last executing test programs: 2.494195227s ago: executing program 4 (id=2467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000001c0)={0x0, "af4988c7a3dde08f4667f8177b551cf7"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000008b000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) 2.393223488s ago: executing program 4 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0xb, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x4040080) 2.262991495s ago: executing program 0 (id=2473): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5, 0x6, "a2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x43, 0x6, "fb45712636d587c3779b0e37e72124d97c694d9da29829b0091d712ffc62ccf7e2a269d3f24fd6357fe47e30f641c0e55af2f77717be141d782bb051691c52"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELSET={0x354, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x234, 0x12, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2a}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9ac8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9efbfe227363d22a}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffff0001}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x376}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xd9}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x180, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x170, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5e, 0x3, "27ed063b5dfe7104d51d23c5d180cb406630adf593b924ae4c934a83d1e552cfbc9c87c29f1b1652430d4d4991d6f996ac384e9847280558b1dbd05a2e705bc23e3436ec99337325bf4d6ccb35ea3695dd76e984f7e543fd4060"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0xc1, 0x3, "6255974f15d36f52341a897e440e9e28c3fe9494df6efd01fe937964612214ea635e0547278dd55df1928745d57b73079bcc8c62b7ac8bf426b78e512a3cd0195199b4d70ada43421370ac15c5e7db679bcc42d72abfff1e933b5528fd04f6ba6e8acea5f9f13fbc6515075e6b07be1f28da6c6d978c32ebdc5946c348b53e6e773a0b927ffc2ac2a3a2dff0a95eb0708a526dd1ad1a902d947e9c9a348fc49ace9b46a610737ca7ead3530d5b9bfe25bf927563493efdb12d5aa3dd06"}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "d9e2304f29557ea2554c42962c57442a3fc5f3af1d97af60419a494d2b00f5a5fa66214394ab4a0fec7579c6274d5e4e75686aa22dfe7aca26c4cfc10026e47090e138835d3c59978200cb0e4c629b96d1805a45fe82ce67da27fb7365a14d692a9e7780ab1294cd7dfa7f600298101131cf369a3ff75f960b7cb0d33d5f56e399f23a038a2a87c6ea68bf1c7d461d999d019d918e199d9257ee2e6b30971766b4112aaff370c851d9aeb16045caa88d12f9d47a46bdf968c6ff"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x248, 0xb, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x8c, 0xd, 0x1, 0x0, "534d6def68c3a1455adca749b44ec8218e3411a0abeb94b2d841e57609521791960afadee6b2752649c6922e90294056dd05784cb3e7c307a5e32cfc8e37bc844a496e8060905411193b983e1335406deed4efd6ac213bed2c626ec90f4af515fb33a36f2f62e0d3ae01b4d1d05734d5aeff19ea8746de212f34a70a5529509f625b0c06b3909113"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x190, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x6c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x14, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x9f9e2c1294e8323}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "d6d728280bda8418fcd7492866cdfb96b1cb8ea97f9c5cc31bd8a12f8ac24b7657db60dae0b1bb5642f696e68191cabb8440121b08cc81e1d0a8be887fa0422eb9d9c923980530298fb207401e46d418051441f345c15270d8ef9a0a1a1ecddb1206d88a05a2938d2ab1f323ac230f4a9bb87326e7f577d6a09c71ab02e704f367b5a2610e61ea4230259de6"}, @NFTA_CHAIN_USERDATA={0x56, 0xc, "d0f97b4014b9ae2254064db0d6b7b93a854e16fda6d5f421bec2316b9352d6a3cb08cd5f12d9ba12e0966676f12eda40998cc474f228971fd057724cd79384618b3caeed9ea242e4560145d69724c911c2cc"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r3, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26", 0x40}, 0x3c) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5, 0x6, "a2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x43, 0x6, "fb45712636d587c3779b0e37e72124d97c694d9da29829b0091d712ffc62ccf7e2a269d3f24fd6357fe47e30f641c0e55af2f77717be141d782bb051691c52"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELSET={0x354, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x234, 0x12, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2a}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9ac8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9efbfe227363d22a}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffff0001}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x376}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xd9}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x180, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x170, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5e, 0x3, "27ed063b5dfe7104d51d23c5d180cb406630adf593b924ae4c934a83d1e552cfbc9c87c29f1b1652430d4d4991d6f996ac384e9847280558b1dbd05a2e705bc23e3436ec99337325bf4d6ccb35ea3695dd76e984f7e543fd4060"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0xc1, 0x3, "6255974f15d36f52341a897e440e9e28c3fe9494df6efd01fe937964612214ea635e0547278dd55df1928745d57b73079bcc8c62b7ac8bf426b78e512a3cd0195199b4d70ada43421370ac15c5e7db679bcc42d72abfff1e933b5528fd04f6ba6e8acea5f9f13fbc6515075e6b07be1f28da6c6d978c32ebdc5946c348b53e6e773a0b927ffc2ac2a3a2dff0a95eb0708a526dd1ad1a902d947e9c9a348fc49ace9b46a610737ca7ead3530d5b9bfe25bf927563493efdb12d5aa3dd06"}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "d9e2304f29557ea2554c42962c57442a3fc5f3af1d97af60419a494d2b00f5a5fa66214394ab4a0fec7579c6274d5e4e75686aa22dfe7aca26c4cfc10026e47090e138835d3c59978200cb0e4c629b96d1805a45fe82ce67da27fb7365a14d692a9e7780ab1294cd7dfa7f600298101131cf369a3ff75f960b7cb0d33d5f56e399f23a038a2a87c6ea68bf1c7d461d999d019d918e199d9257ee2e6b30971766b4112aaff370c851d9aeb16045caa88d12f9d47a46bdf968c6ff"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x248, 0xb, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x8c, 0xd, 0x1, 0x0, "534d6def68c3a1455adca749b44ec8218e3411a0abeb94b2d841e57609521791960afadee6b2752649c6922e90294056dd05784cb3e7c307a5e32cfc8e37bc844a496e8060905411193b983e1335406deed4efd6ac213bed2c626ec90f4af515fb33a36f2f62e0d3ae01b4d1d05734d5aeff19ea8746de212f34a70a5529509f625b0c06b3909113"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x190, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x6c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x14, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x9f9e2c1294e8323}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "d6d728280bda8418fcd7492866cdfb96b1cb8ea97f9c5cc31bd8a12f8ac24b7657db60dae0b1bb5642f696e68191cabb8440121b08cc81e1d0a8be887fa0422eb9d9c923980530298fb207401e46d418051441f345c15270d8ef9a0a1a1ecddb1206d88a05a2938d2ab1f323ac230f4a9bb87326e7f577d6a09c71ab02e704f367b5a2610e61ea4230259de6"}, @NFTA_CHAIN_USERDATA={0x56, 0xc, "d0f97b4014b9ae2254064db0d6b7b93a854e16fda6d5f421bec2316b9352d6a3cb08cd5f12d9ba12e0966676f12eda40998cc474f228971fd057724cd79384618b3caeed9ea242e4560145d69724c911c2cc"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC(r3, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26", 0x40}, 0x3c) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, 0x8) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) (async) 2.186098006s ago: executing program 4 (id=2474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="ebe0e9b713fc0cb227a94d1a8cb1d93806000000fcffff70113700000000008510000002000000850000000700000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe08, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="0800a0000700000008009f00070000000800260085160000"], 0x34}}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.877239879s ago: executing program 4 (id=2478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000040)="05000000010001", 0x7) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xb8825000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$unix(r5, 0x0, &(0x7f0000000140), 0x800) connect$unix(r6, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'nr0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001900000102ff09001a000006001c004e220000000000000000000000caf648d2078c2bb9ffbd237668e19db85b2a114826378521aadd7cd0f643c28af40ad6aea589ac330c812a9a916317f5b827b224ad4ced4b683896e9ae2f37c0f764b7140e120db6310dc0c3047348731b4547"], 0x24}}, 0x20008000) 1.738841234s ago: executing program 0 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x201, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x881) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x34, r4, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x0, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bind$rose(r6, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 1.418212659s ago: executing program 4 (id=2482): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r0, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfff1}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x2f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050230000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200009078e100"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r7, 0x26}, 0x10) close(r8) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000000000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a31000000000500010007"], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYRES8=r9], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.22711679s ago: executing program 2 (id=2484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x4, 0x36ea, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x8, 0x101, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x18, 0x2b445ed8, 0x2, 0x8, 0x2008, r3, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 1.226537838s ago: executing program 3 (id=2485): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @local, [], "1b8d2069fb2baf34"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001009266726d000000001400028008000200010000000100008000000000d758cbf010a7397afccc8e"], 0x44}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @local, [], "1b8d2069fb2baf34"}}}}}}}, 0x0) (async) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001009266726d000000001400028008000200010000000100008000000000d758cbf010a7397afccc8e"], 0x44}}, 0x0) (async) 1.143361202s ago: executing program 1 (id=2486): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000007000000140001800500020001000000080006001a00000000"], 0x28}}, 0x2) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000007000000140001800500020001000000080006001a00000000"], 0x28}}, 0x2) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.092718673s ago: executing program 0 (id=2487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xb, 0x1, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x2, 0x5, 0x0, 0x100, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000200)='GPL\x00', 0x3, 0x67, &(0x7f0000000240)=""/103, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2bd40, r0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x1, 0x1, 0x3}], 0x10, 0x7f}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@fallback=r0, 0x1e, 0x0, 0x3, &(0x7f0000000b40)=[0x0], 0x1, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r0, 0x0, 0x25, 0x12, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ec0)={@fallback=r0, r0, 0x33, 0x2010, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0x28, 0x0, 0x7aee, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x8, 0x8, 0x80000001, 0x7f, {{0x21, 0x4, 0x0, 0x13, 0x84, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @multicast2, {[@generic={0x7, 0xc, "42e0a4a5d33ae2917821"}, @timestamp_addr={0x44, 0x4c, 0x2a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0x100}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8874}, {@broadcast, 0x1}, {@local, 0x800}, {@empty, 0x3d6}, {@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcaf1}]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xd1, [@empty, @private=0xa010102, @multicast2, @private=0xa010102]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x40, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@exit, @generic={0x9, 0x3, 0x8, 0x800, 0xbac}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x94ae}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xe, 0x6, 0x1ff}, 0x10, 0x0, r0, 0x3, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x2, 0x2, 0xb, 0x2}, {0x2, 0x5, 0x8, 0x5}, {0x0, 0x4, 0x4, 0x2}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex=r6, r2, 0x27, 0x10, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r12 = accept4$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="04002dbd7000fbd3df0005000000170006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x840) 907.084807ms ago: executing program 3 (id=2488): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000280)={0x1000}) close(0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 906.473153ms ago: executing program 1 (id=2489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x121a1) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000100), &(0x7f00000001c0)=0x10) 882.228681ms ago: executing program 0 (id=2490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x800006, 0x20000}) 850.326693ms ago: executing program 2 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r2], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100001100140003800c000000000204000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) poll(&(0x7f0000000000)=[{r4, 0x1}, {r4, 0x308}, {r4, 0xc4}, {r4, 0x4002}], 0x4, 0x4) 763.129062ms ago: executing program 1 (id=2492): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xa) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) 738.741905ms ago: executing program 0 (id=2493): sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x110, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x18}}, 0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000180)=0x80, 0x80800) r1 = accept4$tipc(r0, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x800) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="5ca45ae4dc709322b70f549d1c17c97c1f29f56542c62d27aae560a6c5f9306f880d670a9bf34c26859244fc35897d7e4f647f9c8469ec64e36dc74d2d0e7af5a49a765dd3a8e3c671128265975b963cf8d1a0e15f9f5f01c92dc514278b13ad652d9d392354832c", 0x68}, {&(0x7f00000002c0)="6a85e70afd9be9f6a6f88f83a843a29dafec82dc16bec6434a43ddbae30108919bb5c73221f134b0620bdc640b4f1d2ed9af823728e4857480028977a38dde96f6b21396a7eaf893f15900daca9245d2c09f806e4dcfbf36dd87b098f80c58018d036e4b1a738665d69727d46e90cf861be2fd3c7775c584b338701bb43049098c2c175f72e0e44cd4b6cc6a20ccd8bb395808b2c3baee25c84b3e0371079f6857fc982b1ac59f717b1afd9eaec75af644aa157c19159dbec15705fbc662bf25ceac86a04fccfdba86b29b01edce77e732096cef2a241cb95821555db2cd929563b86d50e680bcbe0303", 0xea}], 0x2, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010102}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x44, 0x11, "5eed884026f0d196b7eabe4f00afb9"}, @timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x2, [{@private=0xa010102, 0x1}, {@loopback, 0x7}]}, @noop, @timestamp={0x44, 0x1c, 0x8a, 0x0, 0x2, [0xfff, 0x8, 0x5, 0x76c4, 0x0, 0x7fff]}, @lsrr={0x83, 0x1b, 0xb7, [@broadcast, @multicast1, @private=0xa010101, @private=0xa010101, @local, @multicast1]}, @lsrr={0x83, 0x7, 0xc5, [@empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x6b, [@private=0xa010101, @local, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, @multicast2]}, @cipso={0x86, 0x16, 0x2, [{0x0, 0xb, "2dbda430d974d8045f"}, {0x2, 0x5, "9b7397"}]}, @lsrr={0x83, 0xf, 0x37, [@private=0xa010101, @broadcast, @private=0xa010101]}, @end]}}}], 0x128}}, {{&(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}], 0x2, 0x20000080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20008004) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x81}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x10001}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400089c}, 0x2400c000) connect$rose(r0, &(0x7f0000000d40)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) connect$ax25(r5, &(0x7f0000000dc0)={{0x3, @null, 0x3}, [@bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$unix(r5, &(0x7f0000000e40)="ca3c82abbee92467e13f40dc0b4fd625267da006aadc4dbab8920d22c19e33bc9e34b4d4e48e315079e3a60cf23286240e3e7242384e890084adf357203ce64a1d5678eb286f4d752b0f1e48b77409c46f6b0391", 0x54, 0x0, &(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r0) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, r7, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xea4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40480a4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xbc, r7, 0x132, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000001240)={0x0, 'ip6gre0\x00', {0x1}, 0x6}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c840) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa88479e74f4d4419}, 0xc4) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001480)=r5, 0x4) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048040}, 0x20000004) write$tun(r5, &(0x7f00000015c0)={@void, @val={0x1, 0x3, 0x5, 0x8000, 0x6, 0xc0}, @eth={@remote, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0xb, 0x4d, 0x65, 0x0, 0xf4, 0x6, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @end]}}, @payload_named={{{{{0x31, 0x0, 0x0, 0x0, 0x1, 0xa, 0x3, 0x2, 0x4ec1, 0x0, 0x0, 0x4, 0x2, 0x2, 0x0, 0x5f3c, 0x0, 0x4e22, 0x4e20}, 0x4, 0x2}, 0x4, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x69) syz_genetlink_get_family_id$net_dm(&(0x7f0000001640), r8) socket$kcm(0x29, 0x5, 0x0) 672.788557ms ago: executing program 3 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 598.928671ms ago: executing program 2 (id=2495): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYRESHEX, @ANYRES16=r2, @ANYRESDEC=r1], 0xcc}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 597.543495ms ago: executing program 0 (id=2496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448dd, &(0x7f0000000240)={0x1, 0xfffd, '\x00', 0xf, 0x6}) 468.105238ms ago: executing program 3 (id=2497): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x700, 0x7, 0x3, 0x0, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x46, [@loopback, @empty, @multicast2]}, @ssrr={0x89, 0xb, 0xd7, [@loopback, @empty]}, @generic={0x83, 0x2}, @generic={0x94, 0x8, "314102ed08e8"}, @lsrr={0x83, 0x13, 0x72, [@rand_addr=0x64010100, @empty, @multicast1, @local]}, @generic={0x7, 0x4, "c3a9"}, @end]}}}}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0xc, 0x18}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffff81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000001500)=ANY=[@ANYBLOB="0da041ffffffffff85000000bc00000018120000", @ANYRES32=r0, @ANYBLOB="0000f9ffffff0000b703000000000000850000000c00000000000018000000ff0000000000000024000000836582dd99a43c233758d89ea272158d334e48575b53af330e05df653da36fe8929ea3945c19a8a945a7602d2363ba8f8d46602b6a7efd3e7406b733dd1b25e87ff78345bef96559af5dd94081d2712beec491bdd70e7dc45acc3a4620df96e5d9eb6a4a46a3b645ff29ffd9155a93d22906f4b39a2771ed45ec1f24c821d6e277"], &(0x7f0000000140)='GPL\x00', 0xf4ec, 0x88, &(0x7f0000000180)=""/136, 0x41100, 0x10, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r3, r4, r5, r6], &(0x7f0000000540)=[{0x5, 0x3, 0x4}], 0x10, 0x2}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={r8, 0xf, 0x101, 0x5}) 411.151837ms ago: executing program 2 (id=2498): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1}, 0x60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r6, r5, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r5, r6, 0x2f, 0x2024, 0x4}, 0x20) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 346.883529ms ago: executing program 1 (id=2499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f0000000100)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf6, 0xf6, 0xb, [@datasec={0x9, 0x7, 0x0, 0xf, 0x2, [{0x2, 0x1, 0x8}, {0x5, 0xfb9, 0xffffffff}, {0x5, 0x3, 0x8}, {0x1, 0x0, 0x1ff}, {0x5, 0x2, 0xffffff95}, {0x3, 0x6, 0xffffffff}, {0x4, 0x3, 0x5}], "c5b9"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x3, 0x4}, {0xf, 0x5}, {0x1, 0x3}]}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xd, 0x4}, {0x5, 0x1}, {0x401, 0x1}, {0x6, 0x4}, {0x10}, {0x6, 0x1}, {0x0, 0x5}, {0xf, 0x4}, {0xd}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x4f, 0x2e, 0x61, 0x2e, 0x5f, 0x2e, 0x30, 0x30, 0x2e]}}, &(0x7f0000000340)=""/84, 0x11b, 0x54, 0x1}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r9, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x7, 0x8}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x1b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5552}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0xe5, 0x1, 0x9, 0x8e92, 0x6}, @generic={0x8, 0xb, 0x2, 0x1000, 0x9}, @ldst={0x3, 0x0, 0x6, 0x2, 0xa, 0xffffffffffffffc7, 0xe66ed12929748d37}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x12, &(0x7f0000000280)=""/18, 0x40f00, 0x5c, '\x00', r5, @fallback=0x2, r6, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0x10001}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f00000008c0)=[r7, r8, r9, r10, r11, 0x1, r12, 0xffffffffffffffff, r1, r13], &(0x7f0000000900)=[{0x0, 0x3, 0x5, 0x6}], 0x10, 0x3}, 0x94) 268.607381ms ago: executing program 1 (id=2500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 240.013154ms ago: executing program 3 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 132.274168ms ago: executing program 2 (id=2502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x40, 0x5, 0x7, 0xed6]}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0454", @ANYRES32=r6, @ANYBLOB="08000200ac1414"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) 131.401071ms ago: executing program 1 (id=2503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000680)={'syz_tun\x00', 0x400}) r4 = socket(0xa, 0x3, 0x3a) socketpair(0x22, 0x1, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x4}, 0x0, {[0x8ae3, 0x0, 0x42, 0xfffffffc, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) close(r2) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, '@\xe2\\,\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '(*)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xa, 0x1, ']\\*^-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x4004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), r5) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r2, &(0x7f0000000000)={0x20002006}) 130.514146ms ago: executing program 4 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000200)=0xfff, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000200)=0xfff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x34, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}}, 0x14}}, 0x8004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x3e, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @empty, 0x4ac2d78a}}, 0x0, 0x0, 0x3e, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9ed}}, @enum64={0xf, 0x7, 0x0, 0x13, 0x1, 0x8, [{0xc, 0xfb, 0x5}, {0x1, 0x84ea, 0x3ab268f0}, {0xb, 0xbd, 0x5}, {0x8, 0x1, 0x1939}, {0x8, 0x3, 0xf}, {0x2, 0x7, 0x7}, {0x6, 0x4, 0x7}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000600)=""/228, 0xc9, 0xe4, 0x0, 0x2d, 0x10000}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x3ff, 0x4, 0xffffffff, 0x41020, r3, 0xfffffffd, '\x00', r4, r5, 0x1, 0x2000003, 0x0, 0x4}, 0x50) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 108.488059ms ago: executing program 3 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800dd8d0000800000000000020000000000000500000000060015000200000014001680100008800c0003800500010001000000"], 0x38}}, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x2, 0x70bd28, 0x25dfdbfb, {0xa, 0x1, 0x40, 0xc8, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) (async) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x3, @link_local, 'bridge_slave_0\x00'}}, 0x1e) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r6, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'pim6reg\x00', {0x2, 0x4e22, @loopback}}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x23}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 0s ago: executing program 2 (id=2506): r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)) r1 = socket$inet(0xa, 0x2, 0xfffffffb) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xfffff805}, &(0x7f0000000100)=0xfffffffffffffdbd) kernel console output (not intermixed with test programs): es in process `syz.1.286'. [ 106.315534][ T7080] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 106.350405][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 106.790537][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 106.805594][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.294'. [ 106.850430][ T7105] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 106.952396][ T7112] netlink: 104 bytes leftover after parsing attributes in process `syz.4.297'. [ 107.022143][ T7114] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 107.045791][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.299'. [ 107.056483][ T7114] dummy0: entered promiscuous mode [ 107.070933][ T7114] bridge0: port 3(dummy0) entered blocking state [ 107.083147][ T7114] bridge0: port 3(dummy0) entered disabled state [ 107.103374][ T7114] dummy0: entered allmulticast mode [ 107.110663][ T7114] bridge0: port 3(dummy0) entered blocking state [ 107.117211][ T7114] bridge0: port 3(dummy0) entered forwarding state [ 107.126574][ T7119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.300'. [ 107.282778][ T7128] gretap0: entered promiscuous mode [ 107.311064][ T7128] 0ªî{X¹¦: renamed from gretap0 [ 107.331992][ T7128] 0ªî{X¹¦: left promiscuous mode [ 107.347608][ T7128] 0ªî{X¹¦: entered allmulticast mode [ 107.369720][ T7128] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 107.613911][ T7144] tipc: Started in network mode [ 107.623798][ T7144] tipc: Node identity , cluster identity 4711 [ 107.655337][ T7144] tipc: Failed to obtain node identity [ 107.662308][ T7144] tipc: Enabling of bearer rejected, failed to enable media [ 107.712285][ T7144] syzkaller0: entered promiscuous mode [ 107.721090][ T7144] syzkaller0: entered allmulticast mode [ 108.059895][ T7155] vlan2: entered allmulticast mode [ 108.065035][ T7155] hsr0: entered allmulticast mode [ 108.070187][ T7155] hsr_slave_0: entered allmulticast mode [ 108.076046][ T7155] hsr_slave_1: entered allmulticast mode [ 108.269154][ T7172] xt_l2tp: wrong L2TP version: 0 [ 108.395475][ T7157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.487361][ T7185] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 108.564854][ T7157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.619375][ T7192] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 108.663329][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.730034][ T7194] bond1: Unable to set up delay as MII monitoring is disabled [ 108.741596][ T7194] bond1 (unregistering): Released all slaves [ 108.808931][ T7157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.855878][ T7200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.022649][ T7157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.457356][ T1158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.549429][ T6256] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.609363][ T6256] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.682436][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.635859][ T7293] __nla_validate_parse: 18 callbacks suppressed [ 110.635876][ T7293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.662447][ T7295] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 110.689761][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.701168][ T7293] netlink: 31 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.727605][ T7293] netlink: 'syz.2.347': attribute type 3 has an invalid length. [ 110.741095][ T7293] netlink: 'syz.2.347': attribute type 2 has an invalid length. [ 110.748987][ T7293] netlink: 31 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.808778][ T7301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.911819][ T7297] bond1: (slave ip6gretap1): making interface the new active one [ 110.936070][ T7297] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.946331][ T7306] netlink: 76 bytes leftover after parsing attributes in process `syz.0.348'. [ 110.957483][ T7297] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.965398][ T7297] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.186964][ T7315] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.316590][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 111.360102][ T7325] trusted_key: syz.4.354 sent an empty control message without MSG_MORE. [ 111.437541][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 111.560227][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 111.905161][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 112.031806][ T7359] netlink: 'syz.4.368': attribute type 21 has an invalid length. [ 112.079454][ T7367] netlink: 'syz.4.368': attribute type 12 has an invalid length. [ 112.085024][ T7364] IPVS: ip_vs_add_dest(): server weight less than zero [ 112.143402][ T7359] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 112.462878][ T7386] vlan3: entered promiscuous mode [ 112.499462][ T7386] bridge0: entered promiscuous mode [ 112.564317][ T7394] tipc: Enabling of bearer rejected, failed to enable media [ 112.579323][ T7394] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 112.731224][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 113.724817][ T7453] sit2: entered promiscuous mode [ 113.735407][ T7453] sit2: entered allmulticast mode [ 114.109496][ T7481] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 115.547182][ T5877] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.547296][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.657634][ T7566] __nla_validate_parse: 5 callbacks suppressed [ 115.657653][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.684467][ T7568] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 115.759588][ T7572] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.781719][ T7574] netlink: 404 bytes leftover after parsing attributes in process `syz.4.432'. [ 115.806608][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.432'. [ 115.827009][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.432'. [ 115.879053][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 115.897876][ T7581] netlink: 96 bytes leftover after parsing attributes in process `syz.0.434'. [ 116.044506][ T7590] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 116.102452][ T7588] syzkaller0: entered promiscuous mode [ 116.128572][ T7588] syzkaller0: entered allmulticast mode [ 116.245739][ T6588] IPVS: starting estimator thread 0... [ 116.246034][ T7603] IPVS: lc: FWM 3 0x00000003 - no destination available [ 116.262469][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 116.359517][ T7607] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.396383][ T7611] sock: sock_timestamping_bind_phc: sock not bind to device [ 116.517858][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 116.589410][ T7620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'. [ 117.015394][ T7643] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.224090][ T7656] delete_channel: no stack [ 117.253118][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 117.274293][ T7660] pim6reg: entered allmulticast mode [ 117.290368][ T7660] pim6reg: left allmulticast mode [ 117.781032][ T7685] dummy0: left allmulticast mode [ 117.808231][ T7685] bridge0: port 3(dummy0) entered disabled state [ 117.855549][ T7685] batman_adv: batadv0: Adding interface: dummy0 [ 117.881962][ T7690] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.466'. [ 117.894791][ T7685] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.920416][ T7690] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 117.926778][ T7685] batman_adv: batadv0: Interface activated: dummy0 [ 117.963879][ T7697] netlink: 'syz.2.469': attribute type 4 has an invalid length. [ 118.042642][ T7685] batadv0: mtu less than device minimum [ 118.105246][ T7685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.117439][ T7685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.129996][ T7685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.141928][ T7685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.254784][ T7713] tipc: Started in network mode [ 118.261184][ T7713] tipc: Node identity d6c599b3455, cluster identity 4711 [ 118.269449][ T7713] tipc: Enabled bearer , priority 0 [ 118.289008][ T7706] syzkaller0: entered promiscuous mode [ 118.305080][ T7706] syzkaller0: entered allmulticast mode [ 118.329526][ T7706] tipc: Resetting bearer [ 118.369316][ T7704] tipc: Resetting bearer [ 118.434463][ T7704] tipc: Disabling bearer [ 118.452343][ T7721] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 118.647501][ T7726] netlink: 'syz.4.476': attribute type 178 has an invalid length. [ 120.572283][ T7770] veth3: entered allmulticast mode [ 120.723125][ T7785] tipc: Enabling of bearer rejected, failed to enable media [ 120.786156][ T7793] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 120.873351][ T7793] __nla_validate_parse: 3 callbacks suppressed [ 120.873369][ T7793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.495'. [ 120.897148][ T7797] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 121.168409][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 121.276008][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 121.362813][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 121.381632][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.381778][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 121.440036][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 121.444251][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 121.459830][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 121.469662][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 121.491975][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.501718][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.533192][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.605654][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.645534][ T3585] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.724324][ T3585] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.762131][ T3585] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.972056][ T7854] : renamed from bridge_slave_0 (while UP) [ 122.003350][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 122.041259][ T7856] net_ratelimit: 15 callbacks suppressed [ 122.041277][ T7856] IPVS: lc: FWM 3 0x00000003 - no destination available [ 122.077569][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 122.189494][ T7869] nbd: must specify a size in bytes for the device [ 122.442370][ T7877] bond2: entered promiscuous mode [ 122.448170][ T7877] bond2: entered allmulticast mode [ 122.454896][ T7877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.493311][ T7879] tipc: Started in network mode [ 122.502678][ T7879] tipc: Node identity 5221eb279ea6, cluster identity 4711 [ 122.521129][ T7879] tipc: Enabled bearer , priority 0 [ 122.605521][ T7887] syzkaller0: entered promiscuous mode [ 122.636629][ T7887] syzkaller0: entered allmulticast mode [ 122.736981][ T7899] bond3: option miimon: invalid value (18446744073709551585) [ 122.753732][ T7899] bond3: option miimon: allowed values 0 - 2147483647 [ 122.795491][ T7899] bond3 (unregistering): Released all slaves [ 123.054392][ T7887] tipc: Resetting bearer [ 123.210444][ T7887] tipc: Disabling bearer [ 123.542848][ T7944] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 123.578181][ T7944] netlink: 'syz.1.534': attribute type 3 has an invalid length. [ 123.616178][ T7944] NCSI netlink: No device for ifindex 0 [ 123.909505][ T7962] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 123.963201][ T7958] can: request_module (can-proto-0) failed. [ 123.982838][ T7964] IPv6: sit1: Disabled Multicast RS [ 123.986350][ T7962] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 124.291638][ T7978] openvswitch: netlink: Message has -1 unknown bytes. [ 126.718500][ T8034] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 127.115078][ T8083] __nla_validate_parse: 8 callbacks suppressed [ 127.115098][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 127.220494][ T8083] bridge_slave_1: left allmulticast mode [ 127.243457][ T8083] bridge_slave_1: left promiscuous mode [ 127.297930][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.367724][ T8083] : left allmulticast mode [ 127.387613][ T8083] : left promiscuous mode [ 127.392380][ T8083] bridge0: port 1() entered disabled state [ 127.426970][ T8100] netlink: 'syz.1.568': attribute type 30 has an invalid length. [ 127.867239][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.884514][ T8160] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 128.933038][ T8160] bond1: entered promiscuous mode [ 128.939592][ T8160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.991071][ T8160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.002169][ T8160] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 129.013123][ T8160] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 129.023144][ T8160] bond1: (slave gre1): Opening slave failed [ 129.289408][ T8178] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 129.889410][ T8219] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 130.253815][ T8243] netlink: 'syz.4.618': attribute type 24 has an invalid length. [ 130.448256][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 130.471901][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.529801][ T8259] veth1_to_bond: entered allmulticast mode [ 130.560826][ T8265] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.624'. [ 130.608394][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 130.651679][ T8267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 130.689522][ T8265] veth0: entered promiscuous mode [ 130.694967][ T8265] veth0: left promiscuous mode [ 130.714312][ T8259] veth1_to_bond: left allmulticast mode [ 130.753006][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 130.765218][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 130.809409][ T8273] netlink: 'syz.2.627': attribute type 3 has an invalid length. [ 130.818308][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 130.868924][ T8280] syzkaller0: entered promiscuous mode [ 130.874435][ T8280] syzkaller0: entered allmulticast mode [ 131.116381][ T8294] netlink: 112 bytes leftover after parsing attributes in process `syz.3.634'. [ 131.235473][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 131.622143][ T8340] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.659324][ T8340] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.681170][ T8340] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.701753][ T8340] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.349337][ T8388] __nla_validate_parse: 67 callbacks suppressed [ 132.349358][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 132.623956][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 132.918214][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.076630][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 133.118672][ T8430] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 133.161601][ T8432] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 133.395204][ T8449] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 133.420918][ T8452] C: renamed from team_slave_0 (while UP) [ 133.440579][ T8452] netlink: 'syz.2.676': attribute type 1 has an invalid length. [ 133.462767][ T8452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.490873][ T8449] netlink: 'syz.0.674': attribute type 21 has an invalid length. [ 133.504424][ T8449] netlink: 156 bytes leftover after parsing attributes in process `syz.0.674'. [ 133.534315][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 133.666098][ T8464] netlink: 'syz.4.680': attribute type 11 has an invalid length. [ 133.714984][ T8464] netlink: 'syz.4.680': attribute type 11 has an invalid length. [ 133.722523][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 133.757656][ T8464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.680'. [ 134.090166][ T8490] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 134.114675][ T8490] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 134.174634][ T8490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.686'. [ 134.229078][ T8497] netlink: 'syz.3.689': attribute type 39 has an invalid length. [ 134.655074][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 134.664660][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.690'. [ 135.164631][ T8541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.199871][ T8539] syzkaller1: entered promiscuous mode [ 135.216712][ T8539] syzkaller1: entered allmulticast mode [ 135.255335][ T8547] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.354111][ T8555] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 135.653911][ T8570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.806574][ T8576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.831665][ T8592] Bluetooth: MGMT ver 1.23 [ 135.835079][ T8576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.870930][ T8586] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 135.977993][ T8601] openvswitch: netlink: Key type 337 is out of range max 32 [ 136.192347][ T8576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.200136][ T8610] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 136.217927][ T8576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.307950][ T8615] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 136.396675][ T8576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.419778][ T8576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.556797][ T8576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.614288][ T8576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.641218][ T8626] team0: entered promiscuous mode [ 136.646435][ T8626] C: entered promiscuous mode [ 136.662114][ T8626] team_slave_1: entered promiscuous mode [ 136.799229][ T8630] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 136.820846][ T30] audit: type=1107 audit(1759374096.808:2): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 136.902569][ T8332] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.932466][ T8332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.001742][ T8338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.025342][ T8338] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.086198][ T8338] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.126386][ T8338] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.175605][ T8332] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.194285][ T8332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.436465][ T8672] __nla_validate_parse: 6 callbacks suppressed [ 137.436485][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 137.588820][ T8686] netlink: 'syz.2.745': attribute type 21 has an invalid length. [ 137.596780][ T8686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.745'. [ 137.627594][ T8686] netlink: 'syz.2.745': attribute type 5 has an invalid length. [ 137.641738][ T8686] netlink: 3 bytes leftover after parsing attributes in process `syz.2.745'. [ 137.684340][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 137.698508][ T8690] tc_dump_action: action bad kind [ 137.755936][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 137.784839][ T8697] tc_dump_action: action bad kind [ 137.833114][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.891451][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.073273][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.751'. [ 138.362268][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 138.373490][ T8730] Bluetooth: MGMT ver 1.23 [ 138.456610][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 138.555699][ T8739] tipc: Started in network mode [ 138.590635][ T8739] tipc: Node identity e6e260ecfc82, cluster identity 4711 [ 138.607782][ T8739] tipc: Enabled bearer , priority 0 [ 138.619147][ T8736] syzkaller0: entered promiscuous mode [ 138.624993][ T8736] syzkaller0: entered allmulticast mode [ 138.662119][ T8736] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 138.842745][ T8736] tipc: Resetting bearer [ 138.898780][ T8735] tipc: Resetting bearer [ 138.911627][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 139.003507][ T8735] tipc: Disabling bearer [ 139.774726][ T8797] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 139.880746][ T8799] xt_socket: unknown flags 0x50 [ 139.964463][ T8802] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 140.354596][ T8838] syzkaller1: entered promiscuous mode [ 140.360947][ T8838] syzkaller1: entered allmulticast mode [ 140.439711][ T5877] Bluetooth: hci2: command 0x0401 tx timeout [ 140.446207][ T5883] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 141.176974][ T8873] netlink: 'syz.2.791': attribute type 8 has an invalid length. [ 141.303731][ T8879] pim6reg1: entered promiscuous mode [ 141.332765][ T8879] pim6reg1: entered allmulticast mode [ 141.719191][ T8899] veth5: entered allmulticast mode [ 142.022685][ T8907] delete_channel: no stack [ 142.285727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033e54c00: rx timeout, send abort [ 142.296729][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033e54c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.685412][ T8945] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 142.726306][ T8945] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 142.810601][ T8954] __nla_validate_parse: 11 callbacks suppressed [ 142.810621][ T8954] netlink: 252 bytes leftover after parsing attributes in process `syz.2.806'. [ 143.004629][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 143.069978][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'. [ 143.122998][ T8974] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 143.419242][ T8988] syz_tun: entered allmulticast mode [ 143.485721][ T8985] syz_tun: left allmulticast mode [ 143.972273][ T9010] sctp: [Deprecated]: syz.0.819 (pid 9010) Use of int in maxseg socket option. [ 143.972273][ T9010] Use struct sctp_assoc_value instead [ 144.219750][ T9023] netlink: 156 bytes leftover after parsing attributes in process `syz.0.823'. [ 144.574853][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 144.739454][ T9039] netlink: 256 bytes leftover after parsing attributes in process `syz.2.827'. [ 144.970103][ T9052] pim6reg1: entered promiscuous mode [ 144.985734][ T9052] pim6reg1: entered allmulticast mode [ 145.222035][ T9067] netlink: 52 bytes leftover after parsing attributes in process `syz.2.834'. [ 145.399445][ T9072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.835'. [ 145.787392][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 145.823784][ T9097] macvtap1: entered promiscuous mode [ 145.851407][ T9097] vlan0: entered promiscuous mode [ 145.890751][ T9097] macvtap1: entered allmulticast mode [ 145.906672][ T9097] vlan0: entered allmulticast mode [ 145.930009][ T9097] veth0_vlan: entered allmulticast mode [ 145.999268][ T9099] macvtap2: entered promiscuous mode [ 146.022101][ T9099] macvtap2: entered allmulticast mode [ 146.141421][ T9111] tipc: Enabled bearer , priority 0 [ 146.160200][ T9111] syzkaller0: entered promiscuous mode [ 146.169036][ T9111] syzkaller0: entered allmulticast mode [ 146.473749][ T9114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.904967][ T9126] gtp0: entered promiscuous mode [ 146.928590][ T9126] gtp0: entered allmulticast mode [ 146.960282][ T9110] tipc: Resetting bearer [ 147.058793][ T9144] netlink: 152 bytes leftover after parsing attributes in process `syz.2.849'. [ 147.076755][ T9110] tipc: Disabling bearer [ 147.431477][ T9161] netlink: 252 bytes leftover after parsing attributes in process `syz.3.853'. [ 148.275494][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 148.384955][ T9210] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 148.448658][ T9210] veth0_vlan: entered allmulticast mode [ 148.691426][ T9210] veth0_vlan: left promiscuous mode [ 148.738877][ T9210] veth0_vlan: entered promiscuous mode [ 148.763814][ T9210] team0: Device veth0_vlan failed to register rx_handler [ 149.194337][ T9249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.524845][ T9272] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 149.568640][ T9272] team0: Device hsr_slave_0 failed to register rx_handler [ 149.905667][ T9279] pim6reg1: entered promiscuous mode [ 149.913898][ T9279] pim6reg1: entered allmulticast mode [ 150.298987][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'. [ 150.333114][ T9291] syzkaller1: entered promiscuous mode [ 150.342935][ T9291] syzkaller1: entered allmulticast mode [ 150.893446][ T9328] netlink: 'syz.4.895': attribute type 12 has an invalid length. [ 150.925815][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.895'. [ 151.263981][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 151.273502][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 151.323710][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 151.540089][ T6589] IPVS: starting estimator thread 0... [ 151.638065][ T9367] IPVS: using max 26 ests per chain, 62400 per kthread [ 151.798023][ T9378] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 151.864098][ T9378] batadv0: entered promiscuous mode [ 151.889590][ T9378] bond0: entered promiscuous mode [ 151.894739][ T9378] bond_slave_0: entered promiscuous mode [ 151.904316][ T9378] hsr1: entered allmulticast mode [ 151.913019][ T9378] batadv0: entered allmulticast mode [ 151.919148][ T9378] bond0: entered allmulticast mode [ 151.924366][ T9378] bond_slave_0: entered allmulticast mode [ 151.931226][ T9378] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 152.104651][ T9391] netlink: 'syz.0.913': attribute type 7 has an invalid length. [ 152.173010][ T9394] netlink: 'syz.3.914': attribute type 12 has an invalid length. [ 152.183155][ T9393] netlink: 'syz.3.914': attribute type 12 has an invalid length. [ 152.240519][ T9401] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.915'. [ 152.344528][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 152.409199][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 152.576757][ T9416] vxlan0: entered promiscuous mode [ 152.622468][ T9416] vxlan0: entered allmulticast mode [ 152.648848][ T6266] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.669482][ T9424] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 152.684649][ T6266] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.695799][ T9419] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20004 [ 152.722539][ T6266] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.744272][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 152.768015][ T9423] veth1_to_bond: entered allmulticast mode [ 152.782134][ T6266] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.906148][ T9428] bond0: (slave bond_slave_1): Releasing backup interface [ 153.367988][ T9462] netlink: 'syz.1.936': attribute type 21 has an invalid length. [ 153.375861][ T9462] __nla_validate_parse: 5 callbacks suppressed [ 153.375877][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 153.931054][ T9496] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 154.113831][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 154.188995][ T9511] netlink: 'syz.3.949': attribute type 23 has an invalid length. [ 154.214367][ T9502] macvtap1: entered allmulticast mode [ 154.225040][ T9502] veth0_macvtap: entered allmulticast mode [ 154.475926][ T9526] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 154.491858][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.954'. [ 154.497937][ T9526] netlink: 224 bytes leftover after parsing attributes in process `syz.4.953'. [ 154.528372][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 154.535982][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.954'. [ 154.550881][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 154.794056][ T9540] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.957'. [ 154.856109][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 155.210186][ T9570] syzkaller1: entered promiscuous mode [ 155.253514][ T9570] syzkaller1: entered allmulticast mode [ 155.592734][ T9589] netlink: 3356 bytes leftover after parsing attributes in process `syz.4.971'. [ 155.981670][ T9606] IPv6: sit1: Disabled Multicast RS [ 156.074253][ T9611] IPv6: sit1: Disabled Multicast RS [ 156.455522][ T9637] tunl0: entered promiscuous mode [ 156.475494][ T9637] netlink: 'syz.2.985': attribute type 3 has an invalid length. [ 156.753479][ T9651] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 156.881291][ T9658] netlink: 'syz.0.994': attribute type 11 has an invalid length. [ 156.962115][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.005958][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.021733][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.035826][ T9664] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 157.054474][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.077695][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.096198][ T9664] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 157.179015][ T9631] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 157.236372][ T9675] tipc: Failed to obtain node identity [ 157.270517][ T9675] tipc: Enabling of bearer rejected, failed to enable media [ 158.372812][ T9735] syzkaller1: entered promiscuous mode [ 158.394697][ T9735] syzkaller1: entered allmulticast mode [ 158.408306][ T9735] __nla_validate_parse: 10 callbacks suppressed [ 158.408323][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'. [ 158.428683][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.938761][ T9751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.369331][ T9783] validate_nla: 1 callbacks suppressed [ 159.369350][ T9783] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 159.383216][ T9783] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1032'. [ 159.400021][ T9783] nbd: must specify at least one socket [ 159.466487][ T9788] dvmrp0: entered allmulticast mode [ 159.474749][ T9793] nbd: must specify a size in bytes for the device [ 159.514556][ T9793] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1033'. [ 159.532680][ T9788] dvmrp0: left allmulticast mode [ 159.544716][ T9795] netlink: 'syz.4.1036': attribute type 11 has an invalid length. [ 159.555052][ T9795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1036'. [ 159.566215][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 159.576504][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 159.725509][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 159.756937][ T9805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.821077][ T9808] 0ªî{X¹¦: left allmulticast mode [ 159.846694][ T9808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.363949][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 160.374021][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 160.580522][ T9846] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 160.593202][ T9846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1051'. [ 160.609356][ T9846] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 160.627999][ T9848] netlink: 'syz.2.1052': attribute type 11 has an invalid length. [ 161.020976][ T9875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 162.996374][ T9929] netlink: 'syz.3.1077': attribute type 3 has an invalid length. [ 163.011494][ T9937] veth1_vlan: mtu less than device minimum [ 163.220088][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.513769][ T9966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.612381][ T9971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.825068][ T9989] __nla_validate_parse: 10 callbacks suppressed [ 163.825089][ T9989] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1092'. [ 163.920974][ T9993] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1095'. [ 163.959678][ T9993] veth0: entered promiscuous mode [ 163.987980][ T9992] veth0: left promiscuous mode [ 164.027773][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 164.095260][T10002] netlink: 'syz.0.1096': attribute type 11 has an invalid length. [ 164.402641][T10017] bridge0: port 3(ipvlan2) entered blocking state [ 164.453384][T10017] bridge0: port 3(ipvlan2) entered disabled state [ 164.488172][T10017] ipvlan2: entered allmulticast mode [ 164.508106][T10017] bridge0: entered allmulticast mode [ 164.519585][T10017] ipvlan2: left allmulticast mode [ 164.524659][T10017] bridge0: left allmulticast mode [ 164.856817][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 165.311522][T10051] syz.1.1107: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.346080][T10051] CPU: 0 UID: 0 PID: 10051 Comm: syz.1.1107 Not tainted syzkaller #0 PREEMPT(full) [ 165.346107][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.346127][T10051] Call Trace: [ 165.346134][T10051] [ 165.346143][T10051] dump_stack_lvl+0x189/0x250 [ 165.346174][T10051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.346199][T10051] ? __pfx__printk+0x10/0x10 [ 165.346226][T10051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 165.346250][T10051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 165.346283][T10051] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 165.346308][T10051] warn_alloc+0x214/0x310 [ 165.346350][T10051] ? __pfx_warn_alloc+0x10/0x10 [ 165.346388][T10051] ? __get_vm_area_node+0x28f/0x300 [ 165.346416][T10051] ? packet_set_ring+0x6f4/0x2350 [ 165.346448][T10051] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 165.346509][T10051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.346538][T10051] ? alloc_pages_mpol+0x3cd/0x4a0 [ 165.346569][T10051] ? packet_set_ring+0x6f4/0x2350 [ 165.346596][T10051] vzalloc_noprof+0xb2/0xf0 [ 165.346623][T10051] ? packet_set_ring+0x6f4/0x2350 [ 165.346652][T10051] packet_set_ring+0x6f4/0x2350 [ 165.346704][T10051] ? __pfx_packet_set_ring+0x10/0x10 [ 165.346752][T10051] ? _copy_from_user+0x94/0xb0 [ 165.346783][T10051] packet_setsockopt+0xc5a/0x12c0 [ 165.346815][T10051] ? __pfx_packet_setsockopt+0x10/0x10 [ 165.346849][T10051] ? __lock_acquire+0xab9/0xd20 [ 165.346884][T10051] ? aa_sk_perm+0x81e/0x950 [ 165.346917][T10051] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.346948][T10051] ? __fget_files+0x2a/0x420 [ 165.346962][T10051] ? aa_sock_opt_perm+0xff/0x1b0 [ 165.346984][T10051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 165.347005][T10051] ? __pfx_packet_setsockopt+0x10/0x10 [ 165.347032][T10051] do_sock_setsockopt+0x179/0x1b0 [ 165.347076][T10051] __x64_sys_setsockopt+0x13f/0x1b0 [ 165.347102][T10051] do_syscall_64+0xfa/0x3b0 [ 165.347120][T10051] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.347138][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.347155][T10051] ? clear_bhb_loop+0x60/0xb0 [ 165.347176][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.347192][T10051] RIP: 0033:0x7f95c598eec9 [ 165.347208][T10051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.347222][T10051] RSP: 002b:00007f95c6829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.347241][T10051] RAX: ffffffffffffffda RBX: 00007f95c5be5fa0 RCX: 00007f95c598eec9 [ 165.347255][T10051] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000007 [ 165.347266][T10051] RBP: 00007f95c5a11f91 R08: 000000000000001c R09: 0000000000000000 [ 165.347278][T10051] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 165.347290][T10051] R13: 00007f95c5be6038 R14: 00007f95c5be5fa0 R15: 00007ffc95906158 [ 165.347327][T10051] [ 165.667252][T10051] Mem-Info: [ 165.670414][T10051] active_anon:10067 inactive_anon:0 isolated_anon:0 [ 165.670414][T10051] active_file:3141 inactive_file:39906 isolated_file:0 [ 165.670414][T10051] unevictable:768 dirty:90 writeback:0 [ 165.670414][T10051] slab_reclaimable:11369 slab_unreclaimable:99864 [ 165.670414][T10051] mapped:29325 shmem:5069 pagetables:1516 [ 165.670414][T10051] sec_pagetables:0 bounce:0 [ 165.670414][T10051] kernel_misc_reclaimable:0 [ 165.670414][T10051] free:1316851 free_pcp:15455 free_cma:0 [ 165.815464][T10051] Node 0 active_anon:38168kB inactive_anon:0kB active_file:12564kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117300kB dirty:360kB writeback:0kB shmem:16740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15460kB pagetables:5612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.849368][T10051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.882995][T10051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.913979][T10051] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 165.921167][T10051] Node 0 DMA32 free:1367156kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38120kB inactive_anon:0kB active_file:12564kB inactive_file:157848kB unevictable:1536kB writepending:360kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:46296kB local_pcp:28872kB free_cma:0kB [ 165.955526][T10051] lowmem_reserve[]: 0 0 1 1 1 [ 165.961340][T10051] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 166.007495][T10051] lowmem_reserve[]: 0 0 0 0 0 [ 166.031988][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 166.051319][T10051] Node 1 Normal free:3884876kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22208kB local_pcp:10784kB free_cma:0kB [ 166.077741][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 166.098561][T10067] netlink: 'syz.3.1108': attribute type 15 has an invalid length. [ 166.167855][T10051] lowmem_reserve[]: 0 0 0 0 0 [ 166.172636][T10051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.262107][T10051] Node 0 DMA32: 702*4kB (UM) 74*8kB (UME) 16*16kB (UM) 367*32kB (UE) 35*64kB (UM) 4*128kB (UME) 6*256kB (UM) 5*512kB (UE) 6*1024kB (U) 4*2048kB (UE) 326*4096kB (UM) = 1371880kB [ 166.365505][T10051] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 166.411405][T10051] Node 1 Normal: 211*4kB (UE) 46*8kB (UME) 39*16kB (UME) 67*32kB (UME) 21*64kB (UME) 11*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3884876kB [ 166.450129][T10051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.465934][T10051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.491296][T10080] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1110'. [ 166.576985][T10051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.693469][T10051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.715414][T10051] 44426 total pagecache pages [ 166.728379][T10086] IPv6: sit1: Disabled Multicast RS [ 166.742844][T10086] sit1: entered allmulticast mode [ 166.751334][T10051] 0 pages in swap cache [ 166.767120][T10051] Free swap = 124996kB [ 166.778561][T10051] Total swap = 124996kB [ 166.782757][T10051] 2097051 pages RAM [ 166.786564][T10051] 0 pages HighMem/MovableOnly [ 166.810532][T10051] 425673 pages reserved [ 166.820902][T10051] 0 pages cma reserved [ 166.885852][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 166.942949][T10087] tipc: Started in network mode [ 166.948927][T10087] tipc: Node identity eaab5aa2fbc9, cluster identity 4711 [ 166.956235][T10087] tipc: Enabled bearer , priority 0 [ 167.088098][T10088] syzkaller0: entered promiscuous mode [ 167.093749][T10088] syzkaller0: entered allmulticast mode [ 167.100975][T10088] tipc: Resetting bearer [ 167.215711][ T7594] tipc: Resetting bearer [ 167.225111][T10085] tipc: Resetting bearer [ 167.265272][T10112] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1121'. [ 167.329853][T10105] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1119'. [ 168.100401][ T6589] tipc: Node number set to 291658402 [ 168.521350][T10085] tipc: Disabling bearer [ 168.815925][T10128] tipc: Enabled bearer , priority 0 [ 168.853793][T10128] syzkaller0: entered promiscuous mode [ 168.861833][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 168.879580][T10128] syzkaller0: entered allmulticast mode [ 169.031418][T10146] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1130'. [ 169.146349][T10138] tipc: Enabling of bearer rejected, failed to enable media [ 169.169827][T10128] tipc: Resetting bearer [ 169.239714][T10138] netlink: 'syz.0.1129': attribute type 3 has an invalid length. [ 169.276799][T10122] tipc: Resetting bearer [ 169.352229][T10122] tipc: Disabling bearer [ 169.535103][T10170] gre0: entered promiscuous mode [ 169.564686][T10174] netlink: 'syz.0.1137': attribute type 10 has an invalid length. [ 169.621220][T10174] geneve1: entered promiscuous mode [ 169.654461][T10174] geneve1: entered allmulticast mode [ 169.680467][T10174] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 170.078119][T10201] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 170.330001][T10216] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 170.455661][T10222] sctp: [Deprecated]: syz.4.1152 (pid 10222) Use of int in maxseg socket option. [ 170.455661][T10222] Use struct sctp_assoc_value instead [ 170.515330][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 170.534234][T10227] veth0: entered promiscuous mode [ 170.645052][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 170.815125][T10245] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1159'. [ 170.962834][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 171.013775][T10257] syzkaller0: entered promiscuous mode [ 171.019691][T10257] syzkaller0: entered allmulticast mode [ 171.032764][T10257] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 172.548432][T10217] veth0: left promiscuous mode [ 172.653198][T10285] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 172.684879][T10285] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 172.754987][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'. [ 172.836279][T10289] bond2: (slave gretap2): making interface the new active one [ 172.846993][T10289] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 172.935433][T10302] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 172.944888][T10302] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 172.954268][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 172.964435][T10302] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 172.973320][T10302] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 172.981714][T10304] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1171'. [ 173.296768][ T6585] IPVS: starting estimator thread 0... [ 173.308965][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 173.328573][T10326] netlink: 'syz.0.1181': attribute type 1 has an invalid length. [ 173.359828][T10319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.386983][T10324] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 173.408740][T10325] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.478528][T10329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.613059][T10319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.703564][T10338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.743182][T10348] syzkaller0: entered promiscuous mode [ 173.782717][T10348] syzkaller0: entered allmulticast mode [ 173.858133][T10354] openvswitch: netlink: Flow key attr not present in new flow. [ 173.869785][T10319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.889199][T10343] tipc: Enabled bearer , priority 0 [ 173.906107][T10353] __nla_validate_parse: 2 callbacks suppressed [ 173.906128][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 173.988321][T10319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.018458][T10343] tipc: Resetting bearer [ 174.092355][T10343] tipc: Disabling bearer [ 174.286747][ T7594] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.319057][T10361] tipc: Enabled bearer , priority 0 [ 174.326599][T10361] syzkaller0: entered promiscuous mode [ 174.332689][T10361] syzkaller0: entered allmulticast mode [ 174.357695][T10370] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1195'. [ 174.467998][ T8332] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.484578][T10388] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1199'. [ 174.529655][T10360] tipc: Resetting bearer [ 174.583861][T10391] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 174.621494][T10360] tipc: Disabling bearer [ 174.639952][ T8338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.676088][ T8332] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.868245][T10402] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 174.893512][T10401] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 175.082564][T10411] xt_socket: unknown flags 0xe4 [ 175.321733][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.337492][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.370318][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.381154][T10439] netlink: 'syz.0.1213': attribute type 16 has an invalid length. [ 175.391118][T10439] netlink: 'syz.0.1213': attribute type 3 has an invalid length. [ 175.431031][T10439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1213'. [ 175.442930][T10434] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.523665][T10434] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 175.545271][T10441] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1215'. [ 175.605902][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.818940][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.840426][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.876951][T10434] wg1 speed is unknown, defaulting to 1000 [ 175.919424][T10434] wg1 speed is unknown, defaulting to 1000 [ 176.130307][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 176.173079][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 176.195397][T10477] veth0_macvtap: left promiscuous mode [ 176.216610][T10477] macvtap0: entered allmulticast mode [ 176.245732][T10477] macvtap0: refused to change device tx_queue_len [ 176.491116][T10498] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1229'. [ 176.551611][T10503] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1230'. [ 176.795526][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 176.885456][T10520] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 176.916583][T10520] tun0: tun_chr_ioctl cmd 1074025675 [ 176.924391][T10520] tun0: persist disabled [ 177.881697][T10565] validate_nla: 3 callbacks suppressed [ 177.881715][T10565] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 178.092898][T10566] tipc: Enabled bearer , priority 0 [ 178.240086][T10561] tipc: Resetting bearer [ 179.098731][ T6588] tipc: Node number set to 3431459623 [ 179.114325][T10606] __nla_validate_parse: 5 callbacks suppressed [ 179.114343][T10606] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1257'. [ 180.186724][T10561] tipc: Disabling bearer [ 180.195937][T10592] : renamed from hsr0 (while UP) [ 180.222199][T10596] vlan2: entered allmulticast mode [ 180.248472][T10596] bond0: entered allmulticast mode [ 180.253628][T10596] bond_slave_0: entered allmulticast mode [ 180.385477][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 180.429802][T10620] netlink: 'syz.0.1261': attribute type 2 has an invalid length. [ 180.438618][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 180.488057][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1260'. [ 180.579378][T10622] netlink: 'syz.2.1262': attribute type 11 has an invalid length. [ 180.617733][T10622] netlink: 'syz.2.1262': attribute type 11 has an invalid length. [ 180.626062][T10622] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1262'. [ 180.735147][T10637] netlink: 'syz.3.1267': attribute type 11 has an invalid length. [ 180.751885][T10637] netlink: 'syz.3.1267': attribute type 5 has an invalid length. [ 180.784500][T10637] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.1267'. [ 180.838535][T10641] veth5: entered allmulticast mode [ 181.083622][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1274'. [ 181.115476][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 181.329012][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1278'. [ 181.346049][T10681] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 181.522064][T10691] 8021q: VLANs not supported on lo [ 181.911558][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'. [ 182.139856][T10734] tipc: Enabled bearer , priority 0 [ 182.381536][T10734] syzkaller0: entered promiscuous mode [ 182.401725][T10734] syzkaller0: entered allmulticast mode [ 182.410566][T10752] xt_HMARK: spi-set and port-set can't be combined [ 182.413375][T10734] tipc: Resetting bearer [ 182.568536][ T7594] tipc: Resetting bearer [ 182.621894][T10730] tipc: Resetting bearer [ 182.825060][T10780] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 183.188602][T10178] tipc: Node number set to 2476054963 [ 183.992069][T10730] tipc: Disabling bearer [ 184.002560][T10758] tipc: Enabled bearer , priority 0 [ 184.010209][T10760] syzkaller0: entered promiscuous mode [ 184.015845][T10760] syzkaller0: entered allmulticast mode [ 184.033037][T10770] team_slave_0: entered promiscuous mode [ 184.038989][T10770] team_slave_1: entered promiscuous mode [ 184.056947][T10770] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 184.074846][T10770] team0: Device macvtap1 is already an upper device of the team interface [ 184.104576][T10770] team_slave_0: left promiscuous mode [ 184.110100][T10770] team_slave_1: left promiscuous mode [ 184.193452][T10778] tipc: Resetting bearer [ 184.202975][T10757] tipc: Resetting bearer [ 184.292971][T10757] tipc: Disabling bearer [ 184.585352][T10812] __nla_validate_parse: 5 callbacks suppressed [ 184.585371][T10812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1311'. [ 184.598223][T10817] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 184.624796][T10812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1311'. [ 184.635026][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 184.649665][T10812] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1311'. [ 184.662674][T10812] netlink: 'syz.2.1311': attribute type 2 has an invalid length. [ 184.678483][T10812] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1311'. [ 184.683522][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 185.411638][T10855] Driver unsupported XDP return value 0 on prog (id 282) dev N/A, expect packet loss! [ 185.462981][T10863] lo: entered allmulticast mode [ 185.501430][T10863] tunl0: left promiscuous mode [ 185.522343][T10863] tunl0: entered allmulticast mode [ 185.553134][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'. [ 185.568583][T10863] gre0: entered allmulticast mode [ 185.671893][T10863] gretap0: entered allmulticast mode [ 185.807838][T10863] erspan0: entered allmulticast mode [ 185.865908][T10863] ip_vti0: entered allmulticast mode [ 185.934366][T10863] ip6_vti0: entered allmulticast mode [ 185.962804][T10863] sit0: entered allmulticast mode [ 185.971324][T10888] IPVS: set_ctl: invalid protocol: 136 172.30.1.4:20002 [ 186.011777][T10863] ip6tnl0: entered allmulticast mode [ 186.089794][T10863] ip6gre0: entered allmulticast mode [ 186.129137][T10863] syz_tun: entered allmulticast mode [ 186.177839][T10863] ip6gretap0: entered allmulticast mode [ 186.196481][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.211674][T10863] bridge0: entered allmulticast mode [ 186.234272][T10863] vcan0: entered allmulticast mode [ 186.250798][T10863] bond0: entered allmulticast mode [ 186.256798][T10863] bond_slave_0: entered allmulticast mode [ 186.266517][T10863] bond_slave_1: entered allmulticast mode [ 186.274865][T10863] team0: left promiscuous mode [ 186.281270][T10863] C: left promiscuous mode [ 186.286311][T10863] team_slave_1: left promiscuous mode [ 186.297844][T10863] team0: entered allmulticast mode [ 186.303661][T10863] C: entered allmulticast mode [ 186.309549][T10863] team_slave_1: entered allmulticast mode [ 186.316074][T10863] dummy0: entered allmulticast mode [ 186.334177][T10863] nlmon0: entered allmulticast mode [ 186.344402][T10863] caif0: entered allmulticast mode [ 186.355289][T10863] batadv0: entered allmulticast mode [ 186.373716][T10863] vxcan0: entered allmulticast mode [ 186.381602][T10863] vxcan1: entered allmulticast mode [ 186.393686][T10863] veth0: entered allmulticast mode [ 186.403613][T10863] veth1: entered allmulticast mode [ 186.431700][T10863] wg0: entered allmulticast mode [ 186.440933][T10863] wg1: entered allmulticast mode [ 186.451055][T10863] wg2: entered allmulticast mode [ 186.463652][T10863] veth0_to_bridge: entered allmulticast mode [ 186.491715][T10863] veth1_to_bridge: entered allmulticast mode [ 186.504264][T10863] veth0_to_bond: entered allmulticast mode [ 186.537637][T10863] veth1_to_bond: entered allmulticast mode [ 186.558479][T10863] veth0_to_team: entered allmulticast mode [ 186.579162][T10863] veth1_to_team: entered allmulticast mode [ 186.595818][T10863] veth0_to_batadv: entered allmulticast mode [ 186.613057][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.622318][T10863] batadv_slave_0: entered allmulticast mode [ 186.641749][T10863] veth1_to_batadv: entered allmulticast mode [ 186.666903][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.676238][T10863] batadv_slave_1: entered allmulticast mode [ 186.694544][T10863] xfrm0: entered allmulticast mode [ 186.713339][T10863] veth0_to_hsr: entered allmulticast mode [ 186.768574][T10863] veth1_to_hsr: entered allmulticast mode [ 186.862729][T10863] veth1_virt_wifi: entered allmulticast mode [ 186.882290][T10863] veth0_virt_wifi: entered allmulticast mode [ 186.898309][T10863] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 186.906798][T10863] veth1_vlan: entered allmulticast mode [ 187.000350][T10863] vlan1: entered allmulticast mode [ 187.006192][T10863] macvlan0: entered allmulticast mode [ 187.031996][T10863] macvlan1: entered allmulticast mode [ 187.041642][T10863] ipvlan0: entered allmulticast mode [ 187.054231][T10863] ipvlan1: entered allmulticast mode [ 187.060867][T10863] veth1_macvtap: entered allmulticast mode [ 187.078948][T10863] veth0_macvtap: entered allmulticast mode [ 187.092028][T10863] macvtap0: entered allmulticast mode [ 187.101958][T10863] macsec0: entered allmulticast mode [ 187.117509][T10863] geneve0: entered allmulticast mode [ 187.135576][T10863] geneve1: entered allmulticast mode [ 187.153159][T10863] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 187.208593][T10863] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 187.220641][T10863] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 187.241515][T10863] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 187.266040][T10863] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 187.292482][T10863] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 187.316033][T10863] syztnl2: entered allmulticast mode [ 187.324026][T10863] bridge1: left promiscuous mode [ 187.343260][T10863] macvlan2: entered allmulticast mode [ 187.358337][T10863] macvlan3: entered allmulticast mode [ 187.376208][T10863] bridge2: entered allmulticast mode [ 187.383110][T10863] gretap1: left promiscuous mode [ 187.402343][T10863] bridge3: entered allmulticast mode [ 187.422624][T10863] : entered allmulticast mode [ 187.431010][T10863] sit1: entered allmulticast mode [ 187.453888][T10863] sit2: entered allmulticast mode [ 187.467444][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 187.492576][T10863] bond1: entered allmulticast mode [ 187.498779][T10863] bridge4: entered allmulticast mode [ 187.504275][T10863] macvlan4: entered allmulticast mode [ 187.518215][T10863] vlan0: left promiscuous mode [ 187.523702][T10863] macvtap1: left promiscuous mode [ 187.540805][T10863] bridge5: entered allmulticast mode [ 187.573921][T10863] ip6tnl1: entered allmulticast mode [ 187.580504][T10863] bond2: entered allmulticast mode [ 187.585655][T10863] gretap2: entered allmulticast mode [ 187.598541][T10863] bond3: entered allmulticast mode [ 187.645125][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1328'. [ 187.711495][ T5877] Bluetooth: hci4: link tx timeout [ 187.716935][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.761926][ T8340] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.818326][ T8340] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.843614][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1332'. [ 187.854732][ T8340] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.896011][ T8340] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.938454][ T8340] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.961369][ T8340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.041221][ T5877] Bluetooth: hci4: link tx timeout [ 188.046394][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.074405][ T8340] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.088544][ T5877] Bluetooth: hci4: link tx timeout [ 188.091130][T10897] IPv4: Oversized IP packet from 127.202.26.0 [ 188.094158][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.133731][ T8340] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.181073][T10914] netlink: 'syz.2.1335': attribute type 12 has an invalid length. [ 188.212999][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1335'. [ 188.366955][T10910] wg1 speed is unknown, defaulting to 1000 [ 188.592488][T10939] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 188.918464][ T5877] Bluetooth: hci4: link tx timeout [ 188.933986][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.190171][ T5877] Bluetooth: hci4: link tx timeout [ 189.195518][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.680708][T11001] netlink: 'syz.1.1353': attribute type 9 has an invalid length. [ 189.723194][T11001] __nla_validate_parse: 1 callbacks suppressed [ 189.723212][T11001] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1353'. [ 189.743092][T11000] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 189.762290][T11001] openvswitch: netlink: Unknown key attributes 2 [ 189.776677][T11001] netlink: 'syz.1.1353': attribute type 9 has an invalid length. [ 189.785468][T11000] netlink: 'syz.2.1352': attribute type 3 has an invalid length. [ 189.788106][T11001] netlink: 160748 bytes leftover after parsing attributes in process `syz.1.1353'. [ 189.794043][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 189.810390][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1354'. [ 189.834538][T11000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1352'. [ 189.871968][T11012] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 190.254565][T11029] macvtap1: entered promiscuous mode [ 190.273844][T11029] vlan0: entered promiscuous mode [ 190.353483][T11029] macvtap1: entered allmulticast mode [ 190.394326][T11029] vlan0: entered allmulticast mode [ 190.465745][T11038] macvtap2: entered promiscuous mode [ 190.471738][T11038] macvtap2: entered allmulticast mode [ 190.714717][T11055] netlink: 'syz.3.1367': attribute type 4 has an invalid length. [ 190.735047][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'. [ 190.759059][T11055] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 190.894631][T11068] sctp: [Deprecated]: syz.0.1369 (pid 11068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.894631][T11068] Use struct sctp_sack_info instead [ 191.041335][T11076] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.383622][T11100] netlink: 'syz.3.1379': attribute type 15 has an invalid length. [ 191.409696][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 191.440121][T11100] netlink: 'syz.3.1379': attribute type 15 has an invalid length. [ 191.440613][ T8338] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 191.458749][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 191.506168][ T8338] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 191.540721][ T8338] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 191.572206][ T8338] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 191.624113][T11116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1383'. [ 191.819610][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 191.985984][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 192.531570][T11118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.052930][T11186] netlink: 'syz.3.1403': attribute type 4 has an invalid length. [ 193.708495][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.353628][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.785264][T11273] syzkaller1: entered promiscuous mode [ 194.790980][T11273] syzkaller1: entered allmulticast mode [ 195.072718][T11293] __nla_validate_parse: 2 callbacks suppressed [ 195.072739][T11293] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1435'. [ 195.090548][T11293] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1435'. [ 195.101326][T11293] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1435'. [ 195.256513][T11302] netlink: 'syz.1.1438': attribute type 11 has an invalid length. [ 195.432761][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1440'. [ 195.442730][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1440'. [ 195.454026][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1440'. [ 195.464127][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1440'. [ 195.517750][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1442'. [ 195.551534][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 195.695089][T11320] netlink: 'syz.0.1443': attribute type 8 has an invalid length. [ 196.196562][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 196.245316][T11337] bond0: (slave bond_slave_1): Releasing backup interface [ 196.475423][T11349] syz_tun: entered allmulticast mode [ 196.485732][T11350] tipc: Enabled bearer , priority 0 [ 196.505947][T11349] syz_tun: left allmulticast mode [ 196.514830][T11350] syzkaller0: entered promiscuous mode [ 196.525430][T11350] syzkaller0: entered allmulticast mode [ 196.594098][T11341] tipc: Resetting bearer [ 196.658427][T11340] tipc: Resetting bearer [ 196.703337][T11340] tipc: Disabling bearer [ 196.804682][T11362] netlink: 'syz.3.1458': attribute type 16 has an invalid length. [ 196.812673][T11362] netlink: 'syz.3.1458': attribute type 3 has an invalid length. [ 196.970438][T11371] batman_adv: batadv0: Adding interface: dummy0 [ 196.976736][T11371] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.051160][T11371] batman_adv: batadv0: Interface activated: dummy0 [ 197.343657][T11398] netlink: 'syz.2.1470': attribute type 29 has an invalid length. [ 197.402446][T11398] syz.2.1470 uses old SIOCAX25GETINFO [ 197.869646][T11430] team_slave_0: entered allmulticast mode [ 198.384185][T11458] IPVS: Error connecting to the multicast addr [ 198.855192][T11484] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 199.778727][T11539] unknown channel width for channel at 909000KHz? [ 199.807878][T11539] unknown channel width for channel at 909000KHz? [ 199.814348][T11539] unknown channel width for channel at 909000KHz? [ 199.917319][T11546] openvswitch: netlink: IP tunnel dst address not specified [ 200.046920][T11554] gtp0: entered promiscuous mode [ 200.062759][T11554] gtp0: entered allmulticast mode [ 200.080903][T11557] netlink: 'syz.3.1516': attribute type 1 has an invalid length. [ 200.700203][T11586] __nla_validate_parse: 24 callbacks suppressed [ 200.700220][T11586] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1524'. [ 200.704789][T11587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 200.966075][T11583] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 201.550117][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 201.556333][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.556368][ T5185] Bluetooth: hci2: command 0x0401 tx timeout [ 201.584800][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 202.104827][T11657] veth5: entered promiscuous mode [ 202.115162][T11657] veth5: entered allmulticast mode [ 202.212594][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1544'. [ 202.290784][T11670] tipc: Enabled bearer , priority 0 [ 202.322448][T11670] syzkaller0: entered promiscuous mode [ 202.343691][T11670] syzkaller0: entered allmulticast mode [ 202.533417][T11691] tipc: Resetting bearer [ 202.598223][T11669] tipc: Resetting bearer [ 202.696054][T11669] tipc: Disabling bearer [ 203.155936][T11730] netem: change failed [ 203.209774][T11730] netem: change failed [ 203.530705][T11751] bridge4: entered promiscuous mode [ 203.536062][T11751] bridge4: entered allmulticast mode [ 204.015832][T11786] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 204.080277][T11786] bond3 (unregistering): Released all slaves [ 204.140385][T11799] FAULT_INJECTION: forcing a failure. [ 204.140385][T11799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.162046][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.0.1577 Not tainted syzkaller #0 PREEMPT(full) [ 204.162071][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.162082][T11799] Call Trace: [ 204.162089][T11799] [ 204.162096][T11799] dump_stack_lvl+0x189/0x250 [ 204.162122][T11799] ? __pfx____ratelimit+0x10/0x10 [ 204.162140][T11799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.162159][T11799] ? __pfx__printk+0x10/0x10 [ 204.162184][T11799] ? __might_fault+0xb0/0x130 [ 204.162218][T11799] should_fail_ex+0x414/0x560 [ 204.162250][T11799] _copy_from_user+0x2d/0xb0 [ 204.162282][T11799] ___sys_sendmsg+0x158/0x2a0 [ 204.162307][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.162367][T11799] ? __fget_files+0x2a/0x420 [ 204.162382][T11799] ? __fget_files+0x3a0/0x420 [ 204.162408][T11799] __sys_sendmmsg+0x227/0x430 [ 204.162439][T11799] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.162460][T11799] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 204.162503][T11799] ? ksys_write+0x22a/0x250 [ 204.162529][T11799] ? __pfx_ksys_write+0x10/0x10 [ 204.162552][T11799] ? rcu_is_watching+0x15/0xb0 [ 204.162577][T11799] __x64_sys_sendmmsg+0xa0/0xc0 [ 204.162604][T11799] do_syscall_64+0xfa/0x3b0 [ 204.162624][T11799] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.162644][T11799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.162659][T11799] ? clear_bhb_loop+0x60/0xb0 [ 204.162681][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.162699][T11799] RIP: 0033:0x7f599458eec9 [ 204.162715][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.162729][T11799] RSP: 002b:00007f599544e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.162748][T11799] RAX: ffffffffffffffda RBX: 00007f59947e5fa0 RCX: 00007f599458eec9 [ 204.162762][T11799] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.162774][T11799] RBP: 00007f599544e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.162785][T11799] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 204.162797][T11799] R13: 00007f59947e6038 R14: 00007f59947e5fa0 R15: 00007fffdb2bc408 [ 204.162827][T11799] [ 204.420189][T11794] tipc: Enabled bearer , priority 0 [ 204.582122][T11793] tipc: Disabling bearer [ 204.922911][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 204.958599][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 205.023576][T11833] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 205.037696][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 205.051109][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1582'. [ 205.085795][T11833] bond3 (unregistering): Released all slaves [ 205.116001][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 205.186928][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 205.205387][T11842] tipc: Enabled bearer , priority 0 [ 205.221710][T11842] syzkaller0: entered promiscuous mode [ 205.230512][T11849] FAULT_INJECTION: forcing a failure. [ 205.230512][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.244897][T11842] syzkaller0: entered allmulticast mode [ 205.253891][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.3.1588 Not tainted syzkaller #0 PREEMPT(full) [ 205.253916][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.253928][T11849] Call Trace: [ 205.253936][T11849] [ 205.253944][T11849] dump_stack_lvl+0x189/0x250 [ 205.253971][T11849] ? __pfx____ratelimit+0x10/0x10 [ 205.253992][T11849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.254012][T11849] ? __pfx__printk+0x10/0x10 [ 205.254051][T11839] tipc: Resetting bearer [ 205.254047][T11849] should_fail_ex+0x414/0x560 [ 205.254079][T11849] _copy_to_user+0x31/0xb0 [ 205.254101][T11849] simple_read_from_buffer+0xe1/0x170 [ 205.254139][T11849] proc_fail_nth_read+0x1b3/0x220 [ 205.254165][T11849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.254190][T11849] ? rw_verify_area+0x2a6/0x4d0 [ 205.254212][T11849] ? __lock_acquire+0xab9/0xd20 [ 205.254237][T11849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.254260][T11849] vfs_read+0x1fd/0xa30 [ 205.254284][T11849] ? fdget_pos+0x247/0x320 [ 205.254305][T11849] ? __pfx___mutex_lock+0x10/0x10 [ 205.254331][T11849] ? __pfx_vfs_read+0x10/0x10 [ 205.254356][T11849] ? __fget_files+0x2a/0x420 [ 205.254382][T11849] ? __fget_files+0x3a0/0x420 [ 205.254397][T11849] ? __fget_files+0x2a/0x420 [ 205.254423][T11849] ksys_read+0x145/0x250 [ 205.254450][T11849] ? __pfx_ksys_read+0x10/0x10 [ 205.254472][T11849] ? rcu_is_watching+0x15/0xb0 [ 205.254496][T11849] ? do_syscall_64+0xbe/0x3b0 [ 205.254522][T11849] do_syscall_64+0xfa/0x3b0 [ 205.254541][T11849] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.254560][T11849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.254579][T11849] ? clear_bhb_loop+0x60/0xb0 [ 205.254602][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.254620][T11849] RIP: 0033:0x7f71b838d8dc [ 205.254636][T11849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.254652][T11849] RSP: 002b:00007f71b65f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.254671][T11849] RAX: ffffffffffffffda RBX: 00007f71b85e5fa0 RCX: 00007f71b838d8dc [ 205.254684][T11849] RDX: 000000000000000f RSI: 00007f71b65f60a0 RDI: 0000000000000004 [ 205.254696][T11849] RBP: 00007f71b65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.254707][T11849] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 205.254719][T11849] R13: 00007f71b85e6038 R14: 00007f71b85e5fa0 R15: 00007fffbe0370b8 [ 205.254749][T11849] [ 205.350759][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1589'. [ 205.521822][T11852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1589'. [ 205.563337][T11839] tipc: Disabling bearer [ 205.753199][T11861] sctp: [Deprecated]: syz.2.1592 (pid 11861) Use of int in max_burst socket option. [ 205.753199][T11861] Use struct sctp_assoc_value instead [ 205.775228][T11861] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 205.784469][T11861] netlink: 'syz.2.1592': attribute type 2 has an invalid length. [ 205.793853][T11861] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 205.900562][T11867] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 205.945529][T11867] bond3: entered promiscuous mode [ 205.964237][T11867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.985965][T11871] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 206.019009][T11869] bond3: (slave bridge3): making interface the new active one [ 206.026610][T11869] bridge3: entered promiscuous mode [ 206.034692][T11869] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 206.089425][T11871] netlink: 'syz.1.1596': attribute type 4 has an invalid length. [ 206.112563][T11874] __nla_validate_parse: 1 callbacks suppressed [ 206.112583][T11874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 206.213888][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1598'. [ 206.300661][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 206.343945][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 206.354176][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 206.660069][T11902] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 206.669182][T11902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1605'. [ 206.686717][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 206.914868][T11913] syzkaller0: entered promiscuous mode [ 206.936213][T11913] syzkaller0: entered allmulticast mode [ 206.953824][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1612'. [ 207.106098][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 207.121237][T11931] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 207.133190][T11931] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 207.312005][T11939] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1618'. [ 207.352881][ T7594] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.431844][ T7594] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.452321][ T7594] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.506193][ T7594] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.621129][T11955] netlink: 'syz.3.1623': attribute type 7 has an invalid length. [ 207.630566][T11955] netlink: 'syz.3.1623': attribute type 8 has an invalid length. [ 207.926912][T11986] netlink: 'syz.1.1630': attribute type 12 has an invalid length. [ 208.211751][T12004] geneve2: entered promiscuous mode [ 208.229694][T12004] geneve2: entered allmulticast mode [ 208.250999][T12005] batman_adv: batadv0: Interface deactivated: dummy0 [ 208.272036][T12005] batman_adv: batadv0: Removing interface: dummy0 [ 208.302512][T12005] bridge_slave_0: left allmulticast mode [ 208.315556][T12005] bridge_slave_0: left promiscuous mode [ 208.327873][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.357271][T12005] bridge_slave_1: left allmulticast mode [ 208.363050][T12005] bridge_slave_1: left promiscuous mode [ 208.375123][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.417630][T12005] bond0: (slave bond_slave_0): Releasing backup interface [ 208.442590][T12005] bond_slave_0: left allmulticast mode [ 208.495589][T12005] team0: Port device team_slave_0 removed [ 208.546174][T12005] team0: Port device team_slave_1 removed [ 208.569560][T12005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.579680][T12005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.593616][T12005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.611683][T12005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.634585][T12005] bond1: (slave ip6gretap1): Releasing active interface [ 208.662869][T12005] bond3: (slave bridge3): Releasing backup interface [ 208.670260][T12005] bridge3: left promiscuous mode [ 208.688161][T12009] team0: Mode changed to "broadcast" [ 208.724751][T10893] wg1 speed is unknown, defaulting to 1000 [ 208.949226][T12039] vlan1: entered allmulticast mode [ 209.118180][T12040] wg1 speed is unknown, defaulting to 1000 [ 209.209889][T12052] nbd: illegal input index -8454144 [ 209.474759][T12071] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20001 [ 210.301579][T12114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.363788][T12114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.899200][T12149] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 210.909458][T12149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.046001][T12156] veth0_to_team: entered promiscuous mode [ 211.257870][T12164] __nla_validate_parse: 18 callbacks suppressed [ 211.257891][T12164] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1683'. [ 211.345206][T12170] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1685'. [ 211.536498][T12182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1691'. [ 211.742429][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 211.813607][T12196] tipc: Enabling of bearer rejected, failed to enable media [ 211.880503][T12200] netlink: 'syz.2.1696': attribute type 15 has an invalid length. [ 211.889815][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 211.900261][T12200] netlink: 'syz.2.1696': attribute type 15 has an invalid length. [ 211.915649][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 212.020976][T12206] º: renamed from veth1_vlan (while UP) [ 212.495375][T12230] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1706'. [ 212.526433][T12230] netlink: zone id is out of range [ 212.541999][T12230] netlink: get zone limit has 8 unknown bytes [ 212.548922][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 212.588288][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 212.594751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.602741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.610610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.615472][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 212.618615][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.618637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.618735][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.651017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.659015][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.666833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.674823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.682683][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.690653][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.698492][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.706409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.714264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.722196][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.730050][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.737982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.745779][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.753756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.761598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.769588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.777448][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.785359][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.793201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.801120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.808971][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.816863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 212.824698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 212.925487][T12230] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 212.934974][T12230] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1706'. [ 213.667883][T12289] netlink: 'syz.3.1729': attribute type 26 has an invalid length. [ 214.010852][T12310] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 214.019868][T12309] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 214.030909][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.039493][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.113269][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.120568][T12310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.128162][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.135322][T12310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.204705][T12310] bridge0: entered promiscuous mode [ 214.223488][T12310] bridge0: entered allmulticast mode [ 214.235471][T12310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 214.246243][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.253579][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.455580][T12337] bridge_slave_1: entered promiscuous mode [ 214.484932][T12343] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 214.523611][T12337] only policy match revision 0 supported [ 214.523679][T12337] unable to load match [ 214.538024][T12342] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 214.604578][T12343] batadv0: left allmulticast mode [ 214.661804][T12351] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 214.704995][T12351] bond3 (unregistering): Released all slaves [ 215.659425][T12414] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 215.674517][T12412] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 215.719197][T12419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.752008][T12419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.775561][T12419] batman_adv: batadv0: Removing interface: team0 [ 216.949811][T12476] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.684097][T12521] netlink: 'syz.0.1784': attribute type 11 has an invalid length. [ 217.720142][T12521] __nla_validate_parse: 17 callbacks suppressed [ 217.720171][T12521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1784'. [ 217.802312][T12523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1785'. [ 217.979189][T12535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1786'. [ 219.133334][T12528] veth1_macvtap: left promiscuous mode [ 219.139320][T12528] macsec0: entered promiscuous mode [ 219.144552][T12528] macsec0: entered allmulticast mode [ 219.452208][T12549] bridge_slave_0: left allmulticast mode [ 219.468361][T12549] bridge_slave_0: left promiscuous mode [ 219.480198][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.529998][T12556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1793'. [ 219.606295][T12549] bridge_slave_1: left allmulticast mode [ 219.618031][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.708757][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 219.719694][T12549] team0: Port device team_slave_0 removed [ 219.760230][T12549] team0: Port device team_slave_1 removed [ 219.774643][T12549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.783952][T12549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.793779][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1796'. [ 219.824736][T12557] geneve2: entered promiscuous mode [ 219.830683][T12557] geneve2: entered allmulticast mode [ 219.895393][T12565] syzkaller1: entered promiscuous mode [ 219.921351][T12565] syzkaller1: entered allmulticast mode [ 219.973868][T12575] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.001906][T12575] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.044268][ T8332] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.057810][ T7594] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.082894][ T7594] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.093171][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1801'. [ 220.137640][T12590] sctp: [Deprecated]: syz.1.1800 (pid 12590) Use of int in max_burst socket option deprecated. [ 220.137640][T12590] Use struct sctp_assoc_value instead [ 220.521303][T12614] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1809'. [ 220.594181][T12619] validate_nla: 3 callbacks suppressed [ 220.594201][T12619] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 220.651691][T12619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.724500][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.756472][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.779471][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.796503][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.817971][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.834688][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.835356][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1816'. [ 220.845932][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.866734][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.894664][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.954195][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 221.309840][T12657] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 221.455104][T12668] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 221.518009][T12669] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 221.539759][T12666] syzkaller0: entered promiscuous mode [ 221.545251][T12666] syzkaller0: entered allmulticast mode [ 223.021192][T12695] __nla_validate_parse: 3 callbacks suppressed [ 223.021212][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 223.063622][T12575] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.074757][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 223.078735][T12575] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.107800][T12575] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.222076][T12575] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.250365][T12575] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.264750][T12575] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.283544][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 223.355343][T12703] bond6: option xmit_hash_policy: invalid value (64) [ 223.373509][T12703] bond6 (unregistering): Released all slaves [ 223.426711][T12575] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.446551][T12575] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.480940][T12575] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.607909][ T8338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.616144][ T8338] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.635626][ T8338] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.679228][ T8338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.692208][ T8338] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.703080][ T8338] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.754101][ T8332] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.773044][ T8332] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.793175][ T8332] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.844584][ T8332] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.861437][ T8332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.879532][ T8332] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 224.197971][T12744] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1852'. [ 224.304948][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 224.459786][T12764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1859'. [ 224.521576][T12767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1860'. [ 224.625756][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1863'. [ 224.630676][T12774] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 224.639204][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 224.647925][T12774] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1862'. [ 225.630467][T12848] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 225.658567][T12844] syzkaller1: entered promiscuous mode [ 225.664202][T12844] syzkaller1: entered allmulticast mode [ 225.682702][T12848] syzkaller0: refused to change device tx_queue_len [ 225.781499][T12854] pim6reg1: entered promiscuous mode [ 225.786958][T12854] pim6reg1: entered allmulticast mode [ 226.346550][T12878] netlink: 'syz.0.1891': attribute type 1 has an invalid length. [ 226.909019][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.046325][T12925] netlink: 'syz.0.1901': attribute type 8 has an invalid length. [ 227.107159][T12924] erspan0: entered promiscuous mode [ 227.117217][T12924] erspan0: entered allmulticast mode [ 227.140356][T12924] tipc: Enabled bearer , priority 0 [ 227.179816][T12922] tipc: Disabling bearer [ 227.277828][T12931] tipc: Enabled bearer , priority 0 [ 227.286925][T12931] syzkaller0: entered promiscuous mode [ 227.305499][T12931] syzkaller0: entered allmulticast mode [ 227.310047][T12938] block nbd0: not configured, cannot reconfigure [ 227.319320][T12940] block nbd0: not configured, cannot reconfigure [ 227.344538][T12931] tipc: Resetting bearer [ 227.382348][T12930] tipc: Resetting bearer [ 227.433325][T12930] tipc: Disabling bearer [ 228.046871][T12963] __nla_validate_parse: 16 callbacks suppressed [ 228.046894][T12963] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1917'. [ 228.067817][T12963] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1917'. [ 228.081868][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'. [ 228.373146][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 228.697446][T12997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1927'. [ 228.782714][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1930'. [ 228.821503][T13004] netlink: 'syz.0.1930': attribute type 7 has an invalid length. [ 228.840072][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 228.942505][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1934'. [ 228.959022][T13008] bond6: option miimon: invalid value (18446744073709551585) [ 228.966588][T13008] bond6: option miimon: allowed values 0 - 2147483647 [ 228.975634][T13008] bond6 (unregistering): Released all slaves [ 229.342961][T13043] IPVS: length: 157 != 24 [ 230.062971][T13062] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1945'. [ 230.126490][T13063] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 230.153867][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1946'. [ 230.316630][T13073] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 231.398112][T13063] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 231.496972][T13066] bond6 (unregistering): Released all slaves [ 231.565543][T13073] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 231.599495][T13089] bridge0: port 1(ipvlan2) entered blocking state [ 231.626739][T13089] bridge0: port 1(ipvlan2) entered disabled state [ 231.634940][T13089] ipvlan2: entered allmulticast mode [ 231.642594][T13089] bridge0: entered allmulticast mode [ 231.651981][T13089] ipvlan2: left allmulticast mode [ 231.657787][T13089] bridge0: left allmulticast mode [ 231.797954][T13098] tipc: Enabled bearer , priority 0 [ 231.809986][T13098] syzkaller0: entered promiscuous mode [ 231.829133][T13098] syzkaller0: entered allmulticast mode [ 231.862908][T13097] tipc: Resetting bearer [ 231.903175][T13097] tipc: Disabling bearer [ 232.209139][T13134] siw: device registration error -23 [ 232.582758][T13153] team0 (unregistering): Port device team_slave_0 removed [ 232.600248][T13153] team0 (unregistering): Port device team_slave_1 removed [ 232.632866][T13157] netlink: 'syz.0.1971': attribute type 9 has an invalid length. [ 232.641946][T13157] netlink: 'syz.0.1971': attribute type 6 has an invalid length. [ 232.650543][T13157] netlink: 'syz.0.1971': attribute type 7 has an invalid length. [ 232.660623][T13157] netlink: 'syz.0.1971': attribute type 8 has an invalid length. [ 232.844713][T13173] net_ratelimit: 25 callbacks suppressed [ 232.844731][T13173] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 233.542680][T13188] infiniband syz0: set down [ 233.547926][T13188] infiniband syz0: added ipvlan1 [ 233.709545][T13188] RDS/IB: syz0: added [ 233.714589][T13188] smc: adding ib device syz0 with port count 1 [ 233.731402][T13188] smc: ib device syz0 port 1 has pnetid [ 233.885315][T13217] 8021q: VLANs not supported on vxcan1 [ 233.903659][T13219] 8021q: VLANs not supported on vxcan1 [ 234.356401][T13235] __nla_validate_parse: 7 callbacks suppressed [ 234.356419][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 234.387707][T13236] tipc: Enabled bearer , priority 0 [ 234.412161][T13236] syzkaller0: entered allmulticast mode [ 234.418838][T13239] netlink: 'syz.0.1995': attribute type 10 has an invalid length. [ 234.520704][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 234.570353][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.583890][T13239] team0: entered promiscuous mode [ 234.595425][T13239] team_slave_0: entered promiscuous mode [ 234.602259][T13239] team_slave_1: entered promiscuous mode [ 234.609045][T13239] team0: entered allmulticast mode [ 234.614385][T13239] team_slave_0: entered allmulticast mode [ 234.620612][T13239] team_slave_1: entered allmulticast mode [ 234.628583][T13239] bond0: (slave team0): Enslaving as an active interface with an up link [ 234.639982][T13236] tipc: Resetting bearer [ 234.673766][T13234] tipc: Disabling bearer [ 235.011880][T13267] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 235.223864][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2004'. [ 235.329947][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 235.586538][T13289] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2009'. [ 235.641441][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 235.674830][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 235.676647][T13286] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 235.693690][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 235.711143][T13286] bond4 (unregistering): Released all slaves [ 235.907704][T13290] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 236.016271][T13308] tipc: Trying to set illegal importance in message [ 236.196467][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 236.462115][T13331] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2020'. [ 236.484028][T13323] bond6: ARP target 1.0.0.0 is already present [ 236.512374][T13323] bond6: option arp_ip_target: invalid value (1) [ 236.564741][T13323] bond6 (unregistering): Released all slaves [ 237.102477][T13363] bridge0: port 1(vlan3) entered blocking state [ 237.124288][T13363] bridge0: port 1(vlan3) entered disabled state [ 237.135612][T13363] vlan3: entered allmulticast mode [ 237.155295][T13363] bridge0: entered allmulticast mode [ 237.189328][T13363] vlan3: left allmulticast mode [ 237.204725][T13375] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 237.214500][T13363] bridge0: left allmulticast mode [ 237.768029][T13408] bond0: option ad_select: unable to set because the bond device is up [ 238.659502][T13459] netlink: 'syz.2.2060': attribute type 10 has an invalid length. [ 238.910858][T13474] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 238.923190][T13472] netlink: 'syz.3.2065': attribute type 10 has an invalid length. [ 238.933355][T13475] openvswitch: netlink: Missing valid actions attribute. [ 238.951746][T13474] openvswitch: netlink: Missing valid actions attribute. [ 238.953343][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.960338][T13474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.984429][T13472] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 239.724146][T13520] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 239.867256][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 240.228269][T13540] __nla_validate_parse: 16 callbacks suppressed [ 240.228300][T13540] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2082'. [ 240.677796][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2089'. [ 241.358248][T13612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2101'. [ 241.395850][T13612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2101'. [ 241.410036][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 241.440743][T13615] netlink: 'syz.4.2102': attribute type 8 has an invalid length. [ 241.493616][T13623] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 241.579928][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2105'. [ 241.610561][T13623] bond6: entered promiscuous mode [ 241.618200][T13623] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.631637][T13627] team_slave_0: mtu greater than device maximum [ 241.663355][T13624] kthread_run failed with err -4 [ 241.732846][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'. [ 241.742864][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 242.021052][T13661] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2114'. [ 242.106659][T13665] tipc: Enabling of bearer rejected, failed to enable media [ 242.196081][T13670] netlink: 'syz.2.2117': attribute type 10 has an invalid length. [ 242.210374][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2117'. [ 242.231301][T13670] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 242.260930][T13670] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 242.330580][T13682] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 242.560498][T13696] netlink: 'syz.2.2126': attribute type 39 has an invalid length. [ 242.625967][T13700] netlink: 'syz.1.2125': attribute type 29 has an invalid length. [ 242.921103][T13723] tipc: Enabled bearer , priority 0 [ 242.955466][T13723] syzkaller0: entered promiscuous mode [ 242.985095][T13723] syzkaller0: entered allmulticast mode [ 243.022622][T13724] tipc: Resetting bearer [ 243.034008][T13722] tipc: Resetting bearer [ 243.061336][T13722] tipc: Disabling bearer [ 243.199175][T13744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 243.269927][T13748] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 243.322887][T13753] netlink: 'syz.3.2142': attribute type 15 has an invalid length. [ 243.796948][T13781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.827061][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.047974][T13833] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 245.244820][T13844] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 245.257197][T13844] __nla_validate_parse: 7 callbacks suppressed [ 245.257216][T13844] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2166'. [ 245.296859][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 245.438925][T13852] syzkaller0: entered promiscuous mode [ 245.444549][T13852] syzkaller0: entered allmulticast mode [ 245.732805][T13873] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 247.015148][T13873] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 247.046482][T13875] veth5: entered promiscuous mode [ 247.101976][T13876] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 247.208203][T13885] nftables ruleset with unbound set [ 247.630859][T13910] netlink: 'syz.0.2186': attribute type 10 has an invalid length. [ 247.651182][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2186'. [ 247.684658][T13910] geneve0: entered promiscuous mode [ 247.694691][T13910] geneve0: entered allmulticast mode [ 247.724712][T13910] team0: Port device geneve0 added [ 247.850635][T13917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2189'. [ 247.926219][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2189'. [ 247.953740][T13921] wg1 speed is unknown, defaulting to 1000 [ 248.629050][T13966] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 248.636913][T13966] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 248.918718][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 249.078376][T13986] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2209'. [ 249.123317][T13986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2209'. [ 249.160690][T13986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2209'. [ 250.117297][T14033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2226'. [ 250.166801][T14037] : entered promiscuous mode [ 250.392682][T14056] __nla_validate_parse: 2 callbacks suppressed [ 250.392703][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'. [ 250.805244][T14085] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 251.151158][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2246'. [ 251.173546][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 251.199245][T14102] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2245'. [ 251.228037][T14102] openvswitch: netlink: Flow key attr not present in new flow. [ 251.381577][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 251.426208][T14109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2248'. [ 251.682592][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 251.728642][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 251.738121][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 251.823224][T14133] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 251.832725][T14133] netlink: 'syz.3.2256': attribute type 11 has an invalid length. [ 251.859097][T14133] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2256'. [ 251.984298][T14139] openvswitch: netlink: Unknown nsh attribute 0 [ 252.007760][T14139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.034034][T14145] netlink: 'syz.1.2260': attribute type 1 has an invalid length. [ 252.107678][T14147] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 252.126826][T14147] netlink: 'syz.3.2259': attribute type 2 has an invalid length. [ 252.155748][T14153] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 252.285925][T14165] tc_dump_action: action bad kind [ 252.818107][T14199] netlink: 'syz.4.2275': attribute type 12 has an invalid length. [ 252.846219][T14201] netlink: 'syz.4.2275': attribute type 12 has an invalid length. [ 252.949407][T14207] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 253.045476][T14214] delete_channel: no stack [ 253.213555][T14220] openvswitch: netlink: Missing key (keys=40, expected=100) [ 254.042529][T14265] tipc: Enabled bearer , priority 0 [ 254.075930][T14265] syzkaller0: entered promiscuous mode [ 254.087296][T14265] syzkaller0: entered allmulticast mode [ 254.107529][T14275] tipc: Enabled bearer , priority 0 [ 254.154507][T14268] tipc: Disabling bearer [ 254.248762][T14265] tipc: Resetting bearer [ 254.307274][T14261] tipc: Resetting bearer [ 254.399062][T14261] tipc: Disabling bearer [ 255.251384][T14337] netlink: 'syz.2.2318': attribute type 15 has an invalid length. [ 255.411691][T14349] __nla_validate_parse: 115 callbacks suppressed [ 255.411712][T14349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2320'. [ 255.554101][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 255.583432][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 255.592966][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 255.609125][T14354] bridge0: port 1(vlan3) entered blocking state [ 255.615532][T14354] bridge0: port 1(vlan3) entered disabled state [ 255.622521][T14354] vlan3: entered allmulticast mode [ 255.628365][T14354] bridge0: entered allmulticast mode [ 255.635589][T14355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'. [ 255.647872][T14354] vlan3: left allmulticast mode [ 255.652758][T14354] bridge0: left allmulticast mode [ 255.656631][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 255.791362][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.891871][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 255.949737][T14353] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2322'. [ 256.172733][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 256.291614][T14364] can: request_module (can-proto-0) failed. [ 256.308698][T14375] validate_nla: 1 callbacks suppressed [ 256.308717][T14375] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 256.456206][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'. [ 256.527384][T14386] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 256.663587][T14396] nbd: device at index 4 is going down [ 256.836825][T14405] netem: incorrect ge model size [ 256.873962][ T5918] udevd[5918]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 256.906190][T14405] netem: change failed [ 257.094331][T14414] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 257.111788][T14414] netlink: 'syz.0.2340': attribute type 2 has an invalid length. [ 257.125421][T14414] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 257.601171][T14431] netlink: 'syz.2.2347': attribute type 1 has an invalid length. [ 257.612133][T14431] tipc: Enabled bearer , priority 0 [ 257.623271][T14431] syzkaller0: entered promiscuous mode [ 257.661389][T14431] syzkaller0: entered allmulticast mode [ 257.704417][T14431] tipc: Resetting bearer [ 257.731531][T14430] tipc: Resetting bearer [ 257.813112][T14430] tipc: Disabling bearer [ 258.025833][T14453] netlink: 'syz.1.2353': attribute type 8 has an invalid length. [ 258.065577][T14457] Unsupported ieee802154 address type: 0 [ 258.129714][T14466] tipc: Cannot configure node identity twice [ 258.431938][T14479] netlink: 'syz.0.2359': attribute type 19 has an invalid length. [ 258.518881][T14484] netlink: 'syz.4.2361': attribute type 4 has an invalid length. [ 258.631714][T14487] wg1 speed is unknown, defaulting to 1000 [ 258.901285][T14493] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 259.016529][T14493] bond7: entered promiscuous mode [ 259.096501][T14493] bond7: entered allmulticast mode [ 259.116614][T14493] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.224442][T14514] netlink: 'syz.3.2368': attribute type 4 has an invalid length. [ 259.966846][T14558] vlan5: entered allmulticast mode [ 259.986847][T14558] bridge0: entered allmulticast mode [ 260.036898][T14558] bridge4: port 1(vlan5) entered blocking state [ 260.069135][T14558] bridge4: port 1(vlan5) entered disabled state [ 260.116120][T14558] vlan5: entered promiscuous mode [ 260.514173][T14581] __nla_validate_parse: 14 callbacks suppressed [ 260.514192][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 260.631874][T14583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2390'. [ 260.681504][T14590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2392'. [ 260.966951][T14601] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 261.138472][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2400'. [ 261.152534][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2400'. [ 261.162876][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2400'. [ 261.173712][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2400'. [ 261.206621][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 261.546042][T14625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.624608][T14630] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2406'. [ 261.902969][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2410'. [ 261.907529][T14644] validate_nla: 3 callbacks suppressed [ 261.907546][T14644] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 261.945094][T14646] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 261.985707][T14644] bond4: (slave ip6gretap1): making interface the new active one [ 261.994172][T14644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.002404][T14644] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.010789][T14644] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 262.031198][T14643] bridge0: port 3(vlan3) entered blocking state [ 262.038037][T14643] bridge0: port 3(vlan3) entered disabled state [ 262.044694][T14643] vlan3: entered allmulticast mode [ 262.058973][T14643] vlan3: left allmulticast mode [ 262.416050][T14660] syzkaller0: entered promiscuous mode [ 262.449453][T14660] syzkaller0: entered allmulticast mode [ 264.600996][T14691] netlink: 'syz.1.2423': attribute type 4 has an invalid length. [ 264.811291][T14690] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 264.861956][T14690] bond5 (unregistering): Released all slaves [ 266.142108][T14758] netlink: 'syz.3.2443': attribute type 10 has an invalid length. [ 266.376711][T14772] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 266.421388][T14772] __nla_validate_parse: 5 callbacks suppressed [ 266.421408][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2448'. [ 266.580293][T14782] pim6reg1: entered promiscuous mode [ 266.597775][T14782] pim6reg1: entered allmulticast mode [ 266.687586][T14782] 8021q: VLANs not supported on lo [ 266.828436][T14796] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 266.975387][T14808] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 267.013552][T14797] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.087676][T14797] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 267.126423][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 267.143829][T14811] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2457'. [ 267.214805][T14808] bond6: entered promiscuous mode [ 267.221180][T14808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.275938][T14812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.285633][T14812] bond6: (slave bond7): making interface the new active one [ 267.293056][T14812] bond7: entered promiscuous mode [ 267.300844][T14812] bond6: (slave bond7): Enslaving as an active interface with an up link [ 267.551557][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 267.572499][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'. [ 267.912537][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 267.943924][T14864] netlink: 'syz.4.2474': attribute type 5 has an invalid length. [ 267.962845][T14864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2474'. [ 268.055102][T14873] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 268.139713][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2476'. [ 268.159667][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 268.186537][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 268.241849][T14886] netlink: zone id is out of range [ 268.255310][T14885] vlan3: entered allmulticast mode [ 268.278784][T14886] netlink: zone id is out of range [ 268.295120][T14885] bond8: (slave vlan3): Opening slave failed [ 268.295299][T14886] netlink: zone id is out of range [ 268.370101][T14886] netlink: zone id is out of range [ 268.403251][T14886] netlink: zone id is out of range [ 269.052891][T14923] openvswitch: netlink: Missing key (keys=40, expected=80) [ 269.495941][T14938] bond7 (unregistering): Released all slaves [ 270.054954][ T8340] [ 270.057320][ T8340] ============================================ [ 270.063471][ T8340] WARNING: possible recursive locking detected [ 270.069671][ T8340] syzkaller #0 Not tainted [ 270.074087][ T8340] -------------------------------------------- [ 270.080237][ T8340] kworker/u8:43/8340 is trying to acquire lock: [ 270.086477][ T8340] ffffe8ffffd8ff68 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 270.095774][ T8340] [ 270.095774][ T8340] but task is already holding lock: [ 270.103138][ T8340] ffffe8ffffc8ffb8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 270.112385][ T8340] [ 270.112385][ T8340] other info that might help us debug this: [ 270.120432][ T8340] Possible unsafe locking scenario: [ 270.120432][ T8340] [ 270.127872][ T8340] CPU0 [ 270.131135][ T8340] ---- [ 270.134397][ T8340] lock(&pd_list->lock); [ 270.138713][ T8340] lock(&pd_list->lock); [ 270.143028][ T8340] [ 270.143028][ T8340] *** DEADLOCK *** [ 270.143028][ T8340] [ 270.151159][ T8340] May be due to missing lock nesting notation [ 270.151159][ T8340] [ 270.159461][ T8340] 3 locks held by kworker/u8:43/8340: [ 270.164813][ T8340] #0: ffff888145add148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 270.176730][ T8340] #1: ffffc9000e807bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 270.188549][ T8340] #2: ffffe8ffffc8ffb8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 270.198210][ T8340] [ 270.198210][ T8340] stack backtrace: [ 270.204090][ T8340] CPU: 0 UID: 0 PID: 8340 Comm: kworker/u8:43 Not tainted syzkaller #0 PREEMPT(full) [ 270.204121][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.204138][ T8340] Workqueue: pencrypt_parallel padata_parallel_worker [ 270.204183][ T8340] Call Trace: [ 270.204191][ T8340] [ 270.204199][ T8340] dump_stack_lvl+0x189/0x250 [ 270.204220][ T8340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.204239][ T8340] ? __pfx__printk+0x10/0x10 [ 270.204262][ T8340] ? print_lock_name+0xde/0x100 [ 270.204284][ T8340] print_deadlock_bug+0x28b/0x2a0 [ 270.204303][ T8340] validate_chain+0x1a3f/0x2140 [ 270.204322][ T8340] ? __queue_work+0x102/0xfb0 [ 270.204338][ T8340] ? look_up_lock_class+0x74/0x170 [ 270.204356][ T8340] ? register_lock_class+0x51/0x320 [ 270.204378][ T8340] ? __queue_work+0xc56/0xfb0 [ 270.204395][ T8340] __lock_acquire+0xab9/0xd20 [ 270.204420][ T8340] ? padata_do_serial+0x73e/0xb80 [ 270.204439][ T8340] lock_acquire+0x120/0x360 [ 270.204461][ T8340] ? padata_do_serial+0x73e/0xb80 [ 270.204482][ T8340] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.204504][ T8340] _raw_spin_lock+0x2e/0x40 [ 270.204527][ T8340] ? padata_do_serial+0x73e/0xb80 [ 270.204547][ T8340] padata_do_serial+0x73e/0xb80 [ 270.204571][ T8340] ? padata_parallel_worker+0x44/0x1d0 [ 270.204592][ T8340] padata_parallel_worker+0x75/0x1d0 [ 270.204613][ T8340] ? process_scheduled_works+0x9ef/0x17b0 [ 270.204629][ T8340] process_scheduled_works+0xae1/0x17b0 [ 270.204655][ T8340] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.204677][ T8340] worker_thread+0x8a0/0xda0 [ 270.204702][ T8340] kthread+0x70e/0x8a0 [ 270.204722][ T8340] ? __pfx_worker_thread+0x10/0x10 [ 270.204737][ T8340] ? __pfx_kthread+0x10/0x10 [ 270.204756][ T8340] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.204771][ T8340] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.204786][ T8340] ? __pfx_kthread+0x10/0x10 [ 270.204804][ T8340] ret_from_fork+0x439/0x7d0 [ 270.204821][ T8340] ? __pfx_ret_from_fork+0x10/0x10 [ 270.204844][ T8340] ? __switch_to_asm+0x39/0x70 [ 270.204864][ T8340] ? __switch_to_asm+0x33/0x70 [ 270.204883][ T8340] ? __pfx_kthread+0x10/0x10 [ 270.204902][ T8340] ret_from_fork_asm+0x1a/0x30 [ 270.204929][ T8340] [ 270.417708][T14942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.467379][ T5872] Bluetooth: hci1: command 0x0406 tx timeout