last executing test programs: 6.2048909s ago: executing program 2 (id=1331): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x58}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x8, {{0x2, 0x4e21, @local}}}, 0x88) pselect6(0x40, &(0x7f0000000040)={0x8000000000000009, 0x8, 0xe3, 0xdd41, 0x10000000004, 0x3c, 0xfffffffffffffffe, 0xa4cd}, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x2) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r8, 0x3ff}, 0x8) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x12, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000240)={0x1, {{0xa, 0x4e20, 0x12c0000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}}}, 0x88) 4.706136223s ago: executing program 3 (id=1341): r0 = socket$unix(0x1, 0x5, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}}, 0x4000040) 4.531534818s ago: executing program 3 (id=1342): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0x0, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x2) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 4.053027737s ago: executing program 1 (id=1344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\n'], 0xa) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="41ee00000000000001000603000014000300060a0006090300f006e812000000000108000700263a0903140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x24008090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0) 4.0002817s ago: executing program 3 (id=1345): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="15010000000000005c0012800e00010069703667726574617000000048000280060011004e23000014000700fe8000000000000000000000000000aa060018000200000006000e0000f9e61b"], 0x7c}}, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) 3.64566605s ago: executing program 4 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a4"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a4"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="48009049", @ANYRES16=r8, @ANYBLOB="000127bd7000fcdbdf25350000000c009900000000003b0000000a003400010101010101000005002001290000001400fe004b90fc03faf304c86c847d4595e53292"], 0x48}, 0x1, 0x0, 0x0, 0x4024090}, 0x8b0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x810) socket(0x10, 0x803, 0x4) (async) socket(0x10, 0x803, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r9, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000003bc0)}, 0x7fc}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003d00)=""/113, 0x71}], 0x1, &(0x7f0000003dc0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004dc0)=""/173, 0xad}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000004f40)=""/157, 0x9d}, {&(0x7f0000005000)=""/191, 0xbf}, {&(0x7f00000050c0)=""/19, 0x13}], 0x5, &(0x7f0000005180)=""/76, 0x4c}, 0x7}, {{&(0x7f0000005200)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005300)=[{&(0x7f0000005280)=""/118, 0x76}], 0x1, &(0x7f0000005340)=""/177, 0xb1}, 0x7}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0xa6df}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f00000069c0)=""/169, 0xa9}, {&(0x7f0000006a80)=""/14, 0xe}], 0x2}, 0xdd7}, {{&(0x7f0000006b00)=@nfc_llcp, 0x80, 0x0}, 0x10001}], 0x9, 0x2000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300dca6000000000016000000140001800d0001647464703a73797a3200200000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 3.64318739s ago: executing program 2 (id=1350): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000007c0)={0x1e0c, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xffa, &(0x7f0000002cc0)=""/4090, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) 3.509971373s ago: executing program 3 (id=1351): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket(0xb, 0x3, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) close(0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1341, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xffffff42, &(0x7f0000000780)="b7ff680424eca69e424278e86f757df1431e4a9b4a6ea1b6395a2fdc6d9354fc03c7899704a36dbcb9370f047ed1c5ee5ff2cec67dd57e4541f38d6ea11015cd995b0c66643e39d3409b9ab4d982d02bde061027048613d536a1270020f228df88d4020900000000000000e2bb9b7e3a96434b153c97b93d2c30b11882bbc9313207342c59f5944dec2cce0e99fe08f137059fd5a8c3f339874976e864f61503f2000000000000bad23edceed1ebef56e8525862ed5c4e5d7988517a", 0x0, 0x408, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6f}, 0x55) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}, 0xc0011122) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) close(r5) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.381961989s ago: executing program 4 (id=1352): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf25030000000800040001000000"], 0x1c}}, 0x8004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r5, 0xb) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000ff0f000000280000002800000007000003000000020000060400000005000000000478302e5f2e00dc9746d566bccc0c00"/74], &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x8}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40020000", @ANYRES16=r3, @ANYRESHEX=r2, @ANYRES32=r3], 0x240}}, 0x810) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x870, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x844, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x5f98f248b8078394}, @TCA_TBF_RATE64={0xc, 0x4, 0xf767c2f87c33d96b}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5d19c95b6a54bc76}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x5, 0x8, 0x9, 0x8, 0x3, 0x10000, 0x8, 0x9, 0xc3, 0xfffffffb, 0x5, 0x8, 0x10000, 0x5, 0x9, 0xdc, 0x7f, 0x7b26b9c7, 0x0, 0xcd46, 0x9, 0xffffffff, 0xff, 0x7, 0x0, 0x8, 0x4c, 0x0, 0x5, 0x2, 0x148, 0x8, 0xd868, 0x5, 0x50, 0x2, 0x7fff, 0xfffffd86, 0x10, 0x4, 0xddf, 0x6, 0x5, 0x7, 0xfffffff3, 0x3, 0x6, 0x1, 0x2, 0xa5, 0x1, 0x200, 0x4, 0x1, 0x9, 0xe4, 0xf, 0x2, 0x401, 0x4, 0x0, 0x6, 0x3, 0x7, 0x101, 0x8, 0x547, 0xd, 0x5, 0xfb, 0x2, 0x7ff, 0x5, 0x10001, 0x9, 0x0, 0x4, 0xba4, 0xfffffbde, 0x4, 0x7c6e, 0xb8, 0x9, 0x3, 0x3, 0x3311, 0xfffffffd, 0xfffffffb, 0x5, 0x2, 0x405, 0x0, 0x3, 0xffff, 0xd2fb000, 0x10001, 0x800, 0x8, 0x0, 0x6, 0x2, 0x5, 0x1000, 0x40001, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x9, 0x6, 0x80000001, 0x10000, 0x9, 0x3, 0x3, 0x7e85, 0xc, 0xe124000, 0xd8e, 0xff, 0x3, 0x7f9, 0x9, 0x7, 0x9981, 0x2, 0x10, 0x1, 0x8001, 0x3, 0x7, 0x3, 0x6, 0x1, 0x400, 0x6, 0x7, 0x4, 0x15e, 0x8, 0x6, 0x4, 0x7fff, 0x1, 0x1000, 0x4, 0x2, 0x2, 0x80000000, 0xd, 0x6, 0xe0f, 0x3, 0x1f, 0xfffffffe, 0x2, 0x3, 0xe, 0x18000, 0x1, 0x2, 0xc33, 0x1, 0x1, 0x8000, 0x3, 0x3, 0x7, 0xd8, 0x2, 0x6, 0xa4ed, 0x3, 0xc89, 0x8c4, 0xab, 0x0, 0xa, 0x1, 0x9, 0x5, 0x824, 0xc87, 0x2, 0x2, 0xfffffbff, 0x8, 0x377, 0xfffffffc, 0x4, 0xfffff01a, 0xffffff80, 0x7ff, 0x7fff, 0x644d, 0x5000000, 0x3, 0x164e, 0x7fff, 0x1, 0x800, 0x8, 0xfffffbff, 0x1000, 0x100, 0x5, 0x8, 0x9, 0x771b9664, 0x0, 0x9db63b77, 0xe1, 0x6, 0xfffffffe, 0x3, 0x2, 0x1, 0x7f, 0x6, 0xd44, 0x16, 0x2, 0x2, 0x6f3a, 0x4, 0x8af, 0xfffffe01, 0x9, 0x0, 0x4000, 0x8, 0x527, 0x2, 0xfffffff9, 0x4, 0x2, 0x4c, 0xf47, 0x2000000, 0x9, 0x5, 0xebb9, 0xfffffffc, 0x3, 0x2, 0x1000, 0x3, 0x8, 0x100, 0x5, 0x3ff, 0x4, 0x340]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa206fd1f51167d}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x5, 0x4, 0x0, 0x3, 0x101, 0x0, 0x9, 0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x7, 0x100, 0xb, 0xa, 0x1, 0x5, 0x40, 0xff, 0x8, 0x80000001, 0x6, 0x200, 0x1, 0x38ed, 0x3b4, 0x3, 0xafd, 0x675, 0x40, 0x100, 0x5, 0x3, 0x8001, 0x6, 0x63, 0x1, 0x3, 0x9, 0x800, 0xc, 0x4, 0x9, 0x8001, 0xe7, 0x78, 0x7fff, 0x10001, 0x7fffffff, 0x5, 0x7, 0x80000000, 0x1, 0x7, 0x480000, 0x3, 0x1, 0x2, 0x3, 0x5, 0xfffffffb, 0x80000001, 0x3, 0x401, 0xbf3, 0x5, 0x2f, 0x1, 0x5, 0x5, 0x10001, 0xe97, 0x9, 0x101, 0x2b, 0x7, 0x2, 0x40, 0x200, 0x4, 0x1, 0x6, 0x6, 0x800, 0x61, 0x9, 0x3, 0xc, 0x8, 0x3, 0x32c, 0x1, 0x6, 0x2, 0x242, 0xbd7a, 0x2, 0x8, 0x6, 0x1, 0x7, 0xffffffff, 0x7fff, 0x6, 0x8, 0x81, 0xf, 0x8, 0x7, 0x6, 0x3, 0x6, 0xb7, 0x9, 0xda, 0x8, 0x0, 0x57e, 0x3, 0x7fffffff, 0x3, 0x0, 0x100, 0x7, 0x7fffffff, 0x4, 0x0, 0xd079, 0x0, 0x40, 0x2, 0xfff, 0x2, 0xfffffffb, 0x6, 0x6, 0x546fd67e, 0x10, 0x6, 0x8, 0x6, 0x7, 0x7bfd, 0x2d57, 0x7, 0xfc8, 0x7, 0xa7, 0x588, 0x5, 0x4, 0xc6c00000, 0x6, 0x400, 0x2, 0x1, 0x7, 0x9, 0x401, 0xfffffffc, 0x7, 0xe4, 0x8, 0x6, 0x10, 0x401, 0x200, 0x1000, 0x50e7, 0x0, 0x7, 0x3ee, 0x7, 0x8, 0x4, 0x3ff, 0x5, 0x0, 0xa4, 0x3, 0x6, 0x8, 0x5, 0x200, 0xe, 0x6, 0x6, 0xa, 0x3, 0x200, 0x7, 0x4, 0x3, 0x6a, 0xbf, 0x49, 0x7, 0x5, 0x6, 0x0, 0x1, 0x9, 0x3, 0x5, 0xb271, 0x0, 0x49d8, 0x9, 0x2, 0x2, 0x2, 0x10000, 0xd, 0x4, 0x6, 0xe5ec, 0x10, 0x10, 0x3, 0xc73, 0x9, 0x7ff, 0x5, 0x6, 0xffffffff, 0x80, 0x6, 0x8, 0x6, 0x5, 0x8, 0x4, 0x10, 0xaf, 0x3, 0x3, 0x89, 0xe61, 0x100, 0x7, 0x7fffffff, 0x28, 0xb0, 0x0, 0x7, 0x7, 0x4000001, 0xfffffff0, 0x3, 0xbd9, 0x9, 0x7, 0x3, 0x7ff]}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x870}, 0x1, 0x0, 0x0, 0x48842}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r11, &(0x7f0000000200)={0xa, 0x0, 0x7, @loopback, 0x4, 0x2}, 0x20) getsockname$packet(r11, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000000a80)=0xfffffffa, 0x4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x43}, 0x55}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 3.274749595s ago: executing program 3 (id=1353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2bf96f1163cfd74505de8698a14d793aaa20cf41bbc0a680"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "48c8f726f29965f6bb235525cd54eae28e6cb1a364f00601"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0cc1ab14929db64527b5554bb20efea1f85e2ef14b0c8116"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x24050800) 3.15271917s ago: executing program 4 (id=1354): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.1486931s ago: executing program 3 (id=1355): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400e4ff07000700e00000020800020005000000080008"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3.014683387s ago: executing program 0 (id=1356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa602188a83800810046000806000186dd06100007fffffffffffffc000000000000000000000000000000aaaaaaaaaaaafc0200"/74], &(0x7f0000000440)={0x1, 0x1, [0x2e, 0xc79, 0x362, 0x693]}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60890}, 0x20000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r3, 0x200000000000000}, 0x38) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @remote}, 0x20, 0x0, 0x0, 0x0, 0xee2f, 0x0, 0xff, 0x5, 0x9}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000f9ff00000000000d000000050007001200000006000a00030000000600080000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000267546e2b391e67ba40000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x28044000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa602188a83800810046000806000186dd06100007fffffffffffffc000000000000000000000000000000aaaaaaaaaaaafc0200"/74], &(0x7f0000000440)={0x1, 0x1, [0x2e, 0xc79, 0x362, 0x693]}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60890}, 0x20000840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r3, 0x200000000000000}, 0x38) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @remote}, 0x20, 0x0, 0x0, 0x0, 0xee2f, 0x0, 0xff, 0x5, 0x9}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000f9ff00000000000d000000050007001200000006000a00030000000600080000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000267546e2b391e67ba40000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x28044000}, 0x0) (async) 3.013901179s ago: executing program 1 (id=1357): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x50, 0x9, {0x0, 0x2710}, {}, {0x4, 0x1}, 0x1, @canfd={{0x2}, 0x14, 0x3, 0x0, 0x0, "509e61c5a3b06357cbb0909b2f7a82964d522a3ec4367b5305fc06c6470a31360c5c9e0b3b9795a3874bbd1de09c8ef1e73eb657fd76edf6a4dd620f7e5e4910"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4004885) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x4, @loopback, 0x7}}, 0x0, 0x0, 0x26, 0x0, "303658411336b38fd652251a0c3533969007996a89a3be5a9402cb0b4aa2b8e9900a102362a77fbea2636063663370fe7fe7e97818025ad34ea59bcdd5b296f73e5eb1f2d718299c727a3cd77cca54cc"}, 0xd8) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000440)=""/124, &(0x7f00000004c0)=0x7c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0xe, 0x1, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x8, 0x3, 0x4}}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ed}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x19e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}}, 0x20000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000740)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x32a, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8882) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x100, 0x8}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x2, &(0x7f0000000a00)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f0000000a40)='GPL\x00', 0x35c4, 0xfe, &(0x7f0000000a80)=""/254, 0x41100, 0x1, '\x00', r1, @fallback=0x26, r5, 0x8, &(0x7f0000000b80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x8, 0x4, 0x26}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000cc0)=[r5, r5, r5, r7, r8, r5, r5, r5, r5, r5], &(0x7f0000000d00)=[{0x4, 0x5, 0x7, 0x7}], 0x10, 0x401}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, r12, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xa1a597915353c843}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x49}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x11) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000fc0)={0x2, 0x35, 0x7, 0x5, 0x1, 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x400, 0x1}, &(0x7f00000010c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000001100)={r13, 0xb1dd}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001140)={r13, 0x80000000, 0x7, 0xfffffff9}, &(0x7f0000001180)=0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r10) sendmsg$TIPC_NL_KEY_FLUSH(r10, &(0x7f00000014c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x214, r14, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4d88}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeb3e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2dc}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x150e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc89}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x19c5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4010}, 0x8080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='cpuacct.usage_percpu\x00', 0x0, 0x0) 2.925192881s ago: executing program 1 (id=1358): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001892b06a83ecd400000000000000381000003800000005000000020000000000001104000000ffffffff00000000e2ffff01000000000200000200000008027ee27cf9d49e8c"], 0x0, 0x55}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x2f, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r5, 0x8417000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r7, &(0x7f0000000040), r6, 0x0, 0x6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x81, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5c8c}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0xdd1, 0x17, &(0x7f00000000c0)=""/23, 0x40f00, 0x13, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x10, 0xff, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, r2, r3, r4, r6, r8, r9], &(0x7f00000007c0)=[{0x1, 0x1, 0x9, 0x5}]}, 0x94) 2.809412277s ago: executing program 1 (id=1359): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000007878832200c8323fc452ec00"/26, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000c6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x720, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000f033451a27000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff"], 0x5000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000000000008500000011000000850000000e00000095000000000000007383eee25536f647c6b9"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.65838334s ago: executing program 0 (id=1360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8000000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb91}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2000c011) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) close(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 2.600083479s ago: executing program 2 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4f23, 0x200000e, @loopback={0xe0}, 0x40000008}, 0x1c) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0xffffffffffffffe1}]}]}, 0x58}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0xffffffffffffffe1}]}]}, 0x58}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000002040)='\x00\x00\x00\x00', 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0xd6}, 0x14) (async) sendto$packet(r7, &(0x7f0000002040)='\x00\x00\x00\x00', 0x4, 0xb01, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0xd6}, 0x14) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000000906010100000000000000000100000950000880100007800c001940000000000000000510cc07800c00184000000000000000052e0007800c0019400000000000000101100007800c00184000000000000003ff0c00078008000a400000000108000940000000054c0007800900130073797a320000000008001c40000001010c001b400000000000000005080008400000000c11001a002f6465762f6e65742f74756e000000000900120073797a3100000000ffa235047d98fa83bff6c170a3431f85e86ef0e87316237f78d8ca76b98cf8c251e115bcc14e19db8430bf19557638c5a7bc34f7cdb958c679d7722474fbcaa8ab2092f1cad1301341c4ba06d7404a149e3ca430a5ba8f4cc53d8a3f9dc5c8fb0e83381ec39832ca98c39d6ac238f05b7e2184ae8cb1a1cbd5f5053659213c4eb1aa3a9cfe99cc4dc9b06e12ae1c04f36a15e7bf34978d8867e2df3b5d4d644070fc26b49174dc38ae8c7d1d2c59205fc3f207ff57bf9f2cfc3fb3f10bbe23fa46be4382ee98db9e9f74f53c785c3b3a74abfb97072a4cba46451e1b45354091d8ee6dc33ba09642619e05f7188216a2916533035769d8c7b4571649bc85ecaa6e3a26645e20"], 0xb8}}, 0x2004c005) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10) close(0x3) (async) close(0x3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000002c0)={'gre0\x00', {0x2, 0x0, @remote}}) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000002c0)={'gre0\x00', {0x2, 0x0, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.366488481s ago: executing program 0 (id=1362): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) epoll_create1(0x80000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 2.234017007s ago: executing program 2 (id=1363): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r3 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000788a9d4a0000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000"/88], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) (async) socket(0x15, 0x5, 0x0) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000f00)=ANY=[@ANYBLOB="18020000788a9d4a0000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000"/88], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) 2.188344306s ago: executing program 0 (id=1364): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1800, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) pwrite64(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xffffffffffffbd79) 2.142629293s ago: executing program 4 (id=1365): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x5f7, 0xa, 0xb, 0x80, 0x10, 0x80000000, 0xb1}, &(0x7f0000000340)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x0, 0x2, 0x3, 0x4, 0x10000}, &(0x7f00000005c0)=0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0xfffffffffffffdef, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xfffffffffffffdea, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x40}]}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f0000000100)) (async) sendmmsg$sock(r5, &(0x7f0000004ac0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x1, 0x4}}, 0x80, 0x0}}], 0x1, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) 1.978324893s ago: executing program 0 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x40032002) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/15, 0xf}], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1.977360067s ago: executing program 2 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80000012e0000090000bbbb"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600140001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x4}, 0x5}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x2, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x6}, &(0x7f0000000140)=0x20) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x2}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019ffff0f0000000001000201180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) 1.929340715s ago: executing program 4 (id=1368): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x208200, &(0x7f0000000040)={@align=0x400, {0x1ff, 0x9, 0x5, 0x2}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xc}) sendmsg$tipc(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000001c0)="2d1b18baf2809227f32230aac202fdb7f84ebb77b02fcd6bdfcc5f3b4ffdbeab5f22af9826dabe14b9c4b6dfc5370d6e6901a4edc01902de6bedef6c9da303a2817084ad0070ab", 0x47}, {&(0x7f0000000280)="e080ed03cb67b795cb8a5e530257fb754818d5d1fad5a3ac9ab2a927bf6d896e2048239debf204913ed8c09c101c4b757ade6ff2c7", 0x35}, {&(0x7f00000002c0)="372e706d8846aa8fe127962a87be6bd2a59792dc6f1d90e1e9a3d90c882acb7397a03f00efd94018d1f36ea224b8839855da3002bdcd456f2324e4373a5fc492930f45245f9e9232e7bace5fd8b2ed7f", 0x50}, {&(0x7f0000000500)="f75c97810f051f60c372694cdb8dc5c9d236391aae5f8004e0a2a93e284de5a9c84b3c0bf6bcf0c716c6c0f7d338c048b6757f1d051b7eae1d6893aa02ed11c68553ebeb81bb81c90ba44ae72e0b20e18d9801e04f3c2682e8a42c45cc437f8425c8730dca9c4264eac80cdd328f354835659c1562bc56300dd3837d64dddb25fed254313d9c16d41ea93bc55870c01234ae5b66cb8b89253eaa1a72415683922edc068ecb458198e2f9dd7d69b16aedb4bf4df6ea606e144f6dfcdfe26894f962f7c0d453f76fd4bd0d668aeeeba943c96e1bf6f2a25f3f6304e8e0d700fa3ff1780a8148ddb74f55", 0xe9}, {&(0x7f0000000600)="6e5ba1f24dea1eba7f0e4b9c7c35728b7af2a2701e25875e2ef207d7d235b6bd403eecac540eb2170ce4976acc3356dd87b69e6c1009c32b27ba52f566d2d8a17e66b0b1d87a54e34e00a19cfe2bf6adbd3854cf18a31848a96448f80b58658dcc701990b02d6d301401a8a2e446a8dfe692fb41fcd3400bc403d755c53fcfbcf8f51bf6e5f3526f44610340ce", 0x8d}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="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", 0x1000}], 0x7}, 0x4000080) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000002800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10080}, 0x20000010) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60e400ff00403a00fe880000000000000000000000e22e36ddffffff01020090780000000d6000000000001100fc02003500000000000000000009000000000000000004000000ffffac14140017c1ff182e8079f39240aaaa613e76c1307fdbe36d5777fe61a938a566365330a66f5da1daf487d55b590ecf15400d68d9209d9da9e8e085b4472042d76050be5bf18a651f2b14f4223cd99eebf335e07b3560ec185dcbf18a388da9688eac26e3dfcc821803ac3792abd861c0769b8af85fb60b8c639fb2771aa807c4e55ce6441cd4eac24b181de760ec399e277898fe382cb55f0e61d80028c09cc0201d03d5dd0b52bef9fb6a16567f8ad4914b6c70e4743bda11a746368df10c0bf37562f136f83f3d62cc2fb109a74309e4ac36142fecc6"], 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000028c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000060000000000001000000000005f5f2e000000b86a53af692734a5d01488293c26f8f1c03d00493372611fef2f4ff60dd54f811f6dd0ac1befd26972547b4127638c6bab5a58d12563e020cacc37d6731dc2"], 0x0, 0x2b, 0x0, 0x1, 0xb}, 0x28) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close(0x4) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x13) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.802557066s ago: executing program 1 (id=1369): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x5, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000001c0)=0xe) 1.734543167s ago: executing program 0 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000002380), 0x12) syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty}, &(0x7f0000000340)=0xc) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000325bd7000fedbdf25040000080000000000000000270000000500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40081) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000010003b15fdffffffffdbdf2500000023", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c0002800800030001"], 0x38}}, 0x2400c080) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="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", @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000e002000000000300000002000000090000000300000000000084234b03616231ef8edf192f130400000700000001000000000000000e00000004000000ffffff7f0700000005000000010400000c00000000000000ff0300000c000000050000000300000010000000ffff0000010000000000"], 0x0, 0x42}, 0x28) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.661840064s ago: executing program 4 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r6, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) r7 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r7}, 0x18) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/101, 0x65}, 0x10000006}], 0x1, 0x40002142, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.632340207s ago: executing program 1 (id=1372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 0s ago: executing program 2 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x587}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x70}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001e00)={'macvtap0\x00', 0x0}) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080046000018006600bf4f84907800000000e0000001626656eb"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x5, 0xfffffff7}, 0x21, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fdfffefe000000000300000085000000110000008500000011000000950000000000000082f1374954dbf4ff8932db8fe53205f6e5a8a19842d48fe8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x4101}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r11, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000002084"], 0x2c}}, 0x24000806) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) kernel console output (not intermixed with test programs): [ 359.717090][ T5671] bridge_slave_1: entered promiscuous mode [ 359.760864][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.813973][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.841922][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.849316][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.856744][ T5672] bridge_slave_0: entered allmulticast mode [ 359.864250][ T5672] bridge_slave_0: entered promiscuous mode [ 359.894073][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.911186][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.918583][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.925947][ T5672] bridge_slave_1: entered allmulticast mode [ 359.933283][ T5672] bridge_slave_1: entered promiscuous mode [ 359.960347][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.012640][ T5674] team0: Port device team_slave_0 added [ 360.058765][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.083510][ T5674] team0: Port device team_slave_1 added [ 360.090899][ T5671] team0: Port device team_slave_0 added [ 360.096963][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.104217][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.111568][ T5673] bridge_slave_0: entered allmulticast mode [ 360.119090][ T5673] bridge_slave_0: entered promiscuous mode [ 360.129375][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.162815][ T5671] team0: Port device team_slave_1 added [ 360.168818][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.176358][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.183625][ T5673] bridge_slave_1: entered allmulticast mode [ 360.191193][ T5673] bridge_slave_1: entered promiscuous mode [ 360.208581][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.216398][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.224044][ T5677] bridge_slave_0: entered allmulticast mode [ 360.231443][ T5677] bridge_slave_0: entered promiscuous mode [ 360.296752][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.304010][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.312831][ T5677] bridge_slave_1: entered allmulticast mode [ 360.321746][ T5677] bridge_slave_1: entered promiscuous mode [ 360.330047][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.337051][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.363342][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.376510][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.383534][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.409949][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.435967][ T5672] team0: Port device team_slave_0 added [ 360.454039][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.461108][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.487396][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.499115][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.506618][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.532640][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.547243][ T5673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.558650][ T5672] team0: Port device team_slave_1 added [ 360.594467][ T5673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.617199][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.630001][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.709064][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.716506][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.742694][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.783251][ T5674] hsr_slave_0: entered promiscuous mode [ 360.789954][ T5674] hsr_slave_1: entered promiscuous mode [ 360.798879][ T5673] team0: Port device team_slave_0 added [ 360.805627][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.812981][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.839092][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.852478][ T5677] team0: Port device team_slave_0 added [ 360.877822][ T5671] hsr_slave_0: entered promiscuous mode [ 360.884472][ T5671] hsr_slave_1: entered promiscuous mode [ 360.890984][ T5671] debugfs: 'hsr0' already exists in 'hsr' [ 360.897165][ T5671] Cannot create hsr debugfs directory [ 360.904767][ T5673] team0: Port device team_slave_1 added [ 360.920378][ T5677] team0: Port device team_slave_1 added [ 360.984715][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.991932][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.018191][ T5673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.088439][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.095776][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.122047][ T5673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.133965][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.141033][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.167204][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.198950][ T5672] hsr_slave_0: entered promiscuous mode [ 361.206541][ T5672] hsr_slave_1: entered promiscuous mode [ 361.212973][ T5672] debugfs: 'hsr0' already exists in 'hsr' [ 361.218871][ T5672] Cannot create hsr debugfs directory [ 361.239528][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.246850][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.272872][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.446216][ T5673] hsr_slave_0: entered promiscuous mode [ 361.452837][ T5673] hsr_slave_1: entered promiscuous mode [ 361.459578][ T5673] debugfs: 'hsr0' already exists in 'hsr' [ 361.465543][ T5673] Cannot create hsr debugfs directory [ 361.536868][ T5677] hsr_slave_0: entered promiscuous mode [ 361.543402][ T5677] hsr_slave_1: entered promiscuous mode [ 361.549882][ T5677] debugfs: 'hsr0' already exists in 'hsr' [ 361.556163][ T5677] Cannot create hsr debugfs directory [ 361.735119][ T5683] Bluetooth: hci4: command tx timeout [ 361.735630][ T5679] Bluetooth: hci1: command tx timeout [ 361.740657][ T5683] Bluetooth: hci2: command tx timeout [ 361.747555][ T5685] Bluetooth: hci3: command tx timeout [ 361.751881][ T5675] Bluetooth: hci0: command tx timeout [ 361.994556][ T5674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.008338][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.016846][ T5674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.030099][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.060564][ T5674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.070938][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.079564][ T5674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.091020][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.174798][ T5672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.190090][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.204369][ T5672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.218075][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.227311][ T5672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.238662][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.247710][ T5672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.258794][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.367043][ T5671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.382476][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.398141][ T5671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.410492][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.419475][ T5671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.429208][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.448523][ T5671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.459458][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.586365][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.599574][ T5673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.610551][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.620451][ T5673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.631709][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.640595][ T5673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.651532][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.659981][ T5673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.670230][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.770541][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.783059][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.818562][ T5677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.830339][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.839268][ T5677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.850524][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.861806][ T5677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.871838][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.880332][ T5677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.891666][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.904238][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.911932][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.949396][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.956577][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.988199][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.031573][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.042996][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.050234][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.095454][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.102658][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.118664][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.141388][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.148841][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.178331][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.185643][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.348128][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.466386][ T5673] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.499025][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.544575][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.551842][ T5698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.599623][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.606954][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.669642][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.708732][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.715971][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.759855][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.767095][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.819193][ T5675] Bluetooth: hci3: command tx timeout [ 363.819235][ T5679] Bluetooth: hci1: command tx timeout [ 363.824816][ T5683] Bluetooth: hci2: command tx timeout [ 363.830523][ T50] Bluetooth: hci4: command tx timeout [ 363.841177][ T5685] Bluetooth: hci0: command tx timeout [ 364.600078][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.687569][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.863660][ T5674] veth0_vlan: entered promiscuous mode [ 364.895908][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.961102][ T5674] veth1_vlan: entered promiscuous mode [ 364.999629][ T5672] veth0_vlan: entered promiscuous mode [ 365.061840][ T5672] veth1_vlan: entered promiscuous mode [ 365.190180][ T5674] veth0_macvtap: entered promiscuous mode [ 365.208071][ T5671] veth0_vlan: entered promiscuous mode [ 365.220769][ T5674] veth1_macvtap: entered promiscuous mode [ 365.237825][ T5673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.272428][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.286398][ T5671] veth1_vlan: entered promiscuous mode [ 365.302980][ T5672] veth0_macvtap: entered promiscuous mode [ 365.338234][ T5672] veth1_macvtap: entered promiscuous mode [ 365.381393][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.404995][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.454870][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.466161][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.488750][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.508411][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.518871][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.600043][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.636418][ T5671] veth0_macvtap: entered promiscuous mode [ 365.652257][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.665052][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.697705][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.708689][ T3348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.722880][ T5671] veth1_macvtap: entered promiscuous mode [ 365.760443][ T5677] veth0_vlan: entered promiscuous mode [ 365.824808][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.837039][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.851853][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.878239][ T5677] veth1_vlan: entered promiscuous mode [ 365.895119][ T5679] Bluetooth: hci1: command tx timeout [ 365.900951][ T5685] Bluetooth: hci0: command tx timeout [ 365.906831][ T50] Bluetooth: hci4: command tx timeout [ 365.906861][ T5675] Bluetooth: hci3: command tx timeout [ 365.917928][ T5683] Bluetooth: hci2: command tx timeout [ 365.955422][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.000614][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.012479][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.040195][ T5703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.051750][ T5703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.068627][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.076956][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.084658][ T5673] veth0_vlan: entered promiscuous mode [ 366.091929][ T5703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.107845][ T5703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.199454][ T5674] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 366.202137][ T5677] veth0_macvtap: entered promiscuous mode [ 366.228191][ T5673] veth1_vlan: entered promiscuous mode [ 366.251166][ T5677] veth1_macvtap: entered promiscuous mode [ 366.262330][ T3348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.281683][ T3348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.378234][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.436980][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.453666][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.466000][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.514405][ T5698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.537375][ T5698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.597291][ T5698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.607631][ T5698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.630217][ T5835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.639051][ T5835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.668914][ T5673] veth0_macvtap: entered promiscuous mode [ 366.746757][ T5673] veth1_macvtap: entered promiscuous mode [ 366.762114][ T5879] Zero length message leads to an empty skb [ 366.869739][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.972303][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.001673][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.028427][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.053065][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.077687][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.132997][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.143247][ T1168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.183981][ T5885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.187543][ T5884] syzkaller0: entered promiscuous mode [ 367.198831][ T5884] syzkaller0: entered allmulticast mode [ 367.299902][ T3348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.307958][ T3348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.594446][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.643123][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.708378][ T5900] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 367.744709][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.774800][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.206845][ T5913] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5'. [ 368.230350][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 368.313212][ T5919] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 368.389291][ T5918] veth1_macvtap: renamed from vlan0 [ 368.673657][ T5927] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18'. [ 369.730445][ T5972] syzkaller0: entered promiscuous mode [ 369.765115][ T5972] syzkaller0: entered allmulticast mode [ 369.991844][ T5974] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 370.490093][ T6010] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 372.644555][ T5974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.122228][ T6039] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 373.153544][ T6029] atomic_op ffff88802cca1998 conn xmit_atomic 0000000000000000 [ 373.338590][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 373.436876][ T6055] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 373.563756][ T6039] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 373.796354][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 373.839144][ T6071] netlink: 'syz.3.48': attribute type 11 has an invalid length. [ 373.969134][ T132] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.987610][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 374.015465][ T5703] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.039530][ T6071] netlink: 'syz.3.48': attribute type 11 has an invalid length. [ 374.050354][ T5703] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.070590][ T5703] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.288691][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.50'. [ 374.408552][ T6103] warning: `syz.3.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 374.430881][ T6105] openvswitch: netlink: Flow key attr not present in new flow. [ 374.463601][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 374.473469][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 374.578246][ T6102] bond1: entered promiscuous mode [ 374.584145][ T6102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.631453][ T6102] bond1 (unregistering): Released all slaves [ 375.204568][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 375.360523][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 375.387648][ T6143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'. [ 375.491077][ T6147] Bluetooth: MGMT ver 1.23 [ 375.647760][ T6151] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 375.709072][ T6151] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 375.763391][ T6151] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 375.904216][ T6164] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 376.043608][ T6119] netlink: 'syz.0.57': attribute type 9 has an invalid length. [ 376.076306][ T6119] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.57'. [ 376.582682][ T6190] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 376.715785][ T6190] veth1_to_team: entered promiscuous mode [ 376.729365][ T6190] gretap0: entered promiscuous mode [ 376.737219][ T6190] hsr1: entered promiscuous mode [ 376.930328][ T6203] netlink: 'syz.2.76': attribute type 12 has an invalid length. [ 378.196517][ T6245] team0: Port device veth3 added [ 378.473986][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.502082][ T6251] __nla_validate_parse: 4 callbacks suppressed [ 378.502103][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 378.534113][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.543620][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.652082][ T6270] syzkaller0: entered promiscuous mode [ 378.658087][ T6270] syzkaller0: entered allmulticast mode [ 378.711971][ T6275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.870734][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.881985][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.000414][ T6292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.549803][ T6307] syzkaller1: entered promiscuous mode [ 380.569859][ T6307] syzkaller1: entered allmulticast mode [ 380.691414][ T6313] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 380.791353][ T6316] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.819248][ T6316] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 380.833646][ T6316] netlink: 228 bytes leftover after parsing attributes in process `syz.1.101'. [ 381.212257][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 381.411519][ T6345] netlink: 724 bytes leftover after parsing attributes in process `syz.1.108'. [ 381.459476][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 381.486656][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 381.523063][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'. [ 382.183268][ T6374] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 382.338397][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 382.445070][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 382.510814][ T6374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.660904][ T6378] bond1: (slave veth3): Enslaving as an active interface with a down link [ 382.742496][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 382.755608][ T6383] bond1: (slave batadv1): making interface the new active one [ 382.766031][ T6383] batadv1: entered promiscuous mode [ 382.772241][ T6383] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 382.794041][ T6381] bond0: entered promiscuous mode [ 382.799377][ T6381] bond_slave_0: entered promiscuous mode [ 382.807516][ T6381] bond_slave_1: entered promiscuous mode [ 382.818544][ T6381] bond0: left promiscuous mode [ 382.823679][ T6381] bond_slave_0: left promiscuous mode [ 382.832935][ T6381] bond_slave_1: left promiscuous mode [ 382.997043][ T6388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.056218][ T6389] bond1 (unregistering): (slave veth3): Releasing active interface [ 383.086494][ T6389] bond1 (unregistering): (slave batadv1): Releasing active interface [ 383.141889][ T6389] bond1 (unregistering): Released all slaves [ 383.186023][ T1234] team_slave_0: entered promiscuous mode [ 383.192865][ T1234] team_slave_1: entered promiscuous mode [ 383.272029][ T6393] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 383.381594][ T6360] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 383.648091][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 383.691859][ T6427] trusted_key: syz.1.120 sent an empty control message without MSG_MORE. [ 384.025581][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 384.230317][ T6456] team_slave_0: left promiscuous mode [ 384.245659][ T6456] team_slave_1: left promiscuous mode [ 384.271713][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 384.934096][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 384.965207][ T6487] netlink: 39 bytes leftover after parsing attributes in process `syz.4.133'. [ 385.051678][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 385.078753][ T6484] netlink: 39 bytes leftover after parsing attributes in process `syz.4.133'. [ 385.127216][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.130'. [ 385.429954][ T6509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.137'. [ 385.467922][ T6477] syz.1.130 (6477) used greatest stack depth: 17864 bytes left [ 385.498702][ T6509] netlink: 43 bytes leftover after parsing attributes in process `syz.0.137'. [ 385.544453][ T6509] netlink: 'syz.0.137': attribute type 5 has an invalid length. [ 385.865948][ T6526] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 387.350834][ T6561] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 387.941132][ T6598] smc: net device lo applied user defined pnetid SYZ2 [ 387.973120][ T6598] smc: net device lo erased user defined pnetid SYZ2 [ 388.899418][ T6634] xt_socket: unknown flags 0x50 [ 389.027778][ T6647] syz_tun: entered allmulticast mode [ 389.346249][ T6668] Cannot find del_set index 0 as target [ 389.472069][ T6645] syz_tun: left allmulticast mode [ 389.925511][ T6679] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 389.969182][ T6679] __nla_validate_parse: 5 callbacks suppressed [ 389.969200][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 390.472513][ T6711] syz_tun: entered allmulticast mode [ 390.514338][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 390.722453][ T6723] openvswitch: netlink: IP tunnel dst address not specified [ 391.230962][ T6745] netlink: 228 bytes leftover after parsing attributes in process `syz.0.180'. [ 391.332421][ T6745] openvswitch: netlink: Message has 58 unknown bytes. [ 391.441293][ T6757] pim6reg1: entered promiscuous mode [ 391.472760][ T6757] pim6reg1: entered allmulticast mode [ 391.729781][ T6768] netlink: 92 bytes leftover after parsing attributes in process `syz.4.184'. [ 391.804755][ T6768] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 391.884592][ T6768] netlink: 'syz.4.184': attribute type 3 has an invalid length. [ 391.892789][ T6768] netlink: 224 bytes leftover after parsing attributes in process `syz.4.184'. [ 392.071974][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 392.174220][ T6787] netlink: 14 bytes leftover after parsing attributes in process `syz.2.188'. [ 392.234317][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.243769][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.438581][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.472547][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.768889][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 393.111139][ T6768] netlink: 'syz.4.184': attribute type 13 has an invalid length. [ 393.222845][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.266624][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.288783][ T6787] bond0 (unregistering): Released all slaves [ 393.459530][ T5821] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.510222][ T5821] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.554665][ T5821] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.587729][ T5821] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.624410][ T5821] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.645247][ T5821] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.806766][ T5821] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.846058][ T5821] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.919458][ T6840] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 393.940286][ T6840] bond0 (unregistering): Released all slaves [ 394.042522][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.111328][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.537810][ T6850] syzkaller0: entered promiscuous mode [ 394.543355][ T6850] syzkaller0: entered allmulticast mode [ 395.910324][ T6894] netlink: 'syz.1.209': attribute type 2 has an invalid length. [ 395.926715][ T6894] netlink: 'syz.1.209': attribute type 11 has an invalid length. [ 395.949772][ T6894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'. [ 396.213350][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 396.561752][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 397.362458][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 397.691441][ T6921] SET target dimension over the limit! [ 398.598308][ T6958] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 398.726783][ T6958] bond1: entered promiscuous mode [ 398.750287][ T6958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.328796][ T6978] netlink: 'syz.4.231': attribute type 29 has an invalid length. [ 399.342983][ T6987] netlink: 596 bytes leftover after parsing attributes in process `syz.4.231'. [ 399.466517][ T6991] xt_nfacct: accounting object `syz0' does not exist [ 399.532324][ T6983] netlink: 'syz.4.231': attribute type 29 has an invalid length. [ 399.555364][ T6975] batman_adv: batadv0: Adding interface: gretap1 [ 399.563083][ T6975] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.594265][ T6975] batman_adv: batadv0: Interface activated: gretap1 [ 399.642797][ T6994] netlink: 76 bytes leftover after parsing attributes in process `syz.2.236'. [ 399.684198][ T6994] tc action pedit 'at' offset 6 out of bounds [ 399.908578][ T7000] netlink: 'syz.4.238': attribute type 13 has an invalid length. [ 399.989750][ T7006] netlink: 'syz.2.240': attribute type 21 has an invalid length. [ 400.014719][ T5796] IPVS: starting estimator thread 0... [ 400.098775][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 400.125123][ T7008] IPVS: using max 27 ests per chain, 64800 per kthread [ 400.327270][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'. [ 400.694409][ T7002] netlink: 'syz.1.239': attribute type 8 has an invalid length. [ 400.720010][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 400.863163][ T7037] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 400.972763][ T7038] bridge_slave_0: left allmulticast mode [ 400.994020][ T7038] bridge_slave_0: left promiscuous mode [ 401.012446][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.058409][ T7038] bridge_slave_1: left allmulticast mode [ 401.091115][ T7038] bridge_slave_1: left promiscuous mode [ 401.111041][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.178395][ T7038] bond0: (slave bond_slave_0): Releasing backup interface [ 401.229115][ T7047] netlink: 'syz.3.248': attribute type 15 has an invalid length. [ 401.237966][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 401.248802][ T7038] bond0: (slave bond_slave_1): Releasing backup interface [ 401.277697][ T7038] team0: Port device team_slave_0 removed [ 401.299131][ T7038] team0: Port device team_slave_1 removed [ 401.311319][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.319621][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.328948][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.337218][ T7038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.346971][ T7038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.372577][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 430.851382][ T7057] netlink: 'syz.4.254': attribute type 2 has an invalid length. [ 430.873059][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 430.900468][ T7060] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.253'. [ 431.128284][ T7075] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 431.218311][ T7091] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 431.342925][ T7100] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 431.375633][ T7100] netlink: 240 bytes leftover after parsing attributes in process `syz.3.260'. [ 431.642630][ T7114] Cannot find add_set index 1 as target [ 431.669497][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 432.060778][ T7122] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 432.213673][ T7122] hsr1: left promiscuous mode [ 432.262262][ T7122] bond1: left promiscuous mode [ 432.649771][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 432.672539][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.272'. [ 433.099164][ T7172] netlink: 'syz.2.278': attribute type 3 has an invalid length. [ 433.331811][ T7185] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 433.356275][ T7185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 433.490277][ T7186] batadv1: entered promiscuous mode [ 433.530267][ T7186] batadv1: entered allmulticast mode [ 433.700651][ T7210] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 433.746431][ T7208] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 433.833134][ T7208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.858031][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 433.868648][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 433.982531][ T7208] bond1: (slave gretap1): making interface the new active one [ 433.993206][ T7208] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 434.260942][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'. [ 435.266248][ T7269] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.302'. [ 435.642733][ T7290] netlink: 'syz.0.309': attribute type 6 has an invalid length. [ 436.109625][ T7310] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 436.150417][ T7310] bond1 (unregistering): Released all slaves [ 436.280211][ T7319] __nla_validate_parse: 1 callbacks suppressed [ 436.280245][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 436.347046][ T7318] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 436.388831][ T7323] netlink: 64 bytes leftover after parsing attributes in process `syz.3.317'. [ 436.640243][ T7327] Cannot find set identified by id 0 to match [ 437.114028][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.325'. [ 437.136377][ T7340] syzkaller0: entered promiscuous mode [ 437.143205][ T7338] TC_ACT_REPEAT abuse ? [ 437.162505][ T7340] syzkaller0: entered allmulticast mode [ 437.670894][ T7355] syzkaller0: entered promiscuous mode [ 437.691931][ T7355] syzkaller0: entered allmulticast mode [ 437.869238][ T7372] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 437.881291][ T7375] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 438.439509][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.473554][ T7391] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 438.513867][ T7391] netlink: 'syz.2.337': attribute type 2 has an invalid length. [ 438.527252][ T7401] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 438.537909][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 438.866583][ T7419] xt_CT: No such helper "syz1" [ 439.148722][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'. [ 439.237680][ T7440] ip6gretap1: entered promiscuous mode [ 439.243346][ T7440] ip6gretap1: entered allmulticast mode [ 439.369293][ T7445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.350'. [ 440.298374][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305577][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.493664][ T7411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.507744][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 441.779228][ T7464] netlink: 100 bytes leftover after parsing attributes in process `syz.2.353'. [ 441.838090][ T7469] bond0: entered promiscuous mode [ 441.847831][ T7469] bond_slave_0: entered promiscuous mode [ 441.858630][ T7471] x_tables: duplicate underflow at hook 3 [ 441.864814][ T7469] bond_slave_1: entered promiscuous mode [ 441.887129][ T7469] batadv0: entered promiscuous mode [ 441.912679][ T7469] debugfs: 'hsr1' already exists in 'hsr' [ 441.928467][ T7469] Cannot create hsr debugfs directory [ 441.953778][ T7469] bond0: left promiscuous mode [ 441.983321][ T7469] bond_slave_0: left promiscuous mode [ 442.017129][ T7469] bond_slave_1: left promiscuous mode [ 442.049852][ T7469] batadv0: left promiscuous mode [ 442.130559][ T7484] netlink: 76 bytes leftover after parsing attributes in process `syz.1.360'. [ 442.160954][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 442.200372][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.360'. [ 442.493945][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 442.738962][ T7513] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 442.799397][ T7513] bond3: entered promiscuous mode [ 442.807924][ T7513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.838907][ T7514] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 442.930961][ T7523] netlink: 56 bytes leftover after parsing attributes in process `syz.1.370'. [ 442.954246][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 442.971260][ T7523] netlink: 31 bytes leftover after parsing attributes in process `syz.1.370'. [ 442.999168][ T7523] netlink: 'syz.1.370': attribute type 2 has an invalid length. [ 443.008683][ T7521] syzkaller0: entered allmulticast mode [ 443.078495][ T7523] netlink: 31 bytes leftover after parsing attributes in process `syz.1.370'. [ 443.251148][ T7533] netlink: 'syz.3.372': attribute type 21 has an invalid length. [ 443.927441][ T7558] tipc: Started in network mode [ 443.945685][ T7558] tipc: Node identity 16d60f5bf7e5, cluster identity 4711 [ 443.979655][ T7558] tipc: Enabled bearer , priority 0 [ 444.029166][ T7558] syzkaller0: entered promiscuous mode [ 444.057196][ T7558] syzkaller0: entered allmulticast mode [ 444.137377][ T7558] tipc: Resetting bearer [ 444.176422][ T7556] tipc: Resetting bearer [ 444.257658][ T7556] tipc: Disabling bearer [ 445.659778][ T7608] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 445.809323][ T7610] netlink: 'syz.4.394': attribute type 64 has an invalid length. [ 446.099507][ T7616] netlink: 'syz.3.396': attribute type 12 has an invalid length. [ 446.158698][ T7612] veth3: entered allmulticast mode [ 446.219116][ T7626] netlink: 'syz.4.398': attribute type 6 has an invalid length. [ 446.543503][ T7639] __nla_validate_parse: 10 callbacks suppressed [ 446.543523][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 446.853765][ T7655] syzkaller0: entered promiscuous mode [ 446.898502][ T7655] syzkaller0: entered allmulticast mode [ 446.903399][ T7657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 447.074147][ T7665] xt_ecn: cannot match TCP bits for non-tcp packets [ 447.214432][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 447.234140][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 447.399858][ T7670] netlink: 296 bytes leftover after parsing attributes in process `syz.3.409'. [ 447.544900][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.583215][ T7683] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 447.592764][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.621822][ T7683] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 447.673745][ T7684] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 447.847619][ T7668] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 447.861686][ T7668] bond0 (unregistering): Released all slaves [ 447.944607][ T7674] bond1: entered promiscuous mode [ 447.952132][ T7674] bond1: entered allmulticast mode [ 447.990021][ T7683] team0: Port device dummy0 added [ 448.002353][ T7684] team0: Port device dummy0 removed [ 448.037832][ T7684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 448.072111][ T1168] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.101279][ T1168] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.121088][ T7691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.154386][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 448.212070][ T1168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.224318][ T1168] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.510596][ T7714] dvmrp1: entered allmulticast mode [ 448.694504][ T7721] netlink: 'syz.2.424': attribute type 4 has an invalid length. [ 448.719985][ T7721] netlink: 'syz.2.424': attribute type 4 has an invalid length. [ 448.777225][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 448.836504][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'. [ 448.993469][ T7727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.037824][ T7733] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 473.547477][ T7769] Cannot find add_set index 0 as target [ 473.562349][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 473.612879][ T7780] xt_TCPMSS: Only works on TCP SYN packets [ 473.812621][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 473.872604][ T7793] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 474.032662][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 474.042975][ T7798] pim6reg: entered allmulticast mode [ 474.104240][ T7799] pim6reg: left allmulticast mode [ 474.342261][ T7814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.358375][ T7816] netlink: 'syz.4.444': attribute type 30 has an invalid length. [ 474.367393][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.379565][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 474.491376][ T7816] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 474.509284][ T7816] bond2 (unregistering): Released all slaves [ 474.732408][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 474.916949][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 474.961906][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 475.048945][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'. [ 475.064230][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 475.070077][ T5701] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.084250][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 475.104508][ T5701] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.140333][ T5701] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.168406][ T5701] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.989104][ T7892] netlink: 'syz.3.465': attribute type 13 has an invalid length. [ 476.015522][ T1168] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.015704][ T7892] netlink: 'syz.3.465': attribute type 13 has an invalid length. [ 476.054714][ T1168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.080491][ T1168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.122726][ T1168] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.213132][ T7956] netlink: 'syz.2.483': attribute type 13 has an invalid length. [ 477.474324][ T7963] sit2: entered allmulticast mode [ 477.750183][ T7975] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 477.832580][ T5703] tipc: Subscription rejected, illegal request [ 478.087921][ T7988] netem: change failed [ 478.148896][ T7996] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 478.216076][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.303125][ T7998] bond0: (slave veth3): Enslaving as an active interface with a down link [ 478.343132][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 478.354780][ T7996] bond0: (slave batadv1): making interface the new active one [ 478.364542][ T7996] batadv1: entered promiscuous mode [ 478.371519][ T7996] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 478.660041][ T8020] __nla_validate_parse: 39 callbacks suppressed [ 478.660060][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 478.684386][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 478.918722][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 478.929959][ T8033] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 478.942727][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 478.968176][ T8031] netlink: 124 bytes leftover after parsing attributes in process `syz.0.502'. [ 479.020469][ T8039] netlink: 'syz.1.503': attribute type 4 has an invalid length. [ 479.078165][ T8039] netlink: 'syz.1.503': attribute type 8 has an invalid length. [ 479.087156][ T8039] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 479.095332][ T8039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.503'. [ 479.104452][ T8039] NCSI netlink: No device for ifindex 0 [ 479.167524][ T8039] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 479.233620][ T8033] bond2: entered promiscuous mode [ 479.260305][ T8033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.292338][ T8039] bond2: left promiscuous mode [ 479.316548][ T8039] bond2: entered allmulticast mode [ 479.392742][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 479.438521][ T8048] bond2: (slave bridge2): making interface the new active one [ 479.467808][ T8048] bridge2: entered allmulticast mode [ 479.474598][ T8048] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 479.550738][ T8062] dvmrp1: entered allmulticast mode [ 479.610140][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 480.273568][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 480.990387][ T8133] netlink: 'syz.4.528': attribute type 8 has an invalid length. [ 481.000291][ T8133] sch_fq: defrate 0 ignored. [ 481.252219][ T8140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.461918][ T8150] xfrm1: entered promiscuous mode [ 481.502312][ T8150] xfrm1: entered allmulticast mode [ 481.704042][ T8160] nbd: must specify at least one socket [ 482.139337][ T8183] netlink: 'syz.1.543': attribute type 3 has an invalid length. [ 482.497246][ T8199] syzkaller0: entered promiscuous mode [ 482.509986][ T8199] syzkaller0: entered allmulticast mode [ 483.336499][ T5675] Bluetooth: hci3: command 0x0406 tx timeout [ 483.339243][ T5688] Bluetooth: hci1: command 0x0406 tx timeout [ 483.342779][ T5675] Bluetooth: hci2: command 0x0406 tx timeout [ 483.610124][ T8232] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 484.507449][ T8266] __nla_validate_parse: 6 callbacks suppressed [ 484.507468][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 484.632138][ T8274] xt_TCPMSS: Only works on TCP SYN packets [ 485.028555][ T8289] bond4: option xmit_hash_policy: invalid value (10) [ 485.061346][ T8289] bond4 (unregistering): Released all slaves [ 485.348450][ T8303] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 485.381733][ T8303] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 485.409265][ T8305] nbd: must specify a size in bytes for the device [ 485.491335][ T8303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.571'. [ 485.982934][ T8326] netlink: 1 bytes leftover after parsing attributes in process `syz.4.577'. [ 486.011783][ T8326] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 486.128363][ T8330] netlink: 228 bytes leftover after parsing attributes in process `syz.0.575'. [ 486.794153][ T8346] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 486.971475][ T8348] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 486.999988][ T8348] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 487.029839][ T8348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.583'. [ 487.072879][ T8348] NCSI netlink: No device for ifindex 36 [ 487.214684][ T5703] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.253460][ T5703] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.291858][ T5703] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.313007][ T5703] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.725714][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.766916][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.876985][ T8360] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 487.979683][ T8375] netlink: 'syz.1.590': attribute type 62 has an invalid length. [ 488.177214][ T8388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.593'. [ 488.198813][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 488.428230][ T8400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.595'. [ 488.449656][ T5703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.459045][ T5703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.484346][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.500986][ T8407] netlink: 'syz.1.598': attribute type 13 has an invalid length. [ 488.628184][ T8412] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 488.759021][ T8416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.600'. [ 488.974532][ T8423] tipc: Enabled bearer , priority 0 [ 488.982583][ T8423] syzkaller0: entered promiscuous mode [ 488.989079][ T8423] syzkaller0: entered allmulticast mode [ 489.049425][ T8423] tipc: Resetting bearer [ 489.085285][ T8422] tipc: Resetting bearer [ 489.138705][ T8422] tipc: Disabling bearer [ 489.155631][ T8434] SET target dimension over the limit! [ 489.168369][ T8432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.605'. [ 489.181552][ T8434] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 489.196852][ T8435] netlink: 'syz.4.606': attribute type 10 has an invalid length. [ 489.471119][ T8448] x_tables: ip_tables: ah match: only valid for protocol 51 [ 489.485334][ T5703] batadv1: left promiscuous mode [ 489.513424][ T8451] x_tables: ip_tables: ah match: only valid for protocol 51 [ 489.650406][ T8457] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 489.735918][ T8460] __nla_validate_parse: 1 callbacks suppressed [ 489.735940][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 489.790017][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'. [ 489.802315][ T8457] team0: Port device dummy0 added [ 489.844508][ T8463] sctp: [Deprecated]: syz.1.613 (pid 8463) Use of int in maxseg socket option. [ 489.844508][ T8463] Use struct sctp_assoc_value instead [ 489.868125][ T8461] veth0: entered promiscuous mode [ 489.974386][ T8461] bond0: entered promiscuous mode [ 490.040635][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 490.180624][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 490.431380][ T8470] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 490.454723][ T8470] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 490.511040][ T8466] bond2: (slave gretap1): making interface the new active one [ 490.519818][ T8466] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 490.773655][ T8456] bond0: left promiscuous mode [ 490.790247][ T8456] veth0: left promiscuous mode [ 491.003813][ T8508] validate_nla: 1 callbacks suppressed [ 491.003833][ T8508] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 491.072807][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 491.092711][ T8508] bond3: entered promiscuous mode [ 491.099515][ T8508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.128297][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 491.142082][ T8519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.150915][ T8519] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 491.162251][ T8519] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 491.263727][ T8519] bond3: (slave wireguard0): making interface the new active one [ 491.272479][ T8519] wireguard0: entered promiscuous mode [ 491.284400][ T8519] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 491.392716][ T8516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.431264][ T8523] bond2 (unregistering): Released all slaves [ 491.438210][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.630'. [ 491.670209][ T8541] block nbd0: NBD_DISCONNECT [ 491.699779][ T8532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.628'. [ 491.709636][ T8541] block nbd0: Disconnected due to user request. [ 491.719962][ T8541] block nbd0: shutting down sockets [ 492.729406][ T5907] bridge0: entered promiscuous mode [ 492.891854][ T8593] team0: entered promiscuous mode [ 492.917427][ T8593] team_slave_0: entered promiscuous mode [ 492.934518][ T8593] team_slave_1: entered promiscuous mode [ 492.967632][ T8593] veth3: entered promiscuous mode [ 493.130384][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 493.168903][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 493.683352][ T8622] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 493.731017][ T8622] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 493.757333][ T8622] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 493.945866][ T8634] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 495.445734][ T8682] __nla_validate_parse: 5 callbacks suppressed [ 495.445752][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 495.481268][ T9] IPVS: starting estimator thread 0... [ 495.501739][ T8687] netlink: 'syz.4.662': attribute type 13 has an invalid length. [ 495.570133][ T8683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.660'. [ 495.605749][ T8686] IPVS: using max 29 ests per chain, 69600 per kthread [ 496.690884][ T8735] netlink: 'syz.1.668': attribute type 11 has an invalid length. [ 497.051563][ T8757] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 497.076214][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 497.169177][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 497.192804][ T8755] xfrm1: entered allmulticast mode [ 497.199775][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.675'. [ 497.471759][ T8781] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 497.546016][ T8781] bond0: (slave dummy0): Releasing backup interface [ 497.568525][ T8785] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 497.618440][ T8792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.681'. [ 497.640346][ T8794] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 497.648957][ T8781] team0: Port device dummy0 added [ 497.711024][ T8799] veth0: entered promiscuous mode [ 497.900705][ T8797] bond4: (slave gretap2): making interface the new active one [ 497.910897][ T8797] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 497.939384][ T8812] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 497.999226][ T8814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 498.041504][ T8802] macvlan4: entered promiscuous mode [ 498.054279][ T8802] macvlan4: entered allmulticast mode [ 498.062160][ T8802] bond4: entered promiscuous mode [ 498.067823][ T8802] gretap2: entered promiscuous mode [ 498.093932][ T8802] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 498.120867][ T8802] bond4: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 498.157631][ T8802] bond4: left promiscuous mode [ 498.162632][ T8802] gretap2: left promiscuous mode [ 498.216781][ T8781] bond0: entered promiscuous mode [ 498.235712][ T8781] bond_slave_0: entered promiscuous mode [ 498.242195][ T8781] bond_slave_1: entered promiscuous mode [ 498.359513][ T8812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.369678][ T8814] bond4: entered promiscuous mode [ 498.381432][ T8814] bond4: entered allmulticast mode [ 498.409671][ T8815] bond4: (slave dummy0): making interface the new active one [ 498.418145][ T8815] dummy0: entered promiscuous mode [ 498.426688][ T8815] dummy0: entered allmulticast mode [ 498.433611][ T8815] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 498.515021][ T8827] vlan2: entered promiscuous mode [ 498.523001][ T8827] gretap0: entered promiscuous mode [ 498.644545][ T8780] bond0: left promiscuous mode [ 498.662739][ T8780] bond_slave_0: left promiscuous mode [ 498.669323][ T8780] bond_slave_1: left promiscuous mode [ 498.677192][ T8833] netlink: 'syz.3.687': attribute type 8 has an invalid length. [ 498.681860][ T8780] veth0: left promiscuous mode [ 499.034209][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 499.046178][ T8846] syzkaller0: entered promiscuous mode [ 499.052188][ T8846] syzkaller0: entered allmulticast mode [ 499.067312][ T8854] netlink: 'syz.2.695': attribute type 30 has an invalid length. [ 499.176027][ T5679] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 499.392106][ T8861] hmac(sh: entered promiscuous mode [ 499.622597][ T8879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.702'. [ 499.846456][ T8889] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 499.980015][ T8893] tipc: Invalid UDP bearer configuration [ 499.980076][ T8893] tipc: Enabling of bearer rejected, failed to enable media [ 499.999340][ T8894] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 [ 500.022652][ T8891] syzkaller0: entered promiscuous mode [ 500.044275][ T8891] syzkaller0: entered allmulticast mode [ 500.207734][ T5907] IPVS: starting estimator thread 0... [ 500.292321][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.710'. [ 500.305761][ T8908] IPVS: using max 26 ests per chain, 62400 per kthread [ 500.402776][ T8912] netlink: 'syz.3.711': attribute type 11 has an invalid length. [ 501.149072][ T5679] block nbd0: Receive control failed (result -32) [ 501.332039][ T8947] tipc: Started in network mode [ 501.340403][ T8947] tipc: Node identity 06b44cc0a369, cluster identity 4711 [ 501.363229][ T8947] tipc: Enabled bearer , priority 0 [ 501.380353][ T8947] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.395576][ T8947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.404125][ T8947] IPv6: NLM_F_CREATE should be set when creating new route [ 501.411735][ T8947] IPv6: NLM_F_CREATE should be set when creating new route [ 501.419045][ T8947] IPv6: NLM_F_CREATE should be set when creating new route [ 501.448117][ T8953] syzkaller0: entered promiscuous mode [ 501.477285][ T8953] syzkaller0: entered allmulticast mode [ 501.613136][ T8959] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 501.711866][ T8953] tipc: Resetting bearer [ 501.720876][ T8964] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 501.742454][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.750176][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.761441][ T8964] syzkaller1: linktype set to 260 [ 501.779558][ T8953] tipc: Resetting bearer [ 501.798951][ T8953] tipc: Disabling bearer [ 501.832961][ T8963] ip6erspan0: entered allmulticast mode [ 502.018635][ T8956] erspan1: entered promiscuous mode [ 502.031417][ T8956] erspan1: entered allmulticast mode [ 502.113227][ T8968] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 502.148878][ T8968] bond4 (unregistering): Released all slaves [ 502.282416][ T8967] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 502.309944][ T8967] bond4 (unregistering): Released all slaves [ 502.691753][ T8978] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 502.831117][ T8978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.001156][ T8986] syzkaller0: entered promiscuous mode [ 503.025657][ T8986] syzkaller0: entered allmulticast mode [ 503.778196][ T9013] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 503.794255][ T9013] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 503.984929][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 504.728039][ T9035] ip6tnl0: Caught tx_queue_len zero misconfig [ 504.750879][ T9035] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1536) ! [ 505.473934][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 505.511637][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 505.564779][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 505.776223][ T9084] x_tables: duplicate underflow at hook 1 [ 505.918017][ T9087] netlink: 'syz.0.759': attribute type 11 has an invalid length. [ 506.306248][ T9089] netlink: 156 bytes leftover after parsing attributes in process `syz.1.760'. [ 506.503680][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 506.737835][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 506.761568][ T9115] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 506.771599][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 506.833822][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 506.860565][ T9115] bond6: entered promiscuous mode [ 506.881947][ T9120] netlink: 'syz.2.767': attribute type 7 has an invalid length. [ 506.906884][ T9115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.917795][ T9127] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 506.938038][ T9120] netlink: 'syz.2.767': attribute type 8 has an invalid length. [ 506.951251][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 507.012278][ T9129] bond6: (slave bridge4): making interface the new active one [ 507.029050][ T9129] bridge4: entered promiscuous mode [ 507.040084][ T9129] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 507.112417][ T30] audit: type=1800 audit(1778355385.189:2): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.765" name="memory.events" dev="tmpfs" ino=829 res=0 errno=0 [ 507.153501][ T9127] bond4: entered promiscuous mode [ 507.160599][ T9127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.376269][ T9147] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 507.863940][ T9176] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 507.998213][ T9176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.008911][ T1168] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.029252][ T1168] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.043215][ T9176] netlink: 'syz.4.778': attribute type 10 has an invalid length. [ 508.116703][ T9180] bond3: option lacp_rate: invalid value (128) [ 508.128089][ T9180] bond3 (unregistering): Released all slaves [ 508.164174][ T9185] bond4: (slave dummy0): Releasing active interface [ 508.172534][ T9185] dummy0: left promiscuous mode [ 508.178218][ T9185] dummy0: left allmulticast mode [ 508.192526][ T9185] bond5: (slave dummy0): making interface the new active one [ 508.219041][ T9185] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 508.238252][ T1168] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.257928][ T1168] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.281933][ T9176] dummy0: entered promiscuous mode [ 508.300530][ T9176] bond5: (slave dummy0): Releasing active interface [ 508.589368][ T9205] sctp: [Deprecated]: syz.2.786 (pid 9205) Use of int in maxseg socket option. [ 508.589368][ T9205] Use struct sctp_assoc_value instead [ 508.992723][ T9222] Unknown options in mask 6 [ 509.253313][ T9231] __nla_validate_parse: 6 callbacks suppressed [ 509.253331][ T9231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.793'. [ 509.386371][ T9237] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 509.394502][ T9237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.794'. [ 509.406933][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 509.550310][ T9215] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 509.757920][ T9241] vlan0: entered promiscuous mode [ 509.762678][ T9250] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.795'. [ 509.790137][ T9241] bridge0: entered promiscuous mode [ 509.805833][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'. [ 509.826434][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'. [ 509.851004][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 509.874744][ T9246] sit0: entered promiscuous mode [ 509.922301][ T9246] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 509.931002][ T9246] netlink: 1 bytes leftover after parsing attributes in process `syz.4.795'. [ 510.061714][ T9255] syzkaller0: entered promiscuous mode [ 510.077726][ T9255] syzkaller0: entered allmulticast mode [ 510.142051][ T9261] IPVS: Error connecting to the multicast addr [ 510.507048][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.540267][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.613429][ T9279] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 510.630393][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 510.667470][ T9279] netlink: 1 bytes leftover after parsing attributes in process `syz.1.805'. [ 510.757979][ T9271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.769326][ T9271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.790526][ T9271] veth1_vlan: left promiscuous mode [ 510.816894][ T9271] veth0_vlan: left promiscuous mode [ 510.824358][ T9271] veth0_vlan: entered promiscuous mode [ 510.868671][ T9271] veth1_vlan: entered promiscuous mode [ 510.917872][ T9271] veth1_macvtap: left promiscuous mode [ 510.931247][ T9271] veth0_macvtap: left promiscuous mode [ 510.944177][ T9271] veth0_macvtap: entered promiscuous mode [ 510.954315][ T9271] veth1_macvtap: entered promiscuous mode [ 510.978599][ T9271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.989335][ T9271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.000641][ T9271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.012358][ T9271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.052443][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 511.118747][ T9271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.130429][ T9271] mac80211_hwsim hwsim2 ªªªªª;: entered promiscuous mode [ 511.160807][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.184561][ T9271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.205750][ T9271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.226151][ T9271] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 511.267932][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.275251][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.319985][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.327316][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.450815][ T9292] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 511.516444][ T9279] tipc: Enabling of bearer rejected, failed to enable media [ 511.589326][ T5821] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.626803][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.664738][ T5821] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.698427][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.912465][ T9293] macvlan4: entered promiscuous mode [ 511.927512][ T9293] macvlan4: entered allmulticast mode [ 511.941719][ T9293] bond7: entered promiscuous mode [ 511.962375][ T9293] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 511.989980][ T9293] bond7: left promiscuous mode [ 512.063265][ T5821] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.106615][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.121247][ T5821] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.141938][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.772962][ T9315] syzkaller1: entered promiscuous mode [ 512.805569][ T9315] syzkaller1: entered allmulticast mode [ 512.854040][ T9325] ip6tnl0: Caught tx_queue_len zero misconfig [ 512.883252][ T9326] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 513.050749][ T9326] team0: Port device dummy0 removed [ 513.590706][ T9344] pimreg: entered allmulticast mode [ 513.658022][ T9349] syzkaller0: entered promiscuous mode [ 513.677296][ T9349] syzkaller0: entered allmulticast mode [ 515.415398][ T5679] Bluetooth: hci4: command tx timeout [ 515.479876][ T9413] __nla_validate_parse: 5 callbacks suppressed [ 515.479895][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 515.953781][ T9437] netlink: 'syz.1.841': attribute type 13 has an invalid length. [ 515.971311][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 516.066753][ T9448] netlink: 'syz.3.843': attribute type 4 has an invalid length. [ 516.116881][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 516.143726][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 516.188898][ T9453] netlink: 'syz.2.844': attribute type 14 has an invalid length. [ 516.213159][ T9453] netlink: 'syz.2.844': attribute type 13 has an invalid length. [ 516.239515][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 516.399758][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 516.426103][ T9466] ip6gre3: entered allmulticast mode [ 516.437716][ T9466] team0: Device ip6gre3 is of different type [ 516.447885][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 516.755566][ T9482] netlink: 'syz.2.851': attribute type 9 has an invalid length. [ 517.269456][ T9500] netlink: 'syz.3.855': attribute type 9 has an invalid length. [ 517.297423][ T9503] netlink: 'syz.4.854': attribute type 1 has an invalid length. [ 517.353834][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 517.583586][ T9505] bond6: (slave bridge2): making interface the new active one [ 517.607174][ T9505] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 517.722887][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 517.739902][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 518.015897][ T9532] bond2 (unregistering): Released all slaves [ 518.268906][ T9542] block nbd1: Unsupported socket: should be TCP or UNIX. [ 518.344761][ T9546] sit0: Caught tx_queue_len zero misconfig [ 518.700559][ T9567] syzkaller0: refused to change device tx_queue_len [ 519.118601][ T9584] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 519.301427][ T9591] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 519.353413][ T9591] sctp: [Deprecated]: syz.2.875 (pid 9591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.353413][ T9591] Use struct sctp_sack_info instead [ 519.476710][ T9594] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 519.684702][ T9601] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 519.781753][ T9605] netlink: 'syz.2.880': attribute type 13 has an invalid length. [ 519.810401][ T9605] netlink: 'syz.2.880': attribute type 17 has an invalid length. [ 519.853594][ T9605] netlink: 'syz.2.880': attribute type 5 has an invalid length. [ 519.868414][ T9606] tipc: Enabled bearer , priority 0 [ 520.212737][ T9618] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 520.557116][ T9628] bond8: Removing last ns target with arp_interval on [ 520.590508][ T9631] syzkaller0: entered promiscuous mode [ 520.596793][ T9631] syzkaller0: entered allmulticast mode [ 520.641624][ T9631] netlink: 'syz.4.886': attribute type 39 has an invalid length. [ 520.689574][ T9635] SET target dimension over the limit! [ 520.934109][ T9642] __nla_validate_parse: 10 callbacks suppressed [ 520.934129][ T9642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'. [ 521.002640][ T6785] tipc: Node number set to 3778219867 [ 521.023339][ T9642] nbd: must specify a size in bytes for the device [ 521.534782][ T9676] FAULT_INJECTION: forcing a failure. [ 521.534782][ T9676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 521.552563][ T9679] netlink: 31 bytes leftover after parsing attributes in process `syz.0.902'. [ 521.563848][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: syz.3.901 Not tainted syzkaller #0 PREEMPT(full) [ 521.563875][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 521.563896][ T9676] Call Trace: [ 521.563912][ T9676] [ 521.563921][ T9676] dump_stack_lvl+0xe8/0x150 [ 521.563959][ T9676] should_fail_ex+0x412/0x560 [ 521.563995][ T9676] _copy_from_user+0x2d/0xb0 [ 521.564028][ T9676] __sys_sendto+0x2b0/0x710 [ 521.564062][ T9676] ? __pfx___sys_sendto+0x10/0x10 [ 521.564117][ T9676] ? exc_page_fault+0x6a/0xc0 [ 521.564153][ T9676] ? do_user_addr_fault+0xc6f/0x1340 [ 521.564181][ T9676] __x64_sys_sendto+0xde/0x100 [ 521.564211][ T9676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.564233][ T9676] do_syscall_64+0x15f/0xf80 [ 521.564251][ T9676] ? trace_irq_disable+0x3b/0x140 [ 521.564283][ T9676] ? clear_bhb_loop+0x40/0x90 [ 521.564308][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.564329][ T9676] RIP: 0033:0x7f3d7235d60e [ 521.564353][ T9676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.564369][ T9676] RSP: 002b:00007f3d7321ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 521.564398][ T9676] RAX: ffffffffffffffda RBX: 00007f3d7321c6c0 RCX: 00007f3d7235d60e [ 521.564413][ T9676] RDX: 0000000000000020 RSI: 00007f3d7321b000 RDI: 0000000000000004 [ 521.564426][ T9676] RBP: 0000000000000000 R08: 00007f3d7321af04 R09: 000000000000000c [ 521.564438][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 521.564449][ T9676] R13: 00007f3d7321af58 R14: 00007f3d7321b000 R15: 0000000000000000 [ 521.564481][ T9676] [ 521.868645][ T9688] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 521.973755][ T9688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.449986][ T9719] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 522.760514][ T9707] netlink: 76 bytes leftover after parsing attributes in process `syz.3.908'. [ 522.981648][ T9733] FAULT_INJECTION: forcing a failure. [ 522.981648][ T9733] name failslab, interval 1, probability 0, space 0, times 1 [ 523.035129][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.1.916 Not tainted syzkaller #0 PREEMPT(full) [ 523.035160][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.035173][ T9733] Call Trace: [ 523.035182][ T9733] [ 523.035191][ T9733] dump_stack_lvl+0xe8/0x150 [ 523.035223][ T9733] should_fail_ex+0x412/0x560 [ 523.035257][ T9733] should_failslab+0xa8/0x100 [ 523.035295][ T9733] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 523.035327][ T9733] ? __alloc_skb+0x186/0x7d0 [ 523.035356][ T9733] ? __alloc_skb+0x1d0/0x7d0 [ 523.035383][ T9733] ? __local_bh_enable_ip+0xd0/0x130 [ 523.035412][ T9733] __alloc_skb+0x1d0/0x7d0 [ 523.035441][ T9733] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 523.035476][ T9733] netlink_sendmsg+0x5d4/0xb40 [ 523.035519][ T9733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.035554][ T9733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.035585][ T9733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.035614][ T9733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.035648][ T9733] __sys_sendto+0x672/0x710 [ 523.035682][ T9733] ? __pfx___sys_sendto+0x10/0x10 [ 523.035739][ T9733] ? exc_page_fault+0x6a/0xc0 [ 523.035777][ T9733] ? do_user_addr_fault+0xc6f/0x1340 [ 523.035805][ T9733] __x64_sys_sendto+0xde/0x100 [ 523.035837][ T9733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.035868][ T9733] do_syscall_64+0x15f/0xf80 [ 523.035887][ T9733] ? trace_irq_disable+0x3b/0x140 [ 523.035920][ T9733] ? clear_bhb_loop+0x40/0x90 [ 523.035945][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.035966][ T9733] RIP: 0033:0x7f140715d60e [ 523.035986][ T9733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 523.036003][ T9733] RSP: 002b:00007f1407fd1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.036026][ T9733] RAX: ffffffffffffffda RBX: 00007f1407fd36c0 RCX: 00007f140715d60e [ 523.036041][ T9733] RDX: 0000000000000020 RSI: 00007f1407fd2000 RDI: 0000000000000004 [ 523.036054][ T9733] RBP: 0000000000000000 R08: 00007f1407fd1f04 R09: 000000000000000c [ 523.036067][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 523.036079][ T9733] R13: 00007f1407fd1f58 R14: 00007f1407fd2000 R15: 0000000000000000 [ 523.036111][ T9733] [ 523.341070][ T9736] netlink: 500 bytes leftover after parsing attributes in process `syz.2.918'. [ 523.351948][ T9736] unsupported nla_type 58 [ 523.790148][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'. [ 523.825955][ T9759] netlink: 228 bytes leftover after parsing attributes in process `syz.4.924'. [ 524.528623][ T9791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'. [ 525.846316][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 525.976984][ T9850] FAULT_INJECTION: forcing a failure. [ 525.976984][ T9850] name failslab, interval 1, probability 0, space 0, times 0 [ 526.031177][ T9831] bond3: (slave vcan1): refused to change device type [ 526.038325][ T9850] CPU: 0 UID: 0 PID: 9850 Comm: syz.0.945 Not tainted syzkaller #0 PREEMPT(full) [ 526.038354][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.038368][ T9850] Call Trace: [ 526.038376][ T9850] [ 526.038385][ T9850] dump_stack_lvl+0xe8/0x150 [ 526.038416][ T9850] should_fail_ex+0x412/0x560 [ 526.038450][ T9850] should_failslab+0xa8/0x100 [ 526.038487][ T9850] __kmalloc_cache_noprof+0x88/0x660 [ 526.038517][ T9850] ? is_bpf_text_address+0x26/0x2b0 [ 526.038539][ T9850] ? rtnl_newlink+0x136/0x1bb0 [ 526.038572][ T9850] rtnl_newlink+0x136/0x1bb0 [ 526.038608][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 526.038642][ T9850] ? __pfx_rtnl_newlink+0x10/0x10 [ 526.038677][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 526.038703][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 526.038736][ T9850] ? unwind_next_frame+0xa6/0x2550 [ 526.038771][ T9850] ? unwind_next_frame+0xa6/0x2550 [ 526.038800][ T9850] ? is_bpf_text_address+0x26/0x2b0 [ 526.038834][ T9850] ? is_bpf_text_address+0x26/0x2b0 [ 526.038862][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 526.038889][ T9850] ? kernel_text_address+0xa5/0xe0 [ 526.038921][ T9850] ? __kernel_text_address+0xd/0x30 [ 526.038951][ T9850] ? unwind_get_return_address+0x4d/0x90 [ 526.038977][ T9850] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 526.039010][ T9850] ? arch_stack_walk+0xfb/0x150 [ 526.039048][ T9850] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 526.039093][ T9850] ? __pfx_rtnl_newlink+0x10/0x10 [ 526.039122][ T9850] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 526.039150][ T9850] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 526.039179][ T9850] ? netlink_sendmsg+0x5d4/0xb40 [ 526.039211][ T9850] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 526.039240][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.039270][ T9850] ? __lock_acquire+0x6b5/0x2cf0 [ 526.039307][ T9850] netlink_rcv_skb+0x232/0x4b0 [ 526.039344][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.039370][ T9850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.039410][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.039441][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.039478][ T9850] netlink_unicast+0x75c/0x8e0 [ 526.039518][ T9850] netlink_sendmsg+0x813/0xb40 [ 526.039560][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.039614][ T9850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.039644][ T9850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.039672][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.039703][ T9850] __sys_sendto+0x672/0x710 [ 526.039738][ T9850] ? __pfx___sys_sendto+0x10/0x10 [ 526.039794][ T9850] ? exc_page_fault+0x6a/0xc0 [ 526.039832][ T9850] ? do_user_addr_fault+0xc6f/0x1340 [ 526.039860][ T9850] __x64_sys_sendto+0xde/0x100 [ 526.039890][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.039914][ T9850] do_syscall_64+0x15f/0xf80 [ 526.039933][ T9850] ? trace_irq_disable+0x3b/0x140 [ 526.039966][ T9850] ? clear_bhb_loop+0x40/0x90 [ 526.039992][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.040014][ T9850] RIP: 0033:0x7efd7b35d60e [ 526.040035][ T9850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.040051][ T9850] RSP: 002b:00007efd7c1d4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 526.040073][ T9850] RAX: ffffffffffffffda RBX: 00007efd7c1d66c0 RCX: 00007efd7b35d60e [ 526.040088][ T9850] RDX: 0000000000000020 RSI: 00007efd7c1d5000 RDI: 0000000000000004 [ 526.040100][ T9850] RBP: 0000000000000000 R08: 00007efd7c1d4f04 R09: 000000000000000c [ 526.040112][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 526.040123][ T9850] R13: 00007efd7c1d4f58 R14: 00007efd7c1d5000 R15: 0000000000000000 [ 526.040156][ T9850] [ 526.662190][ T9862] netlink: 168 bytes leftover after parsing attributes in process `syz.1.953'. [ 526.716073][ T9862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.953'. [ 526.727042][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 526.755008][ T9867] validate_nla: 4 callbacks suppressed [ 526.755028][ T9867] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 527.151923][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.334371][ T9900] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 527.502652][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 527.644005][ T9913] ipip0: entered promiscuous mode [ 527.684194][ T9918] netlink: 'syz.1.965': attribute type 8 has an invalid length. [ 527.730559][ T9920] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 527.779114][ T9920] gretap1: entered promiscuous mode [ 527.790526][ T9920] gretap1: entered allmulticast mode [ 527.832652][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 527.898110][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.919467][ T9927] rdma_op ffff8880552c29f0 conn xmit_rdma 0000000000000000 [ 528.772704][ T5701] TC_ACT_REPEAT abuse ? [ 528.793663][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'. [ 528.935175][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 530.938886][ T9931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.210412][ T9989] sctp: [Deprecated]: syz.1.981 (pid 9989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.210412][ T9989] Use struct sctp_sack_info instead [ 531.293654][ T9989] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 531.448155][ T9995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'. [ 532.105632][T10012] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 532.156190][T10012] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.986'. [ 532.172328][T10012] ksmbd: Unknown IPC event: 1, ignore. [ 532.270161][T10020] netlink: 'syz.1.990': attribute type 2 has an invalid length. [ 532.310155][T10024] SET target dimension over the limit! [ 532.458546][T10027] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 533.151866][T10049] ip6t_srh: unknown srh match flags 4000 [ 533.171416][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 533.199418][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.997'. [ 533.648687][T10063] ip6gre0: entered allmulticast mode [ 533.669100][ T132] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.701308][ T132] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.711171][ T132] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.728287][ T132] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.229790][T10085] lo: Caught tx_queue_len zero misconfig [ 534.257050][T10085] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 534.282535][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1007'. [ 534.877125][T10103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1012'. [ 534.925786][T10107] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1012'. [ 538.223314][T10103] netlink: 'syz.1.1012': attribute type 3 has an invalid length. [ 538.234130][T10103] netlink: 'syz.1.1012': attribute type 2 has an invalid length. [ 538.666928][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 538.892313][T10141] Bluetooth: MGMT ver 1.23 [ 539.160964][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 539.200458][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 539.231287][T10156] x_tables: duplicate underflow at hook 1 [ 539.334715][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 539.394079][T10165] ip_vti0: entered promiscuous mode [ 539.404034][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 539.493785][T10169] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 539.608644][ T5907] IPVS: starting estimator thread 0... [ 539.642739][T10178] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1032'. [ 539.650915][T10171] bond0: entered promiscuous mode [ 539.659751][T10171] batadv0: entered promiscuous mode [ 539.667826][T10171] debugfs: 'hsr1' already exists in 'hsr' [ 539.673861][T10171] Cannot create hsr debugfs directory [ 539.682542][T10171] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 539.694632][T10171] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 539.709485][T10171] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 539.725103][T10181] IPVS: using max 26 ests per chain, 62400 per kthread [ 539.733811][T10171] bond0: left promiscuous mode [ 539.765905][T10184] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1029'. [ 539.775683][T10171] batadv0: left promiscuous mode [ 539.812087][T10189] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 539.828007][T10190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1032'. [ 539.866028][T10169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.878179][T10169] bond3: (slave bond4): making interface the new active one [ 539.886920][T10169] bond3: (slave bond4): Enslaving as an active interface with an up link [ 539.933597][T10189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.001610][T10198] netlink: 'syz.2.1035': attribute type 13 has an invalid length. [ 540.044503][T10193] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 540.056985][T10193] bond5: (slave batadv1): making interface the new active one [ 540.081917][T10193] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 540.565991][ T5698] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.586151][ T5698] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.599387][ T5698] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.609181][ T5698] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.768083][T10215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.778984][T10222] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 541.415842][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.579047][T10242] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 562.606298][T10242] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 562.646192][T10242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 562.723959][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 562.764138][T10252] netlink: 'syz.2.1047': attribute type 4 has an invalid length. [ 562.816009][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 562.854240][T10255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1048'. [ 562.945409][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 562.966060][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1051'. [ 563.005764][T10255] hsr_slave_0: left promiscuous mode [ 563.021014][T10255] hsr_slave_1: left promiscuous mode [ 563.178050][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.185148][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.252025][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 563.268748][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 563.323467][T10282] sctp: [Deprecated]: syz.3.1054 (pid 10282) Use of int in maxseg socket option. [ 563.323467][T10282] Use struct sctp_assoc_value instead [ 563.342778][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1054'. [ 563.494641][T10286] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1055'. [ 563.588054][T10291] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 563.618380][T10293] tipc: Started in network mode [ 563.650952][T10293] tipc: Node identity ac14140f, cluster identity 4711 [ 563.693600][T10293] tipc: New replicast peer: 255.255.255.255 [ 563.714366][T10293] tipc: Enabled bearer , priority 10 [ 563.756573][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 563.900889][T10304] bond0: (slave bond_slave_1): Releasing backup interface [ 564.609974][T10321] d: renamed from syzkaller0 [ 564.622144][T10326] netlink: 'syz.3.1065': attribute type 2 has an invalid length. [ 564.825148][ T9] tipc: Node number set to 2886997007 [ 566.102852][T10382] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 566.139415][T10385] netlink: 'syz.1.1081': attribute type 11 has an invalid length. [ 566.164475][T10382] bond5: entered promiscuous mode [ 566.170276][T10382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.297583][T10382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.313443][T10382] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 566.325481][T10382] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 566.339396][T10382] bond5: (slave ip6gre3): making interface the new active one [ 566.350220][T10382] ip6gre3: entered promiscuous mode [ 566.358521][T10382] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 566.502250][T10394] vlan2: entered promiscuous mode [ 566.512815][T10394] bridge0: entered promiscuous mode [ 566.877011][T10415] ip6tnl0: Caught tx_queue_len zero misconfig [ 567.240645][T10426] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 567.394563][T10432] syzkaller1: entered promiscuous mode [ 567.404174][T10432] syzkaller1: entered allmulticast mode [ 567.970251][T10464] __nla_validate_parse: 6 callbacks suppressed [ 567.970270][T10464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1101'. [ 568.277855][T10477] pim6reg1: entered promiscuous mode [ 568.287976][T10477] pim6reg1: entered allmulticast mode [ 568.492696][T10483] netlink: 'syz.0.1108': attribute type 13 has an invalid length. [ 568.501855][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 568.511789][T10483] netlink: 'syz.0.1108': attribute type 17 has an invalid length. [ 568.882381][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 568.900931][T10483] bridge0: left promiscuous mode [ 568.911294][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.931805][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.943428][T10499] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 568.959107][T10500] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 568.967958][T10500] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1111'. [ 568.979811][T10500] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 569.002852][T10500] netlink: 638 bytes leftover after parsing attributes in process `syz.4.1111'. [ 569.014429][T10500] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1111'. [ 569.056083][T10483] veth0_macvtap: left promiscuous mode [ 569.063119][T10483] veth0_macvtap: entered promiscuous mode [ 569.099266][T10483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.116786][T10483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.132563][T10483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.153852][T10483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.218279][T10483] bond1: left promiscuous mode [ 569.223253][T10483] bond1: left allmulticast mode [ 569.229554][T10483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.261238][T10483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.280208][T10483] xfrm1: left allmulticast mode [ 569.289598][T10483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.301937][T10483] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 569.357261][ T6784] bridge0: entered promiscuous mode [ 569.402378][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'. [ 569.473481][T10499] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.482351][ T5703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.493570][T10508] bridge_slave_0: left allmulticast mode [ 569.501847][T10508] bridge_slave_0: left promiscuous mode [ 569.510766][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.521469][T10508] bridge_slave_1: left allmulticast mode [ 569.528053][T10508] bridge_slave_1: left promiscuous mode [ 569.533987][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.547129][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 569.565416][T10508] team0: Port device team_slave_0 removed [ 569.573928][T10508] team0: Port device team_slave_1 removed [ 569.581932][T10508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.593729][T10508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.602966][T10508] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.687878][T10512] veth1_to_team: entered promiscuous mode [ 569.710821][T10512] veth1_to_team: left promiscuous mode [ 569.743381][ T5703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.781944][ T5703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.847485][ T5703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.121237][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 570.139764][T10540] x_tables: duplicate underflow at hook 3 [ 570.144227][T10536] openvswitch: netlink: nsh attr 11 is out of range max 3 [ 570.156823][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 570.175728][T10540] syzkaller0: entered promiscuous mode [ 570.182509][T10540] syzkaller0: entered allmulticast mode [ 570.215196][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.154570][T10545] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 571.170469][T10558] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 571.182615][T10545] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 571.589055][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.596891][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.964171][T10568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.007639][T10568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.377736][T10583] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.398689][T10583] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.427338][T10583] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.449107][T10583] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.489669][T10622] pimreg: entered allmulticast mode [ 572.496695][T10583] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.508367][T10583] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.521772][T10619] netlink: 'syz.4.1140': attribute type 2 has an invalid length. [ 572.549882][T10582] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.587925][T10582] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.644393][T10618] pimreg: left allmulticast mode [ 572.816369][T10636] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 572.876951][T10636] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 573.056297][T10646] __nla_validate_parse: 6 callbacks suppressed [ 573.056319][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 574.199780][T10687] netlink: 'syz.3.1155': attribute type 4 has an invalid length. [ 574.238116][T10687] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1155'. [ 574.268226][T10694] xt_CONNSECMARK: invalid mode: 0 [ 574.371020][T10687] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 575.066018][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 575.096560][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 575.141233][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 575.248017][T10586] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.263459][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 575.293525][T10586] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.293657][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 575.329587][T10586] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.354955][T10586] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.548607][T10723] bond11: option mode: invalid value (254) [ 575.573604][T10729] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 575.599337][T10723] bond11 (unregistering): Released all slaves [ 575.612812][T10729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.627093][ T5907] hid-generic 0005:04F3:0A11.0001: item fetching failed at offset 0/1 [ 575.673420][ T5907] hid-generic 0005:04F3:0A11.0001: probe with driver hid-generic failed with error -22 [ 575.852782][T10738] netlink: 'syz.4.1169': attribute type 2 has an invalid length. [ 575.872730][T10738] netlink: 'syz.4.1169': attribute type 2 has an invalid length. [ 576.346741][T10755] sctp: [Deprecated]: syz.0.1174 (pid 10755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.346741][T10755] Use struct sctp_sack_info instead [ 576.652298][T10759] dvmrp0: entered allmulticast mode [ 577.353143][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1181'. [ 577.390375][T10780] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1181'. [ 577.421982][T10783] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1182'. [ 578.343241][T10823] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 578.375513][T10823] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 578.393183][T10823] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 578.464136][T10823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 578.499522][T10831] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 578.672307][T10823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 578.709400][T10845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1195'. [ 578.909874][T10849] veth0_macvtap: Caught tx_queue_len zero misconfig [ 578.962609][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1197'. [ 578.973845][T10853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.997967][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 579.300927][T10861] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 580.141244][T10861] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 580.222333][T10876] No such timeout policy "syz1" [ 580.599474][T10897] netlink: 'syz.4.1208': attribute type 5 has an invalid length. [ 580.779905][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'. [ 581.368427][T10931] vxcan2: entered allmulticast mode [ 581.450488][T10920] x_tables: duplicate underflow at hook 3 [ 581.491070][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1216'. [ 581.583249][T10932] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 581.596470][T10932] bond11 (unregistering): Released all slaves [ 581.881829][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.908202][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.977742][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'. [ 582.031674][T10925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.044563][T10925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.086457][T10925] veth1_vlan: left promiscuous mode [ 582.093378][T10925] veth0_vlan: left promiscuous mode [ 582.101287][T10925] veth0_vlan: entered promiscuous mode [ 582.113905][T10925] veth1_vlan: entered promiscuous mode [ 582.129922][T10925] veth1_macvtap: left promiscuous mode [ 582.138611][T10925] veth0_macvtap: left promiscuous mode [ 582.149128][T10925] veth0_macvtap: entered promiscuous mode [ 582.156521][T10925] veth1_macvtap: entered promiscuous mode [ 582.168952][T10925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.177836][T10925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 582.187760][T10925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 582.196762][T10925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 582.209916][T10925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.221710][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.232981][T10925] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 583.539921][T10925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.548658][T10925] ipip0: left promiscuous mode [ 583.554394][T10925] gretap1: left promiscuous mode [ 583.559746][T10925] gretap1: left allmulticast mode [ 583.569980][T10925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.579764][T10925] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.587596][T10925] bond5: left promiscuous mode [ 583.592467][T10925] ip6gre3: left promiscuous mode [ 583.705720][T10579] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.724943][T10579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.747964][ T9639] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.775808][ T9639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.930458][ T9639] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.951818][ T9639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.974578][T10587] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 584.019340][ T9639] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.046020][ T9639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.381185][T10972] xt_CT: No such helper "snmp_trap" [ 584.974448][T10973] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 585.014096][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'. [ 585.042415][T11012] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1239'. [ 585.230467][T11019] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 585.288045][T11019] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 585.310865][T11019] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 585.321616][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 585.773146][T11036] bond11: entered promiscuous mode [ 586.272762][T11058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.285774][T11058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.305482][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 586.347320][T11068] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 586.356589][T11068] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1253'. [ 586.377427][T11068] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 586.540364][T11058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.577275][T11058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.589548][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 586.943198][ T5679] block nbd1: Receive control failed (result -1) [ 587.422537][T11058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.471340][T11058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.611016][T11089] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 587.635232][T11089] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 587.661608][T11089] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 587.710685][T11058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.721538][T11058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.746836][T11093] veth1_macvtap: left promiscuous mode [ 587.752549][T11093] macsec0: entered allmulticast mode [ 587.762380][T11094] veth1_macvtap: entered promiscuous mode [ 587.768597][T11094] veth1_macvtap: entered allmulticast mode [ 587.777329][T11094] macsec0: left allmulticast mode [ 587.782557][T11094] veth1_macvtap: left allmulticast mode [ 587.983496][T11101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.008018][T10582] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.018605][T11102] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40 [ 588.030302][T10582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.081982][T10582] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.101756][T10582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.120704][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 588.184763][T10581] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.201836][T10581] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.241014][T11112] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'. [ 588.272950][T10581] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.294065][T10581] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.945590][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 589.002632][T11137] syzkaller1: entered promiscuous mode [ 589.009923][T11137] syzkaller1: entered allmulticast mode [ 589.555565][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 590.271157][ T5775] hid-generic 0005:046D:0A0E.0002: item fetching failed at offset 0/1 [ 590.292640][ T5775] hid-generic 0005:046D:0A0E.0002: probe with driver hid-generic failed with error -22 [ 590.551122][T11211] __nla_validate_parse: 5 callbacks suppressed [ 590.551142][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 590.697512][T11215] hmó3)ó: entered promiscuous mode [ 590.720536][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'. [ 590.931027][T11221] bond6: Removing last arp target with arp_interval on [ 590.982768][T11228] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 591.036472][T11227] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 591.133191][T11237] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1305'. [ 591.200317][T11240] bond6: option ad_select: invalid value (34) [ 591.218742][T11240] bond6 (unregistering): Released all slaves [ 591.277492][T11249] syzkaller0: entered promiscuous mode [ 591.292198][T11249] syzkaller0: entered allmulticast mode [ 591.324315][T11237] syzkaller1: entered promiscuous mode [ 591.345532][T11237] syzkaller1: entered allmulticast mode [ 591.467155][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 591.489979][T11249] tipc: Enabling of bearer rejected, already enabled [ 593.183941][T11332] xt_l2tp: missing protocol rule (udp|l2tpip) [ 593.280647][T11337] netlink: 'syz.0.1321': attribute type 75 has an invalid length. [ 593.629574][T11351] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.650806][T11351] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.758962][T11351] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.775182][T11351] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.861337][T11351] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.899003][T11351] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.987192][T11351] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.006681][T11351] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.371886][T10262] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.401536][T10262] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.431651][T11376] netlink: 712 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.453568][T11375] netlink: 712 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.471872][T11376] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.487151][T11375] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.496630][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.520352][T10263] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.539199][T10263] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.576391][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 594.607723][T10263] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.625486][T10263] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.677582][T10263] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.699702][T10263] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.441610][T11413] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 595.567511][T11414] __nla_validate_parse: 1 callbacks suppressed [ 595.567534][T11414] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1337'. [ 595.770065][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 595.873958][T11416] bond12: (slave bridge5): making interface the new active one [ 595.899773][T11416] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 596.949671][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 597.060689][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.076948][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.126701][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.153465][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.176240][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.202930][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.226076][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 597.486992][T11480] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 597.600651][T11490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 598.066789][T11513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.132036][T11505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.172153][T11505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.323531][T11505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.346210][T11505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.505467][T11505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.524004][T11505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.556224][T11531] bond5: entered allmulticast mode [ 598.561555][T11531] ip6gre3: entered allmulticast mode [ 598.619561][T11505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.633753][T11505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.653059][T11529] bond5: left allmulticast mode [ 598.659213][T11529] ip6gre3: left allmulticast mode [ 598.800363][T11538] sock: sock_set_timeout: `syz.2.1363' (pid 11538) tries to set negative timeout [ 599.086059][T10262] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.113543][T11554] xt_hashlimit: invalid rate [ 599.118646][T10262] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.177193][T10262] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.197332][T10262] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.273709][ T5821] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.292502][ T5821] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.003098][ T5821] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.944777][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 705.951804][ C1] rcu: 0-...!: (1 GPs behind) idle=dffc/1/0x4000000000000000 softirq=46868/46868 fqs=4 [ 705.962615][ C1] rcu: (detected by 1, t=10502 jiffies, g=52181, q=598 ncpus=2) [ 705.970402][ C1] Sending NMI from CPU 1 to CPUs 0: [ 705.970439][ C0] NMI backtrace for cpu 0 [ 705.970455][ C0] CPU: 0 UID: 0 PID: 11574 Comm: syz.2.1373 Not tainted syzkaller #0 PREEMPT(full) [ 705.970476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.970487][ C0] RIP: 0010:__lock_acquire+0x84f/0x2cf0 [ 705.970514][ C0] Code: 00 00 09 c5 48 89 d8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 01 d8 29 cb 89 ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 31 c6 <01> ca 29 f1 89 f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 31 d5 [ 705.970530][ C0] RSP: 0018:ffffc90000007b28 EFLAGS: 00000082 [ 705.970546][ C0] RAX: 0000000000104207 RBX: 0000000000004008 RCX: 00000000ffffbff5 [ 705.970558][ C0] RDX: 00000000ffefbdf7 RSI: 00000000efadb5f8 RDI: ffff888033fb0000 [ 705.970571][ C0] RBP: 0000000000004008 R08: ffffffff89b8588b R09: ffffffff8e95cd60 [ 705.970583][ C0] R10: dffffc0000000000 R11: ffffed10052ace56 R12: ffff888033fb0bb8 [ 705.970596][ C0] R13: ffff888033fb0bb8 R14: ffff888033fb0000 R15: 0000000000000001 [ 705.970609][ C0] FS: 000055555b1bc500(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 705.970625][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.970636][ C0] CR2: 0000001b2e020000 CR3: 0000000075fae000 CR4: 00000000003526f0 [ 705.970653][ C0] Call Trace: [ 705.970661][ C0] [ 705.970675][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 705.970706][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 705.970728][ C0] ? advance_sched+0x99b/0xc20 [ 705.970745][ C0] lock_acquire+0x106/0x350 [ 705.970763][ C0] ? advance_sched+0x99b/0xc20 [ 705.970783][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 705.970808][ C0] ? advance_sched+0x99b/0xc20 [ 705.970826][ C0] advance_sched+0x9b7/0xc20 [ 705.970841][ C0] ? advance_sched+0x99b/0xc20 [ 705.970865][ C0] ? __pfx_advance_sched+0x10/0x10 [ 705.970880][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 705.970912][ C0] hrtimer_interrupt+0x44b/0x950 [ 705.970948][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 705.970972][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 705.971002][ C0] [ 705.971008][ C0] [ 705.971014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.971034][ C0] RIP: 0010:mas_next_slot+0x3/0xd10 [ 705.971061][ C0] Code: 03 38 c1 7c ce 4c 89 f7 e8 6a f4 8e f6 eb c4 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 81 ec a0 00 00 00 89 54 24 7c 49 89 f7 48 [ 705.971076][ C0] RSP: 0018:ffffc900033df568 EFLAGS: 00000246 [ 705.971091][ C0] RAX: ffffffff8ba236b0 RBX: ffffc900033df688 RCX: ffff888033fb0000 [ 705.971105][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffc900033df640 [ 705.971118][ C0] RBP: ffffffffffffffff R08: ffff888033fb0000 R09: 0000000000000006 [ 705.971130][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: 00007f64df405fff [ 705.971141][ C0] R13: ffffc900033df640 R14: dffffc0000000000 R15: 1ffff9200067bed1 [ 705.971158][ C0] ? mas_find+0x140/0xd30 [ 705.971188][ C0] mas_find+0xb0e/0xd30 [ 705.971217][ C0] validate_mm+0xfe/0x4c0 [ 705.971237][ C0] ? __pfx_validate_mm+0x10/0x10 [ 705.971256][ C0] ? vma_complete+0x96d/0x9e0 [ 705.971276][ C0] __split_vma+0x909/0xa40 [ 705.971302][ C0] ? __pfx___split_vma+0x10/0x10 [ 705.971327][ C0] ? can_vma_merge_right+0x1a2/0x440 [ 705.971346][ C0] vma_modify+0x88a/0x1e10 [ 705.971370][ C0] vma_modify_flags+0x24b/0x330 [ 705.971389][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 705.971413][ C0] ? rcu_is_watching+0x15/0xb0 [ 705.971433][ C0] ? percpu_counter_add_batch+0xea/0x1d0 [ 705.971458][ C0] ? __vm_enough_memory+0x11b/0x380 [ 705.971479][ C0] mprotect_fixup+0x62a/0xb60 [ 705.971510][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 705.971544][ C0] ? apparmor_file_mprotect+0x1d0/0x400 [ 705.971563][ C0] ? security_file_mprotect+0x1a/0x290 [ 705.971585][ C0] do_mprotect_pkey+0x8d5/0xd20 [ 705.971608][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 705.971624][ C0] ? vm_mmap_pgoff+0x373/0x4f0 [ 705.971648][ C0] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 705.971668][ C0] ? exc_page_fault+0x6a/0xc0 [ 705.971700][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 705.971725][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.971742][ C0] __x64_sys_mprotect+0x80/0x90 [ 705.971769][ C0] do_syscall_64+0x15f/0xf80 [ 705.971785][ C0] ? trace_irq_disable+0x3b/0x140 [ 705.971811][ C0] ? clear_bhb_loop+0x40/0x90 [ 705.971831][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.971848][ C0] RIP: 0033:0x7f64df39cbd7 [ 705.971864][ C0] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.971878][ C0] RSP: 002b:00007ffc94bc10f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 705.971894][ C0] RAX: ffffffffffffffda RBX: 00007f64e01b46c0 RCX: 00007f64df39cbd7 [ 705.971906][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f64e0195000 [ 705.971918][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 705.971928][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc94bc1250 [ 705.971940][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 705.971960][ C0] [ 705.972432][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g52181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 706.491812][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 706.501821][ C1] rcu: RCU grace-period kthread stack dump: [ 706.507768][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 706.521307][ C1] Call Trace: [ 706.524619][ C1] [ 706.527581][ C1] __schedule+0x17b4/0x5680 [ 706.532306][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 706.537310][ C1] ? __pfx___schedule+0x10/0x10 [ 706.542213][ C1] ? schedule+0x90/0x360 [ 706.546510][ C1] schedule+0x164/0x360 [ 706.550712][ C1] schedule_timeout+0x158/0x2c0 [ 706.555645][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 706.561063][ C1] ? __pfx_process_timeout+0x10/0x10 [ 706.566397][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.572251][ C1] ? prepare_to_swait_event+0x340/0x370 [ 706.577845][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 706.582750][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 706.588934][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 706.594250][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 706.599498][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.605353][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 706.609988][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 706.615223][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 706.621077][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 706.626054][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 706.631117][ C1] kthread+0x388/0x470 [ 706.635231][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 706.640479][ C1] ? __pfx_kthread+0x10/0x10 [ 706.645131][ C1] ret_from_fork+0x514/0xb70 [ 706.649781][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 706.654936][ C1] ? __switch_to+0xc79/0x1410 [ 706.659665][ C1] ? __pfx_kthread+0x10/0x10 [ 706.664301][ C1] ret_from_fork_asm+0x1a/0x30 [ 706.669204][ C1] [ 706.672255][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 706.678606][ C1] CPU: 1 UID: 0 PID: 6753 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 706.688127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.698216][ C1] Workqueue: events_unbound toggle_allocation_gate [ 706.704856][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 706.711567][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 da 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 85 03 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 6a 03 0c [ 706.731223][ C1] RSP: 0018:ffffc900101ff700 EFLAGS: 00000293 [ 706.737338][ C1] RAX: ffffffff81b9bc06 RBX: ffff8880b873c148 RCX: ffff88801e69bd80 [ 706.745360][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 706.753365][ C1] RBP: ffffc900101ff840 R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e [ 706.761379][ C1] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: 1ffff110170c8589 [ 706.769394][ C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000 [ 706.777411][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 706.786377][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.793078][ C1] CR2: 000020000085b000 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 706.801084][ C1] Call Trace: [ 706.804388][ C1] [ 706.807346][ C1] ? smp_call_function_many_cond+0x7e1/0x13d0 [ 706.813450][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 706.818523][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 706.824888][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7c0 [ 706.831016][ C1] ? __pfx___text_poke+0x10/0x10 [ 706.836021][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 706.841091][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 706.846243][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 706.852117][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 706.858344][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 706.863406][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 706.869703][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 706.876001][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 706.882026][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 706.887952][ C1] static_key_enable+0x1a/0x20 [ 706.892782][ C1] toggle_allocation_gate+0xab/0x290 [ 706.898131][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 706.904081][ C1] ? process_scheduled_works+0xa70/0x1860 [ 706.909853][ C1] ? process_scheduled_works+0xa70/0x1860 [ 706.915615][ C1] ? process_scheduled_works+0xa70/0x1860 [ 706.921369][ C1] process_scheduled_works+0xb5d/0x1860 [ 706.926986][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.933014][ C1] ? assign_work+0x3d5/0x5e0 [ 706.937656][ C1] worker_thread+0xa53/0xfc0 [ 706.942310][ C1] kthread+0x388/0x470 [ 706.946419][ C1] ? __pfx_worker_thread+0x10/0x10 [ 706.951571][ C1] ? __pfx_kthread+0x10/0x10 [ 706.956202][ C1] ret_from_fork+0x514/0xb70 [ 706.960833][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 706.965979][ C1] ? __switch_to+0xc79/0x1410 [ 706.970708][ C1] ? __pfx_kthread+0x10/0x10 [ 706.975351][ C1] ret_from_fork_asm+0x1a/0x30 [ 706.980168][ C1]