last executing test programs: 1.871932203s ago: executing program 2 (id=2426): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r13) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r14, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xc, 0x10000, 0x8, 0x8, 0x20, r13, 0x9, '\x00', r14, r12, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x3c8, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x93ad}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x41004}, 0x200080dd) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x88}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x4c}}, 0x0) 1.648004873s ago: executing program 2 (id=2430): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x3}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001014100029bd7000fddbdf2508004f000100000008004c000000000008204f00030000000800030001000000080003000200000008000300010000000800030001000000080003000400000008004b00130000000800010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x9c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r10, @ANYBLOB="4000308014000400403a050c5baee2058008000100000000001400038008000200020000000600010000030000050002000200000000000000000000000000002c032424299935cb99d2a31bfdfaad36facb310012c096ef81b126504e6c83cce13594c4965daec5718363ab2f736b51ee3ce76a1ff34d1495c2c83f7913df8e66df3149b1ebe69def1891130907ee03622398a55001e908d76f209a5ea8286a48477d369e1abee7f79b2cc879463ada557992e8b4f70f8c744152988bed7b4e0523dd293ca0c26f2e8545d22baf78bc460a4387f45a8bb44dbbe73263db9e2de6f9ee1fae4d4a9b"], 0x5c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.54156827s ago: executing program 4 (id=2433): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000180)={0xd, 0x7984, 0x5, 0x7ff, 0x8, 0x0, 0x6, 0x7}, &(0x7f00000001c0)={0x2, 0x1000000000000000, 0x7fffffffffffffff, 0x2, 0x8c, 0x400, 0x2, 0x4}, &(0x7f0000000240)={0x1ff, 0x6, 0xfffffffffffffff8, 0x7, 0x4, 0x72, 0xffffffff, 0xa537}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)={&(0x7f00000002c0)={[0xffffffff]}, 0x8}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) socket$inet6(0xa, 0x3, 0x3) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.440988749s ago: executing program 3 (id=2435): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0xe, 0xd1, "150254ac13efc747ed51869792a3034e57b38db61114f4b00c20083841daac2394a650e8aa18b712d196d309f8dafd278754825e32681585c74e89e31f5b61468a14db59f919e92048b65b243a18772fb97ae92ac44958724625978af575f0493b2937b886aaf9945ecd35498c6b39661ab388f2ec021d295a6033e1dab1267ec6155484a71c3a6d61646df59cb7d33ef4303fa53ddf16406cc2951e8f7e79b8faf0e5702fff5d10e35de7150527e0931569dd77b3eb5cbafed51927e26f23a4399df29ded2de49b4e2dc8cdf8e016818d"}}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) (async) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5145f77d7a529435923bc24c948947b236cad329cc95629e36c6edb0eaf46bde7cb06415527006257186daf6610d28411c418da8545d9bff126a2f15b0bab05b2247dbaf2eb124e886d2049c1056696c5a0ed64294d0592937b40d7156981fe57b8b63072e608167f9eaaa403bf2d4b303df159562ad5463088d4e6d4858f7d55847b71e9f186d9fa90256700dafe9a79a2a7f96f57cd4fb9276ab383ba96f0c8f3b33722b003a8ff6d92a9850a6af8afa93aa965e91", 0xb6}, {&(0x7f0000000400)="859ab0b889784f5783d13ef4393d03827ca749591ed8237198f4998822a3b86ba29fe9c823361f9bdb33c19dd85856a544256a54a00684110f962760ebbde47b0f1e56a425d7163547be6f865592db901983d28ebd630a0c7b33ff0c2221073a4f6b7183030622e9da34da143b58c13ef1975d27a18181abc80bd7fc8a5b2d0aebd5e6f75803b05267600842cbb468640870bcd28abb6a28d2c3d3eea4fab2c54a5190dd1a4a248cda6e41959dc1cc7971ccfc599b53ceb962127d07fad95cc6bb3f83843ab1a6f6801954164f", 0xcd}], 0x2, &(0x7f0000000500)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xb8, [@empty]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x6b, 0x0, 0x1, [0x8, 0x1, 0x2, 0x2, 0xfffffff9]}, @timestamp={0x44, 0x8, 0xb7, 0x0, 0x5, [0xd374]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xe5, 0x3, 0x0, [{@private=0xa010101, 0x6}, {@multicast1, 0x3}, {@broadcast, 0xfffffff8}]}, @generic={0x86, 0xc, "8e7afa49ed2648040067"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xd8, 0x1, 0x7, [{@multicast2, 0x4}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x1c, 0x3, [{0x3, 0x2}, {0x7, 0xd, "5474913abb608b4a8954a7"}, {0x6, 0x7, "5822bd410d"}]}, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x1, [{@loopback, 0x286}, {@multicast1, 0x8}, {@empty, 0x816c}]}, @end, @timestamp_addr={0x44, 0x54, 0x65, 0x1, 0x9, [{@multicast2, 0xfffffff8}, {@local, 0x7}, {@multicast1, 0x1}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffc0000}, {@rand_addr=0x64010102, 0x6e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x95}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x8}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x645}}], 0x170}, 0xc8d0) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.250725657s ago: executing program 3 (id=2438): syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) (async) poll(&(0x7f0000000140)=[{r1, 0x20}], 0x1, 0x1) (async) recvmmsg(r1, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/210, 0xd2}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) listen(r1, 0x0) (async) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x8000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f0000000040)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}, 0x802}], 0x4, 0x40022000, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x300408cc) 1.145344636s ago: executing program 4 (id=2439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="04"], 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x20) 1.074017172s ago: executing program 0 (id=2440): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x80}, {0x6}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000001c0)="2b7c46503af0d1a18a7177cb98057df2", 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'dvmrp1\x00', {0x2, 0x0, @remote}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$MRT6(r8, 0x29, 0xce, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x9}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x244f3}, [@IFLA_IFALIAS={0x0, 0x14, 'tunl0\x00'}]}, 0xfffffffffffffd9b}}, 0x0) 1.015506848s ago: executing program 1 (id=2441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000014c0)=@newtfilter={0x215c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0x10}, {0xc, 0xfff3}, {0x1, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x698, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_SEL={0x684, 0x5, {0xc, 0x6a, 0x3, 0x7, 0x401, 0x0, 0x2, 0x0, [{0x80, 0x2897, 0x80000001, 0x9}, {0x78b, 0x5, 0x0, 0x7}, {0x7ff, 0xa0, 0x9, 0x9}, {0x3, 0x6, 0x1, 0xd3a8}, {0x5, 0xfffffffe, 0x3, 0x4}, {0xf2e, 0x7, 0x6, 0xfffffffc}, {0x487be35d, 0xff, 0x4, 0x7fffffff}, {0x2, 0x6, 0x7, 0x2}, {0x3, 0x8000, 0x7b55, 0xffffffff}, {0x8001, 0x3, 0x7, 0x1}, {0x4, 0x2, 0x6, 0xf}, {0x7, 0xb, 0x6, 0x2}, {0xcb2a, 0x8e, 0xb, 0x5}, {0x101, 0x3, 0xfff, 0xae4b}, {0x9, 0x5, 0x7}, {0x0, 0x80, 0x4, 0x40e2}, {0x8ec4, 0x0, 0xe016436, 0x14}, {0x3, 0x4, 0x4, 0x27}, {0x5600, 0x42, 0x99, 0xfff}, {0x4, 0x1, 0x36, 0xfffff001}, {0xffffffff, 0x5, 0x3, 0x3}, {0x72, 0xb, 0x2, 0x2}, {0x3, 0x3, 0x3, 0x9}, {0x1, 0x7fffffff, 0x40, 0xb45a55b7}, {0xf, 0x69f7, 0x3, 0x3}, {0x3, 0x1ff, 0x5, 0x6}, {0x7fffffff, 0x5, 0x6, 0x9}, {0x6, 0x5, 0x8, 0x3eb}, {0x5, 0x8, 0x10000, 0x80000000}, {0x43e, 0x4, 0x6, 0x24000}, {0x0, 0x3, 0x0, 0xfffffff8}, {0xe9, 0x7, 0x1, 0x9}, {0xc, 0x80000001, 0x400, 0x1}, {0xb, 0xfe0, 0x2, 0x6}, {0x7f, 0xa7, 0x2eae294, 0x3}, {0x10000, 0x2, 0x2, 0x1}, {0x5, 0xfffffeff, 0x0, 0x3}, {0xff, 0x7fff, 0x7, 0x5}, {0x4, 0x3, 0x7f, 0xffffff7f}, {0xfffffff7, 0x0, 0x7ff, 0x68}, {0x34, 0x4, 0x4, 0x10001}, {0x80000000, 0xffff, 0x0, 0x5}, {0x9, 0x3, 0x5151, 0x80000001}, {0x5, 0x6db2, 0x193, 0x6}, {0x1000, 0x9, 0x7, 0x5}, {0xd, 0x45eeb068, 0x10000, 0x2}, {0x3, 0xfffffffc, 0x8, 0x676}, {0x6, 0x9, 0x3, 0x8001}, {0x7, 0x1, 0x5}, {0xc40, 0x2e, 0x2, 0x8}, {0xb, 0xd, 0xfff80000}, {0x3, 0xa024, 0x2, 0x2}, {0x6, 0x80, 0x1ff, 0x42}, {0x2, 0x0, 0x5, 0x3}, {0xe, 0xff7, 0xfffffff9, 0x8}, {0x4, 0x7, 0x0, 0xdb}, {0x0, 0xba, 0xa, 0xfffffff8}, {0x6, 0xfffffffd, 0x9, 0x1ff}, {0x2ff, 0x101, 0x2, 0x4}, {0xff, 0x9, 0x9, 0xc}, {0x0, 0x5, 0xba}, {0x2, 0x200, 0xf0, 0x839}, {0x7, 0x7, 0x1, 0x1}, {0xd1, 0x100000, 0x5, 0xfff}, {0x60000000, 0x7, 0xfffff55e, 0x101}, {0x8000, 0x5, 0x6, 0x7}, {0x80000, 0x81, 0x7, 0xffffffff}, {0x2, 0xf, 0x4, 0x8}, {0x4, 0x3, 0x4, 0xb350}, {0x4, 0xc0, 0x0, 0x2}, {0x50, 0x2, 0x9, 0x2ae2}, {0x6, 0xf9, 0x8, 0x2}, {0x5, 0xf9a, 0x2}, {0x7, 0x0, 0x1, 0x1}, {0xd06e, 0xfa, 0x5, 0x3}, {0x4, 0x5, 0x8001, 0x7}, {0x2, 0x0, 0x8, 0xba4b}, {0x8, 0x5, 0x4, 0x675}, {0x0, 0x515ee7ba, 0x8, 0x46}, {0x401, 0x8, 0x8}, {0x7, 0x1000, 0x2, 0xdd}, {0x3, 0x3181, 0x5, 0x5a24f5b1}, {0x5, 0x25ab, 0x10001}, {0xf, 0x2, 0x1000, 0x1}, {0x3, 0xfffffff9, 0x0, 0x9bf3}, {0x0, 0x81, 0x80000001, 0x3}, {0xf, 0x6, 0x6, 0x81}, {0x7, 0x5, 0x9ff, 0xe}, {0x1ff, 0x8, 0x4, 0xc}, {0x700, 0x0, 0x2, 0x101}, {0x1, 0x1ff, 0x10001, 0xc673}, {0x1, 0x92, 0xa27, 0x60064a50}, {0xc, 0x10, 0x928e, 0x7}, {0x3ff, 0x2, 0x4, 0x1e}, {0xd3c, 0x81, 0xfffffffc, 0x9}, {0x6, 0x7, 0x18000000, 0x1}, {0xce, 0x1, 0x1, 0x10001}, {0x6, 0xa, 0xb8, 0x275}, {0x0, 0x3cab, 0x2}, {0x7, 0x7fff, 0x4, 0x6}, {0x80000000, 0xff, 0x10001, 0x7}, {0x7, 0x2, 0x80, 0x4}, {0x5, 0x2, 0x7ed, 0x4}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x81}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @TCA_RATE={0x6, 0x5, {0x22, 0x8b}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x1a6c, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x4, 0x7, 0x4, 0x1, 0x1, 0x9, 0x3, 0xe9, 0x8, 0x0, 0x101, 0xbc, 0x8, 0xe, 0x7, 0x1bee, 0x80, 0x2, 0x8, 0x400, 0x3, 0x1, 0x400, 0x19, 0x10, 0xfffffffa, 0xffffff93, 0xe, 0x7, 0x7, 0x1, 0x91, 0x4, 0x1, 0xfb9a, 0x8001, 0xfffffff6, 0x200, 0x8, 0x3, 0xaea, 0x3, 0xf3, 0xeb, 0x1ff, 0xde0, 0x5, 0x9, 0x2, 0xf, 0xddf, 0x101, 0x9, 0x1, 0x5, 0x7, 0x9, 0x1, 0x7, 0xffff, 0x1155, 0x2, 0x1c59, 0x1, 0x3, 0x5, 0x10, 0x2, 0x3, 0xffffffff, 0xfffffffc, 0x9, 0xfffffffc, 0xaa, 0x6, 0x3, 0x5, 0x800, 0x5, 0x4, 0x9, 0x8, 0x2, 0x8, 0x0, 0x8, 0xdfc3, 0x4, 0x800, 0x1, 0x10, 0xa, 0xff, 0x2, 0x3c66, 0x0, 0x6, 0x5, 0x7ff, 0x0, 0x2, 0x8, 0xa, 0x8, 0xfffffffd, 0x5, 0x101, 0x3, 0xae71, 0x400, 0x6, 0x4, 0x8, 0x3, 0x3, 0x0, 0x7, 0x8, 0x1, 0x1, 0x0, 0x6, 0xf, 0x3, 0xfffff01c, 0x8, 0xfff, 0x9, 0xfffffffd, 0x6, 0x5, 0x7ff, 0x7, 0x6, 0xdf, 0x7, 0x6, 0x9, 0x2, 0x8, 0x0, 0x0, 0x800, 0x4c3, 0x1, 0x200, 0x8, 0x1, 0x5, 0x8, 0x7, 0x352, 0x8, 0x1, 0x7d29, 0x3, 0x401, 0x709, 0xfffffff9, 0x8, 0x6, 0x8, 0x400, 0x3, 0x7f, 0x8, 0x6, 0x55a, 0x9, 0x3898, 0x14c00, 0x401, 0x0, 0x5, 0xfa0, 0xfffffff7, 0xfffffff8, 0x2, 0x2, 0x8497, 0xd, 0x1, 0x8001, 0x7, 0x3, 0x9, 0xfe, 0x9, 0x0, 0x5, 0x5, 0x4, 0x9, 0x4, 0x1, 0x6, 0x7, 0x3, 0x8, 0x7, 0x3685, 0xfff, 0x10000, 0x1, 0xb, 0x100, 0x0, 0x6, 0x9, 0x895, 0x299, 0x7, 0x8, 0x4, 0x7ff, 0x7, 0x9, 0x3, 0x3, 0x3a80, 0x7ff, 0x2, 0x9, 0x2, 0x6, 0x9, 0xffff, 0x6, 0x1, 0x6, 0x273, 0x8001, 0x8, 0x1ff, 0x8, 0xd7e, 0x100, 0x7, 0xfffffffc, 0x4, 0x101, 0x7, 0x0, 0x3, 0x7, 0x8, 0x7fffffff, 0xfbf, 0x6, 0xfff, 0xf, 0xd17d, 0x81, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x95d, 0xb, 0x8, 0xd157, 0x3, 0x8, 0x3, 0x6, 0x22, 0x9, 0x1ff, 0x93, 0x1, 0xedbf, 0x9, 0x1, 0x9, 0x2, 0xda8b, 0x3, 0x6, 0x5, 0x9, 0x9, 0x7, 0x80000001, 0xc7, 0x49, 0x400, 0xe86d, 0x7fffffff, 0x1951, 0x1989, 0x3, 0xcd, 0x10, 0x50, 0xffffffff, 0x0, 0x28c, 0x7, 0x6, 0x9c34, 0x62, 0x5, 0x87e, 0x4c0, 0x402, 0x7, 0x7f97, 0x8, 0xdf0, 0xfffffffa, 0x7ff, 0x2, 0x2, 0x3, 0xffffffa6, 0x9e, 0xf, 0xfffff800, 0xfffffffa, 0x5, 0x6, 0x5, 0x94dc, 0xe348, 0x5, 0x10000000, 0xaf46, 0x6, 0x753, 0x3, 0x965, 0xe0b, 0x9, 0x2, 0x4, 0x1, 0x8001, 0x7fb, 0x0, 0xc, 0x1, 0xf, 0x4, 0x60000000, 0x9, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x8, 0xfffffff9, 0x8, 0x8, 0x10000, 0xa3a, 0x5, 0xbf, 0x3ba384d0, 0x6, 0x40, 0xefc, 0xfffffffc, 0x2, 0xffff0000, 0x9, 0x4, 0x7, 0x1, 0x4, 0xec, 0x2, 0x4, 0x1, 0xfffffffd, 0x5, 0x6, 0xc7, 0x2, 0x3, 0x5, 0x2, 0x3, 0xb813, 0x9, 0x8, 0x9, 0xffff2fd2, 0x3, 0x5, 0xfff, 0x5, 0x1, 0xf, 0x80000000, 0xe5e, 0x3dc, 0x100, 0x5, 0x401, 0xfff, 0x1, 0xd, 0x4, 0x0, 0x8, 0x8, 0x6, 0x1, 0x5, 0xbb, 0x3, 0xffffff00, 0x3, 0x90, 0x1, 0x5, 0x0, 0x4, 0x800, 0x5, 0xa5, 0xd, 0x2, 0x101, 0x100, 0x10000, 0x5, 0x0, 0xfffff4c6, 0x0, 0x0, 0x8, 0x4, 0xe400, 0x5f, 0x1000, 0x4d, 0x3, 0xb21, 0x1, 0x7, 0x40b, 0x6, 0x1, 0x8, 0x1, 0xc, 0x5, 0x80000000, 0x6, 0x6, 0xc, 0x1ff, 0x80, 0x93b9, 0x10001, 0xa, 0x2, 0xee, 0x200, 0x266, 0x0, 0x80d8, 0x7, 0x1, 0x1ff, 0x1c3, 0x4, 0x3cbe, 0x34, 0x7fff, 0xe6, 0x0, 0x6, 0x4, 0x80000001, 0x200, 0x42a6, 0x0, 0x5, 0x1, 0x4, 0x6, 0x41d, 0x88a1, 0x7fff, 0x8, 0x5, 0xfffeffff, 0x9, 0x4, 0x9d5, 0xd, 0x5, 0x5, 0xe, 0x1, 0x4, 0x0, 0x2, 0x6, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x3, 0xa2, 0x10001, 0x1, 0x44d, 0x9]}]}, @TCA_CGROUP_EMATCHES={0x290, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb04, 0x8, 0xc36c}, {0x1, 0x5, 0x4}}}, @TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x80, 0x0, 0xea15}, "dcaf1676be9c8fade848b10d86cb83af72a53c1efad952ba27e86cb284a21a90d5b4731149291a970af1d8565f7319cbf9239cc765b8b33a9c97bf08b948812c17e3b25efaff7fbed12da2b4e5b8969ecb6dfc44e7b73b0312debf1bef2598f375f4b4fea0e33889ef5908a4b04ebc086fd8240fa4f8b06ca2880e5f59f37ec20ae7dd0cc311efb5f33598fdcdacef34ea5455bdf8eafc240192231082d960a1918a7674bde7b7ad8b"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x7}, {0x1, 0xde4, 0x8000000, 0x9}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x5, 0x5, 0x4}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x7, 0xa, 0x2, "4b776c6eff7d72808560"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x145, 0x7, 0xb}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_META={0xe0, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x8e}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f5bfbfe344f069c418", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="81dd9b5654f195", @TCF_META_TYPE_VAR="41e92172"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x1}, {0x2, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="07b2ccc55a65fe232baf", @TCF_META_TYPE_VAR="a932a908d131", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR='2', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="93", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x6}, {0xfff, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x2c, 0x2}, {0xf, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="f52d8feea4a0", @TCF_META_TYPE_VAR="d2", @TCF_META_TYPE_VAR="b81f", @TCF_META_TYPE_VAR="9bda8f", @TCF_META_TYPE_VAR="f9", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="708f2c78"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ac18be01a82d", @TCF_META_TYPE_VAR="b8d855"]}]}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fcfa50c342ef24", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1, 0x1}, {0xf496, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="f55da3227e00510187"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="a7d5a874530c39183098", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7]}]}}]}]}, @TCA_CGROUP_EMATCHES={0x130, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf8, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x5bfb}, "79212bc417b2a40ac24c97eec419e2808d573c5f17ec66aa99ee33b29d6f3d1cf03edb0b979fcf80c34a9dff0bdcaff89b51245c068c735e6252d36a7720116b2de5ff07b6f3fa7be2c68e45ebcefdc3fd7c08859786155b5275ff7ac2f1b139e31dcb9999b0f5e6e263da3ccd0a314219899d025d498813152446631b62594a946ef17ab5bc9397bb8ed02adf2891e3fc64d2f97f41e347a3bdbe38f9b8c4f6b52ed96a90ff8cea7cba0e02bb3fb8c231cbc9d5b375b19bcd3ceaa4d712183b873ef0b0551d0f93b7de5a5fc03bff1d42962677483f598e82cd82e1db10455b80e805c7c032a46edd9f1ebf"}}, @TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0x1}, {0x3, 0xb76, 0x1, 0x6, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8001, 0x8, 0x1}, {0x4, 0x6, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x2c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x2}, {0xfff, 0x0, 0x3}}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x9a, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb}, {0xe, 0xfb}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="d4f774704d61", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_META={0xbc, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x7f}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="3294400eab43", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x3f, 0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d3", @TCF_META_TYPE_VAR="5f041d056389", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="9dccf23e0279b7334b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="dd", @TCF_META_TYPE_VAR="b5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8870, 0xc6, 0x2}, {0x76ab, 0xfc, 0x1}}}, @TCA_EM_META_RVALUE={0x3a, 0x3, [@TCF_META_TYPE_VAR='O', @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="73ab9aaf99bd", @TCF_META_TYPE_VAR="a6b2c82efc390743", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="78a2d3", @TCF_META_TYPE_VAR="63d1d9ed8193d4ca0868", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="92644aba6a3242758e", @TCF_META_TYPE_VAR="304283f1fd"]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_LIST={0x184, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x8001, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0xd}, {0x3, 0x69f, 0x31c, 0x2, 0x9, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x28, 0x7f, 0x0, 0x0, {{0xf0, 0x0, 0x3ff}, "15ec160b54793e165097225540828c618a4aa2216d255e85021c6b"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x12ff, 0x3, 0x750}, {0x2, 0x7, 0x40, 0xf0000000}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x200, 0x0, 0x5}, "94bd4853ead0e47d32dcd1b905f0da592936c2c9a4ceb2d9c6a2418100b1130db88a92ffda1e48ef19f414d014ae3244fe1d7deeb5323377ae5a42c76960d3237e3f580a5d74a674d27a4a90f80cf8766147ce0d19da97b2e79491bf293fa19de41829d31ab4484cf71fdbde013bfa84a581ee11c3fefe63ed970ea31c8b6035633569fdd7658646ffb5d37a3c0a2addda7738b5fa46d9e9eb671d336bef7a7a1a2db1af25ed37b0b3f7d0a513608077b74ff8b27113563dcd35e04acde355a9c1fc4605f3"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x5e4}, {0xfffffffe, 0x3334, 0xfff, 0x1, 0xa, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x6, 0x7, 0x3, 0x0, 0x5, 0x3, 0x8, 0xc, 0xfff, 0x45, 0x1, 0x4, 0x0, 0x0, 0x81, 0x4c6, 0x800, 0x2, 0x4, 0xa4, 0x1, 0x1, 0x7, 0xfffffffc, 0x7, 0x7fff, 0x2, 0x200, 0x1, 0xd, 0x80, 0x8, 0x2, 0x5, 0x3, 0xc, 0x8, 0x8000, 0xa5, 0xb, 0x800, 0x80000001, 0x80000001, 0x9, 0x2, 0xf4c, 0x1, 0x1, 0xc58, 0x0, 0x3, 0x34c, 0x9, 0x2, 0x0, 0x2, 0xf, 0x1, 0x87fe, 0xf, 0x400, 0x9400000, 0x7, 0xfff, 0x5, 0x8, 0x6, 0xbe, 0x54, 0x6, 0x7, 0xfffffffe, 0x8f, 0x100, 0x6, 0x1, 0x40, 0x101, 0x8583, 0x1, 0x800, 0x5, 0x1, 0x7, 0x9, 0x1ff, 0x0, 0xe, 0x200, 0x1000, 0xff, 0x1, 0x5, 0xf, 0x6, 0x0, 0x8, 0x0, 0x7, 0x4, 0x2, 0xf9, 0x2, 0x6, 0x9, 0x2, 0x7, 0x3, 0xa, 0x2, 0x7, 0x8, 0x2, 0x0, 0x4, 0x5, 0x1, 0x1, 0x7, 0x8, 0x0, 0xf6, 0xfffffff1, 0x580000, 0x40, 0x5, 0x5, 0x101, 0xff, 0xc, 0x8, 0x0, 0x200, 0x10, 0x5, 0xcb7, 0xb5a6, 0x221, 0xfffffff7, 0xaa74, 0x2, 0x1, 0x1, 0x80000000, 0xa7, 0x4, 0xe, 0x10, 0x6, 0x702c937f, 0x28, 0x6, 0xb, 0x400, 0x3, 0x5, 0x20, 0x401, 0x101, 0x2, 0x2, 0xb0cd, 0x101, 0xffffff7f, 0x6, 0x0, 0x3, 0x8, 0x41a, 0x10, 0x80000001, 0x1, 0x3, 0xd, 0x6, 0x1b, 0x2, 0x5, 0x7, 0x1, 0xcd7, 0x1e, 0x7, 0x2, 0x7, 0x6, 0x3, 0x80000000, 0xfffff642, 0x7ff, 0x7fffffff, 0x40000000, 0x0, 0x40, 0xd915, 0x6, 0x7, 0x7, 0xc, 0x0, 0x9, 0x4, 0x96d, 0x80000000, 0x3, 0x10, 0x7, 0x4, 0x0, 0x1ff, 0x8, 0xc0, 0xfffffff7, 0x80000000, 0x3, 0xfffffffa, 0x40, 0x9, 0x11, 0x40, 0x80000000, 0x5, 0xb5ac, 0x700000, 0x0, 0x1, 0xfffffbff, 0xc8, 0x1, 0x2, 0x9, 0x7, 0x10000, 0x81, 0x84d, 0x9, 0xacd8, 0x0, 0x9, 0x6, 0x1, 0xedb, 0x1, 0x1000, 0x6, 0xfffffffd, 0x1, 0x5, 0x7ff, 0xb, 0x4, 0x0, 0x6, 0xac1, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x6, 0xac, 0x0, 0xfff, 0x0, 0x2, 0x6, 0x6, 0x40, 0x8, 0x1, 0xf6, 0x7, 0x0, 0xffffffff, 0x2b, 0x8, 0x10001, 0x0, 0x9, 0x8, 0x7, 0x3, 0xfff, 0xdba, 0xa55, 0x97f, 0x5, 0xffffffff, 0xd6, 0x0, 0x100, 0x1, 0xfffffd77, 0x5, 0xffff, 0x0, 0x3, 0x800, 0x10, 0x3, 0x400, 0xd90, 0x7, 0x6, 0x8, 0xee, 0x4, 0x9, 0xfffffff0, 0x7, 0xc57, 0x5c, 0x8, 0x4, 0x0, 0x4, 0x4, 0x2, 0x8, 0x6, 0x4, 0x9, 0x13, 0x9, 0xffff, 0x7, 0x8, 0x5e1, 0x7, 0xffffffff, 0xe3, 0x4b5, 0x3ff, 0x800, 0x6, 0x0, 0x6, 0x4, 0x7, 0x4, 0x7, 0x1, 0x8, 0x3, 0x7, 0xfffffff8, 0x4, 0x7fffffff, 0x8001, 0x4, 0xc86, 0x0, 0x0, 0xef, 0x2, 0x0, 0x88a, 0x3, 0x2, 0x349, 0xfffffff9, 0x3, 0x1000, 0x3, 0xf, 0x6, 0x8, 0x4, 0x26, 0xa, 0xd1, 0x4, 0x7, 0x8000, 0x7, 0xb, 0x0, 0x7, 0x5, 0x3cd, 0x1, 0x7fff, 0xa, 0x4, 0x1, 0xfffffffc, 0x80000000, 0x20000000, 0x5350e672, 0x4, 0x1, 0x7, 0x3, 0x8000, 0x1, 0x81, 0xd9, 0x7, 0x6, 0x0, 0xf, 0x5, 0x7ff, 0x2, 0x1ff, 0x0, 0x5, 0x800, 0xffffffff, 0x4, 0x4, 0x6, 0xb, 0x2, 0x10000, 0x8, 0x8, 0x9, 0x7, 0x1, 0x5, 0x0, 0x8, 0xb, 0x2, 0x0, 0x4, 0xb, 0x105e, 0x3, 0xd, 0xfff, 0x7ff, 0x3, 0xffff, 0x1, 0x0, 0x6, 0xffff1c9f, 0x5, 0x2, 0x81, 0xc0, 0x2, 0xffffffff, 0x4, 0xa, 0x6, 0x800, 0x9, 0x8, 0xffffff00, 0x25, 0x92, 0x6, 0xfffffff7, 0x81, 0x1c000, 0x8, 0x8, 0x9, 0x4, 0x6, 0x3e, 0x9, 0x741d, 0x6c9b287e, 0x8, 0xfffffffb, 0x4, 0x28e, 0x0, 0x4, 0x6, 0x5, 0x4, 0x4, 0x80, 0x3, 0x5, 0x910, 0x6, 0x8, 0x7, 0x8, 0xfffffffc, 0x4, 0x9, 0xf44, 0xa57a, 0x7, 0x9, 0x1, 0x4, 0x5, 0x1, 0xa, 0x5, 0x4, 0x3, 0x5, 0x2, 0x7, 0x2, 0x5, 0x369, 0x2, 0x0, 0x8000, 0x0, 0x6, 0x0, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x90ef, 0x6, 0x7, {0x0, 0x1, 0x323, 0xd6, 0x3, 0x3}, {0x3, 0x2, 0x6, 0xfffe, 0x9, 0x5}, 0x322, 0x3, 0x5}}]}, @TCA_CGROUP_EMATCHES={0x37c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x66c7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x56, 0x8, 0x101}, {0xffffffffffffffff, 0x4, 0x2}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x1000, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x328, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff8, 0x7, 0x4}, {{0x2, 0x0, 0x1, 0x1}, {0x3}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x9}, {0x0, 0x2, 0x10001, 0xcdb}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x3}, {0x55, 0x40, 0xe62, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x3c, 0x3, 0x0, 0x0, {{0x39, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xc, 0x5, "f1dd19d999b04212"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x1ec, 0x3, 0x0, 0x0, {{0xf, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xec, 0x5, "ad56ac9ff67edf96bd40231c1d5163eda3f46b543e4404d27637e85224431b9f6e0f62ebd653df39ba77e6c0e3602eb7c8745e0af20c440cab9ee24db37ed8f1d7017e7b8984430110414c8edb7adf7cd2c4d426ccea3d2c54125ce9e0f2b32bba9d6dae162a791471115158e02b65c7134ade6ed0df3a1289730f7b2d76d150ab88ebf2f5d430fa84902a536a739831699a9b87bd433c1a85cc3c49bb95ab1065507eff5e8e751afd86f3a474d181290b5ec9b4599798cd02698d8adc11a420ca17c560dc0e38032a2cedb61906f4a6e08c16416805eafb260a4506b05fa83f0e74886ec1755291"}, @TCA_EM_IPT_MATCH_DATA={0x9b, 0x5, "7d162f409153db5c0ea2edd9e745215192d65aef4a60e50792fa3e7497b63a6ce3d8c7395f8c34d890f2c9de96a5ee23f0a51978e7d2ab9f4ef85f909f4a193eb3c1b35ab0531c768e3bb4976a7a1367ad6985b20b38f843674f24b5917f26fcd7689f8d69af4b93815e9a0b6360d2d38928c6f80a98498444b2181b6821514739654283513d57e33e668e77cba13c3b24a11fe68353a5"}, @TCA_EM_IPT_MATCH_DATA={0x1d, 0x5, "13ed8b77387193fd53297d7319a346aa3022a5979cc1bf53b9"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0x74f, 0x0, 0x2}, "67d6c555b2aa043edb84cd79ae07f3204af7db74ce98c2100d7690698d9cc5b3e81e3401217f989a8ef182a0bc7f031391036f1e5f92e644aadeb6011eba02d5e956ca59c51a6b81ec6f69cb7101d152a17e04e050a9058f57ceee3bc511d8561f1bf0dc7d2fd558986b1806669d62f1d96809fd5027dd3de90308"}}]}]}]}}]}, 0x215c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 943.965063ms ago: executing program 0 (id=2442): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x40004000) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0021000000000000280012800b0001006272696467650000180002800c002100000000000000000008001d0005000000080003"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000005c36fbc8c5c69d9b000008000300", @ANYRES32=r5, @ANYBLOB="080026008009000008009f"], 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x10) 919.095657ms ago: executing program 1 (id=2443): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8000, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x35, r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x34, r13, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) 753.393611ms ago: executing program 4 (id=2444): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async, rerun: 64) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async, rerun: 64) write$tun(r5, &(0x7f0000000280)={@void, @val={0x1, 0x80, 0xfffb, 0xe, 0x9, 0x8000}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x1, 0x1b, 0x20, 0x64, 0x0, 0x44, 0x11, 0x0, @local, @remote}, {0x4e22, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x10, 0x100, @void}}}}}}, 0xfee) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 64) 654.926307ms ago: executing program 0 (id=2445): r0 = socket$inet6(0x10, 0xa1d7c41eb6832847, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911c8000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 654.397985ms ago: executing program 3 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d6163736563000014000280050006"], 0x54}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0x29, 0x0, 0x0) syz_emit_ethernet(0x1ce, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaacd"], 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970000e03c00e18000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r5 = openat$cgroup_ro(r3, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 653.983863ms ago: executing program 2 (id=2447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000001180)={0x731, 0xb9, 0x9, 0x10}, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x1ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1b, 0x1, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000900}, 0x20000081) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x81, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r7}, 0x38) (async) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, r7}, 0x38) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001380)={@local, @rand_addr, 0x0}, &(0x7f00000013c0)=0xc) sendto$packet(r9, &(0x7f0000001300)="38982be710ccddcd152789b0951e8d44612ac31cc449e05c5e24e08df8f55e091ca1e94334768b41959d59786804084ce41644dc7722f503576dd59c1cf40c9cadbb3e789e35895f81de6701be167b62e2b63072a09fb060beeca18c00e5523605a05ad838", 0x65, 0x4004084, &(0x7f0000001400)={0x11, 0x19, r10, 0x1, 0xfc, 0x6, @local}, 0x14) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r5, r4, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001080)) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="a906ffffff040000000001000000fedbb983b857748517d9527323c88a041ac16cd0862881b7aab716d37f1cf4af"], 0x14}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000001100), &(0x7f0000001140)=0x30) (async) getsockopt$bt_hci(r11, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 580.397636ms ago: executing program 4 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800bf101db0a19543d372756c679a201e0070065727370616e000004000280060001"], 0x40}}, 0x0) 570.05065ms ago: executing program 1 (id=2449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x120, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "bbfc9754a3d89efe680c8fd6565c6a3fef4f932a5139987f4cedf42debe5e2311987a285ec6a127b0d9b3b99b2b9ebbea5229efbe24cbe040253fa323794c35e44c2e10cd5fa622e29d6deee46c28b5f4069a5e4e9f09ecba73554df01d896ca37f0332f0b8950339a43d65251c3891753b944bdfa220483570732faa3d0f0ceb71b0dceadd1df0cf564c3575fb26ff37a8892f16f7fb29a52acf28fe31e2f9245c67d5cb0234139b8772a174b7ed91959c971026df448983fd0448d927309ecbe393aa90b23e0cc38"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x168}, 0x1, 0x0, 0x0, 0xe8517167648d60f}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) 496.067011ms ago: executing program 0 (id=2450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff06, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0xff06, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) 483.979945ms ago: executing program 2 (id=2451): r0 = socket(0x18, 0x5, 0x1) getsockname$packet(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 374.789977ms ago: executing program 1 (id=2452): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000240)="7c2c4deaf138058ff22e894241bb75bcdfc7ff71ca7a6f4ebc05719bc7d6d36325a64877287b93368769c335d07d01d5aa1ea933", &(0x7f0000000400)=""/222}, 0x20) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r4, 0x1, 0x3d, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) 324.10193ms ago: executing program 0 (id=2453): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x37, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r1, r2, 0x1e, 0x0, 0x0, @void, @value=r2, @void, @void, r3}, 0x20) 323.405582ms ago: executing program 2 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="143d6de87c00010000000000000000000300000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x8000020}, 0x20000040) (async) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000040)="eba3143af59802f6b7061cc86a796ce2b098c943bbd4ee7b290a3f46b98f77e65e2003aeea769b0523a0552a1d256fa42228b3960b2e", 0x36) (async, rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 322.898712ms ago: executing program 3 (id=2455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000800020000000000080003000000e4"], 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000780)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r1, 0xd81ba1c50dbca5e, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) recvmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/240, 0xf0}], 0x1, &(0x7f0000000240)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) 322.57848ms ago: executing program 4 (id=2456): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) 224.340611ms ago: executing program 3 (id=2457): setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x4}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xffffffff}) 202.176353ms ago: executing program 1 (id=2458): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000740), 0x0, 0x4c0c0, &(0x7f0000000300)={0x11, 0x5}, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c80)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0xfffffffc, {0x7, 0x0, 0x0, r3, 0x141, 0x64}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 100.052195ms ago: executing program 2 (id=2459): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11e, 0x80, 0x0, 0x1c6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000004000000014001880040001800c0001800800010004000000"], 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x270, 0x3d8, 0x3d8, 0x270, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, 0x0, 0x5d) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r5, 0x1) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="9c0091a49e7a5679000000000000000000"], 0x1c}], 0x1}, 0x4) setsockopt$inet_mreqsrc(r4, 0x0, 0x1, &(0x7f00000000c0)={@rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2}, 0xc) r10 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000000)={r2}) socket$unix(0x1, 0x2, 0x0) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 99.719848ms ago: executing program 0 (id=2460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x44090}, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xeffff034}, {0x16}]}, 0x10) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ed8769cb", 0x4}], 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x2e, &(0x7f0000000340)=""/67, &(0x7f00000002c0)=0x43) 86.79933ms ago: executing program 1 (id=2461): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xf0334000) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/298], 0x139) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @remote}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @remote}, &(0x7f0000000240)=0xc) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0x3, r3, 0x2d, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 79.199521ms ago: executing program 3 (id=2462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000f1401002cbd7000ffdbdf3508004500737201000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000040)={0x0, 0x28, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0xfffffffffffffefb}, 0x1, 0x0, 0x0, 0x48d5}, 0x2004c840) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000f1401002cbd7000ffdbdf3508004500737201000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000040)={0x0, 0x28, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0xfffffffffffffefb}, 0x1, 0x0, 0x0, 0x48d5}, 0x2004c840) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) (async) 0s ago: executing program 4 (id=2463): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100001040041925c4256d3754afb0000", @ANYRES32=0x0, @ANYBLOB="03050000000000002000128009000100766c616e000000001000028004000480060001000300000008000500", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000100370000009500000700000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)=0x100) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000340)={0xa000001c}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) recvfrom(r12, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) pipe(0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): atman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.012615][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.034858][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.054446][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.065067][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.075919][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.086479][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.099084][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.113603][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.128054][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.138940][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.149954][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.159913][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.173310][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.187753][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.219124][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.230893][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.231886][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.241515][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.260233][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.262466][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.270293][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.288531][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.298506][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.309217][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.320517][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.334166][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344956][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.354190][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.364188][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.392174][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.416265][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.437555][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.446445][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484824][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.508436][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.740771][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.755028][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.821071][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.882209][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.999526][ T5843] Bluetooth: hci0: command tx timeout [ 97.053623][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.077404][ T5843] Bluetooth: hci4: command tx timeout [ 97.077907][ T5851] Bluetooth: hci3: command tx timeout [ 97.083502][ T5151] Bluetooth: hci1: command tx timeout [ 97.089494][ T5851] Bluetooth: hci2: command tx timeout [ 97.105122][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.202213][ T5949] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11'. [ 97.253509][ T5951] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.284177][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.326214][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.800083][ T5974] : entered promiscuous mode [ 98.974501][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.102853][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 99.117565][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 99.240791][ T5998] netlink: 176 bytes leftover after parsing attributes in process `syz.1.21'. [ 99.289907][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.553990][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024655800: rx timeout, send abort [ 100.016150][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 100.054613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024655400: rx timeout, send abort [ 100.063234][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024655800: abort rx timeout. Force session deactivation [ 100.149527][ T6042] netlink: 96 bytes leftover after parsing attributes in process `syz.1.32'. [ 100.456972][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 100.500765][ T6058] vlan2: entered allmulticast mode [ 100.505952][ T6058] gretap0: entered allmulticast mode [ 100.518964][ T6060] netlink: 'syz.2.38': attribute type 15 has an invalid length. [ 100.562982][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024655400: abort rx timeout. Force session deactivation [ 100.775128][ T6069] IPv4: Oversized IP packet from 172.20.20.24 [ 100.782847][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 100.789447][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 100.951360][ T6071] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 100.998810][ T6071] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 101.024026][ T6073] Zero length message leads to an empty skb [ 101.304915][ T5892] IPVS: starting estimator thread 0... [ 101.336679][ T6098] netlink: 'syz.4.51': attribute type 21 has an invalid length. [ 101.351572][ T6098] netlink: 'syz.4.51': attribute type 5 has an invalid length. [ 101.362311][ T6098] Bluetooth: MGMT ver 1.23 [ 101.424891][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.437066][ T6093] IPVS: using max 26 ests per chain, 62400 per kthread [ 101.462289][ T6100] batman_adv: batadv0: Adding interface: dummy0 [ 101.498070][ T6100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.560439][ T6100] batman_adv: batadv0: Interface activated: dummy0 [ 101.577823][ T6102] tipc: Enabling of bearer rejected, failed to enable media [ 101.591569][ T6102] netlink: 'syz.0.53': attribute type 23 has an invalid length. [ 101.600671][ T6107] xt_hashlimit: size too large, truncated to 1048576 [ 101.647037][ T6105] batadv0: mtu less than device minimum [ 101.679539][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.691661][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.703832][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.715460][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.727559][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.739634][ T6105] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.953888][ T6109] macvlan2: entered promiscuous mode [ 101.990567][ T6109] macvlan2: entered allmulticast mode [ 102.011970][ T6109] batadv0: entered promiscuous mode [ 102.018622][ T6109] batadv0: entered allmulticast mode [ 102.024853][ T6109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.041730][ T6109] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 102.141561][ T6123] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 102.712564][ T6142] __nla_validate_parse: 7 callbacks suppressed [ 102.712583][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.756740][ T6142] vlan3: entered allmulticast mode [ 102.774172][ T6142] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 102.816123][ T6139] netlink: 'syz.0.64': attribute type 5 has an invalid length. [ 103.099350][ T6161] x_tables: duplicate underflow at hook 3 [ 103.224614][ T6170] netlink: 288 bytes leftover after parsing attributes in process `syz.2.72'. [ 103.244767][ T6170] trusted_key: syz.2.72 sent an empty control message without MSG_MORE. [ 103.656426][ T6179] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 103.955916][ T6202] netlink: 80 bytes leftover after parsing attributes in process `syz.0.85'. [ 104.461323][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.94'. [ 104.815842][ T6245] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 104.830708][ T6247] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 104.847492][ T6245] netlink: 220 bytes leftover after parsing attributes in process `syz.1.98'. [ 104.856465][ T6245] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 104.866037][ T6247] netlink: 76 bytes leftover after parsing attributes in process `syz.2.100'. [ 104.886142][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 104.899738][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 105.730147][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 106.136041][ T6299] validate_nla: 3 callbacks suppressed [ 106.136062][ T6299] netlink: 'syz.4.118': attribute type 4 has an invalid length. [ 106.434537][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 106.490338][ T6316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 106.631198][ T6323] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 106.651661][ T6323] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 106.680372][ T6323] NCSI netlink: No device for ifindex 458760 [ 106.719836][ T6323] net_ratelimit: 15 callbacks suppressed [ 106.719856][ T6323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.795691][ T6323] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 106.875065][ T6323] syz_tun: entered promiscuous mode [ 106.909601][ T6323] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.942218][ T6327] netlink: 'syz.1.127': attribute type 14 has an invalid length. [ 107.526892][ T6360] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 107.579788][ T6360] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.735700][ T6370] __nla_validate_parse: 5 callbacks suppressed [ 107.735723][ T6370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.141'. [ 107.811307][ T6374] SET target dimension over the limit! [ 107.957230][ T5851] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 108.088307][ T6385] netlink: 'syz.4.145': attribute type 2 has an invalid length. [ 108.767055][ T6407] syz.4.152 uses obsolete (PF_INET,SOCK_PACKET) [ 108.787278][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 109.418172][ T6438] xt_CT: No such helper "pptp" [ 109.637894][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 109.724458][ T6455] syz_tun: entered promiscuous mode [ 109.756681][ T6455] macvlan2: entered promiscuous mode [ 110.477741][ T6504] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 110.618347][ T6507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.767444][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 110.901956][ T6514] ip6t_rpfilter: unknown options [ 111.690057][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 111.702048][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 112.157602][ T6578] netlink: 80 bytes leftover after parsing attributes in process `syz.0.201'. [ 112.250882][ T6581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.203'. [ 112.437872][ T6590] xt_l2tp: unknown flags: 18 [ 112.539227][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 112.595919][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 112.641062][ T6594] netlink: 'syz.0.207': attribute type 7 has an invalid length. [ 112.658314][ T6594] netlink: 'syz.0.207': attribute type 8 has an invalid length. [ 112.811195][ T6605] __nla_validate_parse: 1 callbacks suppressed [ 112.811216][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 112.896424][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 112.955101][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 112.964321][ T6610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.211'. [ 112.980072][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.211'. [ 113.044140][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 113.157873][ T6624] xt_l2tp: missing protocol rule (udp|l2tpip) [ 114.018996][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.027938][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.045620][ T6660] netlink: 26 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.067946][ T6662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.085674][ T6660] netlink: 96 bytes leftover after parsing attributes in process `syz.4.229'. [ 114.125059][ T6660] 8021q: VLANs not supported on ip6tnl0 [ 114.851098][ T6686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.972713][ T6686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.090039][ T6712] netlink: 'syz.0.242': attribute type 13 has an invalid length. [ 115.112292][ T6712] digital: digital_start_poll: Unknown protocol [ 115.183870][ T6686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.379080][ T6686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.574201][ T6686] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.607555][ T6731] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 115.680596][ T6686] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.743877][ T6686] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.813739][ T6686] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.060114][ T6750] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 116.080829][ T6754] xt_cgroup: invalid path, errno=-2 [ 116.088374][ T6750] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 116.109059][ T6758] xt_cgroup: invalid path, errno=-2 [ 116.115234][ T6755] netlink: 'syz.2.257': attribute type 29 has an invalid length. [ 116.205658][ T6758] netlink: 'syz.3.258': attribute type 11 has an invalid length. [ 116.328749][ T6767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.552117][ T6776] ieee802154 phy0 wpan0: encryption failed: -90 [ 116.776603][ T6787] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 117.315267][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c9cec00: rx timeout, send abort [ 117.664086][ T6807] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 117.693025][ T6808] warning: `syz.0.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.815611][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c9cc800: rx timeout, send abort [ 117.824315][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c9cec00: abort rx timeout. Force session deactivation [ 117.980416][ T6818] __nla_validate_parse: 15 callbacks suppressed [ 117.980436][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 118.324075][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c9cc800: abort rx timeout. Force session deactivation [ 118.653895][ T6827] netlink: 176 bytes leftover after parsing attributes in process `syz.0.284'. [ 118.706909][ T6828] netlink: 176 bytes leftover after parsing attributes in process `syz.0.284'. [ 119.314203][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.289'. [ 119.533522][ T6869] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 119.602740][ T6871] geneve2: entered promiscuous mode [ 119.632564][ T6871] geneve2: entered allmulticast mode [ 119.688799][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b62e800: rx timeout, send abort [ 119.698027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b62f400: rx timeout, send abort [ 119.707287][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b62e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.722584][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b62f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.825228][ T6879] netlink: 'syz.4.294': attribute type 2 has an invalid length. [ 120.503724][ T6910] syzkaller0: entered promiscuous mode [ 120.511309][ T6910] syzkaller0: entered allmulticast mode [ 120.584272][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.606250][ T6916] batadv_slave_1: entered promiscuous mode [ 120.620238][ T6916] batadv_slave_1: entered allmulticast mode [ 120.731511][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.839458][ T6916] team0: Port device bond0 added [ 120.985106][ T6941] netlink: 264 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.045613][ T6941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.622932][ T6971] x_tables: duplicate underflow at hook 1 [ 121.953012][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 121.983746][ T6990] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 122.007900][ T6990] vlan0: entered allmulticast mode [ 122.019329][ T6990] veth0_vlan: entered allmulticast mode [ 122.095609][ T6990] team0: Port device vlan0 added [ 122.361809][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 122.404115][ T7010] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 122.534737][ T7010] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.933539][ T7031] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 123.088730][ T7040] sch_fq: defrate 0 ignored. [ 123.264021][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 123.287452][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 123.296563][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 123.347875][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 123.523581][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 124.064424][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 124.304851][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 124.443118][ T7109] netlink: 152 bytes leftover after parsing attributes in process `syz.2.349'. [ 124.593771][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 125.505313][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'. [ 125.705104][ T7183] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 125.718769][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 125.800916][ T7172] hsr_slave_0: left promiscuous mode [ 125.835140][ T7172] hsr_slave_1: left promiscuous mode [ 125.886677][ T7194] Cannot find add_set index 0 as target [ 126.449791][ T7229] vlan2: entered promiscuous mode [ 126.454892][ T7229] bridge0: entered promiscuous mode [ 126.553512][ T7232] netlink: 'syz.2.382': attribute type 11 has an invalid length. [ 127.042074][ T7262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.260161][ T7268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.324349][ T7273] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 127.332487][ T7274] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 127.531868][ T7282] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 127.570891][ T7285] netlink: 'syz.4.399': attribute type 2 has an invalid length. [ 127.826777][ T30] audit: type=1800 audit(1744337513.201:2): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="memory.events" dev="tmpfs" ino=482 res=0 errno=0 [ 127.920935][ T30] audit: type=1800 audit(1744337513.211:3): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="memory.events" dev="tmpfs" ino=482 res=0 errno=0 [ 127.971848][ T7307] x_tables: duplicate entry at hook 2 [ 127.977071][ T7308] netlink: 'syz.4.404': attribute type 21 has an invalid length. [ 128.419322][ T7332] __nla_validate_parse: 17 callbacks suppressed [ 128.419346][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 128.483409][ T7335] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.512630][ T7332] netlink: 'syz.2.410': attribute type 7 has an invalid length. [ 128.538918][ T7332] netlink: 'syz.2.410': attribute type 8 has an invalid length. [ 128.546696][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 128.659730][ T7340] IPv6: NLM_F_REPLACE set, but no existing node found! [ 128.776155][ T7348] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 128.899965][ T7358] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 128.996673][ T7362] netlink: 'syz.2.420': attribute type 21 has an invalid length. [ 129.091202][ T7371] x_tables: unsorted entry at hook 3 [ 129.173331][ T7372] wg2: entered promiscuous mode [ 129.187573][ T7372] wg2: entered allmulticast mode [ 129.614944][ T7410] netlink: 'syz.3.430': attribute type 3 has an invalid length. [ 129.969008][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 130.140943][ T7435] netlink: 'syz.4.437': attribute type 21 has an invalid length. [ 130.153461][ T7435] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.161959][ T7435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.169249][ T7435] IPv6: NLM_F_CREATE should be set when creating new route [ 130.176610][ T7435] IPv6: NLM_F_CREATE should be set when creating new route [ 130.183899][ T7435] IPv6: NLM_F_CREATE should be set when creating new route [ 130.206159][ T7435] netlink: 'syz.4.437': attribute type 11 has an invalid length. [ 130.223522][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.4.437'. [ 130.396489][ T7442] sctp: [Deprecated]: syz.4.441 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.396489][ T7442] Use struct sctp_sack_info instead [ 130.414950][ T7442] netlink: 256 bytes leftover after parsing attributes in process `syz.4.441'. [ 130.750771][ T7469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.445'. [ 130.927856][ T7472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.447'. [ 131.044629][ T7481] IPVS: set_ctl: invalid protocol: 66 224.0.0.2:20004 [ 131.143017][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 131.376549][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 131.579561][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 132.125775][ T7476] tipc: Started in network mode [ 132.131243][ T7476] tipc: Node identity 4495e507, cluster identity 5 [ 132.137837][ T7476] tipc: Node number set to 1150674183 [ 132.763145][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770264][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.835003][ T7533] netlink: 'syz.2.464': attribute type 50 has an invalid length. [ 133.563204][ T7574] __nla_validate_parse: 5 callbacks suppressed [ 133.563226][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 133.984899][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.028353][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.067039][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.091634][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.095177][ T7598] bond0: (slave syz_tun): Releasing backup interface [ 134.118872][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.145767][ T7598] bridge_slave_0: left allmulticast mode [ 134.157560][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.167941][ T7598] bridge_slave_0: left promiscuous mode [ 134.174671][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.193457][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.204786][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.221006][ T7598] bridge_slave_1: left allmulticast mode [ 134.226703][ T7598] bridge_slave_1: left promiscuous mode [ 134.235545][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.240345][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.247639][ T7593] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.270700][ T7598] bond0: (slave bond_slave_0): Releasing backup interface [ 134.293475][ T7598] bond0: (slave bond_slave_1): Releasing backup interface [ 134.344840][ T7598] team0: Port device team_slave_0 removed [ 134.370952][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 134.375347][ T7598] team0: Port device team_slave_1 removed [ 134.394109][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.401827][ T7598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.411588][ T7598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.420506][ T7598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.522430][ T7609] tap0: tun_chr_ioctl cmd 2148553947 [ 134.561647][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 134.621853][ T7616] netlink: 'syz.4.486': attribute type 10 has an invalid length. [ 134.696731][ T7616] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.710037][ T7620] xt_socket: unknown flags 0x2 [ 134.866836][ T7629] netlink: 52 bytes leftover after parsing attributes in process `syz.2.490'. [ 135.318742][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 135.349731][ T7660] netlink: 124 bytes leftover after parsing attributes in process `syz.1.502'. [ 135.376921][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 135.385830][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 135.399534][ T7655] netlink: 'syz.4.499': attribute type 2 has an invalid length. [ 135.581512][ T7671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.687406][ T7671] bond0: (slave bond1): Enslaving as an active interface with an up link [ 135.723250][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 135.778291][ T7685] netlink: 'syz.4.510': attribute type 6 has an invalid length. [ 135.832535][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 136.835512][ T7738] syzkaller1: entered promiscuous mode [ 136.875840][ T7738] syzkaller1: entered allmulticast mode [ 137.841236][ T7814] netlink: 'syz.2.547': attribute type 14 has an invalid length. [ 137.849283][ T7814] netlink: 'syz.2.547': attribute type 13 has an invalid length. [ 137.965194][ T7821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.975026][ T7821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.985997][ T7821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.995592][ T7821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.059611][ T7821] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.069232][ T7821] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.078214][ T7821] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.087675][ T7821] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.351302][ T7843] xt_bpf: check failed: parse error [ 138.429552][ T7842] team0: Mode "ø?õ)balance" not found [ 138.437052][ T7847] netlink: 'syz.0.557': attribute type 23 has an invalid length. [ 138.596781][ T7856] __nla_validate_parse: 14 callbacks suppressed [ 138.606368][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 138.646950][ T7856] netlink: 56 bytes leftover after parsing attributes in process `syz.2.561'. [ 138.665536][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 138.859431][ T7872] xfrm1: entered allmulticast mode [ 138.880369][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 138.892826][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 139.158619][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 139.164606][ T7894] netlink: 68 bytes leftover after parsing attributes in process `syz.2.573'. [ 139.226407][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 139.265153][ T7898] netlink: 14 bytes leftover after parsing attributes in process `syz.4.574'. [ 139.353781][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.576'. [ 139.430786][ T7908] xt_socket: unknown flags 0x2 [ 139.611717][ T7925] ÿ: renamed from dummy0 (while UP) [ 139.676191][ T7925] dvmrp0: entered allmulticast mode [ 139.842268][ T7938] Cannot find add_set index 0 as target [ 139.908691][ T7940] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 139.933357][ T7940] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 140.006611][ T7947] syzkaller0: entered promiscuous mode [ 140.012394][ T7947] syzkaller0: entered allmulticast mode [ 140.653146][ T7980] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 140.701443][ T5891] IPVS: starting estimator thread 0... [ 140.798186][ T7983] IPVS: using max 27 ests per chain, 64800 per kthread [ 140.972746][ T7997] netem: invalid attributes len -24 [ 140.987997][ T7997] netem: change failed [ 141.329539][ T8014] netlink: 'syz.0.611': attribute type 1 has an invalid length. [ 141.888092][ T8041] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 142.167338][ T8069] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 142.296182][ T8077] netlink: 'syz.0.625': attribute type 12 has an invalid length. [ 142.315060][ T8077] netlink: 'syz.0.625': attribute type 11 has an invalid length. [ 142.454485][ T8088] tipc: Invalid UDP bearer configuration [ 142.454548][ T8088] tipc: Enabling of bearer rejected, failed to enable media [ 142.666468][ T8093] xt_connbytes: Forcing CT accounting to be enabled [ 142.673847][ T8093] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.840822][ T8111] netlink: 'syz.4.638': attribute type 11 has an invalid length. [ 143.235082][ T8130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.352838][ T8130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.450561][ T8130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.545795][ T8130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.669132][ T8130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.690972][ T8130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.717848][ T8130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.750391][ T8130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.938631][ T8160] __nla_validate_parse: 13 callbacks suppressed [ 143.938652][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 143.955181][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 144.251748][ T8181] netlink: 80 bytes leftover after parsing attributes in process `syz.0.660'. [ 144.629256][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.2.667'. [ 144.675619][ T8209] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 144.744053][ T8209] bond2: entered promiscuous mode [ 144.749962][ T8209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.889601][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 144.926251][ T8227] xt_cluster: node mask cannot exceed total number of nodes [ 145.017674][ T8214] "syz.4.672" (8214) uses obsolete ecb(arc4) skcipher [ 145.131383][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.677'. [ 145.270139][ T8244] netlink: 52 bytes leftover after parsing attributes in process `syz.4.678'. [ 145.284111][ T8244] unsupported nlmsg_type 40 [ 145.410083][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.679'. [ 145.435005][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.679'. [ 145.518628][ T8257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'. [ 146.084612][ T8286] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 146.418333][ T8304] bond2: entered promiscuous mode [ 146.423738][ T8304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.551229][ T8304] ip6t_srh: unknown srh match flags 536B [ 146.742751][ T8322] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 146.761772][ T8322] netlink: 'syz.1.702': attribute type 4 has an invalid length. [ 146.775465][ T8322] veth0_to_hsr: invalid flags given to default FDB implementation [ 146.856437][ T8322] syz.1.702 (8322) used greatest stack depth: 19448 bytes left [ 146.950684][ T8330] x_tables: ip_tables: socket.1 match: invalid size 8 (kernel) != (user) 16 [ 146.972843][ T8327] x_tables: duplicate underflow at hook 2 [ 147.205988][ T8339] bridge3: entered promiscuous mode [ 147.212271][ T8339] bridge3: entered allmulticast mode [ 147.386204][ T8346] syzkaller1: entered promiscuous mode [ 147.413464][ T8346] syzkaller1: entered allmulticast mode [ 147.437248][ T8347] netlink: 'syz.3.710': attribute type 2 has an invalid length. [ 147.578506][ T8360] lo: entered allmulticast mode [ 148.180928][ T8394] xt_CT: No such helper "pptp" [ 149.266260][ T8442] netlink: 'syz.1.743': attribute type 2 has an invalid length. [ 149.277904][ T8442] __nla_validate_parse: 8 callbacks suppressed [ 149.277923][ T8442] netlink: 244 bytes leftover after parsing attributes in process `syz.1.743'. [ 149.342666][ T8445] netlink: 120 bytes leftover after parsing attributes in process `syz.2.745'. [ 149.506474][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 149.507059][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 149.747407][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 149.751707][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 149.905134][ T8484] netlink: 10 bytes leftover after parsing attributes in process `syz.1.754'. [ 150.086639][ T8494] netlink: 'syz.2.759': attribute type 20 has an invalid length. [ 150.344662][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.758'. [ 150.536501][ T8509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.755347][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 151.255627][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 151.624888][ T8559] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 151.633211][ T8559] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 151.842476][ T47] IPVS: starting estimator thread 0... [ 151.854253][ T8575] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 151.893782][ T8575] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.949446][ T8579] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.503581][ T8675] ip6t_rpfilter: unknown options [ 153.515306][ T8674] sctp: [Deprecated]: syz.0.817 (pid 8674) Use of int in max_burst socket option deprecated. [ 153.515306][ T8674] Use struct sctp_assoc_value instead [ 153.570786][ T8680] netlink: 'syz.4.818': attribute type 1 has an invalid length. [ 153.588210][ T8680] x_tables: duplicate underflow at hook 1 [ 153.773801][ T8691] syz.0.823 (8691) used greatest stack depth: 18904 bytes left [ 154.063451][ T8705] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.072805][ T8705] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.082430][ T8705] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.092021][ T8705] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.123902][ T8712] netlink: 'syz.3.829': attribute type 7 has an invalid length. [ 154.132068][ T8709] netlink: 'syz.3.829': attribute type 7 has an invalid length. [ 154.139863][ T8712] netlink: 'syz.3.829': attribute type 8 has an invalid length. [ 154.147813][ T8709] netlink: 'syz.3.829': attribute type 8 has an invalid length. [ 154.303839][ T8719] __nla_validate_parse: 19 callbacks suppressed [ 154.303856][ T8719] netlink: 108 bytes leftover after parsing attributes in process `syz.4.832'. [ 154.367820][ T8719] ip6t_srh: unknown srh match flags 536B [ 154.401657][ T8722] C: renamed from team_slave_0 (while UP) [ 154.427430][ T8721] netlink: 92 bytes leftover after parsing attributes in process `syz.3.833'. [ 154.448786][ T8722] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 154.456474][ T8722] net_ratelimit: 58 callbacks suppressed [ 154.456489][ T8722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 154.536706][ T8734] ip6t_REJECT: ECHOREPLY is not supported [ 155.597741][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 156.007704][ T8812] ip6gre0: entered promiscuous mode [ 156.067451][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 156.217470][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 156.259328][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 156.280121][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 156.400631][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 156.410347][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 156.420098][ T8842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.865'. [ 156.600930][ T8856] netlink: 'syz.1.868': attribute type 5 has an invalid length. [ 156.612760][ T8855] sctp: [Deprecated]: syz.0.869 (pid 8855) Use of int in maxseg socket option. [ 156.612760][ T8855] Use struct sctp_assoc_value instead [ 156.711613][ T8861] pim6reg: entered allmulticast mode [ 156.856705][ T8869] wg0: entered allmulticast mode [ 157.041779][ T8881] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 157.438722][ T8904] rdma_op ffff88807c9279f0 conn xmit_rdma 0000000000000000 [ 158.921013][ T8963] 8021q: VLANs not supported on vcan0 [ 159.180230][ T8978] x_tables: unsorted entry at hook 1 [ 159.232818][ T8980] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 159.679097][ T9004] __nla_validate_parse: 14 callbacks suppressed [ 159.679119][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 159.887456][ T9017] syzkaller1: entered allmulticast mode [ 160.054452][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 160.313146][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 160.339254][ T9053] netlink: 192 bytes leftover after parsing attributes in process `syz.2.918'. [ 160.379054][ T9042] hsr_slave_1 (unregistering): left promiscuous mode [ 160.435945][ T9044] netlink: 232 bytes leftover after parsing attributes in process `syz.4.914'. [ 160.566144][ T9069] netlink: 144 bytes leftover after parsing attributes in process `syz.0.923'. [ 160.622994][ T9076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.724574][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 160.752420][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 160.797471][ T9080] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.805849][ T9080] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.814200][ T9080] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.822529][ T9080] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.859358][ T9080] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.868195][ T9080] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.876587][ T9080] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.885154][ T9080] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.910760][ T9089] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 160.919464][ C0] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 160.990396][ T9093] openvswitch: netlink: EtherType 0 is less than min 600 [ 161.027434][ T9091] bond3: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 161.075413][ T9091] bond3: (slave ip6tnl2): Setting fail_over_mac to active for active-backup mode [ 161.089327][ T9091] bond3: (slave ip6tnl2): making interface the new active one [ 161.098539][ T9091] bond3: (slave ip6tnl2): Enslaving as an active interface with an up link [ 161.200182][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 161.235557][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.934'. [ 161.244112][ T9101] vlan6: entered promiscuous mode [ 161.255140][ T9101] vlan6: entered allmulticast mode [ 161.260975][ T9101] hsr_slave_1: entered allmulticast mode [ 162.036157][ T9171] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 162.203402][ T9176] x_tables: duplicate underflow at hook 2 [ 162.211460][ T9176] x_tables: duplicate underflow at hook 1 [ 162.506298][ T9200] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 162.520511][ T9200] netlink: 'syz.1.959': attribute type 2 has an invalid length. [ 162.531447][ T9200] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 162.766525][ T9212] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.085053][ T30] audit: type=1800 audit(1744337548.471:4): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.971" name="memory.events" dev="tmpfs" ino=1039 res=0 errno=0 [ 163.712372][ T9282] netlink: 'syz.0.986': attribute type 2 has an invalid length. [ 163.736585][ T9276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.015960][ T9298] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 164.039418][ T9298] bridge0: port 1(team0) entered blocking state [ 164.046175][ T9298] bridge0: port 1(team0) entered disabled state [ 164.062083][ T9298] team0: entered allmulticast mode [ 164.089979][ T9298] team0: entered promiscuous mode [ 165.004419][ T9360] syz.1.1009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.055303][ T9369] : renamed from bond0 (while UP) [ 165.062773][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.1.1009 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 165.062805][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.062824][ T9360] Call Trace: [ 165.062834][ T9360] [ 165.062843][ T9360] dump_stack_lvl+0x241/0x360 [ 165.062897][ T9360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.062928][ T9360] ? __pfx__printk+0x10/0x10 [ 165.062957][ T9360] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 165.062992][ T9360] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 165.063022][ T9360] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 165.063056][ T9360] warn_alloc+0x27c/0x410 [ 165.063085][ T9360] ? is_mmconf_reserved+0x3a1/0x3f0 [ 165.063110][ T9360] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 165.063132][ T9360] ? __pfx_warn_alloc+0x10/0x10 [ 165.063156][ T9360] ? kasan_save_track+0x3f/0x80 [ 165.063178][ T9360] ? __kasan_kmalloc+0x9d/0xb0 [ 165.063204][ T9360] ? xsk_setsockopt+0x449/0x840 [ 165.063223][ T9360] ? do_sock_setsockopt+0x3b1/0x710 [ 165.063242][ T9360] ? __x64_sys_setsockopt+0x1ee/0x280 [ 165.063261][ T9360] ? do_syscall_64+0xf3/0x230 [ 165.063291][ T9360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.063323][ T9360] __vmalloc_node_range_noprof+0x128/0x1390 [ 165.063379][ T9360] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.063406][ T9360] ? __kasan_kmalloc+0x9d/0xb0 [ 165.063437][ T9360] vmalloc_user_noprof+0x74/0x80 [ 165.063459][ T9360] ? xskq_create+0xb6/0x170 [ 165.063480][ T9360] xskq_create+0xb6/0x170 [ 165.063517][ T9360] xsk_init_queue+0xa1/0x100 [ 165.063541][ T9360] xsk_setsockopt+0x449/0x840 [ 165.063565][ T9360] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.063583][ T9360] ? __lock_acquire+0xad5/0xd80 [ 165.063604][ T9360] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.063635][ T9360] ? aa_sock_opt_perm+0x79/0x120 [ 165.063669][ T9360] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.063688][ T9360] do_sock_setsockopt+0x3b1/0x710 [ 165.063716][ T9360] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 165.063734][ T9360] ? __fget_files+0x2a/0x420 [ 165.063758][ T9360] ? __fget_files+0x39d/0x420 [ 165.063775][ T9360] ? __fget_files+0x2a/0x420 [ 165.063804][ T9360] __x64_sys_setsockopt+0x1ee/0x280 [ 165.063832][ T9360] do_syscall_64+0xf3/0x230 [ 165.063857][ T9360] ? clear_bhb_loop+0x45/0xa0 [ 165.063882][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.063902][ T9360] RIP: 0033:0x7fe9f178d169 [ 165.063926][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.063944][ T9360] RSP: 002b:00007fe9f268e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.063966][ T9360] RAX: ffffffffffffffda RBX: 00007fe9f19a5fa0 RCX: 00007fe9f178d169 [ 165.063982][ T9360] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 165.063994][ T9360] RBP: 00007fe9f180e990 R08: 0000000000000004 R09: 0000000000000000 [ 165.064007][ T9360] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.064020][ T9360] R13: 0000000000000000 R14: 00007fe9f19a5fa0 R15: 00007ffd17647ad8 [ 165.064053][ T9360] [ 165.064159][ T9360] Mem-Info: [ 165.345370][ T9383] __nla_validate_parse: 16 callbacks suppressed [ 165.345391][ T9383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1015'. [ 165.348029][ T9360] active_anon:4094 inactive_anon:0 isolated_anon:0 [ 165.348029][ T9360] active_file:1210 inactive_file:38333 isolated_file:0 [ 165.348029][ T9360] unevictable:768 dirty:66 writeback:0 [ 165.348029][ T9360] slab_reclaimable:10558 slab_unreclaimable:99311 [ 165.348029][ T9360] mapped:28300 shmem:1447 pagetables:831 [ 165.348029][ T9360] sec_pagetables:0 bounce:0 [ 165.348029][ T9360] kernel_misc_reclaimable:0 [ 165.348029][ T9360] free:1340198 free_pcp:475 free_cma:0 [ 165.438256][ T9360] Node 0 active_anon:16376kB inactive_anon:0kB active_file:4840kB inactive_file:153260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113200kB dirty:264kB writeback:0kB shmem:4252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11196kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.570910][ T9360] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.633138][ T9360] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.691700][ T9360] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 165.710234][ T9360] Node 0 DMA32 free:1440344kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:16368kB inactive_anon:0kB active_file:4840kB inactive_file:153160kB unevictable:1536kB writepending:264kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:816kB local_pcp:248kB free_cma:0kB [ 165.748652][ T9360] lowmem_reserve[]: 0 0 0 0 0 [ 165.753791][ T9360] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.803142][ T9360] lowmem_reserve[]: 0 0 0 0 0 [ 165.809653][ T9396] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 165.817631][ T9396] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1019'. [ 165.832191][ T9360] Node 1 Normal free:3906348kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 165.866214][ T9360] lowmem_reserve[]: 0 0 0 0 0 [ 165.878298][ T9360] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.898328][ T9360] Node 0 DMA32: 92*4kB (UM) 250*8kB (UME) 151*16kB (UME) 202*32kB (UME) 178*64kB (UME) 57*128kB (UME) 31*256kB (UM) 19*512kB (UM) 8*1024kB (UME) 2*2048kB (M) 337*4096kB (M) = 1440240kB [ 165.923389][ T9360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.937027][ T9360] Node 1 Normal: 233*4kB (UE) 43*8kB (UME) 43*16kB (UME) 192*32kB (UME) 84*64kB (UME) 29*128kB (UME) 14*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906348kB [ 165.982856][ T9360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.994190][ T9399] tipc: Started in network mode [ 166.005882][ T9360] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.029434][ T9360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.044096][ T9399] tipc: Node identity ac14140f, cluster identity 4711 [ 166.083361][ T9399] tipc: New replicast peer: 255.255.255.255 [ 166.116018][ T9360] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.127776][ T9399] tipc: Enabled bearer , priority 10 [ 166.145388][ T9360] 40992 total pagecache pages [ 166.150602][ T9360] 0 pages in swap cache [ 166.154611][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 166.154770][ T9360] Free swap = 124996kB [ 166.169316][ T9360] Total swap = 124996kB [ 166.173507][ T9360] 2097051 pages RAM [ 166.179651][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 166.188736][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 166.201081][ T9360] 0 pages HighMem/MovableOnly [ 166.205801][ T9360] 428581 pages reserved [ 166.210658][ T9401] tc_dump_action: action bad kind [ 166.225564][ T9405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 166.247401][ T9405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.257431][ T9360] 0 pages cma reserved [ 166.397783][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1027'. [ 166.452534][ T9419] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1026'. [ 166.605109][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 166.783794][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 166.793190][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 166.817154][ T9438] netlink: 'syz.3.1032': attribute type 12 has an invalid length. [ 166.864161][ T9438] netlink: 'syz.3.1032': attribute type 11 has an invalid length. [ 166.974459][ T9447] atomic_op ffff88802a9f5198 conn xmit_atomic 0000000000000000 [ 167.248106][ T47] tipc: Node number set to 2886997007 [ 167.364649][ T9464] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 167.551099][ T9478] netlink: 'syz.2.1044': attribute type 13 has an invalid length. [ 167.680859][ T9481] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 167.924361][ T9497] x_tables: duplicate underflow at hook 3 [ 167.943441][ T9498] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 168.191969][ T9510] bond4: entered promiscuous mode [ 168.197770][ T9510] bond4: entered allmulticast mode [ 168.203317][ T9510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.346760][ T9518] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 170.128819][ T9569] C: entered promiscuous mode [ 170.133869][ T9569] team_slave_1: entered promiscuous mode [ 170.139782][ T9569] bond_slave_0: entered promiscuous mode [ 170.145681][ T9569] bond_slave_1: entered promiscuous mode [ 170.151457][ T9569] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 170.170966][ T9569] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.182006][ T9569] team0: Device macvtap1 is already an upper device of the team interface [ 170.205655][ T9569] C: left promiscuous mode [ 170.210196][ T9569] team_slave_1: left promiscuous mode [ 170.215163][ T9580] xt_l2tp: invalid flags combination: c [ 170.215730][ T9569] bond_slave_0: left promiscuous mode [ 170.226658][ T9569] bond_slave_1: left promiscuous mode [ 170.232187][ T9569] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 170.767330][ T9619] FAULT_INJECTION: forcing a failure. [ 170.767330][ T9619] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.848074][ T9625] syzkaller1: entered promiscuous mode [ 170.856890][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.4.1089 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 170.856919][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.856932][ T9619] Call Trace: [ 170.856940][ T9619] [ 170.856949][ T9619] dump_stack_lvl+0x241/0x360 [ 170.856992][ T9619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.857022][ T9619] ? __pfx__printk+0x10/0x10 [ 170.857064][ T9619] should_fail_ex+0x424/0x570 [ 170.857091][ T9619] _copy_to_user+0x31/0xb0 [ 170.857135][ T9619] simple_read_from_buffer+0xc4/0x170 [ 170.857179][ T9619] proc_fail_nth_read+0x1ef/0x260 [ 170.857202][ T9619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.857224][ T9619] ? rw_verify_area+0x246/0x630 [ 170.857245][ T9619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.857266][ T9619] vfs_read+0x21f/0xb90 [ 170.857308][ T9619] ? __pfx___mutex_lock+0x10/0x10 [ 170.857333][ T9619] ? __pfx_vfs_read+0x10/0x10 [ 170.857359][ T9619] ? __fget_files+0x2a/0x420 [ 170.857380][ T9619] ? __fget_files+0x39d/0x420 [ 170.857397][ T9619] ? __fget_files+0x2a/0x420 [ 170.857425][ T9619] ksys_read+0x19d/0x2d0 [ 170.857451][ T9619] ? __pfx_ksys_read+0x10/0x10 [ 170.857480][ T9619] ? do_syscall_64+0xb6/0x230 [ 170.857508][ T9619] do_syscall_64+0xf3/0x230 [ 170.857533][ T9619] ? clear_bhb_loop+0x45/0xa0 [ 170.857557][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.857576][ T9619] RIP: 0033:0x7fce8e58bb7c [ 170.857594][ T9619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 170.857610][ T9619] RSP: 002b:00007fce8c3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.857632][ T9619] RAX: ffffffffffffffda RBX: 00007fce8e7a5fa0 RCX: 00007fce8e58bb7c [ 170.857646][ T9619] RDX: 000000000000000f RSI: 00007fce8c3f60a0 RDI: 0000000000000007 [ 170.857659][ T9619] RBP: 00007fce8c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.857671][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.857683][ T9619] R13: 0000000000000000 R14: 00007fce8e7a5fa0 R15: 00007ffccd1fe9a8 [ 170.857715][ T9619] [ 171.099532][ T9625] syzkaller1: entered allmulticast mode [ 171.180229][ T9625] __nla_validate_parse: 8 callbacks suppressed [ 171.180250][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 171.736966][ T9672] veth1_macvtap: left promiscuous mode [ 172.125030][ T9697] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 172.297685][ T9705] xt_socket: unknown flags 0x2 [ 172.326000][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1113'. [ 172.355973][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1113'. [ 172.855472][ T9740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.866019][ T9740] bond0: (slave bond6): Enslaving as an active interface with an up link [ 173.242742][ T9765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.288275][ T9765] bond0: (slave bond4): Enslaving as an active interface with an up link [ 173.304763][ T9773] netlink: 'syz.4.1128': attribute type 3 has an invalid length. [ 173.531324][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 173.666317][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 173.682690][ T9781] bridge: RTM_NEWNEIGH with invalid ether address [ 174.110474][ T9801] netlink: 'syz.4.1140': attribute type 11 has an invalid length. [ 174.134846][ T9801] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1140'. [ 174.220555][ T9812] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1141'. [ 174.452549][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 174.508440][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 174.629559][ T9833] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1149'. [ 175.321245][ T9879] veth0: entered promiscuous mode [ 175.372764][ T9878] veth0: left promiscuous mode [ 175.431094][ T9886] syzkaller1: entered promiscuous mode [ 175.447324][ T9886] syzkaller1: entered allmulticast mode [ 176.477750][ T9955] __nla_validate_parse: 6 callbacks suppressed [ 176.477770][ T9955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 176.572495][ T9961] xfrm2: entered allmulticast mode [ 176.593176][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 176.628408][ T9959] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 176.859656][ T9975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1193'. [ 176.896018][ T47] IPVS: starting estimator thread 0... [ 177.000870][ T9979] IPVS: using max 26 ests per chain, 62400 per kthread [ 177.383806][ T9985] tipc: Started in network mode [ 177.391810][ T9985] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 177.410240][ T9985] tipc: Enabled bearer , priority 10 [ 177.443612][ T9988] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.569670][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 177.579755][T10001] dccp_invalid_packet: invalid packet type [ 178.020456][T10023] macvlan2: entered promiscuous mode [ 178.152896][T10026] xt_TCPMSS: Only works on TCP SYN packets [ 178.230192][T10028] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 178.537093][ T5893] tipc: Node number set to 1 [ 179.463538][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1229'. [ 179.491894][T10079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1231'. [ 179.642062][T10086] netlink: 'syz.3.1234': attribute type 16 has an invalid length. [ 179.668193][T10088] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 179.768075][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.813949][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.918095][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.977212][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.007077][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.097135][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.167192][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.201343][T10123] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 180.220249][T10123] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 180.281063][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.318372][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 180.336986][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.477458][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.557543][T10147] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 181.483625][T10188] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 181.601035][T10193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1263'. [ 181.641559][T10193] Bluetooth: MGMT ver 1.23 [ 181.964648][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1266'. [ 182.204005][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1268'. [ 182.249632][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1268'. [ 182.318939][T10209] gretap1: entered promiscuous mode [ 182.334519][T10209] gretap1: entered allmulticast mode [ 182.421555][T10220] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1271'. [ 182.530710][T10215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.696087][T10236] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 182.870313][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 182.895268][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 182.914181][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 182.924945][T10247] netlink: 'syz.2.1281': attribute type 5 has an invalid length. [ 183.228540][T10260] netlink: 'syz.2.1287': attribute type 12 has an invalid length. [ 183.310453][T10215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.468887][T10215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.479395][T10275] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 183.602938][T10275] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.735378][T10215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.779778][T10290] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1295'. [ 183.830265][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 183.974652][T10215] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.999784][T10215] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.033325][T10215] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.060505][T10215] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.079393][T10213] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.152670][T10213] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.245907][T10213] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.311352][T10213] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.353842][T10309] bridge_slave_1: left allmulticast mode [ 184.360526][T10309] bridge_slave_1: left promiscuous mode [ 184.366349][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.389825][T10309] bridge_slave_0: left allmulticast mode [ 184.396046][T10309] bridge_slave_0: left promiscuous mode [ 184.411725][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.784524][T10336] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 185.231648][T10369] netlink: 'syz.2.1319': attribute type 6 has an invalid length. [ 185.243670][T10369] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 185.799090][T10406] netlink: 'syz.3.1329': attribute type 2 has an invalid length. [ 186.056395][T10418] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.074837][T10418] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.083852][T10418] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.095224][T10418] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.104616][T10418] geneve3: entered promiscuous mode [ 186.110650][T10418] geneve3: entered allmulticast mode [ 186.118688][T10418] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.127719][T10418] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.138076][T10418] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.147125][T10418] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.344618][T10431] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 186.353753][T10432] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 186.368545][T10432] syz_tun: entered promiscuous mode [ 186.391289][T10432] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.686270][T10447] __nla_validate_parse: 12 callbacks suppressed [ 186.686290][T10447] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1343'. [ 186.702914][T10446] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1343'. [ 187.031225][T10465] netlink: 'syz.2.1350': attribute type 29 has an invalid length. [ 187.053589][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 187.081632][T10465] netlink: 'syz.2.1350': attribute type 29 has an invalid length. [ 187.096481][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 187.284515][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1356'. [ 187.305427][T10482] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 187.330556][T10213] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.379067][T10213] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.387441][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1358'. [ 187.387478][T10484] netlink: 'syz.3.1358': attribute type 7 has an invalid length. [ 187.387496][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 187.484703][T10213] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.502251][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 187.512622][T10486] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 187.542237][T10489] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 187.542835][T10486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1359'. [ 187.569212][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 187.575797][T10213] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.101946][T10517] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 188.444283][T10548] ip6gre2: entered allmulticast mode [ 188.828995][T10570] FAULT_INJECTION: forcing a failure. [ 188.828995][T10570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.872904][T10570] CPU: 1 UID: 0 PID: 10570 Comm: syz.4.1384 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 188.872936][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.872948][T10570] Call Trace: [ 188.872956][T10570] [ 188.872964][T10570] dump_stack_lvl+0x241/0x360 [ 188.873002][T10570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.873031][T10570] ? __pfx__printk+0x10/0x10 [ 188.873072][T10570] should_fail_ex+0x424/0x570 [ 188.873098][T10570] _copy_from_user+0x2d/0xb0 [ 188.873129][T10570] move_addr_to_kernel+0x7f/0x170 [ 188.873157][T10570] __sys_connect+0xb8/0x2d0 [ 188.873195][T10570] ? __fget_files+0x2a/0x420 [ 188.873214][T10570] ? __pfx___sys_connect+0x10/0x10 [ 188.873270][T10570] __x64_sys_connect+0x7a/0x90 [ 188.873301][T10570] do_syscall_64+0xf3/0x230 [ 188.873327][T10570] ? clear_bhb_loop+0x45/0xa0 [ 188.873351][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.873370][T10570] RIP: 0033:0x7fce8e58d169 [ 188.873387][T10570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.873404][T10570] RSP: 002b:00007fce8c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 188.873425][T10570] RAX: ffffffffffffffda RBX: 00007fce8e7a5fa0 RCX: 00007fce8e58d169 [ 188.873439][T10570] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000004 [ 188.873452][T10570] RBP: 00007fce8c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.873464][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.873475][T10570] R13: 0000000000000000 R14: 00007fce8e7a5fa0 R15: 00007ffccd1fe9a8 [ 188.873507][T10570] [ 189.173999][T10582] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.224134][T10582] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 189.241458][T10591] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 190.022903][T10603] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 190.573101][T10661] netem: incorrect gi model size [ 190.578640][T10661] netem: change failed [ 190.888653][T10679] tipc: Enabled bearer , priority 10 [ 191.035219][T10686] "syz.3.1423" (10686) uses obsolete ecb(arc4) skcipher [ 191.520072][T10715] x_tables: duplicate underflow at hook 1 [ 191.800160][T10728] __nla_validate_parse: 12 callbacks suppressed [ 191.800181][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 191.839741][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 191.914376][T10728] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.011025][T10739] validate_nla: 4 callbacks suppressed [ 192.011049][T10739] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 192.037479][ T5851] Bluetooth: hci0: command tx timeout [ 192.089346][T10728] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.251318][T10728] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.362533][T10728] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.559356][T10728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.621333][T10728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.664691][T10728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.703019][T10728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.734412][T10796] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.833077][T10797] macvlan2: entered promiscuous mode [ 192.868181][T10797] macvlan2: entered allmulticast mode [ 192.889734][T10797] batadv0: entered promiscuous mode [ 192.906427][T10797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.943914][T10797] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 193.157457][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1461'. [ 193.421944][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1466'. [ 193.463799][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1466'. [ 193.577872][T10842] sctp: [Deprecated]: syz.3.1468 (pid 10842) Use of int in max_burst socket option. [ 193.577872][T10842] Use struct sctp_assoc_value instead [ 193.832525][T10857] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1471'. [ 193.836259][T10855] nbd: couldn't find a device at index 8960 [ 193.856103][T10857] ï‰Oܼ: renamed from hsr0 (while UP) [ 193.899253][T10857] ï‰Oܼ: entered promiscuous mode [ 193.905534][T10857] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 194.050090][T10863] syz_tun: entered promiscuous mode [ 194.064373][T10863] syz_tun: left promiscuous mode [ 194.096541][T10868] x_tables: duplicate underflow at hook 2 [ 194.110074][T10866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 194.260158][T10874] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1477'. [ 194.278435][T10874] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1477'. [ 194.661392][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1486'. [ 194.728708][T10908] raw_sendmsg: syz.2.1487 forgot to set AF_INET. Fix it! [ 194.761671][T10903] pim6reg1: entered promiscuous mode [ 194.774714][T10903] pim6reg1: entered allmulticast mode [ 194.800923][T10910] tap0: tun_chr_ioctl cmd 2148553947 [ 194.902914][T10917] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 194.973732][T10920] IPVS: Unknown mcast interface: vcan0 [ 195.664510][ T1098] tipc: Subscription rejected, illegal request [ 195.884591][T10964] delete_channel: no stack [ 196.355289][T11003] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 196.402113][T11005] netlink: 'syz.4.1517': attribute type 18 has an invalid length. [ 196.535534][T11008] No such timeout policy "syz0" [ 196.825356][T11030] __nla_validate_parse: 6 callbacks suppressed [ 196.825376][T11030] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1525'. [ 196.848197][T11034] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 196.881309][T11029] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1525'. [ 197.271996][T11059] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 197.285775][T11060] openvswitch: netlink: Key type 2822 is out of range max 32 [ 197.366178][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1532'. [ 197.438452][T11067] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1536'. [ 197.594424][T11078] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1539'. [ 197.605816][T11080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1539'. [ 197.720138][T11083] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 197.870878][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 198.305549][T11112] sctp: [Deprecated]: syz.4.1546 (pid 11112) Use of int in max_burst socket option. [ 198.305549][T11112] Use struct sctp_assoc_value instead [ 198.613690][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 198.847111][T11134] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 198.871448][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 198.895792][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 199.346450][T11159] netlink: 'syz.0.1560': attribute type 2 has an invalid length. [ 199.372606][T11159] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 199.429763][T11159] netlink: 'syz.0.1560': attribute type 1 has an invalid length. [ 199.483462][T11159] netlink: 'syz.0.1560': attribute type 2 has an invalid length. [ 199.521363][T11159] netlink: 'syz.0.1560': attribute type 2 has an invalid length. [ 199.551228][T11174] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 199.753734][T11183] vlan3: entered allmulticast mode [ 199.787507][T11183] bond0: entered allmulticast mode [ 199.792698][T11183] bond_slave_0: entered allmulticast mode [ 199.806267][T11183] bond_slave_1: entered allmulticast mode [ 199.824379][T11183] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 199.849127][T11183] bond1: entered allmulticast mode [ 199.854774][T11183] bond6: entered allmulticast mode [ 199.861379][T11183] syz_tun: entered allmulticast mode [ 199.868934][T11183] bridge0: port 3(vlan3) entered blocking state [ 199.876087][T11183] bridge0: port 3(vlan3) entered disabled state [ 199.887723][T11183] vlan3: entered promiscuous mode [ 199.892800][T11183] bond0: entered promiscuous mode [ 199.898005][T11183] bond_slave_0: entered promiscuous mode [ 199.903916][T11183] bond_slave_1: entered promiscuous mode [ 199.910535][T11183] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 199.917968][T11183] bond1: entered promiscuous mode [ 199.923244][T11183] bond6: entered promiscuous mode [ 199.929999][T11183] bridge0: port 3(vlan3) entered blocking state [ 199.937769][T11183] bridge0: port 3(vlan3) entered forwarding state [ 200.008580][T11192] sch_fq: defrate 0 ignored. [ 200.664265][T11237] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 200.913545][T11251] team0: left allmulticast mode [ 200.920325][T11251] team0: left promiscuous mode [ 200.933906][T11251] bridge0: port 1(team0) entered disabled state [ 201.998884][T11314] syzkaller1: entered promiscuous mode [ 202.005268][T11314] syzkaller1: entered allmulticast mode [ 202.030108][T11316] dvmrp0: entered allmulticast mode [ 202.143144][T11322] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 202.151991][T11322] netlink: 'syz.3.1612': attribute type 4 has an invalid length. [ 202.161131][T11322] __nla_validate_parse: 13 callbacks suppressed [ 202.161148][T11322] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1612'. [ 202.179653][ T5893] IPVS: starting estimator thread 0... [ 202.274362][T11326] IPVS: using max 37 ests per chain, 88800 per kthread [ 202.283339][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 202.295256][T11331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 202.736124][T11362] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 202.754810][T11362] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 202.769519][T11360] netlink: 'syz.0.1622': attribute type 13 has an invalid length. [ 202.777871][T11362] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 202.823854][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 202.836054][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 202.888582][T11370] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 202.895415][T11370] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 202.915794][T11373] netlink: 'syz.3.1626': attribute type 10 has an invalid length. [ 202.996451][T11373] team0: Device veth0_vlan is already a lower device of the team interface [ 203.704146][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 203.745160][T11418] ipt_ECN: cannot use operation on non-tcp rule [ 203.780386][T11418] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1641'. [ 203.881412][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 204.040346][T11432] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1649'. [ 204.359534][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 204.493372][T11461] netlink: 'syz.4.1660': attribute type 4 has an invalid length. [ 204.645009][T11472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.732411][T11482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1665'. [ 204.854070][T11487] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 204.899560][T11487] team0: Device veth1_macvtap failed to register rx_handler [ 205.081663][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.089553][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.331428][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.382669][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.531381][T11490] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.545475][T11490] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.576666][T11490] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.595478][T11490] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.734920][T11490] macvlan2: left promiscuous mode [ 205.783773][T11490] bridge3: left promiscuous mode [ 205.815466][T11497] tap0: tun_chr_ioctl cmd 1074025672 [ 205.825544][T11497] tap0: ignored: set checksum disabled [ 206.134701][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 206.234105][T11555] netlink: 'syz.1.1684': attribute type 142 has an invalid length. [ 206.500093][T11583] bond0: option mode: unable to set because the bond device has slaves [ 207.052030][T11613] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 207.107583][T11608] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 207.151270][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.174134][T11613] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.192711][T11620] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1703'. [ 207.205905][T11620] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 207.241822][T11620] 0ªî{X¹¦: entered allmulticast mode [ 207.252064][T11620] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 207.273816][ T30] audit: type=1800 audit(1744337592.671:5): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1705" name="memory.events" dev="tmpfs" ino=1919 res=0 errno=0 [ 207.300503][T11627] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 207.336538][ T30] audit: type=1804 audit(1744337592.671:6): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1705" name="/newroot/372/memory.events" dev="tmpfs" ino=1919 res=1 errno=0 [ 207.340653][T11627] netlink: 'syz.2.1706': attribute type 2 has an invalid length. [ 207.420640][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 207.452234][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1707'. [ 207.742560][T11654] Cannot find del_set index 4 as target [ 207.850414][T11660] x_tables: duplicate underflow at hook 2 [ 207.940914][T11671] sch_fq: defrate 0 ignored. [ 207.957350][T11672] sch_fq: defrate 0 ignored. [ 207.988563][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1717'. [ 208.318230][T11684] bond0: (slave bond_slave_0): Releasing backup interface [ 208.346512][T11684] bond0: (slave bond_slave_1): Releasing backup interface [ 208.428938][T11684] team0: Port device team_slave_0 removed [ 208.453677][T11690] validate_nla: 128 callbacks suppressed [ 208.453693][T11690] netlink: 'syz.2.1724': attribute type 13 has an invalid length. [ 208.462524][T11684] team0: Port device team_slave_1 removed [ 208.484904][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1724'. [ 208.492439][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.502391][T11684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.511490][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.519381][T11684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.532384][T11684] bond0: (slave netdevsim0): Releasing backup interface [ 208.559239][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 208.569392][T11684] bond3: (slave ip6tnl2): Releasing backup interface [ 208.587351][T11684] bond0: (slave bond4): Releasing backup interface [ 208.612449][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1725'. [ 208.627971][ T9] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 208.627988][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.661134][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 208.688761][T11690] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 208.828342][T11695] team0 (unregistering): Port device C removed [ 208.858620][T11706] netlink: 'syz.4.1727': attribute type 8 has an invalid length. [ 208.889034][T11695] team0 (unregistering): Port device team_slave_1 removed [ 208.967444][T11695] bridge0: port 3(vlan3) entered disabled state [ 208.982816][T11695] team0 (unregistering): Port device bond0 removed [ 208.991170][T11695] team0 (unregistering): Port device vlan0 removed [ 209.097591][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 209.329397][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 209.342766][T11728] bridge_slave_1: left allmulticast mode [ 209.351563][T11728] bridge_slave_1: left promiscuous mode [ 209.362199][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.374666][T11728] bridge_slave_0: left allmulticast mode [ 209.384662][T11728] bridge_slave_0: left promiscuous mode [ 209.391099][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.400238][T11736] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 209.717691][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.411359][T11774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.432700][T11774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.689489][T11783] vlan3 (unregistering): left promiscuous mode [ 210.695900][T11783] bond0 (unregistering): left promiscuous mode [ 210.708367][T11783] bond_slave_0: left promiscuous mode [ 210.714170][T11783] bond_slave_1: left promiscuous mode [ 210.724530][T11783] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 210.732896][T11783] bond1: left promiscuous mode [ 210.738951][T11783] bond6: left promiscuous mode [ 210.744635][T11783] bridge0: port 3(vlan3) entered disabled state [ 210.763907][T11783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.775151][T11783] bond_slave_0: left allmulticast mode [ 210.809858][T11783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.822178][T11783] bond_slave_1: left allmulticast mode [ 210.841579][T11783] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 210.850716][T11783] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 210.878702][T11783] bond0 (unregistering): (slave bond1): Releasing backup interface [ 210.887672][T11783] bond1: left allmulticast mode [ 210.898548][T11783] bond0 (unregistering): (slave bond6): Releasing backup interface [ 210.911705][T11783] bond6: left allmulticast mode [ 210.924950][T11783] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 210.937898][T11783] syz_tun: left allmulticast mode [ 210.947321][T11783] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 210.963099][T11783] batadv0: left promiscuous mode [ 210.976219][T11783] bond0 (unregistering): Released all slaves [ 211.002640][T11781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.055160][T11774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.086325][T11774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.209298][T11774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.220699][T11774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.314360][T11774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.326023][T11774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.637218][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 211.642688][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 211.643260][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 211.982235][T11834] xt_policy: neither incoming nor outgoing policy selected [ 212.096584][T11845] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 212.420974][T11863] bond0: (slave team0): Releasing backup interface [ 212.477550][T11863] bond0: (slave wlan1): Releasing backup interface [ 212.950644][T11894] __nla_validate_parse: 8 callbacks suppressed [ 212.950676][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 212.974627][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1791'. [ 212.992898][T11894] tc_dump_action: action bad kind [ 213.262366][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1796'. [ 213.281377][T11915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1796'. [ 213.370659][T11929] Driver unsupported XDP return value 0 on prog (id 568) dev N/A, expect packet loss! [ 213.388088][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 213.592669][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 213.721529][T11947] xt_hashlimit: overflow, rate too high: 0 [ 213.771112][T11950] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1809'. [ 214.062169][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 214.238920][T11979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1817'. [ 214.381256][T11986] syz.4.1823: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.428571][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 214.438972][T11986] CPU: 0 UID: 0 PID: 11986 Comm: syz.4.1823 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 214.439021][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.439044][T11986] Call Trace: [ 214.439058][T11986] [ 214.439074][T11986] dump_stack_lvl+0x241/0x360 [ 214.439116][T11986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.439148][T11986] ? __pfx__printk+0x10/0x10 [ 214.439177][T11986] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.439213][T11986] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.439244][T11986] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 214.439279][T11986] warn_alloc+0x27c/0x410 [ 214.439300][T11986] ? is_mmconf_reserved+0x3a1/0x3f0 [ 214.439325][T11986] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 214.439348][T11986] ? __pfx_warn_alloc+0x10/0x10 [ 214.439372][T11986] ? kasan_save_track+0x3f/0x80 [ 214.439395][T11986] ? __kasan_kmalloc+0x9d/0xb0 [ 214.439421][T11986] ? xsk_setsockopt+0x449/0x840 [ 214.439439][T11986] ? do_sock_setsockopt+0x3b1/0x710 [ 214.439468][T11986] ? __x64_sys_setsockopt+0x1ee/0x280 [ 214.439490][T11986] ? do_syscall_64+0xf3/0x230 [ 214.439518][T11986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.439553][T11986] __vmalloc_node_range_noprof+0x128/0x1390 [ 214.439612][T11986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.439641][T11986] ? __kasan_kmalloc+0x9d/0xb0 [ 214.439675][T11986] vmalloc_user_noprof+0x74/0x80 [ 214.439698][T11986] ? xskq_create+0xb6/0x170 [ 214.439719][T11986] xskq_create+0xb6/0x170 [ 214.439746][T11986] xsk_init_queue+0xa1/0x100 [ 214.439773][T11986] xsk_setsockopt+0x449/0x840 [ 214.439799][T11986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.439819][T11986] ? __lock_acquire+0xad5/0xd80 [ 214.439843][T11986] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.439878][T11986] ? aa_sock_opt_perm+0x79/0x120 [ 214.439916][T11986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.439936][T11986] do_sock_setsockopt+0x3b1/0x710 [ 214.439967][T11986] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.439988][T11986] ? __fget_files+0x2a/0x420 [ 214.440014][T11986] ? __fget_files+0x39d/0x420 [ 214.440032][T11986] ? __fget_files+0x2a/0x420 [ 214.440063][T11986] __x64_sys_setsockopt+0x1ee/0x280 [ 214.440095][T11986] do_syscall_64+0xf3/0x230 [ 214.440123][T11986] ? clear_bhb_loop+0x45/0xa0 [ 214.440151][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.440184][T11986] RIP: 0033:0x7fce8e58d169 [ 214.440205][T11986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.440223][T11986] RSP: 002b:00007fce8c3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.440247][T11986] RAX: ffffffffffffffda RBX: 00007fce8e7a5fa0 RCX: 00007fce8e58d169 [ 214.440263][T11986] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 214.440276][T11986] RBP: 00007fce8e60e990 R08: 0000000000000004 R09: 0000000000000000 [ 214.440290][T11986] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.440303][T11986] R13: 0000000000000000 R14: 00007fce8e7a5fa0 R15: 00007ffccd1fe9a8 [ 214.440338][T11986] [ 214.440347][T11986] Mem-Info: [ 214.526120][T11990] tipc: Started in network mode [ 214.606945][T11986] active_anon:4030 inactive_anon:0 isolated_anon:0 [ 214.606945][T11986] active_file:1318 inactive_file:38352 isolated_file:0 [ 214.606945][T11986] unevictable:768 dirty:53 writeback:0 [ 214.606945][T11986] slab_reclaimable:10917 slab_unreclaimable:99546 [ 214.606945][T11986] mapped:28361 shmem:1417 pagetables:759 [ 214.606945][T11986] sec_pagetables:0 bounce:0 [ 214.606945][T11986] kernel_misc_reclaimable:0 [ 214.606945][T11986] free:1338563 free_pcp:1057 free_cma:0 [ 214.607011][T11986] Node 0 active_anon:16120kB inactive_anon:0kB active_file:5272kB inactive_file:153336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113444kB dirty:212kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:3036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.607072][T11986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.607127][T11986] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.607189][T11986] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 214.607242][T11986] Node 0 DMA32 free:1432480kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:16112kB inactive_anon:0kB active_file:5272kB inactive_file:153236kB unevictable:1536kB writepending:212kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:4228kB local_pcp:1724kB free_cma:0kB [ 214.629907][T11990] tipc: Node identity ac14140f, cluster identity 4711 [ 214.694177][T11986] lowmem_reserve[]: [ 214.710054][T11990] tipc: New replicast peer: 255.255.255.255 [ 214.765283][T11986] 0 [ 214.775707][T11990] tipc: Enabled bearer , priority 10 [ 214.984101][T11986] 0 0 0 0 [ 214.987356][T11986] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.027284][T11986] lowmem_reserve[]: 0 0 0 0 0 [ 215.032176][T11986] Node 1 Normal free:3906412kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.080813][T11986] lowmem_reserve[]: 0 0 0 0 0 [ 215.085930][T11986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.100053][T11986] Node 0 DMA32: 330*4kB (UME) 396*8kB (UME) 172*16kB (UME) 236*32kB (UME) 261*64kB (UME) 96*128kB (UME) 48*256kB (UM) 36*512kB (UM) 18*1024kB (UM) 6*2048kB (UM) 324*4096kB (UME) = 1432328kB [ 215.165639][T11986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.211037][T11986] Node 1 Normal: 233*4kB (UE) 43*8kB (UME) 43*16kB (UME) 192*32kB (UME) 85*64kB (UME) 29*128kB (UME) 14*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906412kB [ 215.253090][T12019] sctp: [Deprecated]: syz.2.1829 (pid 12019) Use of int in max_burst socket option. [ 215.253090][T12019] Use struct sctp_assoc_value instead [ 215.254206][T11986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.308067][T11986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.349986][T11986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.406977][T11986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.416482][T11986] 41090 total pagecache pages [ 215.452676][T11986] 0 pages in swap cache [ 215.461254][T11986] Free swap = 124996kB [ 215.476484][T11986] Total swap = 124996kB [ 215.495065][T11986] 2097051 pages RAM [ 215.505172][T11986] 0 pages HighMem/MovableOnly [ 215.512707][T11986] 428581 pages reserved [ 215.541069][T11986] 0 pages cma reserved [ 215.561248][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 215.631126][T12038] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:21 [ 215.897321][ T24] tipc: Node number set to 2886997007 [ 216.045375][T12066] tipc: Enabling of bearer rejected, failed to enable media [ 216.970515][T12124] netlink: 'syz.2.1859': attribute type 33 has an invalid length. [ 217.510654][T12148] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 217.795020][T12158] tipc: Enabled bearer , priority 0 [ 217.897973][T12166] netlink: 'syz.3.1875': attribute type 21 has an invalid length. [ 217.977882][T12173] Bluetooth: MGMT ver 1.23 [ 217.993268][T12173] __nla_validate_parse: 10 callbacks suppressed [ 217.993294][T12173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1876'. [ 218.393841][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 218.632725][T12210] tipc: Enabling of bearer rejected, failed to enable media [ 218.649095][T12210] syzkaller0: entered promiscuous mode [ 218.654642][T12210] syzkaller0: entered allmulticast mode [ 218.739053][T12218] pimreg: entered allmulticast mode [ 218.779415][T12222] bond0: entered promiscuous mode [ 218.965803][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1893'. [ 219.085706][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'. [ 219.096333][T12241] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1892'. [ 219.132512][T12241] ï‰Oܼ: renamed from hsr0 (while UP) [ 219.178050][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1896'. [ 219.206199][T12241] ï‰Oܼ: entered promiscuous mode [ 219.251769][T12241] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 219.340750][T12255] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 219.888435][T12289] tipc: Enabling of bearer rejected, failed to enable media [ 219.941211][T12289] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 219.993596][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1910'. [ 220.173329][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 220.419431][T12323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1921'. [ 220.636641][T12339] netlink: 'syz.3.1926': attribute type 4 has an invalid length. [ 220.724685][T12346] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 221.038636][T12359] vlan2: entered promiscuous mode [ 221.044851][T12359] vlan2: entered allmulticast mode [ 221.055222][T12359] hsr_slave_1: entered allmulticast mode [ 221.074246][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 221.504165][T12387] netlink: 'syz.3.1939': attribute type 4 has an invalid length. [ 221.709983][T12401] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 221.980364][T12415] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 221.998475][T12415] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 222.156586][T12417] netlink: 'syz.3.1947': attribute type 21 has an invalid length. [ 222.182556][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.198115][T12417] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.211098][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.236258][T12417] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 222.249911][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.264676][T12422] netlink: 'syz.1.1950': attribute type 11 has an invalid length. [ 222.323664][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.402477][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.445138][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.449326][T12436] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 222.472416][T12424] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 222.818564][ T5851] Bluetooth: hci4: link tx timeout [ 222.823962][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 222.856080][T12449] netlink: 'syz.2.1958': attribute type 3 has an invalid length. [ 223.046071][T12462] __nla_validate_parse: 7 callbacks suppressed [ 223.046092][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 223.238816][T12471] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1964'. [ 223.279281][T12471] veth1_macvtap: left promiscuous mode [ 223.450851][T12483] netlink: 'syz.0.1968': attribute type 2 has an invalid length. [ 223.735675][T12486] infiniband syz0: set down [ 223.741081][T12486] infiniband syz0: added bond_slave_1 [ 223.839589][T12486] RDS/IB: syz0: added [ 223.844340][T12486] smc: adding ib device syz0 with port count 1 [ 223.857883][T12486] smc: ib device syz0 port 1 has pnetid [ 223.889840][T12503] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 223.925881][T12503] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 223.949191][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1972'. [ 223.994977][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 224.018924][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 224.164020][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 224.187913][T12512] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1975'. [ 224.215900][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 224.257309][T12511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1976'. [ 224.319227][T12512] net_ratelimit: 247 callbacks suppressed [ 224.319249][T12512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.422919][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 224.844251][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 225.117812][T12556] xt_policy: too many policy elements [ 225.763008][T12583] nbd: must specify a device to reconfigure [ 226.011816][T12593] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 226.030029][T12593] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 226.235657][T12601] tipc: Trying to set illegal importance in message [ 226.586915][T12620] netlink: 'syz.2.2011': attribute type 23 has an invalid length. [ 227.398032][T12653] xt_CT: No such helper "pptp" [ 227.902381][T12673] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 228.181823][T12698] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 228.633969][T12733] SET target dimension over the limit! [ 228.645160][T12734] SET target dimension over the limit! [ 228.653637][T12733] __nla_validate_parse: 13 callbacks suppressed [ 228.653654][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 228.931099][T12744] x_tables: ip_tables: osf match: only valid for protocol 6 [ 229.158140][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 229.313196][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'. [ 229.470645][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 229.608786][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 229.755204][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 230.417750][T12835] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 230.425843][T12835] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2078'. [ 230.455562][T12835] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 230.472044][T12843] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 230.581444][T12849] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2076'. [ 230.592422][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 230.738149][T12859] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2081'. [ 230.761476][T12859] netlink: zone id is out of range [ 230.767841][T12859] netlink: get zone limit has 8 unknown bytes [ 230.937845][T12871] bond0: (slave bond_slave_0): Releasing backup interface [ 230.973635][T12871] bond0: (slave bond_slave_1): Releasing backup interface [ 231.009503][T12871] team0: Port device team_slave_0 removed [ 231.062366][T12871] team0: Port device team_slave_1 removed [ 231.075932][T12871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.141766][T12871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.283450][T12885] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 231.929969][T12919] tunl0: entered promiscuous mode [ 231.948884][T12919] netlink: 'syz.3.2101': attribute type 3 has an invalid length. [ 232.027510][T12931] netlink: 'syz.0.2102': attribute type 2 has an invalid length. [ 232.159724][T12939] openvswitch: netlink: Message has 3 unknown bytes. [ 232.178238][T12939] openvswitch: netlink: Actions may not be safe on all matching packets [ 232.592839][T12968] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 232.644046][T12968] bond0: (slave macvlan3): Opening slave failed [ 233.526102][T13021] xt_bpf: check failed: parse error [ 233.716644][T13024] sock: sock_set_timeout: `syz.4.2132' (pid 13024) tries to set negative timeout [ 234.251816][T13060] netlink: 'syz.1.2139': attribute type 4 has an invalid length. [ 234.423262][T13070] dvmrp0: left allmulticast mode [ 234.462459][T13072] netlink: 'syz.0.2144': attribute type 4 has an invalid length. [ 234.484346][T13072] __nla_validate_parse: 16 callbacks suppressed [ 234.484365][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 234.713484][T13085] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 234.780805][ T30] audit: type=1107 audit(1744337620.171:7): pid=13086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ö ' [ 235.032990][T13103] syzkaller0: create flow: hash 2641976508 index 2 [ 235.244683][T13098] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 235.293852][T13112] syzkaller0: delete flow: hash 2641976508 index 2 [ 235.591532][T13131] sctp: [Deprecated]: syz.3.2160 (pid 13131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.591532][T13131] Use struct sctp_sack_info instead [ 235.633863][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 235.648614][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 235.671531][T13131] netlink: 'syz.3.2160': attribute type 21 has an invalid length. [ 237.215328][T13131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2160'. [ 237.961215][T13209] Cannot find del_set index 4 as target [ 237.974808][T13209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2185'. [ 238.099287][T13216] veth0_to_hsr: entered promiscuous mode [ 238.142646][T13204] veth0_to_hsr: left promiscuous mode [ 238.288202][T13227] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2188'. [ 238.550005][T13227] bond0 (unregistering): Released all slaves [ 238.835694][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2195'. [ 239.540052][T13303] netlink: 'syz.4.2206': attribute type 23 has an invalid length. [ 239.550988][T13306] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 239.652272][T13308] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 239.675455][T13308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2209'. [ 239.800928][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 239.815802][T13312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 239.825781][T13310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 239.853047][T13310] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.858382][T13316] xt_socket: unknown flags 0x2 [ 239.866039][T13310] gretap2: entered promiscuous mode [ 239.872080][T13310] gretap2: entered allmulticast mode [ 239.888804][T13314] veth0_macvtap: left promiscuous mode [ 240.268488][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2221'. [ 240.715841][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 240.725691][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.821649][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 240.917310][ T3426] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 240.962173][T13380] x_tables: duplicate underflow at hook 2 [ 240.972422][T13380] x_tables: duplicate underflow at hook 2 [ 240.991518][T13380] x_tables: duplicate underflow at hook 2 [ 241.001625][T13380] x_tables: duplicate underflow at hook 2 [ 241.026584][T13380] x_tables: duplicate underflow at hook 2 [ 241.039058][T13380] x_tables: duplicate underflow at hook 2 [ 241.055261][T13380] x_tables: duplicate underflow at hook 2 [ 241.063823][T13380] x_tables: duplicate underflow at hook 2 [ 241.079761][T13380] x_tables: duplicate underflow at hook 2 [ 241.085662][T13380] x_tables: duplicate underflow at hook 2 [ 241.298650][T13401] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 241.311722][T13401] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 241.355589][T13401] ip6erspan0: entered promiscuous mode [ 241.403109][T13406] vlan3: entered promiscuous mode [ 241.430218][T13406] vlan3: entered allmulticast mode [ 241.619719][T13421] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2246'. [ 241.653456][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2244'. [ 241.671023][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 241.849218][T13442] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2248'. [ 242.414612][T13471] lo: entered promiscuous mode [ 242.431883][T13471] tunl0: entered promiscuous mode [ 242.460852][T13473] netlink: 'syz.3.2252': attribute type 1 has an invalid length. [ 242.467850][T13471] gre0: entered promiscuous mode [ 242.508822][T13471] gretap0: entered promiscuous mode [ 242.526567][T13471] erspan0: entered promiscuous mode [ 242.608426][T13471] ip_vti0: entered promiscuous mode [ 242.654642][T13477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.677366][T13479] netlink: 'syz.2.2256': attribute type 6 has an invalid length. [ 242.698826][T13474] syzkaller0: entered promiscuous mode [ 242.704431][T13474] syzkaller0: entered allmulticast mode [ 242.764170][T13473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.815862][T13475] bond8: (slave gretap0): making interface the new active one [ 242.829721][T13475] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 244.440680][T13504] netlink: 'syz.0.2263': attribute type 12 has an invalid length. [ 244.457684][T13504] netlink: 'syz.0.2263': attribute type 11 has an invalid length. [ 244.608630][T13518] nbd: nbd0 already in use [ 245.243915][T13557] __nla_validate_parse: 10 callbacks suppressed [ 245.243936][T13557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2280'. [ 245.272922][T13561] veth1_macvtap: left promiscuous mode [ 245.279617][T13561] macsec0: entered allmulticast mode [ 245.411720][T13571] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.2285'. [ 245.550850][T13562] veth1_macvtap: entered promiscuous mode [ 245.562076][T13562] veth1_macvtap: entered allmulticast mode [ 245.569388][T13562] macsec0: left allmulticast mode [ 245.575226][T13562] veth1_macvtap: left allmulticast mode [ 245.869727][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2291'. [ 245.881124][T13599] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 245.932744][T13599] bond2: entered promiscuous mode [ 245.942472][T13599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.126505][T13615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2294'. [ 246.149776][T13614] netlink: 'syz.3.2297': attribute type 10 has an invalid length. [ 246.173160][T13615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2294'. [ 246.222673][T13615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2294'. [ 246.304928][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 246.578065][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 246.617678][T13644] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 246.626056][T13644] netlink: 'syz.1.2305': attribute type 10 has an invalid length. [ 246.652127][T13644] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2305'. [ 246.911226][T13660] bond7: entered promiscuous mode [ 246.930227][T13660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.974083][T13647] bridge5: entered promiscuous mode [ 246.984146][T13647] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 247.103707][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2311'. [ 247.471273][T13681] xt_l2tp: invalid flags combination: 4 [ 249.712859][T13750] netlink: 'syz.1.2330': attribute type 10 has an invalid length. [ 249.752375][T13750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.785222][T13750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.814591][T13750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.844199][T13750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.890904][T13750] team0: Port device geneve0 added [ 250.280512][T13762] __nla_validate_parse: 5 callbacks suppressed [ 250.280535][T13762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2336'. [ 250.315701][T13763] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2336'. [ 250.455749][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 250.484650][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2337'. [ 250.510615][T13775] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2340'. [ 250.557030][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2337'. [ 250.917554][T13792] netlink: 'syz.0.2343': attribute type 4 has an invalid length. [ 250.943344][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 250.971078][T13790] xt_hashlimit: overflow, rate too high: 0 [ 251.002489][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2344'. [ 251.038653][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 251.051769][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'. [ 251.498020][T13810] tipc: Enabled bearer , priority 0 [ 251.564082][T13810] gtp0: entered promiscuous mode [ 251.579479][T13810] gtp0: entered allmulticast mode [ 251.925657][T13834] macsec1: entered promiscuous mode [ 251.947122][T13834] gretap0: entered promiscuous mode [ 251.967770][T13834] gretap0: left promiscuous mode [ 252.371981][T13856] netlink: 'syz.2.2362': attribute type 10 has an invalid length. [ 252.433607][T13856] team0: Device veth1_macvtap failed to register rx_handler [ 252.871047][T13895] syz.2.2372 uses old SIOCAX25GETINFO [ 253.656652][T13928] tipc: New replicast peer: 255.255.255.255 [ 253.685412][T13928] tipc: Enabled bearer , priority 10 [ 254.517805][T13975] bond8: entered promiscuous mode [ 254.522917][T13975] bond8: entered allmulticast mode [ 254.529119][T13975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 254.895312][T13975] bond8 (unregistering): Released all slaves [ 255.101834][T14006] bridge6: entered promiscuous mode [ 255.108439][T14006] bridge6: entered allmulticast mode [ 255.125450][T14007] bridge7: entered promiscuous mode [ 255.131097][T14007] bridge7: entered allmulticast mode [ 255.238301][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.238301][T14011] Use struct sctp_assoc_value instead [ 255.256729][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.256729][T14011] Use struct sctp_assoc_value instead [ 255.303200][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.303200][T14011] Use struct sctp_assoc_value instead [ 255.335029][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.335029][T14011] Use struct sctp_assoc_value instead [ 255.371332][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.371332][T14011] Use struct sctp_assoc_value instead [ 255.403617][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.403617][T14011] Use struct sctp_assoc_value instead [ 255.443641][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.443641][T14011] Use struct sctp_assoc_value instead [ 255.490358][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.490358][T14011] Use struct sctp_assoc_value instead [ 255.523053][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.523053][T14011] Use struct sctp_assoc_value instead [ 255.577703][T14011] sctp: [Deprecated]: syz.1.2410 (pid 14011) Use of int in maxseg socket option. [ 255.577703][T14011] Use struct sctp_assoc_value instead [ 255.595332][T14032] __nla_validate_parse: 2 callbacks suppressed [ 255.595427][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2417'. [ 255.621802][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 255.697224][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 255.741422][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2420'. [ 255.978643][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 256.035692][T14064] IPVS: Unknown mcast interface: vcan0 [ 256.079849][T14071] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2423'. [ 256.274742][T14082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2432'. [ 256.577747][T14102] netlink: 'syz.0.2437': attribute type 11 has an invalid length. [ 257.290719][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'. [ 257.315168][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2448'. [ 257.354938][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 257.808818][ T1098] wlan0: Trigger new scan to find an IBSS to join [ 257.814268][T14170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 257.845944][T14176] vlan0: entered promiscuous mode [ 257.852053][T14176] bridge0: entered promiscuous mode [ 257.856050][ T1098] ------------[ cut here ]------------ [ 257.863831][ T1098] WARNING: CPU: 1 PID: 1098 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x735/0x7c0 [ 257.874380][ T1098] Modules linked in: [ 257.878802][ T1098] CPU: 1 UID: 0 PID: 1098 Comm: kworker/u8:6 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 257.891438][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.901572][ T1098] Workqueue: events_unbound cfg80211_wiphy_work [ 257.907929][ T1098] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 257.914743][ T1098] Code: e8 e0 2d 2b f6 eb 05 e8 d9 2d 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ca 2d 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 bc 2d 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 05 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 257.934789][ T1098] RSP: 0018:ffffc90003cb7880 EFLAGS: 00010293 [ 257.941653][ T1098] RAX: ffffffff8b982984 RBX: 0000000000000000 RCX: ffff8880275e0000 [ 257.949740][ T1098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.958077][ T1098] RBP: ffffc90003cb7ac0 R08: ffffffff8b98279e R09: 1ffff92000796ec0 [ 257.966100][ T1098] R10: dffffc0000000000 R11: fffff52000796ec1 R12: 0000000000000006 [ 257.974824][ T1098] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888028268e80 [ 257.983198][ T1098] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 257.992207][ T1098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.999464][ T1098] CR2: 00007fcc9e572c20 CR3: 00000000550ee000 CR4: 00000000003526f0 [ 258.007545][ T1098] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.015718][ T1098] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.023789][ T1098] Call Trace: [ 258.028006][ T1098] [ 258.030998][ T1098] ieee80211_ibss_work+0xe2b/0x14e0 [ 258.036256][ T1098] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 258.042263][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.047584][ T1098] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 258.053280][ T1098] ? ieee80211_iface_work+0x1050/0x1100 [ 258.059499][ T1098] ? rcu_is_watching+0x15/0xb0 [ 258.063587][T14179] netlink: 'syz.4.2463': attribute type 39 has an invalid length. [ 258.064291][ T1098] cfg80211_wiphy_work+0x2f0/0x490 [ 258.077348][ T1098] ? process_scheduled_works+0x9cb/0x18e0 [ 258.083107][ T1098] process_scheduled_works+0xac3/0x18e0 [ 258.089369][ T1098] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.095458][ T1098] ? assign_work+0x367/0x3d0 [ 258.100145][ T1098] worker_thread+0x870/0xd50 [ 258.104802][ T1098] ? __kthread_parkme+0x1a8/0x200 [ 258.109940][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 258.115096][ T1098] kthread+0x7b7/0x940 [ 258.120042][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 258.125211][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.129909][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.134545][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.139234][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.143877][ T1098] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.149772][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.155031][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.159726][ T1098] ret_from_fork+0x4b/0x80 [ 258.164181][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.168875][ T1098] ret_from_fork_asm+0x1a/0x30 [ 258.173695][ T1098] [ 258.177429][ T1098] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.184743][ T1098] CPU: 1 UID: 0 PID: 1098 Comm: kworker/u8:6 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 258.196585][ T1098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.206671][ T1098] Workqueue: events_unbound cfg80211_wiphy_work [ 258.212966][ T1098] Call Trace: [ 258.216286][ T1098] [ 258.219247][ T1098] dump_stack_lvl+0x241/0x360 [ 258.223974][ T1098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.229208][ T1098] ? __pfx__printk+0x10/0x10 [ 258.233824][ T1098] ? vscnprintf+0x5d/0x90 [ 258.238164][ T1098] panic+0x349/0x880 [ 258.242072][ T1098] ? __warn+0x174/0x4d0 [ 258.246241][ T1098] ? __pfx_panic+0x10/0x10 [ 258.250679][ T1098] ? ret_from_fork_asm+0x1a/0x30 [ 258.255627][ T1098] __warn+0x344/0x4d0 [ 258.259633][ T1098] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 258.265619][ T1098] report_bug+0x2b3/0x500 [ 258.269957][ T1098] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 258.275945][ T1098] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 258.281942][ T1098] ? ieee80211_request_ibss_scan+0x737/0x7c0 [ 258.287950][ T1098] handle_bug+0x89/0x170 [ 258.292206][ T1098] exc_invalid_op+0x1a/0x50 [ 258.296723][ T1098] asm_exc_invalid_op+0x1a/0x20 [ 258.301587][ T1098] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 258.308183][ T1098] Code: e8 e0 2d 2b f6 eb 05 e8 d9 2d 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ca 2d 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 bc 2d 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 05 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 258.327802][ T1098] RSP: 0018:ffffc90003cb7880 EFLAGS: 00010293 [ 258.333879][ T1098] RAX: ffffffff8b982984 RBX: 0000000000000000 RCX: ffff8880275e0000 [ 258.341853][ T1098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.349844][ T1098] RBP: ffffc90003cb7ac0 R08: ffffffff8b98279e R09: 1ffff92000796ec0 [ 258.357821][ T1098] R10: dffffc0000000000 R11: fffff52000796ec1 R12: 0000000000000006 [ 258.365798][ T1098] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888028268e80 [ 258.373782][ T1098] ? ieee80211_request_ibss_scan+0x54e/0x7c0 [ 258.379779][ T1098] ? ieee80211_request_ibss_scan+0x734/0x7c0 [ 258.385789][ T1098] ieee80211_ibss_work+0xe2b/0x14e0 [ 258.390987][ T1098] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 258.396885][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.402111][ T1098] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 258.407763][ T1098] ? ieee80211_iface_work+0x1050/0x1100 [ 258.413326][ T1098] ? rcu_is_watching+0x15/0xb0 [ 258.418102][ T1098] cfg80211_wiphy_work+0x2f0/0x490 [ 258.423234][ T1098] ? process_scheduled_works+0x9cb/0x18e0 [ 258.428965][ T1098] process_scheduled_works+0xac3/0x18e0 [ 258.434549][ T1098] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.440549][ T1098] ? assign_work+0x367/0x3d0 [ 258.445154][ T1098] worker_thread+0x870/0xd50 [ 258.449771][ T1098] ? __kthread_parkme+0x1a8/0x200 [ 258.454811][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 258.459929][ T1098] kthread+0x7b7/0x940 [ 258.464010][ T1098] ? __pfx_worker_thread+0x10/0x10 [ 258.469128][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.473818][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.478423][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.483024][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.487632][ T1098] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.492837][ T1098] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.498042][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.502643][ T1098] ret_from_fork+0x4b/0x80 [ 258.507075][ T1098] ? __pfx_kthread+0x10/0x10 [ 258.511781][ T1098] ret_from_fork_asm+0x1a/0x30 [ 258.516599][ T1098] [ 258.519886][ T1098] Kernel Offset: disabled [ 258.524212][ T1098] Rebooting in 86400 seconds..