836][T22924] syzkaller0: entered allmulticast mode [ 574.964402][T22946] syzkaller0: entered promiscuous mode [ 574.975826][T22946] syzkaller0: entered allmulticast mode [ 575.004595][T22957] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 575.372228][T22970] syzkaller0: entered promiscuous mode [ 575.423613][T22970] syzkaller0: entered allmulticast mode [ 575.533807][T22983] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 575.788355][T22993] __nla_validate_parse: 3 callbacks suppressed [ 575.788376][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4561'. [ 575.969022][T23006] tc_dump_action: action bad kind [ 576.017181][T23013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4567'. [ 576.148577][T23018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4568'. [ 576.296192][T23028] netlink: 'syz.1.4571': attribute type 1 has an invalid length. [ 576.314648][T23028] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4571'. [ 576.336905][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'. [ 576.726767][T23052] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4577'. [ 576.763521][T23050] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 577.088093][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4586'. [ 577.164775][T23076] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4585'. [ 577.252395][T23085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4587'. [ 577.595882][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4596'. [ 578.420347][T23165] netlink: 'syz.3.4607': attribute type 11 has an invalid length. [ 578.707947][T23180] veth0_to_bridge: entered promiscuous mode [ 578.789626][T23179] veth0_to_bridge: left promiscuous mode [ 578.980756][T23187] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.988052][T23187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.059724][T23187] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 579.128554][T23191] syzkaller1: entered promiscuous mode [ 579.134784][T23191] syzkaller1: entered allmulticast mode [ 579.553619][T23213] ip6gre2: entered allmulticast mode [ 579.627778][T23216] macsec1: entered promiscuous mode [ 580.449690][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.490732][T23269] netlink: 'syz.2.4638': attribute type 21 has an invalid length. [ 580.500844][T23273] sctp: [Deprecated]: syz.1.4642 (pid 23273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.500844][T23273] Use struct sctp_sack_info instead [ 580.526409][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.537276][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.555082][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.599137][T23272] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 580.665225][T23272] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 580.697842][T23272] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 580.869066][T23287] netlink: 'syz.1.4647': attribute type 3 has an invalid length. [ 580.885925][T23290] __nla_validate_parse: 11 callbacks suppressed [ 580.885944][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4648'. [ 580.919115][T23292] sctp: [Deprecated]: syz.2.4649 (pid 23292) Use of int in maxseg socket option. [ 580.919115][T23292] Use struct sctp_assoc_value instead [ 581.167275][T23304] syzkaller0: entered promiscuous mode [ 581.179007][T23304] syzkaller0: entered allmulticast mode [ 581.204684][T23304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.212072][T23304] IPv6: NLM_F_CREATE should be set when creating new route [ 581.238334][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4653'. [ 581.575576][T23330] x_tables: duplicate underflow at hook 2 [ 581.592652][T23332] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4661'. [ 581.602564][T23330] xt_hashlimit: size too large, truncated to 1048576 [ 581.675338][T23335] openvswitch: netlink: IP tunnel dst address not specified [ 581.699473][T23339] netlink: 'syz.2.4662': attribute type 28 has an invalid length. [ 581.722780][T23339] netlink: 'syz.2.4662': attribute type 3 has an invalid length. [ 581.788724][T23339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4662'. [ 581.807124][T23335] bridge_slave_0 (unregistering): left allmulticast mode [ 581.848123][T23335] bridge_slave_0 (unregistering): left promiscuous mode [ 581.866579][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4664'. [ 581.880374][T23335] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.158352][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 582.357513][T23369] openvswitch: : Dropping previously announced user features [ 582.530178][T23377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.039169][T23397] netlink: 'syz.1.4680': attribute type 1 has an invalid length. [ 583.058858][T23399] sctp: [Deprecated]: syz.3.4681 (pid 23399) Use of int in max_burst socket option. [ 583.058858][T23399] Use struct sctp_assoc_value instead [ 583.094189][T23401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4680'. [ 583.111010][T23397] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.197780][T23403] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4683'. [ 583.309113][T23412] 8021q: VLANs not supported on ip_vti0 [ 583.606995][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'. [ 583.702092][T23432] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.4690'. [ 583.942223][T23436] xt_l2tp: invalid flags combination: 0 [ 584.576159][T23459] vlan1: entered allmulticast mode [ 584.592597][T23459] bond0: entered allmulticast mode [ 584.602044][T23459] bond_slave_0: entered allmulticast mode [ 584.624002][T23459] bond_slave_1: entered allmulticast mode [ 584.867660][T23475] nbd: couldn't find a device at index 3 [ 584.874919][T23470] syzkaller0: entered promiscuous mode [ 584.874946][T23470] syzkaller0: entered allmulticast mode [ 585.036338][T23483] netlink: 'syz.1.4707': attribute type 2 has an invalid length. [ 585.388270][T23513] netlink: 'syz.1.4715': attribute type 3 has an invalid length. [ 585.407385][T23513] netlink: 'syz.1.4715': attribute type 3 has an invalid length. [ 585.430824][T23517] netlink: 'syz.2.4717': attribute type 16 has an invalid length. [ 585.439404][T23517] netlink: 'syz.2.4717': attribute type 17 has an invalid length. [ 585.516446][T23517] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.535012][T23517] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.605138][T23517] tipc: Resetting bearer [ 585.611034][T23517] tipc: Resetting bearer [ 585.624564][T23517] veth0_macvtap: left allmulticast mode [ 585.640903][T23517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.658180][T23517] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 585.691153][T17893] tipc: Resetting bearer [ 585.924240][T23540] __nla_validate_parse: 7 callbacks suppressed [ 585.924262][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4722'. [ 586.178679][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4725'. [ 586.359591][T23559] syzkaller0: entered promiscuous mode [ 586.378713][T23559] syzkaller0: entered allmulticast mode [ 586.725821][T23582] tipc: Resetting bearer [ 586.758697][T23582] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 587.157679][T23594] netlink: 'syz.4.4736': attribute type 1 has an invalid length. [ 587.521099][T23609] netlink: 'syz.4.4740': attribute type 64 has an invalid length. [ 587.548802][T23609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4740'. [ 587.756022][T23620] syzkaller0: entered promiscuous mode [ 587.770902][T23620] syzkaller0: entered allmulticast mode [ 587.969236][T23634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.430860][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4755'. [ 588.597516][T23672] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 588.618259][T23672] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 588.639659][T23672] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4759'. [ 588.718818][T23682] openvswitch: netlink: Key type 30 is not supported [ 588.848021][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'. [ 589.103910][T23710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4770'. [ 589.554379][T23731] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 589.584965][T23731] bond5 (unregistering): Released all slaves [ 590.034720][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4781'. [ 590.110622][T23757] pim6reg: Master is either lo or non-ether device [ 590.302932][T23767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4787'. [ 590.369657][T23773] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4790'. [ 590.576273][T23783] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 590.665563][T23785] netlink: 'syz.0.4795': attribute type 11 has an invalid length. [ 590.950885][T23798] __nla_validate_parse: 4 callbacks suppressed [ 590.950907][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'. [ 590.962462][T23793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4799'. [ 590.967761][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'. [ 591.067400][T23806] netlink: 'syz.0.4798': attribute type 21 has an invalid length. [ 591.120434][T23806] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4798'. [ 591.705806][T23843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 591.739050][T23833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4811'. [ 591.945332][T23850] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 592.002377][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4819'. [ 592.034937][T23862] bridge_slave_1: left allmulticast mode [ 592.045015][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4819'. [ 592.065904][T23862] bridge_slave_1: left promiscuous mode [ 592.092483][T23862] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.167054][T23874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'. [ 592.344348][T23865] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 592.609293][T23900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4829'. [ 592.734320][T23905] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 592.753115][T23905] syzkaller1: Refused to change device type [ 592.797804][T23914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'. [ 593.231120][T23934] gre1: entered promiscuous mode [ 593.321160][T23945] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 593.966484][T23976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.068735][T23990] siw: device registration error -23 [ 594.202195][T23999] netlink: 'syz.1.4854': attribute type 39 has an invalid length. [ 594.327310][T24011] »»»»»»: renamed from lo [ 594.622490][T24020] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 594.639551][T24020] bond2 (unregistering): Released all slaves [ 596.776793][T24053] __nla_validate_parse: 12 callbacks suppressed [ 596.776813][T24053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4865'. [ 597.043127][T23988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.454854][T24076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4871'. [ 597.579044][T24077] syzkaller0: entered promiscuous mode [ 597.584814][T24077] syzkaller0: entered allmulticast mode [ 597.636904][T17886] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 598.313978][T24079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.340519][T24085] netlink: 'syz.1.4871': attribute type 2 has an invalid length. [ 598.368098][T24085] netlink: 'syz.1.4871': attribute type 2 has an invalid length. [ 599.024942][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 601.827094][T24125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.833342][T24129] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4884'. [ 601.955483][T24133] macvlan0: entered promiscuous mode [ 601.986406][T24125] syzkaller0: entered allmulticast mode [ 602.016077][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4882'. [ 602.053414][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4882'. [ 602.157456][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 602.157456][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4888'. [ 602.379423][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'. [ 602.847337][T24192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4896'. [ 602.935634][T24192] xt_hashlimit: size too large, truncated to 1048576 [ 603.028206][T24199] gretap1: entered promiscuous mode [ 603.040272][T24199] batman_adv: batadv0: Adding interface: gretap1 [ 603.047831][T24199] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.074513][T24199] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 605.327791][T24158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.513781][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4902'. [ 605.524056][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4902'. [ 605.645458][T24214] netlink: 'syz.0.4903': attribute type 1 has an invalid length. [ 605.738313][T24214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.803909][T24222] vlan3: entered allmulticast mode [ 605.886157][T24234] netlink: 'syz.3.4909': attribute type 1 has an invalid length. [ 605.917937][T24234] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4909'. [ 605.930238][T24223] bond3: (slave veth0_to_bond): making interface the new active one [ 605.961917][T24223] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 606.986256][T24285] __nla_validate_parse: 5 callbacks suppressed [ 606.986744][T24285] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4925'. [ 607.006966][T24285] 8021q: VLANs not supported on gre0 [ 607.321934][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4929'. [ 607.587120][T24312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4933'. [ 607.602339][T24314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4933'. [ 608.041639][T24288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.076492][T24288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.261178][T24288] vlan0: left promiscuous mode [ 608.273139][T24288] veth0_vlan: left promiscuous mode [ 608.474085][T24288] ip6gre2: left allmulticast mode [ 608.489853][T24288] vlan1: left allmulticast mode [ 608.494891][T24288] bond0: left allmulticast mode [ 608.501756][T24288] bond_slave_0: left allmulticast mode [ 608.510803][T24288] bond_slave_1: left allmulticast mode [ 608.678726][ T1126] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.701895][ T1126] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.778187][ T1126] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.789456][ T1126] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.807428][T24332] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4938'. [ 608.818664][ T1126] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.838920][ T1126] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.863756][ T1126] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.890605][ T1126] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.011737][T24339] netlink: 'syz.1.4940': attribute type 27 has an invalid length. [ 609.020995][T24342] syzkaller1: entered promiscuous mode [ 609.036968][T24342] syzkaller1: entered allmulticast mode [ 609.043272][T24339] netlink: 'syz.1.4940': attribute type 4 has an invalid length. [ 609.056663][T24339] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4940'. [ 609.069930][T24341] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 609.102648][ T10] IPVS: starting estimator thread 0... [ 609.221427][T24345] IPVS: using max 30 ests per chain, 72000 per kthread [ 609.251516][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 609.542987][T24364] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4946'. [ 613.460929][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4954'. [ 613.502240][T24395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4955'. [ 613.561832][T24395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 613.765344][T24389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4954'. [ 613.848859][T24406] syzkaller1: entered promiscuous mode [ 613.854790][T24406] syzkaller1: entered allmulticast mode [ 613.932551][T24414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4960'. [ 614.155675][T24427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.175281][T24427] netlink: 'syz.4.4964': attribute type 32 has an invalid length. [ 614.195260][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4964'. [ 614.250718][T24427] bond6: option coupled_control: invalid value (192) [ 614.262916][T24427] bond6 (unregistering): Released all slaves [ 614.308277][T24435] netlink: 'syz.1.4967': attribute type 12 has an invalid length. [ 614.331248][T24435] netlink: 'syz.1.4967': attribute type 29 has an invalid length. [ 614.355860][T24435] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4967'. [ 614.395105][T24435] netlink: 'syz.1.4967': attribute type 1 has an invalid length. [ 614.409965][T24435] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4967'. [ 614.664905][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4972'. [ 614.819675][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'. [ 614.820697][T24460] syzkaller1: entered promiscuous mode [ 614.836150][T24460] syzkaller1: entered allmulticast mode [ 615.420504][T24482] xt_CT: No such helper "pptp" [ 615.428872][T24492] netlink: 'syz.2.4985': attribute type 1 has an invalid length. [ 615.440130][T24493] xt_cgroup: xt_cgroup: no path or classid specified [ 615.459637][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4985'. [ 616.094491][T24518] syzkaller0: entered promiscuous mode [ 616.115615][T24518] syzkaller0: entered allmulticast mode [ 616.983152][T24577] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 617.005902][T24580] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 617.047925][T24580] bond2: entered promiscuous mode [ 617.053731][T24580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.254443][T24592] netlink: 'syz.4.5014': attribute type 2 has an invalid length. [ 617.339187][T24601] netlink: 'syz.4.5014': attribute type 3 has an invalid length. [ 617.350207][T24602] netlink: 'syz.4.5014': attribute type 2 has an invalid length. [ 617.448945][T24608] netlink: 'syz.1.5019': attribute type 1 has an invalid length. [ 617.513502][T24614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.548978][ T1054] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.566505][ T1054] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.601127][ T1054] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.630568][ T1054] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.821134][T24622] syzkaller0: entered promiscuous mode [ 617.838545][T24622] syzkaller0: entered allmulticast mode [ 617.888600][T24626] pim6reg527: entered allmulticast mode [ 618.612902][T24661] __nla_validate_parse: 12 callbacks suppressed [ 618.612924][T24661] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5034'. [ 618.636982][T24661] netlink: ct family unspecified [ 618.844448][T24675] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 618.849760][T24677] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5039'. [ 618.873985][T24677] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5039'. [ 618.990963][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5041'. [ 619.156380][T24690] xt_hashlimit: max too large, truncated to 1048576 [ 619.236098][T24652] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 619.388725][T24699] validate_nla: 3 callbacks suppressed [ 619.388745][T24699] netlink: 'syz.1.5045': attribute type 11 has an invalid length. [ 619.415355][T24699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5045'. [ 619.698515][T24716] netlink: 'syz.2.5049': attribute type 30 has an invalid length. [ 619.856554][T24699] bond6: (slave gre0): Device is not bonding slave [ 619.877940][T24699] bond6: option active_slave: invalid value (gre0) [ 619.903832][T24699] bond6 (unregistering): Released all slaves [ 620.240024][T24736] x_tables: unsorted entry at hook 1 [ 620.249349][T24740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5055'. [ 620.425709][T24750] ip6tnl0: Caught tx_queue_len zero misconfig [ 620.737878][T24768] netlink: 'syz.0.5064': attribute type 21 has an invalid length. [ 620.810374][T24768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5064'. [ 621.034537][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5066'. [ 621.251125][T24795] sctp: [Deprecated]: syz.3.5070 (pid 24795) Use of int in maxseg socket option. [ 621.251125][T24795] Use struct sctp_assoc_value instead [ 621.272314][T24786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.304984][T24786] bond5 (unregistering): Released all slaves [ 621.352261][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 621.488429][T24800] netlink: 'syz.4.5073': attribute type 5 has an invalid length. [ 621.540730][T24802] netlink: 'syz.1.5074': attribute type 1 has an invalid length. [ 621.615819][T24805] netlink: 'syz.0.5075': attribute type 1 has an invalid length. [ 621.633282][T24805] netlink: 'syz.0.5075': attribute type 3 has an invalid length. [ 621.642694][T24805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5075'. [ 621.649888][T24808] netlink: 'syz.1.5076': attribute type 8 has an invalid length. [ 622.005970][T24791] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 622.028412][T24791] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 622.822514][T24872] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 622.862398][T24876] netlink: 'syz.0.5096': attribute type 4 has an invalid length. [ 623.075236][T24883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.265504][T24896] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 623.295942][T24896] syzkaller0: entered promiscuous mode [ 623.302574][T24896] syzkaller0: entered allmulticast mode [ 623.358984][T24898] xt_hashlimit: size too large, truncated to 1048576 [ 623.679943][T24911] __nla_validate_parse: 5 callbacks suppressed [ 623.679964][T24911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5104'. [ 623.779232][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5106'. [ 623.818084][T24920] IPv6: addrconf: prefix option has invalid lifetime [ 623.824909][T24920] IPv6: addrconf: prefix option has invalid lifetime [ 624.827860][T24955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.759318][T25002] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5123'. [ 627.665537][T24934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.693801][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'. [ 627.820450][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5124'. [ 627.904552][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5125'. [ 627.942971][T25006] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5125'. [ 628.008707][T25011] netlink: 'syz.2.5127': attribute type 2 has an invalid length. [ 628.294651][T25027] lo: Caught tx_queue_len zero misconfig [ 628.428128][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5136'. [ 628.497367][T25037] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 628.649625][T25048] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 628.888999][T25064] syzkaller0: entered promiscuous mode [ 628.894847][T25064] syzkaller0: entered allmulticast mode [ 629.262057][T25081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'. [ 629.283813][T25080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'. [ 629.459694][T25096] netem: change failed [ 629.579144][T25104] bridge2: entered promiscuous mode [ 629.597040][T25104] bridge2: entered allmulticast mode [ 629.626090][T25104] team0: Port device bridge2 added [ 629.641820][T25107] bridge0: port 3(team0) entered blocking state [ 629.666881][T25107] bridge0: port 3(team0) entered disabled state [ 629.693384][T25107] team0: entered allmulticast mode [ 629.707349][T25107] team_slave_0: entered allmulticast mode [ 629.717074][T25107] team_slave_1: entered allmulticast mode [ 629.750438][T25107] team0: entered promiscuous mode [ 629.769959][T25107] team_slave_0: entered promiscuous mode [ 629.785390][T25107] team_slave_1: entered promiscuous mode [ 630.005645][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5161'. [ 630.025495][T25127] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 630.196659][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'. [ 630.329265][T25150] macvlan0: entered promiscuous mode [ 630.359713][T25143] syzkaller0: entered promiscuous mode [ 630.372319][T25143] syzkaller0: entered allmulticast mode [ 630.384237][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5165'. [ 630.886691][T25169] bond5: option all_slaves_active: invalid value (222) [ 630.924030][T25169] bond5 (unregistering): Released all slaves [ 630.928090][T25175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5172'. [ 631.089230][T25178] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5173'. [ 631.128648][T25178] netlink: ct family unspecified [ 631.375433][T25193] ve: renamed from erspan0 (while UP) [ 631.571122][T25193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5177'. [ 631.742078][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5181'. [ 632.109895][T25233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5184'. [ 632.146435][T25235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.205955][T25235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.281048][T25242] netlink: 'syz.2.5187': attribute type 23 has an invalid length. [ 632.317669][T25242] netlink: 'syz.2.5187': attribute type 12 has an invalid length. [ 632.334658][T25242] netlink: 'syz.2.5187': attribute type 29 has an invalid length. [ 632.543633][T25260] netlink: 'syz.2.5192': attribute type 1 has an invalid length. [ 632.583532][T25260] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 632.593969][T25260] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 632.606877][T25260] bond4: (slave vxcan3): making interface the new active one [ 632.615599][T25260] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 632.645336][T25260] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 632.658961][T25260] bond4: (slave vxcan5): Enslaving as a backup interface with an up link [ 633.063493][T25285] netlink: 'syz.2.5200': attribute type 11 has an invalid length. [ 633.377409][ T1054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.406873][T25305] netlink: 'syz.2.5206': attribute type 1 has an invalid length. [ 633.414637][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.414690][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.414729][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.956080][T25331] macvtap1: entered promiscuous mode [ 633.974876][T25331] team0: entered promiscuous mode [ 633.985509][T25331] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 633.998245][T25331] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 634.007515][T25331] team0: Device macvtap1 is already an upper device of the team interface [ 634.035701][T25331] team0: left promiscuous mode [ 634.053234][T25331] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 634.077056][T25331] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 634.133057][ T5761] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 634.370357][T25357] __nla_validate_parse: 7 callbacks suppressed [ 634.370380][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5218'. [ 634.445166][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5218'. [ 634.485280][T25367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5223'. [ 634.727405][T25379] netlink: 'syz.1.5225': attribute type 3 has an invalid length. [ 634.742577][T25382] netlink: 'syz.0.5228': attribute type 1 has an invalid length. [ 634.744758][T25380] netlink: 'syz.4.5227': attribute type 7 has an invalid length. [ 634.774105][T25380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5227'. [ 634.866026][T25382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.020903][T25393] syzkaller1: entered promiscuous mode [ 635.033333][T25393] syzkaller1: entered allmulticast mode [ 635.323622][T25409] netlink: 'syz.3.5238': attribute type 2 has an invalid length. [ 635.369021][T25412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5236'. [ 635.377533][T25415] syzkaller1: entered promiscuous mode [ 635.386985][T25415] syzkaller1: entered allmulticast mode [ 635.416631][T25413] bridge6: entered allmulticast mode [ 635.471636][T25417] netlink: 'syz.3.5240': attribute type 1 has an invalid length. [ 635.510126][T25417] bond5: entered promiscuous mode [ 635.516292][T25417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.606232][T25417] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.677695][T25417] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 635.723673][T25417] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 636.189646][ T30] audit: type=1804 audit(1779326832.184:14): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5247" name="/newroot/402/cgroup.controllers" dev="tmpfs" ino=2067 res=1 errno=0 [ 636.260344][ T30] audit: type=1800 audit(1779326832.214:15): pid=25449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5247" name="cgroup.controllers" dev="tmpfs" ino=2067 res=0 errno=0 [ 636.298325][T25456] xt_hashlimit: size too large, truncated to 1048576 [ 636.727445][T25470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5251'. [ 636.950915][T25446] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 636.977949][ T10] lo speed is unknown, defaulting to 1000 [ 636.986727][ T10] syś2: Port: 1 Link DOWN [ 636.999415][T25454] syzkaller1: entered promiscuous mode [ 637.006675][T25454] syzkaller1: entered allmulticast mode [ 637.030273][T25475] syzkaller1: entered promiscuous mode [ 637.051438][T25475] syzkaller1: entered allmulticast mode [ 637.831921][T25519] syzkaller1: entered promiscuous mode [ 637.840200][T25519] syzkaller1: entered allmulticast mode [ 638.368334][T25549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5273'. [ 638.385319][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 638.397072][T25549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5273'. [ 638.409462][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 638.605207][T25558] netlink: 'syz.3.5277': attribute type 4 has an invalid length. [ 638.637363][T25556] IPVS: Unknown mcast interface: lo [ 638.705783][T25569] syzkaller1: entered promiscuous mode [ 638.724671][T25569] syzkaller1: entered allmulticast mode [ 638.852080][T25579] netlink: 'syz.3.5283': attribute type 1 has an invalid length. [ 639.162722][T25582] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 639.262489][T25576] veth3: entered promiscuous mode [ 639.269649][ T1583] IPVS: starting estimator thread 0... [ 639.276760][T25595] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 639.298888][T25576] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 639.349284][ T1583] hsr0: entered promiscuous mode [ 639.375668][T25596] IPVS: using max 26 ests per chain, 62400 per kthread [ 639.446540][T25603] netlink: 'syz.4.5290': attribute type 3 has an invalid length. [ 639.463080][T25603] __nla_validate_parse: 2 callbacks suppressed [ 639.463100][T25603] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5290'. [ 639.532662][T25608] sctp: [Deprecated]: syz.1.5291 (pid 25608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.532662][T25608] Use struct sctp_sack_info instead [ 639.562729][T25605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5292'. [ 639.663713][T25605] syzkaller0: entered promiscuous mode [ 639.684110][T25605] syzkaller0: entered allmulticast mode [ 639.694683][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5294'. [ 639.726593][T25605] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5292'. [ 639.739546][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 639.750625][T25622] netlink: 'syz.4.5295': attribute type 29 has an invalid length. [ 639.758707][T25605] openvswitch: netlink: Flow actions attr not present in new flow. [ 639.768072][T25622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 639.778623][T25613] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 639.779755][T25613] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 639.801669][T25623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5294'. [ 639.818450][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 639.839659][T25616] syzkaller1: entered promiscuous mode [ 639.845843][T25616] syzkaller1: entered allmulticast mode [ 639.869697][ T5753] IPVS: starting estimator thread 0... [ 639.908680][T25630] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5295'. [ 639.946427][T25631] FAULT_INJECTION: forcing a failure. [ 639.946427][T25631] name failslab, interval 1, probability 0, space 0, times 0 [ 639.961418][T25627] IPVS: using max 29 ests per chain, 69600 per kthread [ 639.968322][T25631] CPU: 1 UID: 0 PID: 25631 Comm: syz.1.5298 Not tainted syzkaller #0 PREEMPT(full) [ 639.968351][T25631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.968363][T25631] Call Trace: [ 639.968371][T25631] [ 639.968380][T25631] dump_stack_lvl+0xe8/0x150 [ 639.968407][T25631] should_fail_ex+0x412/0x560 [ 639.968435][T25631] should_failslab+0xa8/0x100 [ 639.968462][T25631] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 639.968485][T25631] ? __alloc_skb+0x186/0x7d0 [ 639.968506][T25631] ? __alloc_skb+0x1d0/0x7d0 [ 639.968524][T25631] ? __local_bh_enable_ip+0xd0/0x130 [ 639.968547][T25631] __alloc_skb+0x1d0/0x7d0 [ 639.968574][T25631] netlink_sendmsg+0x5d4/0xb40 [ 639.968607][T25631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.968633][T25631] ? aa_sock_msg_perm+0xf1/0x1b0 [ 639.968657][T25631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.968684][T25631] ____sys_sendmsg+0x972/0x9f0 [ 639.968707][T25631] ? __might_fault+0xaf/0x130 [ 639.968734][T25631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.968766][T25631] ? import_iovec+0x73/0xa0 [ 639.968793][T25631] ___sys_sendmsg+0x2a5/0x360 [ 639.968815][T25631] ? __lock_acquire+0x6b5/0x2cf0 [ 639.968847][T25631] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.968905][T25631] ? __fget_files+0x2a/0x420 [ 639.968924][T25631] ? __fget_files+0x3a0/0x420 [ 639.968954][T25631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 639.968980][T25631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.969012][T25631] ? __pfx_ksys_write+0x10/0x10 [ 639.969044][T25631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.969062][T25631] do_syscall_64+0x15f/0xf80 [ 639.969084][T25631] ? trace_irq_disable+0x3b/0x140 [ 639.969109][T25631] ? clear_bhb_loop+0x40/0x90 [ 639.969130][T25631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.969147][T25631] RIP: 0033:0x7f64f179ce59 [ 639.969165][T25631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.969179][T25631] RSP: 002b:00007f64f261c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.969198][T25631] RAX: ffffffffffffffda RBX: 00007f64f1a16180 RCX: 00007f64f179ce59 [ 639.969211][T25631] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 639.969222][T25631] RBP: 00007f64f261c090 R08: 0000000000000000 R09: 0000000000000000 [ 639.969232][T25631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.969242][T25631] R13: 00007f64f1a16218 R14: 00007f64f1a16180 R15: 00007ffd1b238d48 [ 639.969270][T25631] [ 643.079885][T25628] syzkaller1: entered promiscuous mode [ 643.094223][T25628] syzkaller1: entered allmulticast mode [ 643.285700][T25642] openvswitch: netlink: Flow key attr not present in new flow. [ 643.328684][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5300'. [ 643.387232][T25645] tipc: Resetting bearer [ 643.994573][T25680] netlink: 'syz.2.5312': attribute type 1 has an invalid length. [ 644.096994][T25680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.159728][T25689] syzkaller1: entered promiscuous mode [ 644.168402][T25689] syzkaller1: entered allmulticast mode [ 644.193319][T25691] ip6t_srh: unknown srh invflags 4000 [ 644.252641][T25680] syzkaller0: entered promiscuous mode [ 644.258965][T25680] syzkaller0: entered allmulticast mode [ 644.325625][T25698] netlink: 'syz.3.5318': attribute type 32 has an invalid length. [ 644.616988][T25712] netlink: 'syz.1.5321': attribute type 16 has an invalid length. [ 644.631460][T25712] netlink: 'syz.1.5321': attribute type 3 has an invalid length. [ 644.642920][T25712] __nla_validate_parse: 8 callbacks suppressed [ 644.642941][T25712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5321'. [ 644.730316][T25717] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5323'. [ 644.799223][T25720] Cannot find add_set index 65532 as target [ 644.826434][T25720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5325'. [ 644.910812][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5324'. [ 644.956824][T25730] netlink: 'syz.2.5328': attribute type 4 has an invalid length. [ 644.976795][T25735] netlink: 'syz.2.5328': attribute type 4 has an invalid length. [ 645.110310][ T5753] lo speed is unknown, defaulting to 1000 [ 645.138783][ T5753] syś2: Port: 1 Link ACTIVE [ 645.650133][T25752] netlink: 'syz.2.5335': attribute type 62 has an invalid length. [ 645.671438][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'. [ 645.937466][T25767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5337'. [ 645.966102][T25766] syzkaller1: entered promiscuous mode [ 645.981583][T25766] syzkaller1: entered allmulticast mode [ 646.006735][T25766] FAULT_INJECTION: forcing a failure. [ 646.006735][T25766] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 646.041980][T25766] CPU: 0 UID: 0 PID: 25766 Comm: syz.4.5338 Not tainted syzkaller #0 PREEMPT(full) [ 646.042025][T25766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.042036][T25766] Call Trace: [ 646.042045][T25766] [ 646.042053][T25766] dump_stack_lvl+0xe8/0x150 [ 646.042083][T25766] should_fail_ex+0x412/0x560 [ 646.042113][T25766] _copy_from_iter+0x1d3/0x1670 [ 646.042143][T25766] ? rcu_is_watching+0x15/0xb0 [ 646.042173][T25766] ? __pfx__copy_from_iter+0x10/0x10 [ 646.042207][T25766] ? netlink_sendmsg+0x650/0xb40 [ 646.042231][T25766] ? skb_put+0x11b/0x210 [ 646.042261][T25766] netlink_sendmsg+0x6c0/0xb40 [ 646.042298][T25766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.042328][T25766] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.042356][T25766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.042387][T25766] ____sys_sendmsg+0x972/0x9f0 [ 646.042413][T25766] ? __might_fault+0xaf/0x130 [ 646.042445][T25766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.042482][T25766] ? import_iovec+0x73/0xa0 [ 646.042514][T25766] ___sys_sendmsg+0x2a5/0x360 [ 646.042539][T25766] ? __lock_acquire+0x6b5/0x2cf0 [ 646.042565][T25766] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.042632][T25766] ? __fget_files+0x2a/0x420 [ 646.042655][T25766] ? __fget_files+0x3a0/0x420 [ 646.042689][T25766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 646.042718][T25766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.042754][T25766] ? __pfx_ksys_write+0x10/0x10 [ 646.042789][T25766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.042810][T25766] do_syscall_64+0x15f/0xf80 [ 646.042835][T25766] ? trace_irq_disable+0x3b/0x140 [ 646.042861][T25766] ? clear_bhb_loop+0x40/0x90 [ 646.042886][T25766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.042904][T25766] RIP: 0033:0x7f89c199ce59 [ 646.042924][T25766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.042940][T25766] RSP: 002b:00007f89bfbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.042961][T25766] RAX: ffffffffffffffda RBX: 00007f89c1c15fa0 RCX: 00007f89c199ce59 [ 646.042975][T25766] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 646.042988][T25766] RBP: 00007f89bfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 646.042999][T25766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.043018][T25766] R13: 00007f89c1c16038 R14: 00007f89c1c15fa0 R15: 00007ffff0893698 [ 646.043051][T25766] [ 646.129852][T25772] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5341'. [ 646.371044][T25779] gretap0 speed is unknown, defaulting to 1000 [ 646.405818][T25779] gretap0 speed is unknown, defaulting to 1000 [ 646.417725][T25779] gretap0 speed is unknown, defaulting to 1000 [ 646.607835][T25784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 646.786081][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 647.174941][T25813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'. [ 647.298555][T25817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5354'. [ 647.381720][T25779] infiniband syz0: set active [ 647.388618][ T5753] gretap0 speed is unknown, defaulting to 1000 [ 647.395780][T25779] infiniband syz0: added gretap0 [ 647.404389][T25779] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 647.409078][T25779] infiniband syz0: Couldn't open port 1 [ 647.452515][T25779] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 647.489102][T25779] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 647.519031][T25779] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 647.621618][T25779] RDS/IB: syz0: added [ 647.631065][T25779] smc: adding ib device syz0 with port count 1 [ 647.638863][T25779] smc: ib device syz0 port 1 has no pnetid [ 647.667626][ T1583] gretap0 speed is unknown, defaulting to 1000 [ 647.677653][T25779] gretap0 speed is unknown, defaulting to 1000 [ 647.986549][T25779] gretap0 speed is unknown, defaulting to 1000 [ 648.267166][T25779] gretap0 speed is unknown, defaulting to 1000 [ 648.316383][T25835] syzkaller0: entered promiscuous mode [ 648.322415][T25835] syzkaller0: entered allmulticast mode [ 648.424602][T25779] gretap0 speed is unknown, defaulting to 1000 [ 648.576017][T25779] gretap0 speed is unknown, defaulting to 1000 [ 648.727318][T25779] gretap0 speed is unknown, defaulting to 1000 [ 648.878045][T25779] gretap0 speed is unknown, defaulting to 1000 [ 649.027931][T25779] gretap0 speed is unknown, defaulting to 1000 [ 649.995070][T25803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.207993][T25843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.295913][T25853] __nla_validate_parse: 1 callbacks suppressed [ 650.295952][T25853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5360'. [ 650.468397][T25860] netlink: 'syz.4.5363': attribute type 21 has an invalid length. [ 650.485179][T25841] netlink: 'syz.2.5362': attribute type 6 has an invalid length. [ 650.501942][T25860] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5363'. [ 650.627762][T25860] netlink: 'syz.4.5363': attribute type 5 has an invalid length. [ 650.645240][T25860] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5363'. [ 650.727350][T25845] gretap1: entered promiscuous mode [ 650.878657][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5369'. [ 651.016174][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5372'. [ 651.189557][T25900] syzkaller1: entered promiscuous mode [ 651.198855][T25900] syzkaller1: entered allmulticast mode [ 651.278594][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5375'. [ 651.434118][T25914] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 651.447807][T25914] bond7 (unregistering): Released all slaves [ 651.572610][T25920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.880695][T25936] bond7: entered promiscuous mode [ 651.885941][T25936] bond7: entered allmulticast mode [ 651.891487][T25936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 653.189408][T25855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.429790][T25949] netlink: 'syz.0.5389': attribute type 1 has an invalid length. [ 653.644409][T25955] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 653.680623][T25955] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 653.752550][T25970] xt_hashlimit: size too large, truncated to 1048576 [ 653.803422][T25957] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 653.870560][T25949] bond7: (slave gretap1): making interface the new active one [ 653.884659][T25949] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 653.923681][T25976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5393'. [ 653.929790][T25966] syzkaller1: entered promiscuous mode [ 653.950534][T25966] syzkaller1: entered allmulticast mode [ 654.416736][T25989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5397'. [ 654.625605][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5402'. [ 654.749000][T26015] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5404'. [ 655.275141][ T30] audit: type=1804 audit(1779326851.264:16): pid=26050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5409" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2267 res=1 errno=0 [ 655.388819][ T30] audit: type=1800 audit(1779326851.264:17): pid=26050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5409" name="cgroup.controllers" dev="tmpfs" ino=2267 res=0 errno=0 [ 655.544187][T26056] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5413'. [ 655.595510][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'. [ 655.646465][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'. [ 656.152034][T26088] netlink: 'syz.2.5422': attribute type 12 has an invalid length. [ 656.174069][T26088] netlink: 'syz.2.5422': attribute type 29 has an invalid length. [ 656.197714][T26088] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5422'. [ 656.217699][T26088] netlink: 'syz.2.5422': attribute type 1 has an invalid length. [ 656.230559][T26088] netlink: 47 bytes leftover after parsing attributes in process `syz.2.5422'. [ 656.248403][T26089] syz_tun: entered allmulticast mode [ 656.305497][T26098] pim6reg: entered allmulticast mode [ 656.393120][T26088] syz_tun (unregistering): left allmulticast mode [ 656.713685][T26119] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 656.725955][T26119] bond8 (unregistering): Released all slaves [ 656.952490][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5432'. [ 659.782787][T26124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.003811][T26193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5453'. [ 660.060693][T26193] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5453'. [ 660.076384][T26193] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5453'. [ 660.300888][T26213] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5458'. [ 660.324848][T26210] netlink: 'syz.2.5457': attribute type 27 has an invalid length. [ 660.336744][T26210] netlink: 'syz.2.5457': attribute type 4 has an invalid length. [ 660.387478][T26221] netlink: 'syz.4.5458': attribute type 4 has an invalid length. [ 660.439857][T26221] netlink: 'syz.4.5458': attribute type 4 has an invalid length. [ 660.777128][T26232] __nla_validate_parse: 1 callbacks suppressed [ 660.777152][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5464'. [ 660.964015][T26240] netlink: 'syz.2.5467': attribute type 83 has an invalid length. [ 661.085191][T26245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5468'. [ 661.598499][T26277] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5480'. [ 661.747208][T26284] bond8 (unregistering): Released all slaves [ 661.787771][T26289] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 661.941142][T26289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5483'. [ 661.972589][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5484'. [ 662.210210][T26310] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5486'. [ 662.382830][T26325] netlink: 'syz.4.5490': attribute type 9 has an invalid length. [ 662.754026][T26344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5494'. [ 662.974009][T26349] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 663.239668][T26358] netlink: 'syz.3.5499': attribute type 6 has an invalid length. [ 663.275797][T26358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5499'. [ 663.705374][T26375] ip6tnl3: entered allmulticast mode [ 663.730446][T26379] bond8: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.769521][T26370] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5504'. [ 663.814601][T26379] bond8: (slave C): Enslaving as an active interface with an up link [ 663.866447][T26379] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 664.237123][T26397] IPVS: Scheduler module ip_vs_sip not found [ 664.304548][T26404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.510589][T26410] netlink: 'syz.4.5515': attribute type 1 has an invalid length. [ 664.543659][T26410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.571104][T26410] bond6: (slave veth5): Enslaving as an active interface with a down link [ 664.590346][T26410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 664.597622][T26410] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 664.736484][T26413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5516'. [ 664.841486][T26419] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 665.158633][T26430] bond8 (unregistering): Released all slaves [ 665.431053][T26434] syzkaller0: entered promiscuous mode [ 665.446288][T26434] syzkaller0: entered allmulticast mode [ 665.508561][T26443] netlink: 'syz.0.5528': attribute type 1 has an invalid length. [ 665.534243][T26443] netlink: 'syz.0.5528': attribute type 3 has an invalid length. [ 665.573064][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.781256][T26457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.627180][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803a3c5400: rx timeout, send abort [ 666.636508][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803a3c5400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 666.960897][T26465] __nla_validate_parse: 5 callbacks suppressed [ 666.960918][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5535'. [ 666.977673][T26465] netlink: 'syz.2.5535': attribute type 30 has an invalid length. [ 667.013635][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5535'. [ 667.023057][T26466] netlink: 'syz.2.5535': attribute type 30 has an invalid length. [ 668.987685][T26468] tipc: Enabled bearer , priority 0 [ 669.079334][T26481] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5537'. [ 669.089387][T26480] nbd: couldn't find a device at index 3 [ 669.120804][T26476] syzkaller1: entered promiscuous mode [ 669.145054][T26476] syzkaller1: entered allmulticast mode [ 669.173196][T26483] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 669.259162][T26488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5542'. [ 669.344786][T26495] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5542'. [ 669.379871][T26494] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 669.408363][T26497] netlink: 'syz.1.5543': attribute type 21 has an invalid length. [ 669.465551][T26497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5543'. [ 670.117587][T26531] vlan0: entered promiscuous mode [ 670.130172][T26531] veth0_vlan: entered promiscuous mode [ 670.137692][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'. [ 670.312075][T26548] syzkaller0: left promiscuous mode [ 670.325837][T26548] syzkaller0: left allmulticast mode [ 670.737475][T26572] netlink: 'syz.4.5562': attribute type 1 has an invalid length. [ 670.759353][T26572] veth1_to_bond: entered allmulticast mode [ 670.833845][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5563'. [ 670.912239][T26578] veth1_to_bond: left allmulticast mode [ 671.423718][T26616] syzkaller1: entered promiscuous mode [ 671.434496][T26616] syzkaller1: entered allmulticast mode [ 671.456784][T26616] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5574'. [ 671.498926][T26623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5575'. [ 671.526116][T26623] netlink: 'syz.1.5575': attribute type 1 has an invalid length. [ 671.667813][T26619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 672.139140][T26645] only policy match revision 0 supported [ 672.139166][T26645] unable to load match [ 672.255479][T26648] netlink: 'syz.0.5582': attribute type 1 has an invalid length. [ 672.268628][T26648] netlink: 'syz.0.5582': attribute type 3 has an invalid length. [ 672.277097][T26648] __nla_validate_parse: 3 callbacks suppressed [ 672.277116][T26648] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5582'. [ 672.294290][T26649] netlink: 'syz.1.5583': attribute type 3 has an invalid length. [ 672.303311][T26648] NCSI netlink: No device for ifindex 813332851 [ 672.424656][T26654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5585'. [ 672.529848][T26660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5587'. [ 672.765249][T26674] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5590'. [ 673.359652][T26710] SET target dimension over the limit! [ 673.389642][T26706] netlink: 'syz.2.5599': attribute type 1 has an invalid length. [ 673.423045][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5599'. [ 673.752872][T26726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5605'. [ 673.935751][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5610'. [ 674.184624][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5614'. [ 674.228623][T26754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 674.256588][T26754] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 674.271586][T26754] gretap2: entered promiscuous mode [ 674.280007][T26754] gretap2: entered allmulticast mode [ 674.327801][ T1583] hid-generic 0005:446D:0A0E.0002: item fetching failed at offset 0/1 [ 674.366350][T26768] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5618'. [ 674.387871][ T1583] hid-generic 0005:446D:0A0E.0002: probe with driver hid-generic failed with error -22 [ 674.431580][T26768] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5618'. [ 675.486383][T26824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.701563][T26835] batadv1: entered allmulticast mode [ 675.829630][T26837] batadv1: entered allmulticast mode [ 675.910544][T26838] tipc: Started in network mode [ 675.929727][T26838] tipc: Node identity ac14140f, cluster identity 4711 [ 675.976256][T26838] tipc: Enabled bearer , priority 10 [ 676.461592][T26882] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 676.786630][T26889] ip6erspan0 speed is unknown, defaulting to 1000 [ 676.929684][T26909] netlink: 'syz.3.5653': attribute type 3 has an invalid length. [ 677.082473][ T5824] tipc: Node number set to 2886997007 [ 677.415934][T26926] openvswitch: netlink: Key type 262 is out of range max 32 [ 677.505834][T26928] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 677.561655][T26885] ip6erspan0 speed is unknown, defaulting to 1000 [ 677.561986][T26889] lo speed is unknown, defaulting to 1000 [ 677.568427][ T5824] gretap0 speed is unknown, defaulting to 1000 [ 677.618354][T26889] gretap0 speed is unknown, defaulting to 1000 [ 677.627872][T26933] __nla_validate_parse: 10 callbacks suppressed [ 677.627894][T26933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 678.572470][T26973] syzkaller0: entered promiscuous mode [ 678.579928][T26973] syzkaller0: entered allmulticast mode [ 678.722628][T26979] bond0: Caught tx_queue_len zero misconfig [ 678.813604][T26885] lo speed is unknown, defaulting to 1000 [ 679.059877][T26885] gretap0 speed is unknown, defaulting to 1000 [ 679.189622][T27009] netlink: 'syz.4.5678': attribute type 1 has an invalid length. [ 679.229386][T27002] netlink: 'syz.3.5679': attribute type 3 has an invalid length. [ 679.269125][T27002] netlink: 'syz.3.5679': attribute type 3 has an invalid length. [ 679.277929][T27002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5679'. [ 679.389437][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5680'. [ 679.506321][T27012] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 679.526876][T27012] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 679.574995][T27012] bond7: (slave ip6gre1): making interface the new active one [ 679.594891][T27012] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 679.623770][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5678'. [ 679.716323][T27006] hsr_slave_1 (unregistering): left promiscuous mode [ 680.016955][T27038] netlink: 'syz.0.5686': attribute type 1 has an invalid length. [ 680.208465][T27045] sctp: [Deprecated]: syz.4.5689 (pid 27045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.208465][T27045] Use struct sctp_sack_info instead [ 680.266638][T27038] bond9: entered promiscuous mode [ 680.287978][T27038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 680.773225][T27062] netlink: 'syz.1.5692': attribute type 16 has an invalid length. [ 680.791408][T27062] netlink: 'syz.1.5692': attribute type 17 has an invalid length. [ 680.868116][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 680.906622][T27070] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5694'. [ 680.966609][T27062] hsr0: left promiscuous mode [ 680.987490][T27062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 681.038923][T27076] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5693'. [ 681.110827][T27072] syzkaller0: entered promiscuous mode [ 681.125620][T27072] syzkaller0: entered allmulticast mode [ 681.328144][T27086] netlink: 'syz.0.5696': attribute type 1 has an invalid length. [ 681.368486][T27087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5697'. [ 681.424643][T27092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5696'. [ 681.558174][T27086] 8021q: adding VLAN 0 to HW filter on device bond10 [ 681.708348][T27096] syzkaller1: entered promiscuous mode [ 681.732964][T27096] syzkaller1: entered allmulticast mode [ 681.920551][T27104] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.5700'. [ 682.146433][T27116] IPVS: length: 102 != 8 [ 682.155392][T27116] x_tables: duplicate underflow at hook 1 [ 682.596738][T27144] syz.0.5709: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 682.613972][T27144] CPU: 1 UID: 0 PID: 27144 Comm: syz.0.5709 Not tainted syzkaller #0 PREEMPT(full) [ 682.613998][T27144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.614009][T27144] Call Trace: [ 682.614016][T27144] [ 682.614023][T27144] dump_stack_lvl+0xe8/0x150 [ 682.614050][T27144] warn_alloc+0x249/0x340 [ 682.614068][T27144] ? stack_trace_save+0xa9/0x100 [ 682.614087][T27144] ? __pfx_warn_alloc+0x10/0x10 [ 682.614107][T27144] ? kasan_save_track+0x4f/0x80 [ 682.614121][T27144] ? kasan_save_track+0x3e/0x80 [ 682.614134][T27144] ? __kasan_kmalloc+0x93/0xb0 [ 682.614148][T27144] ? __kmalloc_cache_noprof+0x31c/0x660 [ 682.614162][T27144] ? xskq_create+0x56/0x170 [ 682.614176][T27144] ? xsk_setsockopt+0x54c/0x990 [ 682.614188][T27144] ? do_sock_setsockopt+0x17c/0x1b0 [ 682.614202][T27144] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 682.614215][T27144] ? do_syscall_64+0x15f/0xf80 [ 682.614234][T27144] __vmalloc_node_range_noprof+0x132/0x1750 [ 682.614270][T27144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 682.614289][T27144] ? __kasan_kmalloc+0x93/0xb0 [ 682.614308][T27144] vmalloc_user_noprof+0xad/0xe0 [ 682.614323][T27144] ? xskq_create+0xbf/0x170 [ 682.614338][T27144] xskq_create+0xbf/0x170 [ 682.614354][T27144] xsk_init_queue+0x8a/0xe0 [ 682.614370][T27144] xsk_setsockopt+0x54c/0x990 [ 682.614384][T27144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 682.614397][T27144] ? __pfx_aa_sk_perm+0x10/0x10 [ 682.614420][T27144] ? aa_sock_opt_perm+0xff/0x1a0 [ 682.614444][T27144] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 682.614467][T27144] ? __pfx_xsk_setsockopt+0x10/0x10 [ 682.614483][T27144] do_sock_setsockopt+0x17c/0x1b0 [ 682.614502][T27144] __x64_sys_setsockopt+0x13d/0x1b0 [ 682.614518][T27144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.614531][T27144] do_syscall_64+0x15f/0xf80 [ 682.614546][T27144] ? trace_irq_disable+0x3b/0x140 [ 682.614563][T27144] ? clear_bhb_loop+0x40/0x90 [ 682.614577][T27144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.614588][T27144] RIP: 0033:0x7f976199ce59 [ 682.614601][T27144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.614611][T27144] RSP: 002b:00007f97628ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 682.614625][T27144] RAX: ffffffffffffffda RBX: 00007f9761c15fa0 RCX: 00007f976199ce59 [ 682.614633][T27144] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 682.614640][T27144] RBP: 00007f9761a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 682.614647][T27144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.614654][T27144] R13: 00007f9761c16038 R14: 00007f9761c15fa0 R15: 00007fff48ccafe8 [ 682.614767][T27144] [ 682.614947][T27144] Mem-Info: [ 682.896265][T27144] active_anon:6160 inactive_anon:0 isolated_anon:0 [ 682.896265][T27144] active_file:2700 inactive_file:40844 isolated_file:0 [ 682.896265][T27144] unevictable:768 dirty:112 writeback:0 [ 682.896265][T27144] slab_reclaimable:12414 slab_unreclaimable:131231 [ 682.896265][T27144] mapped:30671 shmem:1294 pagetables:1443 [ 682.896265][T27144] sec_pagetables:0 bounce:0 [ 682.896265][T27144] kernel_misc_reclaimable:0 [ 682.896265][T27144] free:1276079 free_pcp:9031 free_cma:0 [ 682.955849][T27149] __nla_validate_parse: 1 callbacks suppressed [ 682.955871][T27149] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5710'. [ 682.961240][T27144] Node 0 active_anon:24640kB inactive_anon:0kB active_file:10800kB inactive_file:163172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122684kB dirty:448kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15400kB pagetables:5740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 682.964753][T27149] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5710'. [ 682.987658][T27144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 683.058948][T27149] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5710'. [ 683.081919][T27144] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.114357][T27144] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 683.120475][T27144] Node 0 DMA32 free:1140800kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24640kB inactive_anon:0kB active_file:10800kB inactive_file:163172kB unevictable:1536kB writepending:448kB zspages:0kB present:3129332kB managed:2552612kB mlocked:0kB bounce:0kB free_pcp:36368kB local_pcp:18296kB free_cma:0kB [ 683.157774][T27144] lowmem_reserve[]: 0 0 0 0 0 [ 683.164745][T27144] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 683.198427][T27144] lowmem_reserve[]: 0 0 0 0 0 [ 683.205414][T27144] Node 1 Normal free:3948156kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.242906][T27144] lowmem_reserve[]: 0 0 0 0 0 [ 683.249105][T27144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 683.274457][T27144] Node 0 DMA32: 9293*4kB (UM) 6229*8kB (UME) 3340*16kB (UME) 181*32kB (UME) 128*64kB (UME) 719*128kB (UME) 458*256kB (UM) 304*512kB (UM) 201*1024kB (UM) 81*2048kB (UME) 61*4096kB (UM) = 1140924kB [ 683.297277][T27144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 683.320315][T27144] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 11*16kB (UM) 5*32kB (UM) 12*64kB (UM) 6*128kB (UM) 3*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3948156kB [ 683.338786][T27144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.374939][T27144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.401272][T27144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.419295][T27144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.430684][T27144] 46209 total pagecache pages [ 683.436161][T27144] 0 pages in swap cache [ 683.440391][T27144] Free swap = 124996kB [ 683.445616][T27144] Total swap = 124996kB [ 683.456925][T27144] 2097051 pages RAM [ 683.460953][T27144] 0 pages HighMem/MovableOnly [ 683.467294][T27144] 427116 pages reserved [ 683.472628][T27160] syzkaller1: entered promiscuous mode [ 683.478543][T27144] 0 pages cma reserved [ 683.482788][T27160] syzkaller1: entered allmulticast mode [ 684.059738][T27182] netlink: 'syz.0.5719': attribute type 10 has an invalid length. [ 684.069061][T27182] veth1_virt_wifi: entered promiscuous mode [ 685.077928][T27111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.303955][T27184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5720'. [ 685.350147][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5723'. [ 685.387472][T27193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5723'. [ 685.597733][T27203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5726'. [ 685.627854][T27203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5726'. [ 686.328372][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.346746][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.360023][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.389971][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.400774][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.851113][T27274] SET target dimension over the limit! [ 687.238090][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5746'. [ 687.737901][T27244] ip6erspan0 speed is unknown, defaulting to 1000 [ 687.774049][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5749'. [ 687.846808][T27317] vlan3: entered promiscuous mode [ 687.864991][T27317] bridge0: entered promiscuous mode [ 687.975920][T27329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5753'. [ 688.007199][T27327] netlink: 'syz.2.5751': attribute type 2 has an invalid length. [ 688.031114][T27327] netlink: 'syz.2.5751': attribute type 2 has an invalid length. [ 688.054207][T27331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5754'. [ 688.070227][T27331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5754'. [ 688.187684][T27336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.257299][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5757'. [ 688.341577][T27244] lo speed is unknown, defaulting to 1000 [ 688.357837][T27244] gretap0 speed is unknown, defaulting to 1000 [ 688.456004][ T4946] Bluetooth: hci3: command tx timeout [ 688.494775][T27355] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5761'. [ 688.512715][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 688.521889][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5761'. [ 688.646144][T27361] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5762'. [ 688.834193][T27365] netlink: 'syz.2.5764': attribute type 4 has an invalid length. [ 688.854673][T27365] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5764'. [ 688.884698][T27365] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5764'. [ 689.218783][T27384] sch_tbf: burst 12 is lower than device bridge4 mtu (1514) ! [ 689.245254][T27382] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 689.279000][ T1583] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 689.297258][ T30] audit: type=1800 audit(1779326885.294:18): pid=27386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5772" name="memory.events" dev="tmpfs" ino=2625 res=0 errno=0 [ 689.351939][ T30] audit: type=1804 audit(1779326885.344:19): pid=27387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5772" name="/newroot/512/memory.events" dev="tmpfs" ino=2625 res=1 errno=0 [ 689.707961][T27244] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.720533][T27244] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.729289][T27244] bridge_slave_0: entered allmulticast mode [ 689.735047][T27410] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 689.742953][T27244] bridge_slave_0: entered promiscuous mode [ 689.756964][T27244] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.765346][T27244] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.772801][T27244] bridge_slave_1: entered allmulticast mode [ 689.774064][T27410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.780765][T27244] bridge_slave_1: entered promiscuous mode [ 689.848937][T27412] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.859990][T27410] netlink: 'syz.2.5778': attribute type 1 has an invalid length. [ 689.945184][T27244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.999947][T27244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.039442][T27421] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 690.105831][T27422] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.113127][T27422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.211144][T27430] xt_hashlimit: size too large, truncated to 1048576 [ 690.378938][T27422] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.459950][T27244] team0: Port device team_slave_0 added [ 690.490956][T27439] veth0: entered promiscuous mode [ 690.509728][T27438] veth0: left promiscuous mode [ 690.538000][ T4946] Bluetooth: hci3: command tx timeout [ 690.558164][T27244] team0: Port device team_slave_1 added [ 690.638435][T27244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.646243][T27244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.677011][T27244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.714663][T27244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.748747][T27244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.788382][T27244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.901077][T27244] hsr_slave_0: entered promiscuous mode [ 690.915735][T27244] hsr_slave_1: entered promiscuous mode [ 690.923623][T27244] debugfs: 'hsr0' already exists in 'hsr' [ 690.929658][T27244] Cannot create hsr debugfs directory [ 691.087453][T27466] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 691.103561][T27469] sctp: [Deprecated]: syz.0.5793 (pid 27469) Use of int in maxseg socket option. [ 691.103561][T27469] Use struct sctp_assoc_value instead [ 691.171826][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 691.420711][T27244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.431840][T27244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.473032][T17893] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.485006][T17893] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.505796][T17893] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.526549][T17893] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.558613][T27489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.703259][T27244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.741425][T27244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.750637][T27484] netlink: 'syz.0.5797': attribute type 39 has an invalid length. [ 691.788685][T27484] hsr_slave_0: left promiscuous mode [ 691.807765][T27484] hsr_slave_1: left promiscuous mode [ 691.950506][T27244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.961796][T27244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.045790][T27244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.057982][T27244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.612202][ T4946] Bluetooth: hci3: command tx timeout [ 694.397859][T27483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.408543][T27497] __nla_validate_parse: 8 callbacks suppressed [ 694.408561][T27497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5800'. [ 694.501465][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5800'. [ 694.560056][T27511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5803'. [ 694.582826][T27244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 694.618781][T27244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.629845][T27244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 694.649585][T27244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.665214][T27244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 694.696023][ T4946] Bluetooth: hci3: command tx timeout [ 694.715128][T27244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.736676][T27244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 694.759007][T27523] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 694.766331][T27244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.795858][T27518] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 694.846743][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5805'. [ 694.893596][T27522] gtp0: entered promiscuous mode [ 694.909461][T27522] gtp0: entered allmulticast mode [ 695.122701][T27543] syzkaller1: entered promiscuous mode [ 695.141075][T27543] syzkaller1: entered allmulticast mode [ 695.323939][T27559] : renamed from bond0 (while UP) [ 695.446320][T27244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.547306][T27244] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.587411][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 695.606928][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.614203][T17886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.640007][T27580] netlink: 'syz.3.5819': attribute type 2 has an invalid length. [ 695.653087][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.660310][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.707560][T27579] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5820'. [ 695.717558][T27579] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 696.007239][T27595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5823'. [ 696.112586][T27600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5825'. [ 696.362271][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5829'. [ 696.509922][T27618] netlink: 'syz.0.5831': attribute type 1 has an invalid length. [ 696.558293][T27620] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5832'. [ 696.604278][T27618] bond0: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 696.645522][T27618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.660479][ T144] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 696.862217][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 697.155463][T27244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.182721][T27652] rdma_op ffff88802ccbe1f0 conn xmit_rdma 0000000000000000 [ 697.345316][T27663] netlink: 'syz.1.5843': attribute type 30 has an invalid length. [ 697.424448][T27666] netlink: 'syz.1.5843': attribute type 30 has an invalid length. [ 697.476803][T27668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.538340][T27671] netlink: 'syz.3.5845': attribute type 1 has an invalid length. [ 697.560457][T27671] netlink: 'syz.3.5845': attribute type 1 has an invalid length. [ 697.579232][T27671] netlink: 'syz.3.5845': attribute type 8 has an invalid length. [ 697.886379][T27244] veth0_vlan: entered promiscuous mode [ 697.949970][T27244] veth1_vlan: entered promiscuous mode [ 698.054404][T27244] veth0_macvtap: entered promiscuous mode [ 698.068582][T27244] veth1_macvtap: entered promiscuous mode [ 698.077424][T27694] netlink: 'syz.3.5853': attribute type 1 has an invalid length. [ 698.119712][T27244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.166585][T27244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.226311][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.249647][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.291668][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.337368][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.789019][T27725] bond0: (slave bond_slave_1): Releasing backup interface [ 698.824515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.854637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.939694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.950802][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.182236][T27747] xt_bpf: check failed: parse error [ 699.298138][T27749] IPv6: sit1: Disabled Multicast RS [ 699.307532][T27749] sit1: entered allmulticast mode [ 699.504328][T27757] __nla_validate_parse: 18 callbacks suppressed [ 699.504351][T27757] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5869'. [ 699.921009][T27780] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 699.946925][T27782] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 699.999895][T27782] 8021q: adding VLAN 0 to HW filter on device bond9 [ 700.137859][T27780] 8021q: adding VLAN 0 to HW filter on device bond10 [ 700.437525][T27805] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5879'. [ 700.475754][T27803] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5880'. [ 700.483431][T27808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5881'. [ 704.267180][T27858] validate_nla: 2 callbacks suppressed [ 704.267240][T27858] netlink: 'syz.1.5896': attribute type 1 has an invalid length. [ 704.446869][T27866] netlink: 'syz.1.5896': attribute type 10 has an invalid length. [ 704.829506][T27874] syzkaller0: entered promiscuous mode [ 704.842528][T27874] syzkaller0: entered allmulticast mode [ 705.570489][T27906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5910'. [ 706.111687][T27933] tunl0: entered promiscuous mode [ 706.120826][T27933] netlink: 'syz.3.5915': attribute type 3 has an invalid length. [ 706.143798][T27933] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5915'. [ 706.162000][T27935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5918'. [ 706.225048][T27941] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 706.237871][T27941] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 706.246668][T27941] CPU: 1 UID: 0 PID: 27941 Comm: syz.4.5918 Not tainted syzkaller #0 PREEMPT(full) [ 706.256357][T27941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.266786][T27941] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 706.272832][T27941] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 d7 52 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ba 52 be f8 4d 8b 1f 4c 89 f7 89 [ 706.292719][T27941] RSP: 0018:ffffc900063970a8 EFLAGS: 00010202 [ 706.298803][T27941] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888039b85c40 [ 706.306958][T27941] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88806b63b640 [ 706.314934][T27941] RBP: 0000000000000002 R08: ffff888039b8002b R09: 1ffff11007370005 [ 706.323355][T27941] R10: dffffc0000000000 R11: ffffed1007370006 R12: dffffc0000000000 [ 706.331504][T27941] R13: dffffc0000000000 R14: ffff88806b63b640 R15: 0000000000000068 [ 706.339563][T27941] FS: 00007f5492fb46c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 706.348577][T27941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.355358][T27941] CR2: 00007f5492fb3ff8 CR3: 0000000093cc6000 CR4: 00000000003526f0 [ 706.363562][T27941] Call Trace: [ 706.366864][T27941] [ 706.369803][T27941] udp_tunnel_sock_release+0x6f/0x80 [ 706.375104][T27941] rxe_net_del+0x121/0x2e0 [ 706.379549][T27941] rxe_dellink+0x15/0x20 [ 706.383887][T27941] nldev_dellink+0x304/0x3d0 [ 706.389185][T27941] ? __pfx_nldev_dellink+0x10/0x10 [ 706.394334][T27941] ? apparmor_capable+0x126/0x170 [ 706.399541][T27941] ? bpf_lsm_capable+0x9/0x20 [ 706.404217][T27941] ? security_capable+0x7e/0x2c0 [ 706.409245][T27941] ? __pfx_nldev_dellink+0x10/0x10 [ 706.414363][T27941] rdma_nl_rcv+0x6d1/0xa10 [ 706.418790][T27941] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 706.423735][T27941] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.428952][T27941] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.434267][T27941] netlink_unicast+0x75c/0x8e0 [ 706.439055][T27941] netlink_sendmsg+0x813/0xb40 [ 706.443830][T27941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.449210][T27941] ? page_table_check_set+0x126/0x510 [ 706.454601][T27941] ? lock_acquire+0x106/0x350 [ 706.459374][T27941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.464402][T27941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 706.469691][T27941] ____sys_sendmsg+0x972/0x9f0 [ 706.474549][T27941] ? __might_fault+0xaf/0x130 [ 706.479347][T27941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.484829][T27941] ? import_iovec+0x73/0xa0 [ 706.489372][T27941] ___sys_sendmsg+0x2a5/0x360 [ 706.494064][T27941] ? __lock_acquire+0x6b5/0x2cf0 [ 706.499097][T27941] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.504326][T27941] ? __fget_files+0x2a/0x420 [ 706.509387][T27941] ? __fget_files+0x3a0/0x420 [ 706.514163][T27941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 706.519313][T27941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.524806][T27941] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 706.530637][T27941] ? do_user_addr_fault+0xc6f/0x1340 [ 706.535940][T27941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.542173][T27941] do_syscall_64+0x15f/0xf80 [ 706.546776][T27941] ? trace_irq_disable+0x3b/0x140 [ 706.551907][T27941] ? clear_bhb_loop+0x40/0x90 [ 706.556695][T27941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.562635][T27941] RIP: 0033:0x7f5494d9ce59 [ 706.567070][T27941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.587120][T27941] RSP: 002b:00007f5492fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.595626][T27941] RAX: ffffffffffffffda RBX: 00007f5495016180 RCX: 00007f5494d9ce59 [ 706.603599][T27941] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000005 [ 706.611662][T27941] RBP: 00007f5494e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 706.619895][T27941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.628071][T27941] R13: 00007f5495016218 R14: 00007f5495016180 R15: 00007ffef3538cc8 [ 706.636140][T27941] [ 706.639251][T27941] Modules linked in: [ 706.646932][T27941] ---[ end trace 0000000000000000 ]--- [ 706.682138][T27941] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 706.694309][T27941] Code: 53 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 d7 52 be f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ba 52 be f8 4d 8b 1f 4c 89 f7 89 [ 706.715971][T27941] RSP: 0018:ffffc900063970a8 EFLAGS: 00010202 [ 706.722179][T27941] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888039b85c40 [ 706.730400][T27941] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88806b63b640 [ 706.732203][T27940] smc: removing ib device syz0 [ 706.738742][T27941] RBP: 0000000000000002 R08: ffff888039b8002b R09: 1ffff11007370005 [ 706.751695][T27941] R10: dffffc0000000000 R11: ffffed1007370006 R12: dffffc0000000000 [ 706.752801][T27945] veth0_to_bridge: entered promiscuous mode [ 706.759998][T27941] R13: dffffc0000000000 R14: ffff88806b63b640 R15: 0000000000000068 [ 706.774921][T27943] veth0_to_bridge: left promiscuous mode [ 706.780713][T27941] FS: 00007f5492fb46c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 706.788245][T27940] smbdirect: ib_dev[syz0] removed [ 706.790272][T27941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.802387][T27941] CR2: 00007f64f261bff8 CR3: 0000000093cc6000 CR4: 00000000003526f0 [ 706.810451][T27941] Kernel panic - not syncing: Fatal exception [ 706.816695][T27941] Kernel Offset: disabled [ 706.821062][T27941] Rebooting in 86400 seconds..