last executing test programs: 9.194697952s ago: executing program 3 (id=2919): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @f={0x4, 0x1, 0x2, 0x5, {0x9, 0x1, '/'}, 0x1}}, 0xb) 8.916406218s ago: executing program 3 (id=2922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@alu={0x4, 0x1, 0x0, 0x2, 0x0, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xc040, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r9, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000100)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) syz_emit_ethernet(0x96, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x0, 0x9}, @eol, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x6}, @fastopen={0x22, 0xa, "2298e693942403cd"}, @fastopen={0x22, 0x9, "4f9f6420b115a3"}, @fastopen={0x22, 0x3, 'F'}, @md5sig={0x13, 0x12, "94210c439a5bea3444d82baa1f668c79"}]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x5, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) 8.710860626s ago: executing program 3 (id=2926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) r3 = socket(0x10, 0x803, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x10, 0x1000) syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000100f7022adeffdfef8e8f487d1226cff1388b421b9b23517d32ac50406f21a7ac8b1a6dc3e9c028de224a17eb5757a92cdc62931198f75097743615ad9a7acba0c9a17d6e68cf3019d103c6763c35f989b9c440db3e22f0d567a306e7f498ab21fa0c0b21"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async) socket(0x10, 0x803, 0x0) (async) sendfile(r3, r2, &(0x7f0000000000)=0x10, 0x1000) (async) syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000100f7022adeffdfef8e8f487d1226cff1388b421b9b23517d32ac50406f21a7ac8b1a6dc3e9c028de224a17eb5757a92cdc62931198f75097743615ad9a7acba0c9a17d6e68cf3019d103c6763c35f989b9c440db3e22f0d567a306e7f498ab21fa0c0b21"], 0x0) (async) 2.463698377s ago: executing program 2 (id=2987): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "27bfcffca79a789ceab1c8b50785aeb1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r7, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.318542371s ago: executing program 2 (id=2989): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) (async) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffe0a, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r7, 0x2f, 0x9, 0x9, 0xe, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7, 0x101, 0x1}}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x136}, @typed={0x8, 0xb9, 0x0, 0x0, @uid=r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4048051) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x136}, @typed={0x8, 0xb9, 0x0, 0x0, @uid=r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4048051) 2.130072887s ago: executing program 2 (id=2990): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x288}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x17a6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdcb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x13df}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff801}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x41}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf, 0x2]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xac}}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.924194359s ago: executing program 2 (id=2994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x81) 1.710450468s ago: executing program 4 (id=2998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, &(0x7f0000000380)="03", 0x0}, 0x20) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt(r4, 0x1, 0x45, 0x0, &(0x7f0000000300)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)={0x27e0, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @typed={0x4, 0x3c}, @nested={0x27c4, 0x4, 0x0, 0x1, [@nested={0x4, 0x65}, @nested={0x27bc, 0x61, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @fd=r0}, @generic="db35de9fa3cf1328ed989807b3aa447cdf0f76587376331185be02b75f44998cd0697a5068714dea1275dfc4c6a2bceba9bfca0afb13186fc8692267ebd242811d7bf3f2825f3c7b86fff4d3d76913fc369d7bb75c9d40e2fcd9f027bc9391cbc805b8a70fb2370c71d3981196e198b9467620e4b43f960a59c0e3d5ae7c6a1ef676a42ea8e987e190d9fa4100e64c7d4098018600fa69778083e1e14d8dea4736f2991ebeb0548c0f1e290e77680e1fc111e9bba6904094709651adabc3117126ac2215b808b8ebbc92", @nested={0x404, 0xd7, 0x0, 0x1, [@nested={0x4, 0x59}, @generic="b558c44d94095d95f9ada34d97c8179eb0292d4e4da91ace675e7c1526ecf2f9630f85859bc8e12bdeaf2337ecc392355499bbf620f67f2c7709fc8d3441e61d22759a0267e4f895ffa19cc6917b8ef2cf228502e5f8ce8d17bd198475e1cb26d5fa573f37417a78d1d9c8aa", @generic="bdff3bae0fcd16a05a2d7ab9f2801970972ab395586e2c311de47ac22bfd0589c3e96450a5200e0aa2da032a6484d681074ca394b7c07cd7fca7c1d04704027bd9432eb9e34321ff684c4590cd887a60cd11e3a26ad8fe4a3d2bbdd1ad1509ddeff16235b75b36f1a6a98d162d789cf3734c287c72c971fd68475a690859511901551fee750666e7b6d93ff10825efca996bb4bd1f23afc7975d7d2fef8c7388d6c68a", @nested={0x27b, 0x13a, 0x0, 0x1, [@nested={0xcc, 0xe2, 0x0, 0x1, [@nested={0x10, 0x42, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0x1}]}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x1}, @generic="23a7b669c77238fa521e726244995f37aa3e24d21d0ee830746753020f72fe3c505b4ec53d65f91b3ec57c0b68d7f2750db068971f619ba8c9f17b7ca0d94ea35c47e62c94ef535350751fdffe3fbf485662f3edd79d866d6cedc59e512656de7394f480f9c94947664ddd3d61574b4e0833e1a3ec610221d8495644ba3bf55591631f210ef70ce539f0a0a7287d96ee705a166e0d84027d", @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@private2}]}, @generic="763f79d3c50d85091f1a21033992f158a70f1ae75156a0ba9624e9a11471b134931172319440c614ea35b7a4249a5d080ce383bb35f513a242f8540e43660d07da75264a3b47610bb3b8c442e082fab51417349bb64949940de2a0f01433c66c9ec03b9697a64ca2b16c73427106b197f50a0f0f56ce67a5fdbbe51e135ed9c63409c3a02b45f572e5b438e5bf045a17c893a606e553413f2e181fb7dbb956a9bed2fee9dba8365cdf6db0601a2a608401569940585c8b8eed6085d301b4c5928d40e43491a8f478494bf8785a312ecfbb6d5ffa3d95245ab39fa69a80db505ca1a3dfa16c0c35f06217", @generic="0e66ef83bed8d580f639921829b29ee7e7148e6d8b4a6dccac970d87532159f495cd832206b275ea90e3b68bef36b41dc05eacb1c0121cdaa2787e45d0a2fd4aa3a48dc567303b16b89ad0b5fa9f8ebe7096cec8c3ff6284b3de0edb2b3f4db127d3135096ab4665f581c1e6eb59bd0342ca94e5370c8269b14fcd55d94c686f2a36bf4d59864d702ab31c08691dae10c9f366286173472f5bd2497387d59625bd2a645bc891a5d0a5f3f0a98037616f8d8c24e3ed27e696aa89a5f34fa5b7db82"]}, @typed={0x4, 0x1f}, @typed={0x8, 0xa3, 0x0, 0x0, @pid=r1}, @generic="c3", @typed={0x5c, 0xe2, 0x0, 0x0, @binary="24488a8c58de608d1bb1c7f97a41b596ffd5f41b64b3dd75b63bf0191e27e83b4a377b948874c63582d193869fb84260cf4ed7fd65aea80ed8bf35d19090c80aa0e7a6de2c2fe97c28134ffb6680da2c5ab13bb895eecf69"}, @typed={0x8, 0x100, 0x0, 0x0, @uid=r5}]}, @generic="eb2b10be4216d3cc16aca9a444975e63192936e521e81e05789afb21a4a7c2b03a7aa5d16c669834af28e3ee054e2b8f494b72321ceed1baf56e52e6f7d6697cb6ae9e6597fbfe5937a75218fa963db41c981dba3250a1ed28a253dd9677b3f142268ec584eaa1130cb6cfebfa095b896207248b6341e0197d1b989b53f03aff23ea5797f5fe556e0e293ef2b4f91d7e12d5443d3b29a64ef8887b1132664689842326e70b86cd0333ea4609c2", @generic="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", @nested={0x20c, 0x86, 0x0, 0x1, [@generic="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", @nested={0x4, 0x6a}]}, @nested={0x1024, 0x7a, 0x0, 0x1, [@nested={0x4, 0x7b}, @typed={0x9, 0x28, 0x0, 0x0, @str='-*\'/\x00'}, @nested={0x4, 0x33}, @nested={0x4, 0x9d}, @generic="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", @typed={0x8, 0x11b, 0x0, 0x0, @uid=r5}]}, @generic="84c1cc69c7"]}]}]}, 0x27e0}, 0x1, 0x0, 0x0, 0x8000}, 0x2040) r7 = socket$inet6(0xa, 0x800, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 1.69373602s ago: executing program 2 (id=2999): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x891c, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xc92, @remote, 0x8}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) 1.546672673s ago: executing program 1 (id=3001): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="b7", 0x1, 0xa080, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0, 0x20}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2, 0xfff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) 1.413716082s ago: executing program 1 (id=3002): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x240040c0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) syz_genetlink_get_family_id$ipvs(0x0, r10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d022abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x10, 0x9, 0x3c05, 0x1, "0c3df8", 0x7}}) 1.391968434s ago: executing program 4 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'geneve1\x00', {0x2, 0x4e24, @empty}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x1, 0x8000, 0x4, r9}, 0x10) sendmsg$nl_route(r7, 0x0, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) 1.298581793s ago: executing program 0 (id=3004): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x17f, 0xe1, 0xc, 0x8000}}}}}, 0x0) 1.245815548s ago: executing program 1 (id=3005): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0"], 0x208}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="07ef28bd7000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170900000000000000000100296de807070000000000000000200000000000000000000000ffff7f00000108000a00ebbb36afcbb3481a0100000014001f0000000000000000000c000000000000000500220000000000"], 0x64}, 0x1, 0x620b}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000000f00), 0x0, 0x2100, &(0x7f0000001040)={r11, r12+60000000}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) 1.162041047s ago: executing program 0 (id=3006): r0 = socket(0x15, 0x80000, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000006100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x29900, 0x43}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) connect$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a0001"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) r4 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x28, 0x4, 0x0) getsockopt$nfc_llcp(r6, 0x88, 0x68, 0x0, 0x20000000) socket(0x15, 0x80000, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000006100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x29900, 0x43}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x38}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) listen(r2, 0x0) (async) connect$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a0001"], 0x18}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) (async) socket(0x10, 0x80002, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x28, 0x4, 0x0) (async) getsockopt$nfc_llcp(r6, 0x88, 0x68, 0x0, 0x20000000) (async) 1.110399518s ago: executing program 4 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x5c, r4, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_cm_no_server_u\x00', r2, 0x0, 0x4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xad}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r11], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x0, 0x80, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10, 0xf6}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10, 0xf6}, [@FRA_SRC={0x8, 0x2, @local}]}, 0x24}}, 0x0) 1.034001867s ago: executing program 0 (id=3008): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x5}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 869.92987ms ago: executing program 1 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x9a}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 5.69225ms ago: executing program 4 (id=3010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r1, 0x4a3e4f761dcd662d, 0xfff7fffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 5.317383ms ago: executing program 0 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2, 0x0, 0x0, 0x22}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.934553ms ago: executing program 2 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x26, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x3]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000001780)) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r2, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x26, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x3]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xce) (async) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000001780)) (async) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 3.944336ms ago: executing program 3 (id=2931): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @f={0x4, 0x1, 0x2, 0x5, {0x9, 0x1, '/'}, 0x1}}, 0xb) 3.664751ms ago: executing program 4 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xfffffe94, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x40400c0) 3.195705ms ago: executing program 1 (id=3014): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x24, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1406, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24001000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbb}, {}, {}, [@generic={0x9, 0x1, 0x8, 0x0, 0x2}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x1, 0x2}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='xprtrdma_createmrs\x00', r4, 0x0, 0xbd630000000}, 0x18) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000800)=@req={0x28, &(0x7f00000007c0)={'tunl0\x00', @ifru_data=&(0x7f0000000780)="3ecf143377bdb055e6c6e230554021b087b6578cb11a5a8a039e48c2063cbcc8"}}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000880)=[{0x1, 0x1, {0x2, 0xf0, 0x1}, {0x1, 0xf0, 0x2}, 0x1, 0x2}, {0x0, 0x1, {0x2, 0xff}, {0x2, 0xf0}, 0x1, 0x2}, {0x2, 0x1, {0x2, 0xf0, 0x4}, {0x1, 0x0, 0x1}, 0x2, 0xfe}, {0x1, 0x1, {0x1, 0x0, 0x3}, {0x2, 0xf0, 0x4}, 0xfe}, {0x1, 0x1, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x2}, 0xff}], 0xa0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060855}, 0x800) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r15, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x1c}}, 0x4) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r14) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r17, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x128, 0x1403, 0x200, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4000001) 2.9904ms ago: executing program 0 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 2.718392ms ago: executing program 3 (id=3017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1009383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) 634.499µs ago: executing program 0 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x1000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880) r4 = getgid() r5 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000035c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f00000036c0)=0xe8) r7 = getgid() r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003700)={0x0}, &(0x7f0000003740)=0xc) r10 = getgid() r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003980)=@bpf_ext={0x1c, 0x5, &(0x7f0000003780)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @alu={0x4, 0x1, 0x4, 0x0, 0xa, 0x20, 0xffffffffffffffff}, @alu={0x69a1545bbfbc8f16, 0x2, 0x5, 0xb, 0x6, 0x30, 0x4}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f00000037c0)='GPL\x00', 0x401, 0x1f, &(0x7f0000003800)=""/31, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003840)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000003880)={0x5, 0xe, 0x6, 0x1}, 0x10, 0x166e9, 0xffffffffffffffff, 0x7, &(0x7f00000038c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000003900)=[{0x3, 0x5, 0xd, 0x1}, {0x1, 0x3, 0x3, 0x6}, {0x1, 0x2, 0x8, 0xa}, {0x0, 0x5, 0x4, 0x9}, {0x3, 0x5, 0x9, 0x2}, {0x0, 0x3, 0x8, 0x7}, {0x5, 0x2, 0x0, 0x8}], 0x10, 0x2}, 0x94) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003a40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003a80)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0xc) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000003e80)={0x6, 0xf, &(0x7f0000003c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}]}, &(0x7f0000003cc0)='syzkaller\x00', 0xfffffffc, 0x99, &(0x7f0000003d00)=""/153, 0x41100, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000003dc0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000003e00)=[0x1], &(0x7f0000003e40)=[{0x5, 0x2, 0xb, 0x4}, {0x3, 0x5, 0x6, 0x7}, {0x5, 0x2, 0x5}], 0x10, 0x80000000}, 0x94) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003f40)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000240)="3432a077747717ead28d64063ea458444537d524b2afc9447d5105f7e7593e434c6d7a735ab81279cd5f7bc8a0fcf903f4058808f1d53716bff5bfb10b82862338e65650a82b1de7ce192beb02dfd7a1cf051c7691a7f8be48f73362ff3bffc2ed65129805aa5e29b7b1612e0ea15324fef492ac1ab8ef5d0cceba78e6c110f9237c859f0592f413c5ea980fa22233e92637c423345f2174544eb02179edbe855680482099617d9352547c97d8c3f0cd979655a85e5ba298ed34b0c5d93108d72ecd0be8411fdb342c952710b751cae88f34de8f49b77b10763d4f8643275d27b8fa6468ce9ba520dfe584b7e265470aaa5fc2a2d4", 0xf5}, {&(0x7f0000000580)="8768858ab0846ef862c0e0c0c928b9a78804dc272abd2c913232d4c6a1bfb00817706da5f4ad1d0b860267188b794b170cdb01de4814927ad9ae73b537bc121d8ff911605249bce63432ad3c1dbeadb2f44a203fa45677334a4910e885a1596604fdbc2827b9fbc4b3f5bb998160e4d0f754b62df14920913edf35f6a7ea4f8a8359c0c41f4abbc5a59817e68e42e200fa8c6d106e3c738893804a5e7b9e89fc29832c991c052422caf615bf91711b9871ec", 0xb2}, {&(0x7f0000000640)="392bfeda07cd3069549b5dd26d231af093802e274cfcc8091f486cbd9943c6182a35715a8c4c477e04030089b6e5a970a4fb9446454a18e46d65a79b96b2fa3c2ab668a0ff6852f3fe521090cc5c18bab85801ad9fa836710a260d48587a51", 0x5f}], 0x3, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1, r0, r1]}}], 0xe8, 0x400c1}}, {{&(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="b217d1562ac17bd683824f93a089bc696fafa4dd7d0b", 0x16}, {&(0x7f0000000b00)="f36af7e665c0d65bbfe41206856a724b4a824d88382e8060be009c61f10d7d9cef2a18c7807e384d1fc252b0cff3f9c218a59b7b718becff409a5547cb351ab53eaab58ea5b84bd07f0e3623c4c0edbbd582a06372bfd68b2894de824cdc5443a2d5d70385768f62c620a8497166b95dd92f8315ebf00fc8e39b46477513ce4a114b7a4c5a4c6ab3601385367f73114c1163b1ce0b7bbdd90d231812d99fc364d2", 0xa1}, {&(0x7f0000000bc0)="7c6dfccecbb41784a86f4ae6c77851c7fc2882cce8b65f629a69a4349d1214a8b4c7721ef2fef7a55aec3fb2a88916a0fff51f81f65c0921433315237471cdaf6667324dd2cf80dc79530458acaa8508170ed95f1a234b10eb9b3945d11a78797caee38da3449b043dda9347580115d35b1c07bd3d4bf43c9787664ef3da94cd031eeb68fbfd58dff34adf69bd3cd3d383dcb7c9d1fcabaebd82e973450a2291018ca0875c19713e4d17ba04d8bd0918c6daf8701b6bb0f06fe3addbc7ddd11128006c3cd8fc470639c396883c752225d89711b3d1d65a", 0xd7}, {&(0x7f0000000cc0)="fbc6cc2151fd182d5739ddb9e06ce61e57cbe3cadd35f21054e760421ec7f87ada29b74b4e3e70bc9f4c755d229083a3d439c8f1f8f2197d50dbdaa2277a658945b5af5eef77b9bbbe71e6c623cee92523183b78b3f5303d616e89b84c3c3e65c01834def9a36ff4caf31349ab70c53e6972643c58bac581ee8d7b39da54de40", 0x80}], 0x4, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x8000}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001200)="a5e8d75e1684050cfe3d568c826afcff04621a4c8453813d79de856d16896598c7f46bbbe509bdb864f9ead807135284e46614874b95f97a3884a3706cf3ece406c3b8c5304ad9580fe8484fe1e397de9bb01af46ccd151e537368fe2f3d7a21387b1c7aa09b65af2eab802019ef4046c4874dbb170e7f257fd3e57e3049acbde45256c7be67c3851ebbf74d4e6a", 0x8e}, {&(0x7f00000012c0)="defaba67f5dc2d486b43ef59735472e822a932b6ce1f24ff6a02c8ded9069de7734d42b2dad17c3e3f3c27d32acead14e2e6a343690f0d2115f339349d0d700624d877f61cba3289cbd09a178efdf31996ef648f69ee81b7790bb3ac121d", 0x5e}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001480)="f49f238687f1fe3977ab62b7404d", 0xe}, {&(0x7f00000014c0)="d70abad05c8c9c6078a331d37cb878f81eca1533c56f73670e31ab", 0x1b}], 0x2, &(0x7f0000001680)=[@rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r1, r0, r0, r0, r1, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r0]}}], 0xd8}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000001800)="c5b011d8e1764658f16e9e4452a87137722d1f3d3870eed0e9216a01df9e3b3fd083892a5bb9d91514e78ce0b9dfacfa595578a593ce98f2a649f908eea460c04204be13082ce982dbec0682032042e4d331efb8c1428d3daa95ac6ade2acb6f8f75353454aa3c1f007b076b6ec427dd", 0x70}, {&(0x7f0000001880)="5c0c548a8689536021791b44b6a045447bff359b353bfe704f24b7ae2e77db2dd30d9634847b640f9e320f7b", 0x2c}, {&(0x7f00000018c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4810}}, {{&(0x7f0000002900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002980)="b9f8bda1604862e428c2a4877df85f276090c0b938cf22ed5a07a774bade9a959bd2d412e0b2598afa4a83d6dea31b", 0x2f}, {&(0x7f00000029c0)="89bcfd6b3f172d885f8d9dc99a151954ef9eb98fb3de15b0133658216d353acccb098095504c7b5753508d04d8deeff48cc4f83079e9f449bfc55180056723dad746ebcc93e48cb0591abb335c1680db682e0d27f19a2e2f776ffdb224", 0x5d}], 0x2, &(0x7f0000002bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0x60, 0x20000880}}, {{&(0x7f0000002c40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="0a57f98af64ac378f157bcfc2e06a69171e80868a7f03f751bbf87c3a192f6fd47aba5b058a16336b732a81dc5eb633380d4d0f1a5ac44e33cb48d6427e0dd09cdf875c413a45f3967a6a30332aa789a8add9727634954182ac46a4da56b2b52745c7bf69bf03fbf112094a378aa40e431e817bb764d8414001fb8b298019a5de461ce565ebce759141ebf91dd0f5dfd725422692b9a3d2775755482d75d8472e3a4d4de35eac71f9f58fa060e469a9399d457afae0f87f24b1190672d6de7", 0xbf}, {&(0x7f0000002d80)="9f8ccac522dce9ddb58900eb44cce8d61ab2b3db5b262b8b79747f0e20b3fbc3bcb0d5", 0x23}, {&(0x7f0000002dc0)="ec32bcfa31367ee08d998edf508dbe741de761c6ac8d47a6d5a1a4c0ab213ebe2f0483c5f1de174864408d004e8b0a025c508bec683a1e8bd3d6b92f3f92582a58d013dc6d4d0c926e70067f66aae38ca852e83b97f9e7c58d778e2b6bdee61632a82e86d3f61f3026b724f760bd1f4c04bede107cc2ad54f927d9babc83be7518513917ff297a1c571bd33971c49d6440b2cd35cfef5697214f", 0x9a}, {&(0x7f0000002e80)="62cb5ea03bbd92d18bfab1280bb5ba3e8b1d2c27bc42a9559baa6bdea4cb357adadacc0120af554dde9b87d97132d7300aa64e35eb528d86e9d3fd8e261cf2f87116796e394c4e3990bd83b7de16b1e2a48b6dce", 0x54}], 0x4, 0x0, 0x0, 0x4000}}, {{&(0x7f0000002f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002fc0)="6073907e915ed4ab0781b10730a2e60290820b30855a00d106e6a273e439349a8852bc489fd9b9fe5f43f79dc7e661b428ce47b393174151a6ea9ab548d61ba12a7ab87418e871a032b5842d4a70259d3c8f0e3f7d88d434423cfb073294fefba388d12d868f21fd2a6953c89dbed8b62a8720421a42233511a4c0bb0d1723531f3c019080abfcf8da35a014dba9f526c2c7fdcb2cdad5fb5496e8d093203222d76bf1416bda984508132d9fe572af95c8a99dd0c85e9dc584d3cabf7554ce36", 0xc0}], 0x1, &(0x7f00000030c0)=[@rights={{0x30, 0x1, 0x1, [r0, r1, r1, r1, r1, r1, r0, r0]}}], 0x30, 0x24008004}}, {{&(0x7f0000003100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003180)="5aa405486eb37b26f44b607bb815773d7a9b64dabadf94e1f21c17760aa15121bdb1abf1481365fc95e83cf8819eb22a2d9cffe8f9676f73677d", 0x3a}, {&(0x7f00000031c0)="3456f7cf9cee376949a22b0c8c6571", 0xf}, {&(0x7f0000003200)="ee062bd51dee8f0b474951299dc2b4bfdca5d1442c91d9a8cedf2c2eed19b97cd5201a6a142190a54d2692622fac234735ae27f5f630d012042651ab487c8128b6879533ce7c32d6be62a3a77f24678d08f7b04ef91cac49c0af77b142b473db91dfbb7fcd9530867eeac943b2db3c3701232f5c223089b33e450b56cb826c7d", 0x80}, {&(0x7f0000003280)="2bb78dd89165d4096a3cfe5dba8e5eef54abd336f50bdc265257b9bd704a8416ad9b4072018bf6255bcd37386b61754f4fb13570c3f1896aeaa113a73c53c1331537209fbe21742936b2083ffe4a3a08c281cdb350ab5b615664c543310fa5748fc2a32bb7f06963392ea02d12ebbb0a29bb6579a8c4f1d054b9bdc41c1757432d6cc8c71e4e338d", 0x88}, {&(0x7f0000003340)="2145837f883606a2488fdc4d30f49d82fce85a64f88d8ccc6b92a72d2224ccb4001b30fdef621ea838d1f7f4112d1778833fe86029e0690f1941b337dbd5d992eda6c6f216a4724c05070a009f9faeb1b86688ab7f817c80acce46eb18cb7adf724b91bc66dcc2e7d854bb8f8e89febff25f8a216030eda2dc86ab197aac6aa72b61a4fe5d85f7e368ae8dba6af23acf1f90dd65c9e09517adcf3a14ef53f23c2b", 0xa1}, {&(0x7f0000003400)="2eb37d649e10c610caf01a428b07a196bec51c", 0x13}, {&(0x7f0000003440)="b6f61ad557f6d4206d63a5887c04e80f87d9e3f2c57d4006cc4e20aea5140c31d6c2f588424916161fb18bfac43812f4b590f5f11bfd57388496a10a1fa47c", 0x3f}, {&(0x7f0000003480)="e38fae1776fe77bc5c8b9c2043ee12999409f682195fc01fe462f1e5372a82f965a7fe3ed31ea50b10ead69f3167288f6a1ba56b672a48cdfcd85c8517ac387426743c4ccf7a0e854f6049b3b1444d3f9d4d553813dcacf1c8349201584c515c2a3d626371940c59efac1255287bae731a06e5345c476cac267bfd528d257b4ef2be362206280eb2165661bdb5e0", 0x8e}], 0x8, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r8, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r0, r0, r0, r0, r0, r1, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r0, r15, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r16, r1, r0]}}], 0x158, 0x4000000}}], 0x9, 0x40000) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r17, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r17, &(0x7f0000000340)="07000000010000", 0x7) r18 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r18, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x5c, &(0x7f0000000500)={@link_local, @random="dce65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x26, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x26, 0x0, @opaque="a1af4372cb4f92d284c5857741dacdc0057114741abcf1613c3ed3ffcbdf"}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) 545.519µs ago: executing program 1 (id=3019): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/223, 0xdf}], 0x1, 0x8, 0x7) openat$cgroup_ro(r0, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) 372.164µs ago: executing program 3 (id=3020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x19, @private1, 0x1000}], 0x1c) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x3, 0xf, 0x1ff}}) (async) getpeername$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, 0x8) 0s ago: executing program 4 (id=3021): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth0_vlan\x00', {0x5}, 0x200}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) kernel console output (not intermixed with test programs): policy match revision 0 supported [ 151.890269][ T9114] unable to load match [ 152.171918][ T9143] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.244000][ T24] IPVS: starting estimator thread 0... [ 152.367074][ T9152] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.459182][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 152.535062][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 152.592280][ T9173] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.625171][ T9173] netlink: 80 bytes leftover after parsing attributes in process `syz.1.926'. [ 152.944074][ T9193] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 153.280628][ T9212] netlink: 'syz.4.936': attribute type 11 has an invalid length. [ 153.398478][ T9222] veth1_macvtap: left promiscuous mode [ 153.500248][ T9232] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 153.514768][ T9232] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 153.555125][ T9232] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 153.573187][ T9232] netlink: 'syz.4.942': attribute type 2 has an invalid length. [ 153.975144][ T9268] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 153.983535][ T9269] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 154.077386][ T9273] pimreg: entered allmulticast mode [ 154.084284][ T9273] pimreg: left allmulticast mode [ 154.138567][ T9266] bridge_slave_1: left allmulticast mode [ 154.144336][ T9266] bridge_slave_1: left promiscuous mode [ 154.166104][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.198551][ T9266] bridge_slave_0: left allmulticast mode [ 154.206253][ T9266] bridge_slave_0: left promiscuous mode [ 154.220755][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.413731][ T9298] netlink: 'syz.4.963': attribute type 2 has an invalid length. [ 154.425283][ T9298] nbd: must specify a device to reconfigure [ 154.443791][ T9298] sock: sock_timestamping_bind_phc: sock not bind to device [ 154.702871][ T9309] syz.1.965: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.758540][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.1.965 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 154.758569][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.758587][ T9309] Call Trace: [ 154.758595][ T9309] [ 154.758605][ T9309] dump_stack_lvl+0x189/0x250 [ 154.758644][ T9309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.758668][ T9309] ? __pfx__printk+0x10/0x10 [ 154.758693][ T9309] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.758718][ T9309] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.758744][ T9309] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 154.758771][ T9309] warn_alloc+0x214/0x310 [ 154.758788][ T9309] ? stack_depot_save_flags+0x40/0x900 [ 154.758811][ T9309] ? __pfx_warn_alloc+0x10/0x10 [ 154.758830][ T9309] ? kasan_save_track+0x4f/0x80 [ 154.758854][ T9309] ? xskq_create+0x56/0x170 [ 154.758870][ T9309] ? xsk_init_queue+0xb0/0x110 [ 154.758886][ T9309] ? xsk_setsockopt+0x43f/0x710 [ 154.758918][ T9309] ? do_sock_setsockopt+0x179/0x1b0 [ 154.758945][ T9309] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 154.758971][ T9309] ? do_syscall_64+0xfa/0x3b0 [ 154.758991][ T9309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759020][ T9309] __vmalloc_node_range_noprof+0x125/0x12f0 [ 154.759083][ T9309] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.759118][ T9309] ? __kasan_kmalloc+0x93/0xb0 [ 154.759149][ T9309] vmalloc_user_noprof+0xad/0xf0 [ 154.759178][ T9309] ? xskq_create+0xbf/0x170 [ 154.759199][ T9309] xskq_create+0xbf/0x170 [ 154.759222][ T9309] xsk_init_queue+0xb0/0x110 [ 154.759244][ T9309] xsk_setsockopt+0x43f/0x710 [ 154.759277][ T9309] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.759311][ T9309] ? __fget_files+0x2a/0x420 [ 154.759329][ T9309] ? aa_sock_opt_perm+0x74/0x110 [ 154.759352][ T9309] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 154.759374][ T9309] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.759405][ T9309] do_sock_setsockopt+0x179/0x1b0 [ 154.759439][ T9309] __x64_sys_setsockopt+0x13f/0x1b0 [ 154.759474][ T9309] do_syscall_64+0xfa/0x3b0 [ 154.759494][ T9309] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.759514][ T9309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759533][ T9309] ? clear_bhb_loop+0x60/0xb0 [ 154.759558][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759577][ T9309] RIP: 0033:0x7fbecb58e929 [ 154.759626][ T9309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.759643][ T9309] RSP: 002b:00007fbecc437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.759664][ T9309] RAX: ffffffffffffffda RBX: 00007fbecb7b5fa0 RCX: 00007fbecb58e929 [ 154.759679][ T9309] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 154.759692][ T9309] RBP: 00007fbecb610ca1 R08: 0000000000000004 R09: 0000000000000000 [ 154.759705][ T9309] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.759718][ T9309] R13: 0000000000000000 R14: 00007fbecb7b5fa0 R15: 00007ffd748cf768 [ 154.759751][ T9309] [ 154.759856][ T9309] Mem-Info: [ 154.947154][ T9311] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 154.953644][ T9322] __nla_validate_parse: 14 callbacks suppressed [ 154.953660][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 155.035848][ T9309] active_anon:6913 inactive_anon:0 isolated_anon:0 [ 155.035848][ T9309] active_file:1189 inactive_file:39856 isolated_file:0 [ 155.035848][ T9309] unevictable:768 dirty:90 writeback:0 [ 155.035848][ T9309] slab_reclaimable:10816 slab_unreclaimable:100842 [ 155.035848][ T9309] mapped:31857 shmem:3251 pagetables:1118 [ 155.035848][ T9309] sec_pagetables:0 bounce:0 [ 155.035848][ T9309] kernel_misc_reclaimable:0 [ 155.035848][ T9309] free:1329101 free_pcp:13468 free_cma:0 [ 155.140705][ T9309] Node 0 active_anon:29524kB inactive_anon:0kB active_file:4756kB inactive_file:159224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133372kB dirty:372kB writeback:0kB shmem:13368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12032kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.142361][ T9325] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 155.185910][ T9309] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.187866][ T9327] netlink: 'syz.3.966': attribute type 83 has an invalid length. [ 155.217953][ T9309] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.264944][ T9329] netlink: 'syz.0.969': attribute type 23 has an invalid length. [ 155.266139][ T9309] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 155.305865][ T9309] Node 0 DMA32 free:1401424kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28580kB inactive_anon:0kB active_file:4756kB inactive_file:157644kB unevictable:1536kB writepending:372kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:32004kB local_pcp:15748kB free_cma:0kB [ 155.361036][ T9309] lowmem_reserve[]: 0 0 1 1 1 [ 155.371012][ T9309] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 155.437132][ T9324] bond3: (slave gretap1): making interface the new active one [ 155.445409][ T9324] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 155.445952][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 155.466819][ T9309] Node 1 Normal free:3898664kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:8640kB free_cma:0kB [ 155.521315][ T9309] lowmem_reserve[]: 0 0 0 0 0 [ 155.545839][ T9309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.574379][ T9309] Node 0 DMA32: 1225*4kB (UM) 986*8kB (UME) 354*16kB (UME) 351*32kB (UME) 166*64kB (UME) 81*128kB (UM) 44*256kB (UME) 31*512kB (UM) 10*1024kB (UME) 7*2048kB (UME) 317*4096kB (M) = 1400820kB [ 155.606340][ T9309] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 155.619214][ T9309] Node 1 Normal: 174*4kB (UME) 44*8kB (UME) 35*16kB (UME) 81*32kB (UME) 29*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (ME) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898664kB [ 155.639829][ T9309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.650469][ T9309] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.659997][ T9309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.671553][ T9309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.681107][ T9309] 45242 total pagecache pages [ 155.686022][ T9309] 0 pages in swap cache [ 155.690183][ T9309] Free swap = 124996kB [ 155.694325][ T9309] Total swap = 124996kB [ 155.698516][ T9309] 2097051 pages RAM [ 155.702311][ T9309] 0 pages HighMem/MovableOnly [ 155.707051][ T9309] 425382 pages reserved [ 155.711191][ T9309] 0 pages cma reserved [ 155.758502][ T9322] vlan0 (unregistering): left allmulticast mode [ 155.764805][ T9322] veth0_vlan (unregistering): left allmulticast mode [ 155.774363][ T9322] vlan0 (unregistering): left promiscuous mode [ 156.117915][ T9325] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.736972][ T9356] sctp: [Deprecated]: syz.3.977 (pid 9356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.736972][ T9356] Use struct sctp_sack_info instead [ 157.180663][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.193062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.221454][ T9366] netlink: 164 bytes leftover after parsing attributes in process `syz.3.982'. [ 157.433143][ T9381] netlink: 788 bytes leftover after parsing attributes in process `syz.3.986'. [ 157.650380][ T9387] tipc: Started in network mode [ 157.655388][ T9387] tipc: Node identity beae00c6a129, cluster identity 4711 [ 157.668984][ T9387] tipc: Enabled bearer , priority 0 [ 157.691553][ T9387] syzkaller0: entered promiscuous mode [ 157.699596][ T9387] syzkaller0: entered allmulticast mode [ 157.717599][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.988'. [ 157.734846][ T9398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.989'. [ 157.737849][ T9394] pimreg: entered allmulticast mode [ 157.752514][ T9387] tipc: Resetting bearer [ 157.765590][ T9386] tipc: Resetting bearer [ 157.799408][ T9400] SET target dimension over the limit! [ 157.847926][ T9386] tipc: Disabling bearer [ 158.354574][ T9439] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 158.714537][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 158.738178][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 158.795126][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1011'. [ 158.818676][ T9478] veth3: entered allmulticast mode [ 158.942913][ T9491] x_tables: duplicate underflow at hook 1 [ 159.264870][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 159.408450][ T9523] x_tables: duplicate underflow at hook 3 [ 159.415127][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1024'. [ 159.933888][ T9564] batadv_slave_1: entered allmulticast mode [ 159.945351][ T9561] batadv_slave_1: left allmulticast mode [ 160.082925][ T9571] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 160.306509][ T9590] __nla_validate_parse: 7 callbacks suppressed [ 160.306527][ T9590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1045'. [ 160.354737][ T9592] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 160.581690][ T9607] netlink: 'syz.1.1052': attribute type 1 has an invalid length. [ 160.614539][ T9607] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1052'. [ 161.074302][ T9639] x_tables: duplicate underflow at hook 3 [ 161.193336][ T9644] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1063'. [ 161.425566][ T9654] tipc: Started in network mode [ 161.433231][ T9654] tipc: Node identity aa1ccbee4d1a, cluster identity 4711 [ 161.440981][ T9654] tipc: Enabled bearer , priority 0 [ 161.448107][ T9659] tipc: Enabling of bearer rejected, already enabled [ 161.457429][ T9653] syzkaller0: entered promiscuous mode [ 161.463185][ T9653] syzkaller0: entered allmulticast mode [ 161.642743][ T9669] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1073'. [ 161.735084][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 161.799526][ T9673] pimreg3: entered allmulticast mode [ 162.020829][ T9683] dvmrp8: entered allmulticast mode [ 162.178929][ T9648] tipc: Resetting bearer [ 162.229871][ T9648] tipc: Disabling bearer [ 162.662106][ T9719] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1087'. [ 162.797456][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 162.915580][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 162.927953][ T5945] IPVS: starting estimator thread 0... [ 163.004384][ T9730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.036431][ T9735] IPVS: using max 27 ests per chain, 64800 per kthread [ 163.218265][ T9752] ipt_REJECT: TCP_RESET invalid for non-tcp [ 163.278954][ T9756] netlink: 'syz.1.1096': attribute type 21 has an invalid length. [ 163.296091][ T9756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1096'. [ 163.639821][ T9782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.710513][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1102'. [ 163.751558][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.760381][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.780726][ T9779] bond0: left allmulticast mode [ 163.786129][ T9779] bond_slave_0: left allmulticast mode [ 163.791906][ T9779] bond_slave_1: left allmulticast mode [ 163.809040][ T9779] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 163.830308][ T9788] batadv_slave_1: entered promiscuous mode [ 163.867292][ T9788] tipc: Enabled bearer , priority 0 [ 163.874909][ T9788] syzkaller0: entered promiscuous mode [ 163.890565][ T9788] syzkaller0: entered allmulticast mode [ 163.910976][ T9788] tipc: Resetting bearer [ 163.930687][ T9787] tipc: Resetting bearer [ 163.984300][ T9787] tipc: Disabling bearer [ 164.073092][ T9787] batadv_slave_1: left promiscuous mode [ 164.098551][ T9802] ip6t_srh: unknown srh invflags 4449 [ 164.259868][ T9816] batadv0: Device is already in use. [ 164.597350][ T9840] netlink: 'syz.0.1118': attribute type 1 has an invalid length. [ 164.620226][ T9843] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20003 [ 164.951213][ T9856] netlink: 'syz.1.1123': attribute type 8 has an invalid length. [ 165.048889][ T9862] Illegal XDP return value 16128 on prog (id 312) dev syz_tun, expect packet loss! [ 165.081890][ T9862] geneve2: entered promiscuous mode [ 165.087775][ T9862] geneve2: entered allmulticast mode [ 165.380646][ T9890] xt_hashlimit: invalid rate [ 165.565254][ T9899] sctp: [Deprecated]: syz.0.1136 (pid 9899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.565254][ T9899] Use struct sctp_sack_info instead [ 165.970666][ T9448] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 166.174120][ T9928] __nla_validate_parse: 39 callbacks suppressed [ 166.174139][ T9928] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1145'. [ 166.299947][ T9939] team_slave_0: mtu greater than device maximum [ 166.694804][ T9958] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 166.702824][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 167.241607][ T9987] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1159'. [ 167.364375][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 167.378726][ T9997] netlink: 'syz.0.1166': attribute type 64 has an invalid length. [ 167.387091][ T9996] netlink: 'syz.0.1166': attribute type 322 has an invalid length. [ 167.395257][ T9997] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1166'. [ 167.427092][T10001] netlink: 'syz.3.1165': attribute type 7 has an invalid length. [ 167.440006][T10001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.507572][ T55] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 167.632756][T10019] ip6erspan0: entered promiscuous mode [ 167.695362][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 167.717210][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'. [ 167.751463][T10025] ipt_rpfilter: unknown options [ 167.773712][T10025] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 167.797824][T10025] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.841361][T10027] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1172'. [ 168.411151][T10046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1176'. [ 168.430754][T10042] x_tables: ip_tables: osf match: only valid for protocol 6 [ 168.609402][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 168.920017][ T55] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 168.973881][T10088] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 169.323668][T10105] xt_hashlimit: invalid interval [ 169.862196][T10121] xt_limit: Overflow, try lower: 2147483649/128 [ 170.099884][T10135] 0ªX¹¦D: renamed from gretap0 (while UP) [ 170.140247][T10135] 0ªX¹¦D: entered allmulticast mode [ 170.148322][T10135] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 170.945371][T10186] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20001 [ 171.382792][T10211] __nla_validate_parse: 13 callbacks suppressed [ 171.382810][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1229'. [ 171.530801][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1229'. [ 171.565814][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 171.609274][T10220] x_tables: duplicate underflow at hook 1 [ 171.620880][T10219] bridge0: port 4(gretap0) entered blocking state [ 171.638392][T10219] bridge0: port 4(gretap0) entered disabled state [ 171.647671][T10219] gretap0: entered allmulticast mode [ 171.655346][T10219] gretap0: left allmulticast mode [ 171.952524][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 171.986641][T10239] pim6reg: entered allmulticast mode [ 172.196807][T10251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1237'. [ 172.208034][T10257] erspan0: entered promiscuous mode [ 172.213641][T10257] vlan2: entered promiscuous mode [ 172.924278][T10287] netlink: 'syz.1.1254': attribute type 25 has an invalid length. [ 172.978867][T10290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.116602][T10303] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 173.313069][T10312] netlink: 'syz.3.1262': attribute type 32 has an invalid length. [ 173.341424][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 173.349080][T10314] openvswitch: netlink: IP tunnel dst address not specified [ 173.352741][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 173.376541][T10312] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 173.589813][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1268'. [ 173.910070][T10347] dvmrp8: entered allmulticast mode [ 174.132432][T10360] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1275'. [ 174.147068][T10360] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1275'. [ 174.150263][T10359] tipc: Enabled bearer , priority 0 [ 174.182665][T10363] netlink: 'syz.1.1278': attribute type 10 has an invalid length. [ 174.190948][T10360] netlink: 'syz.4.1275': attribute type 6 has an invalid length. [ 174.199094][T10359] syzkaller0: entered promiscuous mode [ 174.204595][T10359] syzkaller0: entered allmulticast mode [ 174.213225][T10360] netlink: 'syz.4.1275': attribute type 5 has an invalid length. [ 174.235109][T10363] veth0_macvtap: left promiscuous mode [ 174.315190][T10359] tipc: Resetting bearer [ 174.332956][T10366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.355674][T10358] tipc: Resetting bearer [ 174.436676][T10358] tipc: Disabling bearer [ 174.743188][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.771128][T10372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.805288][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.813371][T10372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.826052][T10380] x_tables: duplicate underflow at hook 2 [ 174.835042][T10383] x_tables: duplicate underflow at hook 2 [ 174.973009][T10366] af_packet: tpacket_rcv: packet too big, clamped from 1596 to 4294967272. macoff=96 [ 175.097171][T10368] syzkaller1: entered promiscuous mode [ 175.129967][T10368] syzkaller1: entered allmulticast mode [ 175.985107][T10453] ip6erspan0: entered promiscuous mode [ 176.072956][T10458] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 176.073552][T10465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.147501][T10475] netlink: 'syz.4.1303': attribute type 15 has an invalid length. [ 176.199839][T10477] smc: net device erspan0 applied user defined pnetid SYZ0 [ 176.222669][T10481] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 176.233307][T10481] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 176.442987][T10497] __nla_validate_parse: 11 callbacks suppressed [ 176.443005][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'. [ 176.449520][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 177.086741][T10548] xt_ecn: cannot match TCP bits for non-tcp packets [ 177.262952][T10565] netlink: 'syz.0.1331': attribute type 7 has an invalid length. [ 177.471190][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1335'. [ 177.565639][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1337'. [ 177.592348][T10584] tipc: Invalid UDP bearer configuration [ 177.592428][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 178.070679][T10603] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.080013][T10603] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.088887][T10603] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.097716][T10603] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.130217][T10614] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 178.258764][T10619] openvswitch: netlink: Multiple metadata blocks provided [ 178.844090][T10653] Bluetooth: MGMT ver 1.23 [ 178.944711][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 178.962654][T10658] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1360'. [ 179.139349][T10669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1363'. [ 179.148875][T10669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1363'. [ 179.339467][T10680] x_tables: duplicate underflow at hook 1 [ 179.340145][T10677] validate_nla: 2 callbacks suppressed [ 179.340160][T10677] netlink: 'syz.3.1368': attribute type 13 has an invalid length. [ 179.938778][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.968800][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.971285][T10713] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 180.032294][T10720] netlink: 'syz.3.1381': attribute type 83 has an invalid length. [ 180.061910][T10720] netlink: 'syz.3.1381': attribute type 10 has an invalid length. [ 180.110283][T10720] team0: Device hsr_slave_0 failed to register rx_handler [ 180.130131][T10729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1384'. [ 180.231846][T10733] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 180.323909][T10739] x_tables: duplicate underflow at hook 4 [ 180.360819][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 180.379614][T10744] x_tables: duplicate underflow at hook 4 [ 180.395904][T10735] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 180.644770][T10758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.433930][T10792] IPv6: sit1: Disabled Multicast RS [ 181.537214][T10796] netlink: 'syz.2.1405': attribute type 10 has an invalid length. [ 181.569962][T10798] __nla_validate_parse: 4 callbacks suppressed [ 181.569978][T10798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1408'. [ 181.572279][T10796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1405'. [ 181.601786][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 181.639609][T10796] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.679545][T10813] bridge0: entered promiscuous mode [ 181.690466][T10813] macsec1: entered promiscuous mode [ 181.707542][T10808] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 181.728116][T10808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1407'. [ 181.765137][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 181.776986][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 181.862677][T10796] tipc: Enabling of bearer rejected, failed to enable media [ 181.896010][T10820] sctp: [Deprecated]: syz.3.1411 (pid 10820) Use of int in maxseg socket option. [ 181.896010][T10820] Use struct sctp_assoc_value instead [ 182.282267][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1420'. [ 182.550425][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 182.874998][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 182.940159][T10888] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 183.003755][T10892] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 183.017435][T10888] bond3 (unregistering): Released all slaves [ 183.018122][T10892] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1436'. [ 183.059742][T10893] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.084431][T10892] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 183.092359][T10892] netlink: 'syz.2.1436': attribute type 2 has an invalid length. [ 183.172855][T10900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.222011][T10893] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 183.496712][T10909] bond3 (unregistering): Released all slaves [ 183.831702][T10925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.841556][T10925] bond2: (slave bond3): making interface the new active one [ 183.850086][T10925] bond2: (slave bond3): Enslaving as an active interface with an up link [ 183.858935][T10931] bond2: entered allmulticast mode [ 183.878122][T10931] bond3: entered allmulticast mode [ 183.907720][T10934] team0: Device vti0 is of different type [ 183.961825][T10950] Bluetooth: MGMT ver 1.23 [ 184.078217][T10957] Unsupported ieee802154 address type: 0 [ 184.193775][T10959] erspan0: entered allmulticast mode [ 184.442991][T10974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.479139][T10973] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.558390][T10984] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20004 [ 184.729566][T10986] vxcan2: entered promiscuous mode [ 184.743621][T10986] vxcan2: entered allmulticast mode [ 184.921070][T10999] netem: invalid attributes len -24 [ 184.929830][T10999] netem: change failed [ 185.200504][ C0] vcan0: j1939_session_tx_dat: 0xffff888054677800: queue data error: -100 [ 185.209236][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 185.216991][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 185.224665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.232549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.240519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.248395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.256373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.264208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.272197][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.280057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.288089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.295959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.303889][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.311772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.319734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.327613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.335571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.343464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.351424][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.359295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.367244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.375073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.383057][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.390918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.398880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.406751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.414683][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.422554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.430505][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.438390][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.446341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.454168][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.462127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.469994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.477943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.485798][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.493718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.501585][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.509552][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.517418][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.525344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.533212][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.541188][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.549064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.557388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.565227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.573217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.581080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.589065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.596922][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.604892][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.612758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.620715][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.628583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.636659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.644492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.652469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.660700][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.669066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.676938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.684861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.692731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.700704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.708658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.716632][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.724457][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.732421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.740286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.748278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.756141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.764083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.771951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.779920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.787788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.795751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.803615][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.811592][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.819489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.827453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.835298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.843286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.851152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.859120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.866988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.874927][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.882799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.890772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.898634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.906613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.914452][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.922427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.930292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.938278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.946151][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.954101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.961976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 185.969958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 185.977833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 186.578803][T11049] __nla_validate_parse: 8 callbacks suppressed [ 186.578820][T11049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1475'. [ 186.722343][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1478'. [ 186.854819][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 187.293828][T11098] bridge3: entered allmulticast mode [ 187.316102][T11102] delete_channel: no stack [ 187.329250][T11098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 187.484625][T11107] validate_nla: 1 callbacks suppressed [ 187.484642][T11107] netlink: 'syz.1.1491': attribute type 2 has an invalid length. [ 187.695090][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 187.760134][T11128] xt_time: unknown flags 0x4 [ 187.870960][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 187.908014][T11139] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 187.934619][T11145] netlink: 'syz.4.1506': attribute type 83 has an invalid length. [ 187.947533][T11141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1502'. [ 188.112550][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 188.215527][T11168] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1511'. [ 188.227846][T11167] xt_CT: No such helper "snmp" [ 188.259368][T11160] batadv0: Device is already in use. [ 188.394292][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 189.326850][T11246] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 189.813821][T11278] syzkaller1: entered promiscuous mode [ 189.820086][T11278] syzkaller1: entered allmulticast mode [ 190.072627][T11297] netlink: 'syz.4.1547': attribute type 13 has an invalid length. [ 190.106025][T11297] netlink: 'syz.4.1547': attribute type 58 has an invalid length. [ 190.360585][T11319] openvswitch: netlink: EtherType 257 is less than min 600 [ 190.468508][T11324] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 190.606010][T11335] set match dimension is over the limit! [ 190.690107][T11335] netlink: 'syz.0.1559': attribute type 33 has an invalid length. [ 190.806236][T11344] SET target dimension over the limit! [ 190.973114][T11356] tipc: New replicast peer: 255.255.255.255 [ 190.982121][T11356] tipc: Enabled bearer , priority 10 [ 191.244691][T11381] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.503090][T11395] IPv4: Oversized IP packet from 127.202.26.0 [ 191.705533][T11410] __nla_validate_parse: 18 callbacks suppressed [ 191.705551][T11410] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1583'. [ 191.883921][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'. [ 191.910488][T11421] macsec0: entered promiscuous mode [ 191.944415][T11424] tipc: Enabling of bearer rejected, failed to enable media [ 191.976604][ T24] tipc: Node number set to 1400442437 [ 192.060998][T11433] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 192.112502][T11433] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.153563][T11433] bond0: (slave team0): Enslaving as an active interface with an up link [ 192.352465][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 192.614481][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 192.719985][T11468] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1600'. [ 192.729844][T11474] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1601'. [ 192.949898][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1600'. [ 193.379242][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 193.427748][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.467806][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 193.544739][T11504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.648616][T11518] netlink: 'syz.1.1616': attribute type 11 has an invalid length. [ 193.890811][T11528] sctp: [Deprecated]: syz.3.1621 (pid 11528) Use of int in maxseg socket option. [ 193.890811][T11528] Use struct sctp_assoc_value instead [ 193.940113][T11532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1622'. [ 193.957081][T11532] 0ªX¹¦D: left allmulticast mode [ 193.988758][T11532] sctp: [Deprecated]: syz.4.1622 (pid 11532) Use of int in maxseg socket option. [ 193.988758][T11532] Use struct sctp_assoc_value instead [ 194.328262][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389914][T11541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.404208][T11541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.417721][T11541] bond0 (unregistering): Released all slaves [ 194.444611][T11549] bridge3: entered promiscuous mode [ 194.450042][T11549] bridge3: entered allmulticast mode [ 194.484095][T11571] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 194.511501][ T5945] syz2: Port: 1 Link DOWN [ 195.005217][T11606] pimreg: entered allmulticast mode [ 195.017123][T11606] pimreg: left allmulticast mode [ 195.022275][T11606] dvmrp8: left allmulticast mode [ 195.031990][T11608] delete_channel: no stack [ 195.118877][T11613] bridge0: entered allmulticast mode [ 195.561974][T11638] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 196.528076][T11691] xt_TCPMSS: Only works on TCP SYN packets [ 196.743344][T11698] __nla_validate_parse: 75 callbacks suppressed [ 196.743371][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 196.745066][T11699] netlink: 'syz.2.1665': attribute type 13 has an invalid length. [ 196.780621][T11706] syzkaller1: entered promiscuous mode [ 196.799991][T11706] syzkaller1: entered allmulticast mode [ 196.819510][T11699] lo: entered promiscuous mode [ 196.824472][T11699] lo: entered allmulticast mode [ 196.833827][T11699] tunl0: entered promiscuous mode [ 196.839149][T11699] tunl0: entered allmulticast mode [ 196.844926][T11699] gre0: entered promiscuous mode [ 196.852530][T11699] gre0: entered allmulticast mode [ 196.859530][T11699] gretap0: entered promiscuous mode [ 196.864972][T11699] gretap0: entered allmulticast mode [ 196.886416][T11699] gretap0: refused to change device tx_queue_len [ 196.892888][T11699] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.029656][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1668'. [ 197.040371][T11723] raw_sendmsg: syz.4.1672 forgot to set AF_INET. Fix it! [ 197.160254][T11729] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 197.214122][ T9451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.253401][ T9451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.483335][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 197.559500][T11752] netlink: 'syz.2.1681': attribute type 21 has an invalid length. [ 197.568480][T11752] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1681'. [ 197.732063][T11762] xt_addrtype: ipv6 does not support BROADCAST matching [ 197.990437][T11779] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 197.991313][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 198.025883][T11780] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 198.043431][T11780] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1688'. [ 198.531143][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 198.568105][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 198.598266][T11815] geneve2: entered promiscuous mode [ 198.689644][T11819] ip6gretap0: entered promiscuous mode [ 198.695354][T11819] ip6gretap0: entered allmulticast mode [ 198.820844][T11828] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007 [ 198.935214][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 199.544503][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 199.662770][T11892] netlink: 'syz.0.1721': attribute type 19 has an invalid length. [ 199.662832][T11894] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 199.833380][ T55] syzkaller0: tun_net_xmit 76 [ 199.837007][T11902] syzkaller0: create flow: hash 3800075295 index 1 [ 199.839006][ T55] syzkaller0: tun_net_xmit 48 [ 199.856330][ T5909] syzkaller0: tun_net_xmit 76 [ 199.885393][T11901] syzkaller0: delete flow: hash 3800075295 index 1 [ 200.605241][T11918] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 200.625857][T11918] netlink: 'syz.0.1731': attribute type 3 has an invalid length. [ 200.633662][T11918] netlink: 'syz.0.1731': attribute type 235 has an invalid length. [ 201.902619][T11949] bond6: entered promiscuous mode [ 201.906241][T11962] netlink: 'syz.2.1747': attribute type 7 has an invalid length. [ 201.929412][T11962] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 201.936256][T11949] bond6: entered allmulticast mode [ 201.942739][T11949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.945936][T11962] __nla_validate_parse: 1 callbacks suppressed [ 201.945953][T11962] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1747'. [ 201.974304][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 201.987823][T11962] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 201.997318][T11963] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 202.464002][T11997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1756'. [ 202.590909][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 202.613869][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'. [ 202.653988][T12007] sock: sock_set_timeout: `syz.0.1758' (pid 12007) tries to set negative timeout [ 202.783950][T12022] bridge_slave_0: left allmulticast mode [ 202.818858][T12022] bridge_slave_0: left promiscuous mode [ 202.833338][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.858978][T12022] bridge_slave_1: left allmulticast mode [ 202.868361][T12022] bridge_slave_1: left promiscuous mode [ 202.875444][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.902756][T12022] bond0: (slave bond_slave_0): Releasing backup interface [ 202.943769][T12022] bond0: (slave bond_slave_1): Releasing backup interface [ 202.989091][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 203.009463][T12022] team0: Port device team_slave_0 removed [ 203.033217][T12022] team0: Port device team_slave_1 removed [ 203.050921][T12022] bond0: (slave wlan1): Releasing backup interface [ 203.432484][T12058] netlink: 'syz.4.1771': attribute type 1 has an invalid length. [ 203.611167][T12067] bond0: entered promiscuous mode [ 203.640912][T12067] bond0: entered allmulticast mode [ 203.665156][T12067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.770754][T12072] ip6gretap1: entered promiscuous mode [ 203.791638][T12072] ip6gretap1: entered allmulticast mode [ 203.812401][T12072] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 203.826654][ T1165] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.946159][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.542189][T12111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.674511][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 204.704903][T12107] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1784'. [ 204.719455][T12107] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1784'. [ 205.945134][T12147] bridge0: port 1(30ªX¹¦D) entered blocking state [ 205.992602][T12147] bridge0: port 1(30ªX¹¦D) entered disabled state [ 206.035950][T12147] 0ªX¹¦D: entered allmulticast mode [ 206.042853][T12147] 0ªX¹¦D: entered promiscuous mode [ 206.097033][T12147] bridge0: port 1(30ªX¹¦D) entered blocking state [ 206.103681][T12147] bridge0: port 1(30ªX¹¦D) entered listening state [ 206.460786][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 206.638279][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 206.638762][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 206.650909][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 206.831424][T12164] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 206.854251][T12171] vlan0: entered promiscuous mode [ 206.876268][T12171] vlan0: entered allmulticast mode [ 206.881694][T12171] hsr_slave_1: entered allmulticast mode [ 207.021280][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 207.074908][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 207.105155][T12178] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 207.136606][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 208.059333][T12197] team0: Device vti0 is of different type [ 208.104613][T12194] netlink: 'syz.4.1811': attribute type 4 has an invalid length. [ 208.294016][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 208.329630][T12216] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1814'. [ 208.379481][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 208.392135][T12215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'. [ 208.432003][T12221] xt_connbytes: Forcing CT accounting to be enabled [ 208.442143][T12216] gretap0: entered promiscuous mode [ 208.456160][T12221] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.456542][T12218] veth0: entered promiscuous mode [ 208.483168][T12215] geneve3: entered promiscuous mode [ 208.494034][T12215] geneve3: entered allmulticast mode [ 208.568961][T12222] veth0: left promiscuous mode [ 208.642658][T12232] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1823'. [ 208.665872][T12232] netlink: zone id is out of range [ 208.671307][T12232] netlink: zone id is out of range [ 208.692774][T12232] netlink: get zone limit has 8 unknown bytes [ 208.755092][T12240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1825'. [ 208.828571][T12244] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1825'. [ 208.894706][T12246] netlink: 'syz.0.1828': attribute type 4 has an invalid length. [ 209.231701][T12276] x_tables: duplicate underflow at hook 1 [ 210.395033][T12336] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 210.403278][T12336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.964715][T12369] bridge: RTM_NEWNEIGH with invalid ether address [ 211.133472][T12384] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 211.176410][T12389] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 211.223568][T12389] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 211.419412][T12399] openvswitch: netlink: Message has 5 unknown bytes. [ 211.450070][T12399] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 211.489723][T12399] bridge_slave_1: left allmulticast mode [ 211.520931][T12399] bridge_slave_1: left promiscuous mode [ 211.534130][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.696632][T12416] x_tables: duplicate entry at hook 3 [ 212.067787][T12445] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 212.097483][T12445] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 212.118923][T12445] netlink: 'syz.0.1885': attribute type 11 has an invalid length. [ 212.222807][T12452] tipc: Enabled bearer , priority 10 [ 212.322981][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.353740][T12456] __nla_validate_parse: 16 callbacks suppressed [ 212.353779][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1890'. [ 212.427552][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 212.436312][T12463] bond2: entered promiscuous mode [ 212.441600][T12463] bond2: entered allmulticast mode [ 212.447693][T12463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.669369][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1898'. [ 212.694468][T12485] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1898'. [ 212.734051][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1898'. [ 212.917149][T12496] dvmrp0: entered allmulticast mode [ 212.992866][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 213.152427][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 213.207386][T12518] xt_recent: Unsupported userspace flags (00000061) [ 213.216301][ T5935] tipc: Node number set to 528941254 [ 213.223459][T12518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1907'. [ 213.269537][T12522] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 213.292598][T12522] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 213.372624][T12528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1912'. [ 213.392050][T12518] bond0 (unregistering): Released all slaves [ 213.420793][T12531] bridge0: entered allmulticast mode [ 213.428308][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 213.597887][T12538] netlink: 'syz.3.1915': attribute type 11 has an invalid length. [ 213.666591][T12543] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 214.249035][T12594] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 214.259361][T12594] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 214.507324][T12609] tipc: Enabling of bearer rejected, failed to enable media [ 214.637815][T12616] netlink: 'syz.1.1942': attribute type 21 has an invalid length. [ 214.670097][T12618] pim6reg1: entered promiscuous mode [ 214.685050][T12618] pim6reg1: entered allmulticast mode [ 214.784369][T12626] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 214.836264][T12629] netlink: 'syz.4.1946': attribute type 16 has an invalid length. [ 214.839697][T12630] netlink: 'syz.4.1946': attribute type 16 has an invalid length. [ 214.852110][T12630] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 214.885901][T12629] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 214.988366][T12632] lo: left allmulticast mode [ 214.999845][T12632] tunl0: left allmulticast mode [ 215.016358][T12632] gre0: left allmulticast mode [ 215.025870][T12636] netlink: 'syz.0.1947': attribute type 11 has an invalid length. [ 215.038879][T12632] gretap0: left allmulticast mode [ 215.044405][T12632] erspan0: entered promiscuous mode [ 215.050301][T12632] ip_vti0: entered promiscuous mode [ 215.059356][T12638] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 215.278314][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 215.337264][T12648] bond0 (unregistering): Released all slaves [ 215.525167][T12667] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 216.379288][T12714] sctp: [Deprecated]: syz.2.1973 (pid 12714) Use of int in max_burst socket option. [ 216.379288][T12714] Use struct sctp_assoc_value instead [ 217.091551][T12758] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.195250][T12766] netlink: 'syz.1.1992': attribute type 11 has an invalid length. [ 217.385670][T12778] __nla_validate_parse: 31 callbacks suppressed [ 217.395444][T12778] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1996'. [ 217.591003][T12790] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2000'. [ 217.694648][T12792] sit0: entered promiscuous mode [ 217.718547][T12792] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2001'. [ 217.832937][T12800] bridge0: entered allmulticast mode [ 217.874106][T12802] xt_policy: output policy not valid in PREROUTING and INPUT [ 218.479723][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 218.516141][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 218.550056][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 218.569318][T12834] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 218.601028][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 218.602365][T12834] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 218.629192][T12834] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 218.638135][T12834] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 218.655166][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 218.667529][T12834] geneve2: entered promiscuous mode [ 218.672765][T12834] geneve2: entered allmulticast mode [ 218.700232][T12846] validate_nla: 3 callbacks suppressed [ 218.700250][T12846] netlink: 'syz.1.2016': attribute type 5 has an invalid length. [ 218.734642][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2016'. [ 218.740972][T12840] vlan2: entered allmulticast mode [ 218.760269][T12840] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 219.305183][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 219.766423][T12903] sit0: left promiscuous mode [ 219.802033][T12903] tipc: Resetting bearer [ 220.057456][T12903] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.067560][T12903] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.076657][T12903] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.087529][T12903] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.099457][T12903] geneve1: left promiscuous mode [ 220.104535][T12903] geneve1: left allmulticast mode [ 220.151705][T12903] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 220.460654][T12935] netlink: 'syz.1.2045': attribute type 11 has an invalid length. [ 220.522406][T12939] netlink: 'syz.2.2049': attribute type 5 has an invalid length. [ 221.197299][ C0] bridge0: port 1(30ªX¹¦D) entered learning state [ 221.217324][T12988] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 221.236072][T12988] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 221.325334][T12991] team0: Device gtp0 is up. Set it down before adding it as a team port [ 221.325920][T12994] netlink: 'syz.4.2063': attribute type 83 has an invalid length. [ 221.822198][T13027] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 221.893723][T13027] team0: Port device geneve0 added [ 222.059094][T13041] vlan0: entered promiscuous mode [ 222.421702][T13074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.465181][T13079] __nla_validate_parse: 19 callbacks suppressed [ 222.465200][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 222.809469][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 222.917703][T13110] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2099'. [ 222.968366][T13112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.056687][T13119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2101'. [ 223.170529][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 223.413142][T13139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.529961][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 223.611269][T13165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 223.621938][T13165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 223.768351][T13172] 8021q: VLANs not supported on ip6_vti0 [ 223.783194][T13174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2117'. [ 223.842359][T13175] netlink: 'syz.4.2116': attribute type 62 has an invalid length. [ 224.239309][T13205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2126'. [ 224.296679][T13213] netlink: 'syz.3.2128': attribute type 2 has an invalid length. [ 224.622830][T13234] pimreg: entered allmulticast mode [ 224.638404][T13234] pimreg: left allmulticast mode [ 224.974449][T13254] bond0: Error: Cannot enslave bond to itself. [ 225.728350][T13300] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 225.787654][T13300] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 226.652591][T13363] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 3, id = 0 [ 227.094366][T13379] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 227.096068][T13380] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 227.114349][T13380] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 227.130881][T13380] unsupported nlmsg_type 40 [ 227.261990][T13386] netlink: 'syz.0.2177': attribute type 18 has an invalid length. [ 227.448429][T13398] netlink: 'syz.3.2181': attribute type 11 has an invalid length. [ 227.541148][T13402] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 227.587444][T13402] bond0: entered promiscuous mode [ 227.594530][T13402] bond0: entered allmulticast mode [ 227.600440][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.713666][T13414] __nla_validate_parse: 22 callbacks suppressed [ 227.713684][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 227.813732][T13407] xt_CT: No such helper "pptp" [ 227.953437][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 227.969291][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 227.973358][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 227.986904][T13428] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.996373][T13428] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.005281][T13428] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.014406][T13428] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.318227][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 228.651085][T13469] syzkaller1: entered promiscuous mode [ 228.660124][T13469] syzkaller1: entered allmulticast mode [ 228.777290][T13481] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 228.900311][T13490] tipc: Enabling of bearer rejected, failed to enable media [ 228.920841][T13486] x_tables: duplicate underflow at hook 1 [ 229.222642][T13511] !€ÿ: renamed from bond0 (while UP) [ 229.261592][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 229.332977][T13518] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2216'. [ 229.668379][T13537] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2222'. [ 229.711569][T13541] netlink: 484 bytes leftover after parsing attributes in process `syz.3.2224'. [ 229.764355][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 229.787900][T13543] macvlan0: entered promiscuous mode [ 229.793330][T13543] macvlan0: entered allmulticast mode [ 230.180853][T13564] syzkaller1: entered promiscuous mode [ 230.189782][T13564] syzkaller1: entered allmulticast mode [ 230.230929][T13569] ip6t_srh: unknown srh match flags 536B [ 230.290882][T13573] ip6t_srh: unknown srh match flags 536B [ 230.388484][T13576] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 230.678076][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.206109][T13632] netlink: 'syz.0.2252': attribute type 39 has an invalid length. [ 231.430471][T13652] netlink: 'syz.1.2254': attribute type 3 has an invalid length. [ 231.439056][T13652] netlink: 'syz.1.2254': attribute type 3 has an invalid length. [ 231.484116][T13648] delete_channel: no stack [ 231.527898][T13657] veth0: entered promiscuous mode [ 231.549827][T13656] veth0: left promiscuous mode [ 231.712770][T13661] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 231.867488][T13670] tipc: Resetting bearer [ 232.256227][T13702] block nbd0: not configured, cannot reconfigure [ 232.369715][T13710] !€ÿ: renamed from bond_slave_0 [ 233.110470][T13765] tipc: Enabled bearer , priority 12 [ 233.164555][T13767] __nla_validate_parse: 12 callbacks suppressed [ 233.164574][T13767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2295'. [ 233.213110][T13769] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2296'. [ 233.372353][T13776] veth0: entered promiscuous mode [ 233.388975][T13778] x_tables: duplicate underflow at hook 2 [ 233.421402][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 233.424549][T13776] veth0: left promiscuous mode [ 233.784465][T13806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2307'. [ 233.974725][T13817] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.021465][T13819] netlink: 'syz.1.2311': attribute type 3 has an invalid length. [ 234.051889][T13819] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2311'. [ 234.540354][T13844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 234.572634][T13846] netlink: 'syz.0.2321': attribute type 1 has an invalid length. [ 234.658514][T13846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.672093][T13846] bond4: (slave bond5): making interface the new active one [ 234.682368][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2321'. [ 234.705336][T13846] bond4: (slave bond5): Enslaving as an active interface with an up link [ 234.715066][T13852] bond4: entered allmulticast mode [ 234.722095][T13852] bond5: entered allmulticast mode [ 234.727790][T13857] 8021q: VLANs not supported on lo [ 234.769235][T13851] openvswitch: netlink: Key type 29 is not supported [ 234.797865][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 234.826410][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 234.835596][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 234.958912][T13867] 0ªX¹¦D: left allmulticast mode [ 234.964061][T13867] 0ªX¹¦D: left promiscuous mode [ 234.974995][T13867] bridge0: port 1(30ªX¹¦D) entered disabled state [ 235.168081][T13867] bridge0 (unregistering): left allmulticast mode [ 235.631405][T13903] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 235.675255][T13905] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 235.757217][T13913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.849619][T13915] can: request_module (can-proto-4) failed. [ 235.997131][T13933] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 236.172222][T13944] delete_channel: no stack [ 236.337919][T13954] bridge0: entered allmulticast mode [ 236.937323][T13994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.950728][T13989] can: request_module (can-proto-4) failed. [ 237.504147][T14029] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 237.562247][T14030] siw: device registration error -23 [ 237.802537][T14039] netlink: 'syz.0.2375': attribute type 4 has an invalid length. [ 237.854178][T14048] netlink: 'syz.0.2375': attribute type 4 has an invalid length. [ 238.064927][T14055] openvswitch: netlink: Unknown key attributes 2 [ 238.548683][T14077] netlink: 'syz.1.2386': attribute type 10 has an invalid length. [ 238.668493][T14087] __nla_validate_parse: 101 callbacks suppressed [ 238.668512][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 238.715587][T14087] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2389'. [ 238.787880][T14093] veth0_to_team: entered promiscuous mode [ 238.809606][T14093] veth0_to_team: entered allmulticast mode [ 239.158255][T14112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.199898][T14117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.319397][T14119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2400'. [ 239.535181][T14138] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2402'. [ 239.925338][T14155] netlink: 'syz.1.2410': attribute type 1 has an invalid length. [ 240.232369][T14176] netlink: 'syz.3.2416': attribute type 11 has an invalid length. [ 240.253680][T14176] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2416'. [ 240.368652][T14182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2417'. [ 241.089722][T14225] netlink: 'syz.1.2428': attribute type 11 has an invalid length. [ 241.332437][T14242] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2434'. [ 241.977619][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 242.024600][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2441'. [ 242.630673][T14302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2449'. [ 242.753309][T14310] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 242.772827][T14310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.777123][T14313] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 243.005480][T14327] lo: left promiscuous mode [ 243.034169][T14327] tunl0: left promiscuous mode [ 243.055236][T14327] gre0: left promiscuous mode [ 243.067986][T14327] gretap0: left promiscuous mode [ 243.073584][T14327] erspan0: left promiscuous mode [ 243.095050][T14327] ip_vti0: left promiscuous mode [ 243.218101][T14327] wg2: left promiscuous mode [ 243.222766][T14327] wg2: left allmulticast mode [ 243.258901][T14327] veth0_to_team: left promiscuous mode [ 243.264691][T14327] veth0_to_team: left allmulticast mode [ 243.283212][T14327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.307953][T14327] tipc: Resetting bearer [ 243.342504][T14327] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.351132][T14327] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.360402][T14327] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.368859][T14327] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.384977][T14327] geneve2: left promiscuous mode [ 243.390164][T14327] geneve2: left allmulticast mode [ 243.412115][T14327] bond2: left allmulticast mode [ 243.418419][T14327] bond3: left allmulticast mode [ 243.427397][T14327] bridge3: left promiscuous mode [ 243.432356][T14327] bridge3: left allmulticast mode [ 243.442337][T14327] vlan0: left promiscuous mode [ 243.447495][T14327] vlan0: left allmulticast mode [ 243.452345][T14327] hsr_slave_1: left allmulticast mode [ 243.481840][T14327] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.493166][T14327] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.505209][T14327] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.518122][T14327] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.531555][T14327] geneve3: left promiscuous mode [ 243.537308][T14327] geneve3: left allmulticast mode [ 243.549310][T14327] vlan2: left allmulticast mode [ 243.554190][T14327] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 243.567065][T14327] bond0: left promiscuous mode [ 243.571857][T14327] bond0: left allmulticast mode [ 243.655263][T14349] netlink: 'syz.0.2463': attribute type 10 has an invalid length. [ 243.778450][T14357] tipc: Enabling not permitted [ 243.804669][T14357] tipc: Enabling of bearer rejected, failed to enable media [ 244.119251][T14377] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 244.133555][T14379] __nla_validate_parse: 2 callbacks suppressed [ 244.133574][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2469'. [ 244.158104][T14376] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 244.179527][T14383] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 244.214095][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 244.317484][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 244.554852][T14397] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 244.575656][T14399] netlink: 'syz.2.2472': attribute type 1 has an invalid length. [ 244.622275][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 244.642446][T14408] tipc: Enabled bearer , priority 0 [ 244.775290][T14404] tipc: Disabling bearer [ 244.796747][ T5849] Bluetooth: hci0: command tx timeout [ 245.074267][T14432] xfrm0: mtu less than device minimum [ 246.356187][T14483] netlink: 'syz.0.2502': attribute type 3 has an invalid length. [ 246.374250][T14483] netlink: 165788 bytes leftover after parsing attributes in process `syz.0.2502'. [ 246.880576][T14509] xt_policy: neither incoming nor outgoing policy selected [ 247.327719][T14529] dvmrp1: entered allmulticast mode [ 247.727257][T14553] netlink: 'syz.2.2520': attribute type 11 has an invalid length. [ 247.902436][T14557] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 248.019167][ T1004] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 248.140003][T14579] lo: entered allmulticast mode [ 248.155313][T14577] lo: left allmulticast mode [ 248.617408][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 248.829754][T14622] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 248.870419][T14629] team0: Device is already in use. [ 248.952218][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2542'. [ 249.271529][T14651] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2550'. [ 249.386284][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 249.395647][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 249.539753][T14667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2556'. [ 249.576960][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 249.616291][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 249.778642][T14685] ipt_REJECT: ECHOREPLY no longer supported. [ 249.865552][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 250.107218][T14702] xt_hashlimit: size too large, truncated to 1048576 [ 250.130284][T14702] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 250.143698][T14705] lo: entered allmulticast mode [ 250.384104][T14717] netlink: 'syz.3.2570': attribute type 1 has an invalid length. [ 250.396160][T14717] netlink: 'syz.3.2570': attribute type 2 has an invalid length. [ 250.413165][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 250.423455][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2570'. [ 250.450933][T14723] netem: change failed [ 250.981370][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2578'. [ 251.084342][T14746] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.094059][T14746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.270966][T14753] openvswitch: netlink: Flow key attr not present in new flow. [ 251.339778][T14755] netlink: 'syz.1.2584': attribute type 12 has an invalid length. [ 251.538861][T14770] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 252.040341][T14808] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 252.318951][T14818] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 252.338222][T14818] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 252.355807][T14818] netlink: 'syz.4.2601': attribute type 2 has an invalid length. [ 252.442019][T14822] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 253.359745][T14860] xt_hashlimit: size too large, truncated to 1048576 [ 253.473156][T14864] netlink: 'syz.4.2615': attribute type 32 has an invalid length. [ 253.481843][T14864] netlink: 'syz.4.2615': attribute type 13 has an invalid length. [ 253.551862][T14864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.355946][T14905] netlink: 'syz.3.2630': attribute type 7 has an invalid length. [ 254.551095][T14920] netlink: 'syz.2.2634': attribute type 4 has an invalid length. [ 254.722979][T14929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.780664][T14929] batadv0 (unregistering): left allmulticast mode [ 254.802209][T14929] batadv0 (unregistering): left promiscuous mode [ 254.808841][T14929] bridge0: port 3(batadv0) entered disabled state [ 254.935405][T14937] netlink: 'syz.1.2638': attribute type 10 has an invalid length. [ 255.000558][T14939] tipc: Enabling of bearer rejected, failed to enable media [ 255.152314][T14949] __nla_validate_parse: 14 callbacks suppressed [ 255.152333][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 255.240035][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 255.402426][ T9448] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 255.426887][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'. [ 255.643959][T14975] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2641'. [ 256.097151][T14991] SET target dimension over the limit! [ 256.210772][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2653'. [ 256.301831][T15000] netlink: 'syz.4.2655': attribute type 83 has an invalid length. [ 256.310372][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2655'. [ 256.373844][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 256.417319][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2657'. [ 256.729541][T15016] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.750911][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 256.772210][T15016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2660'. [ 258.610625][T15062] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 259.315857][T15088] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 259.715169][T15108] FAULT_INJECTION: forcing a failure. [ 259.715169][T15108] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.741235][T15108] CPU: 1 UID: 0 PID: 15108 Comm: syz.4.2684 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 259.741264][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.741288][T15108] Call Trace: [ 259.741296][T15108] [ 259.741305][T15108] dump_stack_lvl+0x189/0x250 [ 259.741333][T15108] ? __pfx____ratelimit+0x10/0x10 [ 259.741353][T15108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.741375][T15108] ? __pfx__printk+0x10/0x10 [ 259.741400][T15108] ? __might_fault+0xb0/0x130 [ 259.741437][T15108] should_fail_ex+0x414/0x560 [ 259.741464][T15108] _copy_from_user+0x2d/0xb0 [ 259.741490][T15108] ___sys_sendmsg+0x158/0x2a0 [ 259.741520][T15108] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.741585][T15108] ? __fget_files+0x2a/0x420 [ 259.741602][T15108] ? __fget_files+0x3a0/0x420 [ 259.741625][T15108] __x64_sys_sendmsg+0x19b/0x260 [ 259.741656][T15108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.741697][T15108] ? __pfx_ksys_write+0x10/0x10 [ 259.741720][T15108] ? rcu_is_watching+0x15/0xb0 [ 259.741745][T15108] ? do_syscall_64+0xbe/0x3b0 [ 259.741768][T15108] do_syscall_64+0xfa/0x3b0 [ 259.741786][T15108] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.741806][T15108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.741825][T15108] ? clear_bhb_loop+0x60/0xb0 [ 259.741849][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.741868][T15108] RIP: 0033:0x7fd98458e929 [ 259.741886][T15108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.741903][T15108] RSP: 002b:00007fd9853fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.741924][T15108] RAX: ffffffffffffffda RBX: 00007fd9847b5fa0 RCX: 00007fd98458e929 [ 259.741939][T15108] RDX: 0000000000004894 RSI: 0000200000001080 RDI: 0000000000000003 [ 259.741950][T15108] RBP: 00007fd9853fa090 R08: 0000000000000000 R09: 0000000000000000 [ 259.741960][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.741970][T15108] R13: 0000000000000000 R14: 00007fd9847b5fa0 R15: 00007ffe708549a8 [ 259.741998][T15108] [ 260.269844][T15129] __nla_validate_parse: 8 callbacks suppressed [ 260.269862][T15129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'. [ 260.389393][T15140] netlink: 'syz.3.2695': attribute type 11 has an invalid length. [ 260.406385][T15140] netlink: 'syz.3.2695': attribute type 11 has an invalid length. [ 260.444213][T15141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2695'. [ 260.472555][T15140] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2695'. [ 260.730190][T15152] FAULT_INJECTION: forcing a failure. [ 260.730190][T15152] name failslab, interval 1, probability 0, space 0, times 1 [ 260.766930][T15150] netlink: 'syz.4.2698': attribute type 10 has an invalid length. [ 260.768447][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.1.2699 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 260.768475][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.768487][T15152] Call Trace: [ 260.768495][T15152] [ 260.768502][T15152] dump_stack_lvl+0x189/0x250 [ 260.768530][T15152] ? __pfx____ratelimit+0x10/0x10 [ 260.768550][T15152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.768573][T15152] ? __pfx__printk+0x10/0x10 [ 260.768604][T15152] ? __pfx___might_resched+0x10/0x10 [ 260.768631][T15152] should_fail_ex+0x414/0x560 [ 260.768657][T15152] should_failslab+0xa8/0x100 [ 260.768687][T15152] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 260.768714][T15152] ? __alloc_skb+0x112/0x2d0 [ 260.768744][T15152] __alloc_skb+0x112/0x2d0 [ 260.768773][T15152] netlink_sendmsg+0x5c6/0xb30 [ 260.768808][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.768838][T15152] ? aa_sock_msg_perm+0x94/0x160 [ 260.768880][T15152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.768900][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.768926][T15152] __sock_sendmsg+0x21c/0x270 [ 260.768952][T15152] ____sys_sendmsg+0x505/0x830 [ 260.768985][T15152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.769023][T15152] ? import_iovec+0x74/0xa0 [ 260.769052][T15152] ___sys_sendmsg+0x21f/0x2a0 [ 260.769082][T15152] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.769152][T15152] ? __fget_files+0x2a/0x420 [ 260.769169][T15152] ? __fget_files+0x3a0/0x420 [ 260.769197][T15152] __x64_sys_sendmsg+0x19b/0x260 [ 260.769227][T15152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.769266][T15152] ? __pfx_ksys_write+0x10/0x10 [ 260.769289][T15152] ? rcu_is_watching+0x15/0xb0 [ 260.769316][T15152] ? do_syscall_64+0xbe/0x3b0 [ 260.769341][T15152] do_syscall_64+0xfa/0x3b0 [ 260.769360][T15152] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.769378][T15152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.769397][T15152] ? clear_bhb_loop+0x60/0xb0 [ 260.769419][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.769438][T15152] RIP: 0033:0x7fbecb58e929 [ 260.769455][T15152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.769472][T15152] RSP: 002b:00007fbecc437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.769492][T15152] RAX: ffffffffffffffda RBX: 00007fbecb7b5fa0 RCX: 00007fbecb58e929 [ 260.769505][T15152] RDX: 0000000000004894 RSI: 0000200000001080 RDI: 0000000000000003 [ 260.769518][T15152] RBP: 00007fbecc437090 R08: 0000000000000000 R09: 0000000000000000 [ 260.769530][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.769541][T15152] R13: 0000000000000000 R14: 00007fbecb7b5fa0 R15: 00007ffd748cf768 [ 260.769572][T15152] [ 260.922042][T15160] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 261.076013][T15154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 261.149754][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 261.185870][T15163] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2702'. [ 261.194983][T15163] netlink: 'syz.0.2702': attribute type 5 has an invalid length. [ 261.269592][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 261.282921][T15163] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 261.403254][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'. [ 261.447733][T15163] team0: Device bond0 is already an upper device of the team interface [ 261.483533][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2707'. [ 261.786605][T15192] netlink: 'syz.3.2711': attribute type 29 has an invalid length. [ 261.869711][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 261.984990][T15201] tipc: Enabled bearer , priority 10 [ 261.998482][T15203] sctp: [Deprecated]: syz.3.2716 (pid 15203) Use of int in max_burst socket option deprecated. [ 261.998482][T15203] Use struct sctp_assoc_value instead [ 262.030470][T15201] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 262.163093][ T30] audit: type=1800 audit(1752792009.757:3): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2721" name="memory.events" dev="tmpfs" ino=2611 res=0 errno=0 [ 262.668862][T15230] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 262.691104][T15246] team0: Mode changed to "broadcast" [ 263.096425][ T5945] tipc: Node number set to 3875982318 [ 263.397668][T15268] bond8 (unregistering): Released all slaves [ 263.501373][T15275] pim6reg527: entered allmulticast mode [ 263.672153][T15282] netlink: 'syz.2.2744': attribute type 21 has an invalid length. [ 264.194024][T15309] x_tables: duplicate entry at hook 1 [ 264.517594][T15327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.158305][T15360] FAULT_INJECTION: forcing a failure. [ 265.158305][T15360] name failslab, interval 1, probability 0, space 0, times 0 [ 265.180713][T15360] CPU: 0 UID: 0 PID: 15360 Comm: syz.3.2768 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 265.180741][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.180753][T15360] Call Trace: [ 265.180761][T15360] [ 265.180769][T15360] dump_stack_lvl+0x189/0x250 [ 265.180798][T15360] ? __pfx____ratelimit+0x10/0x10 [ 265.180818][T15360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.180841][T15360] ? __pfx__printk+0x10/0x10 [ 265.180872][T15360] ? __pfx___might_resched+0x10/0x10 [ 265.180894][T15360] ? fs_reclaim_acquire+0x7d/0x100 [ 265.180919][T15360] should_fail_ex+0x414/0x560 [ 265.180945][T15360] should_failslab+0xa8/0x100 [ 265.180973][T15360] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 265.180998][T15360] ? __alloc_skb+0x112/0x2d0 [ 265.181028][T15360] __alloc_skb+0x112/0x2d0 [ 265.181057][T15360] netlink_ack+0x146/0xa50 [ 265.181080][T15360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.181097][T15360] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 265.181126][T15360] ? __pfx_nl80211_post_doit+0x10/0x10 [ 265.181168][T15360] netlink_rcv_skb+0x28c/0x470 [ 265.181193][T15360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.181213][T15360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.181255][T15360] ? down_read+0x1ad/0x2e0 [ 265.181279][T15360] genl_rcv+0x28/0x40 [ 265.181296][T15360] netlink_unicast+0x759/0x8e0 [ 265.181331][T15360] netlink_sendmsg+0x805/0xb30 [ 265.181366][T15360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.181394][T15360] ? aa_sock_msg_perm+0x94/0x160 [ 265.181416][T15360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.181443][T15360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.181469][T15360] __sock_sendmsg+0x21c/0x270 [ 265.181494][T15360] ____sys_sendmsg+0x505/0x830 [ 265.181528][T15360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.181566][T15360] ? import_iovec+0x74/0xa0 [ 265.181596][T15360] ___sys_sendmsg+0x21f/0x2a0 [ 265.181624][T15360] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.181698][T15360] ? __fget_files+0x2a/0x420 [ 265.181715][T15360] ? __fget_files+0x3a0/0x420 [ 265.181744][T15360] __x64_sys_sendmsg+0x19b/0x260 [ 265.181776][T15360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.181816][T15360] ? __pfx_ksys_write+0x10/0x10 [ 265.181837][T15360] ? rcu_is_watching+0x15/0xb0 [ 265.181864][T15360] ? do_syscall_64+0xbe/0x3b0 [ 265.181889][T15360] do_syscall_64+0xfa/0x3b0 [ 265.181907][T15360] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.181927][T15360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.181945][T15360] ? clear_bhb_loop+0x60/0xb0 [ 265.181969][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.181986][T15360] RIP: 0033:0x7fd63ed8e929 [ 265.182004][T15360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.182021][T15360] RSP: 002b:00007fd63fc9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.182041][T15360] RAX: ffffffffffffffda RBX: 00007fd63efb5fa0 RCX: 00007fd63ed8e929 [ 265.182056][T15360] RDX: 0000000000004894 RSI: 0000200000001080 RDI: 0000000000000003 [ 265.182068][T15360] RBP: 00007fd63fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 265.182080][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.182090][T15360] R13: 0000000000000000 R14: 00007fd63efb5fa0 R15: 00007ffe876bb8d8 [ 265.182119][T15360] [ 265.661854][T15369] sch_tbf: peakrate 146 is lower than or equals to rate 25429 ! [ 265.679954][T15372] __nla_validate_parse: 16 callbacks suppressed [ 265.679971][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2774'. [ 265.713379][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2776'. [ 265.719965][T15372] 8021q: VLANs not supported on ip6_vti0 [ 265.805614][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 265.900847][T15378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2775'. [ 266.040483][T15393] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 266.089770][T15393] xt_cgroup: path and classid specified [ 266.172982][T15399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.177416][T15395] vlan3: entered promiscuous mode [ 266.203721][T15400] Cannot find del_set index 4 as target [ 266.222174][T15395] bridge0: entered promiscuous mode [ 266.241037][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 266.261452][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 266.297580][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 266.309590][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 266.320042][T15407] FAULT_INJECTION: forcing a failure. [ 266.320042][T15407] name failslab, interval 1, probability 0, space 0, times 0 [ 266.332767][T15404] netlink: 'syz.3.2783': attribute type 11 has an invalid length. [ 266.345918][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2781'. [ 266.386547][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.0.2784 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 266.386585][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.386597][T15407] Call Trace: [ 266.386605][T15407] [ 266.386615][T15407] dump_stack_lvl+0x189/0x250 [ 266.386649][T15407] ? __pfx____ratelimit+0x10/0x10 [ 266.386668][T15407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.386690][T15407] ? __pfx__printk+0x10/0x10 [ 266.386722][T15407] ? __pfx___might_resched+0x10/0x10 [ 266.386744][T15407] ? fs_reclaim_acquire+0x7d/0x100 [ 266.386768][T15407] should_fail_ex+0x414/0x560 [ 266.386792][T15407] should_failslab+0xa8/0x100 [ 266.386822][T15407] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 266.386850][T15407] ? __alloc_skb+0x112/0x2d0 [ 266.386881][T15407] __alloc_skb+0x112/0x2d0 [ 266.386913][T15407] netlink_ack+0x146/0xa50 [ 266.386936][T15407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.386953][T15407] ? ref_tracker_free+0x63a/0x7d0 [ 266.386973][T15407] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 266.387002][T15407] ? __pfx_nl80211_post_doit+0x10/0x10 [ 266.387032][T15407] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.387063][T15407] netlink_rcv_skb+0x28c/0x470 [ 266.387089][T15407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.387110][T15407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.387149][T15407] ? down_read+0x1ad/0x2e0 [ 266.387180][T15407] genl_rcv+0x28/0x40 [ 266.387201][T15407] netlink_unicast+0x759/0x8e0 [ 266.387234][T15407] netlink_sendmsg+0x805/0xb30 [ 266.387267][T15407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.387294][T15407] ? aa_sock_msg_perm+0x94/0x160 [ 266.387314][T15407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.387334][T15407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.387358][T15407] __sock_sendmsg+0x21c/0x270 [ 266.387381][T15407] ____sys_sendmsg+0x505/0x830 [ 266.387415][T15407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.387450][T15407] ? import_iovec+0x74/0xa0 [ 266.387478][T15407] ___sys_sendmsg+0x21f/0x2a0 [ 266.387508][T15407] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.387580][T15407] ? __fget_files+0x2a/0x420 [ 266.387596][T15407] ? __fget_files+0x3a0/0x420 [ 266.387624][T15407] __x64_sys_sendmsg+0x19b/0x260 [ 266.387655][T15407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.387687][T15407] ? __pfx_ksys_write+0x10/0x10 [ 266.387710][T15407] ? rcu_is_watching+0x15/0xb0 [ 266.387738][T15407] ? do_syscall_64+0xbe/0x3b0 [ 266.387764][T15407] do_syscall_64+0xfa/0x3b0 [ 266.387784][T15407] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.387801][T15407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.387819][T15407] ? clear_bhb_loop+0x60/0xb0 [ 266.387839][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.387854][T15407] RIP: 0033:0x7fbb6af8e929 [ 266.387868][T15407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.387884][T15407] RSP: 002b:00007fbb6bd91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.387906][T15407] RAX: ffffffffffffffda RBX: 00007fbb6b1b5fa0 RCX: 00007fbb6af8e929 [ 266.387921][T15407] RDX: 0000000000004894 RSI: 0000200000001080 RDI: 0000000000000003 [ 266.387934][T15407] RBP: 00007fbb6bd91090 R08: 0000000000000000 R09: 0000000000000000 [ 266.387947][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.387959][T15407] R13: 0000000000000000 R14: 00007fbb6b1b5fa0 R15: 00007ffd2bb43878 [ 266.387992][T15407] [ 266.917433][T15421] syz_tun: entered allmulticast mode [ 266.937955][T15417] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2787'. [ 267.007781][T15421] syz_tun: left allmulticast mode [ 267.663511][T15460] netlink: 'syz.2.2801': attribute type 11 has an invalid length. [ 267.695097][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.413386][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.419068][T15494] FAULT_INJECTION: forcing a failure. [ 268.419068][T15494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.442356][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.451106][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.451148][T15494] CPU: 1 UID: 0 PID: 15494 Comm: syz.2.2810 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 268.451171][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.451182][T15494] Call Trace: [ 268.451190][T15494] [ 268.451198][T15494] dump_stack_lvl+0x189/0x250 [ 268.451226][T15494] ? __pfx____ratelimit+0x10/0x10 [ 268.451246][T15494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.451269][T15494] ? __pfx__printk+0x10/0x10 [ 268.451295][T15494] ? __might_fault+0xb0/0x130 [ 268.451333][T15494] should_fail_ex+0x414/0x560 [ 268.451358][T15494] _copy_from_user+0x2d/0xb0 [ 268.451385][T15494] kstrtouint_from_user+0xc4/0x170 [ 268.451411][T15494] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 268.451451][T15494] proc_fail_nth_write+0x88/0x240 [ 268.451471][T15494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.451497][T15494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.451518][T15494] vfs_write+0x27b/0xa90 [ 268.451553][T15494] ? __pfx_vfs_write+0x10/0x10 [ 268.451580][T15494] ? __fget_files+0x2a/0x420 [ 268.451603][T15494] ? __fget_files+0x3a0/0x420 [ 268.451618][T15494] ? __fget_files+0x2a/0x420 [ 268.451645][T15494] ksys_write+0x145/0x250 [ 268.451673][T15494] ? __pfx_ksys_write+0x10/0x10 [ 268.451695][T15494] ? rcu_is_watching+0x15/0xb0 [ 268.451723][T15494] ? do_syscall_64+0xbe/0x3b0 [ 268.451748][T15494] do_syscall_64+0xfa/0x3b0 [ 268.451766][T15494] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.451785][T15494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.451804][T15494] ? clear_bhb_loop+0x60/0xb0 [ 268.451827][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.451844][T15494] RIP: 0033:0x7f985d38d3df [ 268.451861][T15494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 268.451878][T15494] RSP: 002b:00007f985e115030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 268.451898][T15494] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f985d38d3df [ 268.451911][T15494] RDX: 0000000000000001 RSI: 00007f985e1150a0 RDI: 0000000000000004 [ 268.451923][T15494] RBP: 00007f985e115090 R08: 0000000000000000 R09: 0000000000000000 [ 268.451934][T15494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 268.451945][T15494] R13: 0000000000000000 R14: 00007f985d5b5fa0 R15: 00007ffe28630e38 [ 268.451981][T15494] [ 268.763851][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.768899][ T9451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.787919][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.830711][ T9451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 268.893536][T15510] ip6t_srh: unknown srh match flags 536B [ 269.002591][ T9451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.036615][ T9451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 269.238750][T15534] xt_hashlimit: max too large, truncated to 1048576 [ 269.322879][ T9451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.360648][ T9451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 269.526057][T15552] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 269.728637][ T9451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.768551][ T9451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 269.943725][T15555] !€ÿ: renamed from bond0 [ 270.154950][T15564] openvswitch: netlink: Multiple metadata blocks provided [ 270.399660][T15577] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 270.457224][T15577] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 270.495964][T15581] netlink: 'syz.2.2832': attribute type 10 has an invalid length. [ 270.892874][ T5863] Bluetooth: hci3: command tx timeout [ 271.770123][ T9451] bond1 (unregistering): Released all slaves [ 271.921746][ T9451] bond2 (unregistering): Released all slaves [ 271.941811][ T9451] bond0 (unregistering): Released all slaves [ 272.107584][ T9451] tipc: Disabling bearer [ 272.154617][ T9451] tipc: Left network mode [ 272.165860][T15496] chnl_net:caif_netlink_parms(): no params data found [ 272.360743][T15599] geneve2: entered promiscuous mode [ 272.380105][T15599] geneve2: entered allmulticast mode [ 272.498383][T15605] __nla_validate_parse: 10 callbacks suppressed [ 272.498401][T15605] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2839'. [ 272.768373][T15609] erspan0: entered allmulticast mode [ 272.825515][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 272.838653][T15616] bridge_slave_0: entered promiscuous mode [ 272.929073][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.969567][ T5863] Bluetooth: hci3: command tx timeout [ 273.132705][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'. [ 273.186372][T15628] netlink: 'syz.3.2846': attribute type 8 has an invalid length. [ 273.199151][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.213463][T15496] bridge_slave_0: entered allmulticast mode [ 273.228720][T15496] bridge_slave_0: entered promiscuous mode [ 273.256223][T15627] 8021q: VLANs not supported on ip6_vti0 [ 273.333555][T15496] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.359903][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.389100][T15496] bridge_slave_1: entered allmulticast mode [ 273.420875][T15496] bridge_slave_1: entered promiscuous mode [ 273.611167][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2848'. [ 273.771017][T15496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.835061][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 273.924067][ T9451] hsr_slave_0: left promiscuous mode [ 273.954660][ T9451] hsr_slave_1: left promiscuous mode [ 274.269907][T15668] IPVS: length: 157 != 24 [ 274.323737][ T9451] pim6reg (unregistering): left allmulticast mode [ 275.048197][ T5863] Bluetooth: hci3: command tx timeout [ 275.242479][T15496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.313187][T15665] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 275.590939][T15683] xt_connbytes: Forcing CT accounting to be enabled [ 275.652677][T15681] netlink: 'syz.3.2855': attribute type 8 has an invalid length. [ 275.690959][T15496] team0: Port device team_slave_0 added [ 275.726273][T15496] team0: Port device team_slave_1 added [ 275.733102][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 275.768652][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2860'. [ 275.863525][T15496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.876981][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2863'. [ 275.896565][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.931412][T15496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.055387][T15496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.087365][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.134758][T15496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.169293][T15713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2866'. [ 276.203081][ T9451] IPVS: stop unused estimator thread 0... [ 276.214112][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2866'. [ 276.396467][T15496] hsr_slave_0: entered promiscuous mode [ 276.408723][T15496] hsr_slave_1: entered promiscuous mode [ 276.423100][T15496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.443139][T15496] Cannot create hsr debugfs directory [ 276.701266][T15729] C: renamed from lo (while UP) [ 277.118963][ T5863] Bluetooth: hci3: command tx timeout [ 277.192873][T15742] netlink: 'syz.3.2875': attribute type 5 has an invalid length. [ 277.462731][T15757] bridge_slave_0: left allmulticast mode [ 277.474682][T15757] bridge_slave_0: left promiscuous mode [ 277.488386][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.513787][T15757] team0: Port device team_slave_0 removed [ 277.522611][T15757] team0: Port device team_slave_1 removed [ 277.537803][T15757] team0: Port device geneve0 removed [ 277.544829][T15757] bond2: (slave bond3): Releasing backup interface [ 277.560372][T15760] __nla_validate_parse: 9 callbacks suppressed [ 277.560388][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 277.671659][T15496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.702135][T15496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.736829][T15496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.767002][T15496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.076239][T15496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.087333][T15782] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 278.114512][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'. [ 278.128428][T15782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2885'. [ 278.147213][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2888'. [ 278.211950][T15496] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.265361][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.272595][ T9448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.332153][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.339359][ T9450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.404483][T15794] netlink: 'syz.3.2889': attribute type 10 has an invalid length. [ 278.451541][T15798] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2890'. [ 278.454332][T15794] veth1_vlan: entered allmulticast mode [ 278.489244][T15794] veth1_vlan: left promiscuous mode [ 278.504188][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2889'. [ 278.514864][T15794] team0: Device veth1_vlan failed to register rx_handler [ 278.560820][T15803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.591885][T15803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.609719][T15798] netlink: 'syz.4.2890': attribute type 11 has an invalid length. [ 278.641474][T15803] hsr0: entered promiscuous mode [ 278.653422][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 278.686502][T15803] hsr0: entered allmulticast mode [ 278.691617][T15803] hsr_slave_0: entered allmulticast mode [ 278.710648][ T30] audit: type=1800 audit(1752792026.307:4): pid=15812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2893" name="memory.events" dev="tmpfs" ino=2971 res=0 errno=0 [ 278.715973][T15803] hsr_slave_1: entered allmulticast mode [ 278.838129][T15809] bond0: entered promiscuous mode [ 278.843416][T15809] bond0: entered allmulticast mode [ 278.849646][T15809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.979958][T15820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2896'. [ 278.988769][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 278.992961][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 279.112505][T15825] macsec0: entered promiscuous mode [ 279.334947][T15840] : entered promiscuous mode [ 279.387478][T15848] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 279.422680][T15850] netlink: 'syz.2.2904': attribute type 1 has an invalid length. [ 279.658178][T15850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.667010][T15844] bond1: entered promiscuous mode [ 279.672088][T15844] bond1: entered allmulticast mode [ 279.711839][T15844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.791638][T15496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.070061][T15496] veth0_vlan: entered promiscuous mode [ 280.148921][T15496] veth1_vlan: entered promiscuous mode [ 280.271578][T15496] veth0_macvtap: entered promiscuous mode [ 280.321446][T15496] veth1_macvtap: entered promiscuous mode [ 280.380268][T15496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.420410][T15496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.454772][T15894] netlink: 'syz.2.2915': attribute type 28 has an invalid length. [ 280.459441][T15496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.469725][T15894] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 280.496063][T15496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.525531][T15496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.554963][T15496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.779327][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.793719][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.934248][T15919] veth11: entered promiscuous mode [ 280.952475][T15919] veth11: entered allmulticast mode [ 280.973127][ T9451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.011116][ T9451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.087696][T15930] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 281.651244][T15965] netlink: 'syz.2.2932': attribute type 10 has an invalid length. [ 281.784937][T15966] tipc: Enabled bearer , priority 0 [ 281.795592][T15966] syzkaller0: entered promiscuous mode [ 281.801591][T15966] syzkaller0: entered allmulticast mode [ 281.817697][T15966] tipc: Resetting bearer [ 281.839297][T15964] tipc: Resetting bearer [ 281.872477][T15964] tipc: Disabling bearer [ 281.906801][T15968] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 282.451810][T15995] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.496678][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.507631][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.516190][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.524907][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.533912][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.751637][T16005] __nla_validate_parse: 9 callbacks suppressed [ 282.751657][T16005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2942'. [ 283.037560][T16019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.464860][T15992] chnl_net:caif_netlink_parms(): no params data found [ 283.706601][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.713805][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.744761][T15992] bridge_slave_0: entered allmulticast mode [ 283.753320][T15992] bridge_slave_0: entered promiscuous mode [ 283.762518][T16048] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2948'. [ 283.833775][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.855329][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.872234][T15992] bridge_slave_1: entered allmulticast mode [ 283.881715][T15992] bridge_slave_1: entered promiscuous mode [ 283.896087][T16058] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 283.963838][T16056] dvmrp0: entered allmulticast mode [ 284.014786][T16058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.043202][T16065] openvswitch: netlink: IPv4 tun info is not correct [ 284.055278][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2952'. [ 284.058149][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.068339][T16065] openvswitch: netlink: Flow key attr not present in new flow. [ 284.122895][T16061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.130215][T16061] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 284.141825][T16061] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 284.164590][T16063] unknown channel width for channel at 909000KHz? [ 284.175263][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.319985][T15992] team0: Port device team_slave_0 added [ 284.352296][T15992] team0: Port device team_slave_1 added [ 284.378607][T16067] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.387823][T16067] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.396986][T16067] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.406235][T16067] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.537729][T16074] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 284.566217][ T5863] Bluetooth: hci0: command tx timeout [ 284.611484][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.627737][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.666127][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.686754][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.704199][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.747548][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.771009][T16081] netlink: 'syz.0.2957': attribute type 10 has an invalid length. [ 284.854974][T16078] batman_adv: batadv0: Adding interface: dummy0 [ 284.862005][T16078] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.889318][T16078] batman_adv: batadv0: Interface activated: dummy0 [ 284.922612][T16081] !€ÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.998190][T16084] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2958'. [ 285.198153][T15992] hsr_slave_0: entered promiscuous mode [ 285.209808][T15992] hsr_slave_1: entered promiscuous mode [ 285.217848][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 285.221012][T15992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.239986][T15992] Cannot create hsr debugfs directory [ 285.268498][T16097] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 285.409202][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.418271][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.507853][T16097] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.570902][T16105] xt_policy: too many policy elements [ 285.644431][T16097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.662693][T16097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.750917][T16097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.760799][T16097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.769940][T16097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.779786][T16097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.829099][T16097] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.838867][T16097] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.847976][T16097] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.857203][T16097] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.105580][T16120] dvmrp0: left allmulticast mode [ 286.173665][T16120] veth0_virt_wifi: renamed from vlan0 [ 286.262144][T16127] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2971'. [ 286.640380][ T5863] Bluetooth: hci0: command tx timeout [ 286.650230][T15992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.669600][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 286.747778][T15992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.755413][T16144] netlink: 'syz.0.2976': attribute type 1 has an invalid length. [ 286.771997][T15992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.803924][T15992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.860725][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 286.881996][T16148] macvlan0: left promiscuous mode [ 286.887700][T16148] macvlan0: left allmulticast mode [ 286.892994][T16148] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 286.902297][T16148] netlink: 'syz.4.2978': attribute type 2 has an invalid length. [ 287.033976][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.075123][T15992] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.141380][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.148607][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.178312][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.185534][ T9451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.267382][T16173] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2985'. [ 287.474034][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 287.887449][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.947143][T16208] __nla_validate_parse: 3 callbacks suppressed [ 287.947161][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 288.045077][T15992] veth0_vlan: entered promiscuous mode [ 288.114250][T15992] veth1_vlan: entered promiscuous mode [ 288.153364][T16216] Bluetooth: MGMT ver 1.23 [ 288.242723][T15992] veth0_macvtap: entered promiscuous mode [ 288.275691][T15992] veth1_macvtap: entered promiscuous mode [ 288.324219][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 288.329072][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.395434][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.426496][T15992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.447030][T15992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.462207][T15992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.474855][T15992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.671323][T16238] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 288.681130][T16238] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3005'. [ 288.687988][ T9448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.703786][ T9448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.716727][ T5863] Bluetooth: hci0: command tx timeout [ 288.783592][T16238] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3005'. [ 288.813673][ T9451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.842177][ T9451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.019190][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 289.081434][T16263] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3011'. [ 289.315612][T16281] netlink: 'syz.0.3015': attribute type 8 has an invalid length. [ 289.860131][T16289] Bluetooth: MGMT ver 1.23 [ 289.876126][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.890392][ T5862] ------------[ cut here ]------------ [ 289.896484][ T5862] refcount_t: underflow; use-after-free. [ 289.902768][ T5862] WARNING: CPU: 1 PID: 5862 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 289.912239][ T5862] Modules linked in: [ 289.916955][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 289.929217][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.936275][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.939681][ T5862] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.952703][ T5862] Code: c0 41 e2 8b e8 b7 d2 c3 fc 90 0f 0b 90 90 eb d7 e8 ab e8 ff fc c6 05 c0 82 cb 0a 01 90 48 c7 c7 20 42 e2 8b e8 97 d2 c3 fc 90 <0f> 0b 90 90 eb b7 e8 8b e8 ff fc c6 05 9d 82 cb 0a 01 90 48 c7 c7 [ 289.972507][ T5862] RSP: 0018:ffffc90003f3f598 EFLAGS: 00010246 [ 289.977842][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.979252][ T5862] RAX: 7fe77ff94430e100 RBX: 0000000000000003 RCX: ffff88807c388000 [ 289.987150][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.993775][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 290.008918][ T5862] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 290.016971][ T5862] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88801cf4b000 [ 290.018595][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.024945][ T5862] R13: ffff8880575b7460 R14: ffff8880575b7478 R15: dffffc0000000000 [ 290.040265][ T5862] FS: 0000000000000000(0000) GS:ffff888125d26000(0000) knlGS:0000000000000000 [ 290.049294][ T5862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.055963][ T5862] CR2: 00007f106e5f6d00 CR3: 000000007e178000 CR4: 00000000003526f0 [ 290.063959][ T5862] Call Trace: [ 290.067603][ T5862] [ 290.070560][ T5862] klist_dec_and_del+0x3c7/0x3d0 [ 290.075530][ T5862] klist_remove+0x1bd/0x340 [ 290.080824][ T5862] ? __pfx_klist_children_put+0x10/0x10 [ 290.086692][ T5862] ? __pfx_klist_remove+0x10/0x10 [ 290.091750][ T5862] ? __pfx_kobject_move+0x10/0x10 [ 290.097168][ T5862] ? get_device_parent+0x366/0x3a0 [ 290.102322][ T5862] device_move+0x193/0x700 [ 290.106813][ T5862] hci_conn_del_sysfs+0xb8/0x170 [ 290.111778][ T5862] hci_conn_del+0x8ff/0xcb0 [ 290.116427][ T5862] hci_conn_hash_flush+0x191/0x230 [ 290.121576][ T5862] hci_dev_close_sync+0xaef/0x1330 [ 290.127224][ T5862] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 290.132807][ T5862] ? up_write+0x1c4/0x420 [ 290.137232][ T5862] hci_unregister_dev+0x21a/0x510 [ 290.142282][ T5862] vhci_release+0x80/0xd0 [ 290.146684][ T5862] ? __pfx_vhci_release+0x10/0x10 [ 290.151733][ T5862] __fput+0x449/0xa70 [ 290.156099][ T5862] task_work_run+0x1d1/0x260 [ 290.160727][ T5862] ? __pfx_task_work_run+0x10/0x10 [ 290.165933][ T5862] ? kmem_cache_free+0x18f/0x400 [ 290.170906][ T5862] do_exit+0x6b5/0x22e0 [ 290.175101][ T5862] ? do_raw_spin_lock+0x121/0x290 [ 290.180442][ T5862] ? __pfx_do_exit+0x10/0x10 [ 290.185059][ T5862] ? cgroup_freezing+0x20/0x360 [ 290.190233][ T5862] do_group_exit+0x21c/0x2d0 [ 290.195128][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.200433][ T5862] get_signal+0x1286/0x1340 [ 290.204989][ T5862] arch_do_signal_or_restart+0x9a/0x750 [ 290.210632][ T5862] ? fput_close_sync+0x119/0x200 [ 290.215594][ T5862] ? kmem_cache_free+0x309/0x400 [ 290.220905][ T5862] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.227221][ T5862] ? exit_to_user_mode_loop+0x40/0x110 [ 290.232707][ T5862] exit_to_user_mode_loop+0x75/0x110 [ 290.239042][ T5862] do_syscall_64+0x2bd/0x3b0 [ 290.243663][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.249207][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.255305][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 290.260088][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.266078][ T5862] RIP: 0033:0x7f985d38d33c [ 290.270520][ T5862] Code: Unable to access opcode bytes at 0x7f985d38d312. [ 290.277983][ T5862] RSP: 002b:00007ffe28631190 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.286726][ T5862] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f985d38d33c [ 290.294724][ T5862] RDX: 0000000000000030 RSI: 00007ffe28631250 RDI: 00000000000000f9 [ 290.303037][ T5862] RBP: 00007ffe286311fc R08: 0000000000000000 R09: 0079746972756365 [ 290.311798][ T5862] R10: 00007ffe28630b50 R11: 0000000000000246 R12: 000000000000025e [ 290.319966][ T5862] R13: 00000000000927c0 R14: 00000000000469a2 R15: 00007ffe28631250 [ 290.328047][ T5862] [ 290.331151][ T5862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.338444][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 290.350596][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.360647][ T5862] Call Trace: [ 290.363923][ T5862] [ 290.366848][ T5862] dump_stack_lvl+0x99/0x250 [ 290.371445][ T5862] ? __asan_memcpy+0x40/0x70 [ 290.376034][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.381231][ T5862] ? __pfx__printk+0x10/0x10 [ 290.385860][ T5862] panic+0x2db/0x790 [ 290.389772][ T5862] ? __pfx_panic+0x10/0x10 [ 290.394204][ T5862] __warn+0x31b/0x4b0 [ 290.398180][ T5862] ? refcount_warn_saturate+0x11a/0x1d0 [ 290.403731][ T5862] ? refcount_warn_saturate+0x11a/0x1d0 [ 290.409278][ T5862] report_bug+0x2be/0x4f0 [ 290.413604][ T5862] ? refcount_warn_saturate+0x11a/0x1d0 [ 290.419156][ T5862] ? refcount_warn_saturate+0x11a/0x1d0 [ 290.424703][ T5862] ? refcount_warn_saturate+0x11c/0x1d0 [ 290.430250][ T5862] handle_bug+0x84/0x160 [ 290.434491][ T5862] exc_invalid_op+0x1a/0x50 [ 290.438993][ T5862] asm_exc_invalid_op+0x1a/0x20 [ 290.443836][ T5862] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 290.449994][ T5862] Code: c0 41 e2 8b e8 b7 d2 c3 fc 90 0f 0b 90 90 eb d7 e8 ab e8 ff fc c6 05 c0 82 cb 0a 01 90 48 c7 c7 20 42 e2 8b e8 97 d2 c3 fc 90 <0f> 0b 90 90 eb b7 e8 8b e8 ff fc c6 05 9d 82 cb 0a 01 90 48 c7 c7 [ 290.469598][ T5862] RSP: 0018:ffffc90003f3f598 EFLAGS: 00010246 [ 290.475666][ T5862] RAX: 7fe77ff94430e100 RBX: 0000000000000003 RCX: ffff88807c388000 [ 290.483634][ T5862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 290.491605][ T5862] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 290.499576][ T5862] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88801cf4b000 [ 290.507545][ T5862] R13: ffff8880575b7460 R14: ffff8880575b7478 R15: dffffc0000000000 [ 290.515527][ T5862] ? refcount_warn_saturate+0x119/0x1d0 [ 290.521077][ T5862] klist_dec_and_del+0x3c7/0x3d0 [ 290.526068][ T5862] klist_remove+0x1bd/0x340 [ 290.530571][ T5862] ? __pfx_klist_children_put+0x10/0x10 [ 290.536123][ T5862] ? __pfx_klist_remove+0x10/0x10 [ 290.541148][ T5862] ? __pfx_kobject_move+0x10/0x10 [ 290.546171][ T5862] ? get_device_parent+0x366/0x3a0 [ 290.551291][ T5862] device_move+0x193/0x700 [ 290.555710][ T5862] hci_conn_del_sysfs+0xb8/0x170 [ 290.560655][ T5862] hci_conn_del+0x8ff/0xcb0 [ 290.565167][ T5862] hci_conn_hash_flush+0x191/0x230 [ 290.570285][ T5862] hci_dev_close_sync+0xaef/0x1330 [ 290.575407][ T5862] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 290.580950][ T5862] ? up_write+0x1c4/0x420 [ 290.585288][ T5862] hci_unregister_dev+0x21a/0x510 [ 290.590316][ T5862] vhci_release+0x80/0xd0 [ 290.594645][ T5862] ? __pfx_vhci_release+0x10/0x10 [ 290.599671][ T5862] __fput+0x449/0xa70 [ 290.603662][ T5862] task_work_run+0x1d1/0x260 [ 290.608261][ T5862] ? __pfx_task_work_run+0x10/0x10 [ 290.613380][ T5862] ? kmem_cache_free+0x18f/0x400 [ 290.618327][ T5862] do_exit+0x6b5/0x22e0 [ 290.622493][ T5862] ? do_raw_spin_lock+0x121/0x290 [ 290.627524][ T5862] ? __pfx_do_exit+0x10/0x10 [ 290.632202][ T5862] ? cgroup_freezing+0x20/0x360 [ 290.637080][ T5862] do_group_exit+0x21c/0x2d0 [ 290.641678][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.646875][ T5862] get_signal+0x1286/0x1340 [ 290.651396][ T5862] arch_do_signal_or_restart+0x9a/0x750 [ 290.656946][ T5862] ? fput_close_sync+0x119/0x200 [ 290.661878][ T5862] ? kmem_cache_free+0x309/0x400 [ 290.666820][ T5862] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.673006][ T5862] ? exit_to_user_mode_loop+0x40/0x110 [ 290.678465][ T5862] exit_to_user_mode_loop+0x75/0x110 [ 290.683745][ T5862] do_syscall_64+0x2bd/0x3b0 [ 290.688334][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.693530][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.699593][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 290.704275][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.710169][ T5862] RIP: 0033:0x7f985d38d33c [ 290.714580][ T5862] Code: Unable to access opcode bytes at 0x7f985d38d312. [ 290.721588][ T5862] RSP: 002b:00007ffe28631190 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.730002][ T5862] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f985d38d33c [ 290.737970][ T5862] RDX: 0000000000000030 RSI: 00007ffe28631250 RDI: 00000000000000f9 [ 290.745937][ T5862] RBP: 00007ffe286311fc R08: 0000000000000000 R09: 0079746972756365 [ 290.753902][ T5862] R10: 00007ffe28630b50 R11: 0000000000000246 R12: 000000000000025e [ 290.761882][ T5862] R13: 00000000000927c0 R14: 00000000000469a2 R15: 00007ffe28631250 [ 290.769877][ T5862] [ 290.773150][ T5862] Kernel Offset: disabled [ 290.777472][ T5862] Rebooting in 86400 seconds..