last executing test programs: 6.174500592s ago: executing program 3 (id=2226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x884) 5.982544871s ago: executing program 3 (id=2230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x9}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x3f}, 0x48) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000240)='./file0\x00', r9, 0x4000, r1}, 0x18) 5.954073324s ago: executing program 0 (id=2231): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34fdff00", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf252700000008000300", @ANYRES32=r1, @ANYBLOB="0c00990005000000800000000a0034000101010101010000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="0208ee090a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0], 0x0, 0xa5, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000f40)={'erspan0\x00', 0x0, 0x20, 0x80, 0x40, 0x3, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x64, 0x0, 0x39, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x2f, 0x2, [{0x6, 0x11, "c5d448f25cd0b66c99744412b8c7f9"}, {0x0, 0x9, "5cd4ab7b08cc8d"}, {0x7, 0xf, "f5b1b50138aacd690e525753fa"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xf, 0x2, [{0x2, 0x9, "1beca457b23c63"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001100)={'erspan0\x00', &(0x7f0000000fc0)={'gre0\x00', 0x0, 0x8, 0x10, 0x222, 0x5d, {{0x3f, 0x4, 0x1, 0x4, 0xfc, 0x67, 0x0, 0xaa, 0x2b, 0x0, @broadcast, @empty, {[@generic={0x44, 0x11, "7d66cac983a0d48ce69e59aa302658"}, @cipso={0x86, 0x23, 0x1, [{0x0, 0x12, "47cc6112be558de19cc4e8af62babf1b"}, {0x5, 0xb, "1ed99b95b99d1866cd"}]}, @lsrr={0x83, 0x17, 0xa6, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @rand_addr=0x64010102]}, @generic={0x83, 0xa, "e5b661caeffbbb3c"}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x0, 0x7, "071125ade5"}, {0x6, 0x11, "fa51faa9506c1a6af3e797193137b2"}, {0x6, 0x4, "30ec"}, {0x0, 0x12, "aee967929c9f7599f4f6edcdac9cd30e"}, {0x2, 0x8, "c0d4f7c9d32e"}, {0x2, 0xb, "c99a79599952d91af5"}, {0x7, 0x9, "f2320fda56d2eb"}]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x0, 0x3, '-'}, {0x2, 0x9, "cfa250c88a62bb"}, {0x1, 0xc, "0de9c150c98d4f0d70e5"}, {0x0, 0x11, "ef0951b9d063bb46759230fb6c1d21"}, {0x7, 0x11, "9acb1780917d6d9776a2f41b892e7c"}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={0x1, 0x58, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={0x1, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001440)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x12c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x50}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800) (async) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000840)={r15}) ioctl$sock_inet6_udp_SIOCINQ(r18, 0x541b, &(0x7f0000000880)) (async) sendmsg$nl_xfrm(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r17, @ANYBLOB="04"], 0xc4}}, 0x0) (async) r19 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r19, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/258, 0x102}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f0000000940)=""/194, 0xc2}], 0x8}, 0x40012100) 5.850098861s ago: executing program 4 (id=2233): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000c1d34c0689bb6daa1a13ef5a00130113d00000415a00000046a970d0f7f00649fffacc19f0046daea6750012ebd75ad1381223357373373196bf295f526ca772d2b8beaec44bee145fcdbb4354dd46db6689e175", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002580)=@delchain={0x24, 0x65, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x6, 0x4}, {0xe, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000025c0)=@newtfilter={0x10e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0x10b4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xb}}, @TCA_ROUTE4_POLICE={0x880, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0x3ff, 0x0, 0x5a, 0x0, 0x22b1, 0x5, 0x200, 0x9, 0xb9, 0x9, 0x2, 0xfffffff7, 0x4, 0x7, 0x80000000, 0x3, 0x1, 0x7, 0xe, 0x7, 0x6, 0x3, 0x4, 0xc8, 0x3c, 0x1, 0x9bf, 0x7b, 0x7, 0x5, 0x9, 0x6, 0x8, 0x3, 0x8, 0x2, 0x8eb, 0x7, 0x101, 0x7fff, 0xfaf, 0x1, 0x0, 0xa8b, 0x8, 0x395, 0x3, 0x9, 0x7, 0xff, 0x4, 0x3, 0x80000000, 0x3ff, 0xfffffc00, 0x6, 0x1, 0x7, 0xfffffffb, 0xd2e, 0x0, 0x7, 0x1000, 0x1, 0x0, 0x2, 0x0, 0xcce, 0x0, 0xe, 0x8, 0x81, 0x4, 0x5, 0x3, 0x2, 0x6, 0x82, 0xbfb9, 0x1, 0x1, 0x1, 0x8, 0x10001, 0x1ff, 0x3, 0x9, 0x5, 0x4, 0x4, 0x2, 0x3ff, 0x7fff, 0x9, 0xdd3, 0x0, 0xfffffff9, 0xffffffff, 0x5, 0xff, 0x9, 0x81, 0x8000, 0x9, 0x4, 0x0, 0x10000, 0x9, 0xc, 0x7, 0x401, 0xfffffffe, 0x7, 0x0, 0x1, 0x4, 0x1, 0xffff, 0x1, 0x82, 0x5, 0x6, 0x400, 0x2, 0x101, 0xb63, 0x0, 0xbb, 0x0, 0x5, 0x3, 0x8, 0x53, 0x0, 0x5, 0x5, 0x5, 0x1, 0x6, 0x4, 0x4000000, 0x7, 0xff, 0x2, 0xd, 0xfffffc3e, 0x7, 0x8, 0x0, 0x5c, 0xd, 0x800, 0x8, 0xb, 0x800, 0x5, 0xfffffff7, 0x2, 0x4, 0x4, 0xff, 0x0, 0x7d, 0x1, 0x0, 0x5, 0xfffffff8, 0xb, 0x4, 0x1, 0x2, 0xc4e8, 0xfffffff8, 0x42, 0x3, 0x5c800000, 0x1, 0xff, 0xb6, 0x1, 0x2, 0x80000000, 0x9, 0x9, 0x9, 0x6c, 0x5, 0x7, 0x7fff, 0x7, 0x4, 0x3, 0x8, 0x100000, 0x9, 0x10000, 0xc, 0x1, 0xb4e, 0xffffffff, 0x2, 0x0, 0xffff, 0x9, 0x11eb, 0xcff, 0x2, 0x7fffffff, 0x9, 0x7, 0x6, 0xd, 0x2400000, 0x9, 0x1, 0x8, 0x10000, 0x1, 0x8, 0xcd1e, 0x1, 0x1, 0x400, 0x1, 0x1, 0x4, 0xfffffff5, 0x6, 0x7, 0x9b, 0x6, 0x40, 0x2, 0x33a9, 0x964, 0xd5300000, 0xb130, 0x1, 0x8, 0x101, 0x10000, 0x0, 0xa, 0x100, 0x0, 0x4, 0x80000000, 0xfffffb0f, 0x9, 0x3, 0x4, 0xfffffffb, 0x1, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5eb}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0xffff7b6f, 0x8, 0x6, 0x400, 0x9, 0x7fff, 0x3, 0x8, 0x0, 0xffffff80, 0xd, 0xfff, 0x7, 0x1, 0x4, 0x9, 0x4, 0x9, 0x8, 0x5, 0x4, 0x3, 0x0, 0x6, 0xb35, 0x6, 0x0, 0x0, 0x5d, 0x0, 0x5, 0x4, 0x0, 0x30, 0x2, 0xffffffff, 0x5, 0x2, 0x8, 0x1000, 0xdd31, 0x9, 0x4, 0x8, 0x9, 0x4, 0x340af7ef, 0x800, 0x0, 0x9, 0xd3, 0x2a, 0x6, 0x6, 0x3, 0x8, 0xfffffffb, 0x8, 0x5, 0x5, 0x5, 0x4, 0x3, 0x5, 0x6, 0xfffffffa, 0x5, 0x1ff, 0x6708, 0x3, 0xb94, 0x1, 0x4, 0x7ff, 0x473, 0x8, 0x4, 0x4, 0x78, 0x7, 0x3, 0x4, 0x4, 0xfff, 0x2, 0x9, 0x8e, 0x9, 0x5, 0x10, 0x6, 0x3, 0xac57, 0x200, 0x0, 0x4, 0x7, 0x6, 0x5, 0x718, 0x0, 0x1ff, 0x2, 0xa3, 0x9, 0x2, 0x4, 0xc, 0x80000001, 0x80000000, 0x7, 0xffff, 0x5, 0xfffff837, 0x3ff, 0x1, 0x7, 0xfff, 0x2, 0x7, 0xfffffff9, 0x2, 0x23, 0x0, 0x2, 0x6, 0x100, 0xdfa, 0x3, 0x1ff, 0x6, 0x9a, 0x8000, 0x20000000, 0x7, 0x8000000, 0x0, 0x3, 0x590, 0x6, 0xc2, 0x7, 0x10000, 0x3, 0x6a12, 0xd, 0x43, 0x9f7, 0x4ad0, 0x9, 0x9, 0x7f, 0x1000, 0x0, 0xfffffffd, 0xf9, 0x940f, 0x7, 0x1, 0x5, 0xfff, 0xdf9, 0x9, 0x6, 0x8, 0x4, 0xfffffffa, 0x7, 0x400, 0x9, 0x7d8, 0xffff045c, 0x48000, 0x4, 0xffff7fff, 0x101, 0x1, 0x7ff, 0xca, 0x8, 0x3a, 0x8000, 0xbe, 0x3, 0x1, 0xf7a, 0xfffffe00, 0x8, 0x8, 0x8a3, 0x6, 0x6, 0x4, 0x3ff, 0xb7c0, 0x8, 0xb70, 0x800, 0x8, 0x6a07, 0x8, 0x4, 0x80000001, 0x6, 0x6, 0x65, 0x2, 0x9, 0x3, 0x0, 0x4, 0x9, 0x9, 0xe7e, 0x6, 0x4, 0xffffffff, 0xfbf, 0x6, 0x4, 0x3, 0x0, 0x4, 0x2, 0x3, 0x4780, 0x2, 0xffffff81, 0x3, 0x0, 0xe4, 0x3, 0x6, 0x9e0f, 0x9, 0x1, 0x9, 0x0, 0x4, 0x2, 0x7ff, 0x100, 0x8000, 0x9, 0x8a, 0x400, 0xfffffffc, 0x0, 0x86df, 0xfff, 0x5, 0x4, 0x5, 0xb897, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x1000, 0xf, 0x8, {0xb, 0x1, 0xffa1, 0x3, 0x8, 0x3dc}, {0x80, 0x1, 0x5, 0xbc, 0x1a03, 0xffffffff}, 0xc0, 0x0, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x81ec, 0x8, 0x1, 0x100, 0x3, 0x0, 0x6, 0x1ff, 0x2, 0x9, 0x9, 0x80000001, 0x1, 0x5f, 0x3, 0x8, 0x9, 0x5, 0x5, 0xf8, 0x8001, 0x5, 0x3, 0xd2, 0x1, 0x8ce3, 0x80, 0xfa, 0x80000001, 0x8000, 0x9, 0x1000, 0x8, 0x0, 0x9, 0x4, 0x500000, 0x7, 0x33, 0x5, 0x7, 0x8700, 0x2, 0x7, 0x2, 0x200, 0xee6, 0x0, 0x200, 0x5, 0x4, 0x4, 0x2, 0x9, 0x25a6cdfa, 0x80000000, 0x7ff, 0x6, 0xfd, 0x1, 0x0, 0x3d79, 0x76, 0x9, 0x7, 0x5a, 0x8, 0x4, 0x6dab, 0xb, 0x3, 0x4, 0x100, 0x0, 0x5, 0x9, 0x7, 0xd, 0x2, 0xe7b6, 0x9, 0x4fae, 0x2, 0x7, 0xffffff73, 0x87, 0x6, 0x6f, 0x10, 0x6, 0x2, 0xfffffff7, 0x521, 0x6, 0x2fd, 0x3, 0x9, 0x9, 0xffffffff, 0x7, 0x4, 0xeb0d, 0xfffffff7, 0xfffffff8, 0xffff, 0x80, 0x7c, 0x8, 0xd, 0x1f0000, 0x5, 0x80000001, 0x4, 0x5, 0x4, 0x1000, 0x7, 0x8, 0x3, 0xa, 0x7, 0x5, 0x6, 0x200, 0x5, 0x8, 0x7, 0x3, 0x4, 0x91f, 0x7, 0x0, 0x832d, 0xf, 0xfffffc50, 0x22c, 0x0, 0x3, 0x3d, 0x9, 0x0, 0x80000001, 0x400, 0xffffffff, 0x5, 0x6, 0x3ff, 0x10, 0x46f5, 0x8000, 0x1, 0x4, 0x5, 0x5, 0x8, 0x9, 0x8000, 0x4, 0x80000000, 0x2, 0x7, 0x3, 0x3, 0x3, 0x0, 0x0, 0x84, 0x1ff, 0x1c2, 0x4, 0x7f, 0xfffffffe, 0x2, 0x8, 0x8000, 0xa, 0x8, 0x7bc, 0x7ff, 0x8, 0x792, 0x400, 0x1, 0x6, 0x8, 0xe8a, 0x5, 0x3, 0x6, 0xff, 0x4, 0x6, 0xc, 0x584, 0xfffffffe, 0x1, 0xffff, 0x717, 0xc, 0x77, 0x0, 0x6, 0x6, 0x4, 0xb0b, 0x5, 0x101, 0x8, 0x7, 0x1ff, 0x7ff, 0x0, 0x3, 0x6, 0xef, 0x80000001, 0x0, 0x40, 0x3e, 0x9, 0x1, 0x7, 0xe0, 0xd9a, 0x5a8d, 0x2, 0x9822, 0x9, 0x3, 0xffffffff, 0xfff, 0xfffffffa, 0x8, 0xffff6d87, 0x6, 0x75, 0x80000001, 0x5, 0x4, 0x8, 0x7, 0x800, 0xcee, 0x5, 0x7fffffff, 0x20, 0x400, 0x1, 0x2, 0x0, 0x0, 0xc, 0x8, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3d, 0x4, 0x9a5d, 0x1ff, 0x14a9, 0xfffffffc, 0xef7, 0x9, 0x2, 0x8, 0x9, 0xcd1, 0x1c84, 0x1, 0xfffffffc, 0x0, 0x2, 0x9, 0xfffffff7, 0xeb, 0x3, 0x7, 0x0, 0x3, 0x46, 0x5, 0x200, 0x9, 0x58, 0xd1e2, 0x7, 0xf, 0x9, 0x10, 0x3, 0x5, 0xd8, 0x8, 0x7, 0x1, 0x10001, 0x6, 0x8, 0x10000, 0x3, 0x8, 0xfffffb24, 0x7ff, 0xe, 0x9, 0x400, 0xfffffff2, 0xbd, 0x9, 0xc35f, 0x7, 0x7, 0x4, 0x1, 0x40, 0x9, 0x10001, 0x7, 0x8ddb, 0x1, 0x5, 0xbd, 0x8, 0x1, 0xa, 0x80, 0x100, 0x9, 0x5, 0x2b75627d, 0xffff33b4, 0x90dd, 0x8, 0x5, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xa, 0x1000, 0x1ff, 0xd, 0x5035, 0x9, 0xfffffff8, 0x9, 0x1, 0x10001, 0x991f, 0x4, 0x25, 0xffff, 0x4, 0xfffffff8, 0x3, 0x4, 0x3, 0xc9, 0xc, 0xbb5, 0x5, 0x1, 0x7, 0xa78, 0x6, 0x3, 0x2, 0xfffffffc, 0x1b, 0x200, 0x2, 0x7, 0x7, 0x800, 0x1, 0x8, 0xc, 0x31afb5b, 0xeb09, 0x6, 0xfff, 0x9, 0x80, 0xe1ad, 0xab, 0x9, 0x6, 0x80000001, 0x4, 0x2, 0x8001, 0xdb, 0xd3, 0x100, 0x1fe00, 0x7, 0x7ab, 0x3d, 0x401, 0x26, 0x7, 0x7, 0x6, 0x1, 0x1, 0x8, 0x6, 0x6, 0x8000, 0x6, 0x5, 0x5, 0x0, 0x4, 0x6, 0x4, 0x3, 0x45, 0xc5b, 0x13f, 0x7, 0x4, 0x9, 0x4, 0xc2b, 0x10, 0x7, 0x7, 0x1379, 0x9, 0x7, 0x0, 0x1, 0x0, 0xaf, 0x6, 0x2, 0x3ff, 0x0, 0x9, 0x40, 0x400, 0x3c3b, 0x4, 0x7e, 0xf9, 0x7ff, 0xfffff000, 0x5, 0x8, 0x877a, 0x9, 0x1, 0xffffffc0, 0xa, 0x7, 0x0, 0x0, 0x81, 0xf, 0x1, 0xf1ac, 0x400, 0x5, 0x6, 0x0, 0x400, 0xffffffff, 0x5, 0xffffffff, 0xd, 0x9, 0x6, 0x7, 0x9, 0x7, 0x0, 0x7fff, 0xfff, 0x5eeb4684, 0xfffffffe, 0x9, 0x3, 0xfd06, 0x1, 0xfff, 0xe9, 0xfffffffb, 0x4, 0x8, 0xffffffff, 0x101, 0x9, 0x9, 0x0, 0x3, 0xffffff10, 0x0, 0x401, 0x8, 0x2, 0xb427, 0x800, 0x3, 0x8, 0x1, 0x1]}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd3}]}}]}, 0x10e4}}, 0x24004000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000001c0), &(0x7f0000000380)=0x4) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.767283661s ago: executing program 0 (id=2234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7acab36e5489664c39442fb61da1c2b886db1c5ca05b9ee894fc666e8f9f33e357ad38ebfa6888082f674fcd1dfeffa653ae5ab2519820c93a2f056f7426405017629c99b2d76ffdf55bb75e41", 0x4d, 0x10, &(0x7f0000000080)={0xa, 0x4e22, 0x80000000, @mcast1, 0x5}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 5.689068109s ago: executing program 1 (id=2235): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000002c0)=0xffff, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000100)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x3, 0x7, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0x22, 0x0, 0x1, [0x4, 0x4, 0x7]}, @end, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x4, [0xfffffffe]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x1000, 0x7, {{0x33, 0x4, 0x1, 0x32, 0xcc, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0xaa, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffff29d}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xadb}, {@multicast1, 0xfffffffc}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@empty, 0x200}, {@broadcast, 0x9}, {@private=0xa010102, 0x1}]}, @generic={0x44, 0xc, "54b70674fda1cf26db4a"}, @timestamp={0x44, 0xc, 0xe7, 0x0, 0x0, [0x3, 0xca2]}, @rr={0x7, 0xb, 0x2c, [@broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xc, "a0f9b980380b389ecd5c"}, @generic={0x83, 0x11, "49227738e5cd805fb3ee3c2094caa1"}, @timestamp={0x44, 0x24, 0x25, 0x0, 0x9, [0x7ff, 0x6c, 0x2, 0x1, 0x10, 0x9, 0x1, 0x7f7]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8d, 0x200, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x7800, 0x7, 0x52f}}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r14, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000700)={@empty, 0x0}, &(0x7f0000000740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000d80)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="7801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="b8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="3c010024000100757365725f6c696e25d87d7190e5089d556b75705f656e61626c656400000000000000000000000000050003000600000064787aa700e0fa2c", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x254}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r16}, 0x10) 5.586678542s ago: executing program 4 (id=2236): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8f}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getpolicy={0x8c, 0x15, 0x400, 0x70bd27, 0x25dfdbfd, {{@in=@private=0xa010102, @in6=@remote, 0x4e21, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x20, 0x33, 0x0, r4}, 0x0, 0x1}, [@proto={0x5, 0x19, 0xff}, @tfcpad={0x8, 0x16, 0xe}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @lifetime_val={0x24, 0x9, {0x7, 0x100, 0x5, 0x8}}]}, 0x8c}}, 0x0) 5.583853254s ago: executing program 3 (id=2238): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x7f, 0x7}) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/190, 0xbe}], 0x7, &(0x7f0000000700)=""/211, 0xd3}, 0xfffffffc}], 0x1, 0x100, &(0x7f0000000840)={0x0, 0x3938700}) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000880)={{}, [@rose, @rose, @default, @default, @netrom, @netrom, @netrom, @netrom]}, &(0x7f0000000900)=0x48) connect$netrom(r2, &(0x7f0000000940)={{0x3, @null, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000009c0)={0x21, 0x1}) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xc0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x79, 0x6, "76015d559cbeece84cd7d4401fc4f6a29e504fb30934f843bead6f759aed8b299180487339e252c6ab6fe6e12aeafcf56aa917ce181bc7ead5c65f74408c8d61a5872807fe388c49f9cc3dda39d0e02d4b68b935895f27c4ae9944e0c6879449dc9ac3f532efb2e01d32b13c38ed366fcdbee0b85e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x48, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x178}}, 0x40000) bind$phonet(r4, &(0x7f0000000c80)={0x23, 0x1, 0x4, 0xd8}, 0x10) ioctl$PPPIOCDISCONN(r0, 0x7439) r5 = socket$caif_stream(0x25, 0x1, 0x3) readv(r5, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/211, 0xd3}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = accept$inet(r4, &(0x7f0000000e00)={0x2, 0x0, @private}, &(0x7f0000000e40)=0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000e80)={0x4, 0x9, 0x2, 0x0, 0x0, [{{}, 0x8}, {{r7}, 0x6}]}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000f00)) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000f40)=0x7) r8 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000f80), 0x0) r9 = accept4$packet(r8, 0x0, &(0x7f0000000fc0), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x800, 0x0) read(r9, &(0x7f0000001040)=""/231, 0xe7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001140)={0x84, 0x1, 0xf}, &(0x7f0000001180)=0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa0, 0x0, 0x2, 0x381, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x78, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvfrom$phonet(r1, &(0x7f0000001340)=""/91, 0x5b, 0x40000001, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r10, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 5.546735116s ago: executing program 0 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x25, 0x80000, 0x6) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="034886dd010000000000140036cb6cc46000000003"], 0xfdef) 5.200487061s ago: executing program 3 (id=2240): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9f0001001800000000000101000000000000000033000000000000"], 0x0, 0x1b}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) 5.196661425s ago: executing program 1 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001"], 0x28}}, 0x0) 5.194346591s ago: executing program 4 (id=2242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) 5.193144787s ago: executing program 4 (id=2244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x3, 0x8) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffffc, 0x7ffffffffffffff7}]}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000200)="d3d1b90c14ee025359e622b77c1221dbf7728c983ba4248d4f0d4498b12e6cb5d395116a7b4775a45c82438fec19473cac18bd6d5df21f35c750309bf137d468aaf240eca741d101da1241af5980b33aa7da9dc93b5fe4992c07156743eb2b70614d296752fc6a8eef8a5aa0a69487cbd1a1e67ac23603e7ca3b04f93670ac8b82c0070bc362b72a4769decec47535210b3f7fd894eb6a3253369680d6b109e30fc298cfbe8fa490f3f8fd21869457aee73a107c383a0e66c79eca5060f78fc851144044fee1e67e853c114d44ff202df598daf39d8670012a76607c40bc8291d1d948913e7b21e65d32d20242dc2231240d7e930fe7be4f6d", &(0x7f00000000c0)=""/159, &(0x7f0000000300)="e6521562d80b6cf3b3aae99293eee151f6d88c70d5d65ec7136da6b554722ff3f2d42db56559e9018d55bc2d577aa42ff697493d49cae990a9bdfa65d4ad373da086957815b68c2fc4e931a329dfe0f0cbf55b20c8deb0acbb7da82b2ba2beb41f80423be42f1ab8e1d9ae57db942b95d64086766bd8bddaffb9983365", &(0x7f0000000380)="f9ebb1ef747b8f1398b84cf6eeef27982c85583c375feb4763e77840e9869be773806f5a32ca83d498e4700d3ec2b9162cc9cf9201254d36ed733cd7fa560ba66da6de4a5d6ab27c7166887028f1f422350dd19115fdadc5bbdc76ea092ca71ff980adb9c8f0198a7816c13b5d284e2b33c2402cdc4fb402d62bcbccfc07ce011a869f825c2b14380f1d99253b4493b25c6866026f9a3cd96b8f019cd31ff5f82b22964e213210b3fbe43ad6a792d69c3142edca4131bb4b0eefdb", 0xffffffff, r3, 0x4}, 0x38) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.189079742s ago: executing program 1 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540217"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) 5.188582177s ago: executing program 0 (id=2246): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[], 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x80, 0x6, 0x9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth1_macvtap\x00', @link_local}) syz_emit_ethernet(0x11dc0, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 5.04663723s ago: executing program 1 (id=2248): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xedc, 0xace0}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x5}}]}, 0x54}}, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 5.025372122s ago: executing program 4 (id=2249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = accept$phonet_pipe(r1, &(0x7f0000000700), &(0x7f0000000740)=0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000880)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000e51b000000000000000100000002001000edc0e63faa8c2c33b5703bddd238c14b98c056181a8568fa2a7d3de95a", @ANYRES32=r11, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r10, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept4(r13, 0x0, 0x0, 0x80000) recvfrom$inet(r14, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) sendmsg$alg(r14, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_SET_STATION(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r14, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000004c0)="b24f3ac264c831dbc89e3bb70ce8bb3ce1b0bdeb144db7974800c7c14235eacb9d268faac8d08581a3f30374667e38fc6a8adead48bd436143f5ac33b0df0109f1025d941782c1862f1671e5cf7e52f7f5d43e34c7d8d470c54333562f47f2db832fbf2a49d30cb6fa63f96c578366c90489", 0x72}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000280)="44f82d59deff878dfaa845aed0be2f7b5283b3e928acd666f38c3ee2098ed502554148ecb0253ca60fdce31b9c261d4beb1170edc606f26e9175c3d8a0e1", 0x3e}], 0x3, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r0, r1, r0, r1, r1, 0xffffffffffffffff, r0, r1, r0, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r0, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}, @rights={{0x38, 0x1, 0x1, [r12, r0, r14, r1, r0, r0, r0, r1, r0, 0xffffffffffffffff]}}], 0x158, 0x40080}, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r15, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r15], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r16 = socket(0x1, 0x1, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000ff0012800c0001006c6163766c616e00040002800800050011028b978a999f9671013a71ab530ace0f88d387fd61b8329c82", @ANYRES32=r18, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r18, @ANYBLOB], 0x44}}, 0x0) 5.01313552s ago: executing program 1 (id=2250): syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c810}, 0x4000000) 4.918261275s ago: executing program 0 (id=2251): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b40500000000000079109d0100000000050000000000000015000000000000005ecae5add11e0cd5151cfa3f89b44c8fa1ea8ac3f1d25c200442546a4c1d66c864dae7a3b7acb4dd160d001d6e07787d3efa195f8060373d2a286b9261800442f1e965bafd139495b2388e1a79acb75cb19b2c52677e5b8822ae3a0eb1d04f895cf7805a2e4abc22095a127f3d46"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffe47}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r1, 0x7, 0x6, &(0x7f0000000140)=""/250, &(0x7f0000000240)=0xfa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x500) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1c, 0x24, [{0x1b}, {}, {0x18, 0x1}, {0x9, 0x1}, {0x4}, {0xc}, {0x12, 0x1}, {0x32}, {0x16, 0x1}, {0x30}, {0x36}, {0x36, 0x1}, {0x18}, {0x12}, {0x60, 0x1}, {0x2}, {0x5, 0x1}, {0x48, 0x1}, {0xc}, {0x30}, {0xb, 0x1}, {0x16, 0x1}, {0x36, 0x1}, {0x0, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x2e0, "a6f6ff55dff3", @long="0d8eb05371f6e598929005bbcd003dff"}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x4, 0x0, {0x531, 0x0, 0x0, 0x378, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x28a, 0xf}}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x16, 0x1}, {0x4, 0x1}, {0x36}, {0x3}, {0x18}, {0x60, 0x1}, {0x12, 0x1}, {0x2}, {0x7d}, {0x1b}, {0x48}, {0xc, 0x1}, {0x36, 0x1}, {0x48, 0x1}, {0x12, 0x1}, {0x6, 0x1}, {0x24, 0x1}, {0x6c}, {0xb, 0x1}, {0x30}, {0x1, 0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0xb}, {0x6, 0x1}, {0x48, 0x1}, {0xc}, {0xa18ada0b0196f281}, {0x1f, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4044880}, 0x8041) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x21}}}, 0x24) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0x5, 0x7}, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) accept4$tipc(r7, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80800) 4.889954289s ago: executing program 4 (id=2252): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xf}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7ff}, &(0x7f0000000180)=0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x16000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) 4.483274699s ago: executing program 32 (id=2252): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xf}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7ff}, &(0x7f0000000180)=0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x16000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) 4.45493604s ago: executing program 0 (id=2254): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0xbd9b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xa1, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0xfffffffd, 0x8b, &(0x7f0000000a80)=""/139, 0x40f00, 0x2b, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x6, 0x4, 0x249025d0}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000bc0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x2, 0x0, 0x8}, {0x5, 0x3, 0x7}, {0x1, 0x2, 0x5}, {0x4, 0x2, 0x6, 0x5}, {0x2, 0x1, 0x9, 0xb}], 0x10, 0x8000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x6, 0x5, 0x1, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x80087601, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x7fffffff, 0x200, 0x2, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x2, 0x5, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1d, 0xc, &(0x7f0000000240)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x4, 0x1, 0xb, 0x6, 0x3, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xef, &(0x7f0000000580)=""/239, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x4, 0x424, 0x4}, 0x10, r2, r3, 0x9, &(0x7f0000000e40)=[r4, r6, r7, 0x1, r8], &(0x7f0000000e80)=[{0x2, 0x2, 0x10, 0x7}, {0x0, 0x1, 0xe, 0x2}, {0x5, 0x4, 0x8, 0x7}, {0x2, 0x5, 0x0, 0x6}, {0x1, 0x5, 0xa, 0x7}, {0x0, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x7, 0xd}, {0x3, 0x4, 0x2, 0xb}, {0x0, 0x3, 0xa, 0x3}], 0x10, 0x4}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0526596f83dd8f5465f9d151365e30dc476141bf4c897ec3c9252d05368313cd91f26eba8b5f1a0cf1f5cd38fa73882bd567ee1fe352ff046cd841570102a028c8a88d4ca532e28a6e9324fbee59b1f1e584b6212f5ca0960302908b54123858e2a3a263a9f27345d7ec8217463de879c013d8bd64bc5bdef00b6ae40aa2d7ca750afed7ed8c8963672f9ef749223a2b4ee526e190274b4b1470961decbb1f92f439cbbc1597e0b8ee19eb4d9a3c6cd627f19d178a28251758fc828309c7ed49ecb8cdb3bfc6d603ea44f611afd4f645c44888fd445cf73553336abd5b7cc61d0ccd81d9e5958834ff83b", @ANYBLOB="8d14fbb1a4d02beb89e0e4c7d3e4cb4cc662c61e4e59184d64577a823122c7dac60c33fb83637edb2cf4a9445fa68114d9c3e18a20da9dd8b49607d8917eb25c099ceeb021a6bfe7f2d5e0d12f90e6ef7c5746", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES32=r9, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="fafe54b5beb5688402b79b048267d66fbf0afafd68745db3739ca2d93dfbce27884c908260c869410ca806b8261afc30aebab4363666f1b65c10d9cd2e503428643f7fe112dde7595c4f97fceda6eec9c5d63d7da32eba769a2bb9a44c4df670eb0f56bfda76c518669b1cb1dff3adceeb08211f46057436df0df52de756b6a206360a12ec80236950748b499c3e0635674e8bca1a2bd6e0d0cc3d8ef22ac224e9cf7b7051e4ca1b293941d58b524193ff05f046801d62a4be05a3f241e08b40aec920030f3f0498220734ede801ddce9fcf3e97c890879701b7c967058e0cc58a08468a78f1369b5b2e93a203102a12091ec6b6217b", @ANYRESDEC=r9], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x40048054) 4.250355882s ago: executing program 33 (id=2254): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0xbd9b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0xa1, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0xfffffffd, 0x8b, &(0x7f0000000a80)=""/139, 0x40f00, 0x2b, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x6, 0x4, 0x249025d0}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000bc0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x2, 0x0, 0x8}, {0x5, 0x3, 0x7}, {0x1, 0x2, 0x5}, {0x4, 0x2, 0x6, 0x5}, {0x2, 0x1, 0x9, 0xb}], 0x10, 0x8000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x6, 0x5, 0x1, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x80087601, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x7fffffff, 0x200, 0x2, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x2, 0x5, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1d, 0xc, &(0x7f0000000240)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x4, 0x1, 0xb, 0x6, 0x3, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xef, &(0x7f0000000580)=""/239, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x4, 0x424, 0x4}, 0x10, r2, r3, 0x9, &(0x7f0000000e40)=[r4, r6, r7, 0x1, r8], &(0x7f0000000e80)=[{0x2, 0x2, 0x10, 0x7}, {0x0, 0x1, 0xe, 0x2}, {0x5, 0x4, 0x8, 0x7}, {0x2, 0x5, 0x0, 0x6}, {0x1, 0x5, 0xa, 0x7}, {0x0, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x7, 0xd}, {0x3, 0x4, 0x2, 0xb}, {0x0, 0x3, 0xa, 0x3}], 0x10, 0x4}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0526596f83dd8f5465f9d151365e30dc476141bf4c897ec3c9252d05368313cd91f26eba8b5f1a0cf1f5cd38fa73882bd567ee1fe352ff046cd841570102a028c8a88d4ca532e28a6e9324fbee59b1f1e584b6212f5ca0960302908b54123858e2a3a263a9f27345d7ec8217463de879c013d8bd64bc5bdef00b6ae40aa2d7ca750afed7ed8c8963672f9ef749223a2b4ee526e190274b4b1470961decbb1f92f439cbbc1597e0b8ee19eb4d9a3c6cd627f19d178a28251758fc828309c7ed49ecb8cdb3bfc6d603ea44f611afd4f645c44888fd445cf73553336abd5b7cc61d0ccd81d9e5958834ff83b", @ANYBLOB="8d14fbb1a4d02beb89e0e4c7d3e4cb4cc662c61e4e59184d64577a823122c7dac60c33fb83637edb2cf4a9445fa68114d9c3e18a20da9dd8b49607d8917eb25c099ceeb021a6bfe7f2d5e0d12f90e6ef7c5746", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES32=r9, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="fafe54b5beb5688402b79b048267d66fbf0afafd68745db3739ca2d93dfbce27884c908260c869410ca806b8261afc30aebab4363666f1b65c10d9cd2e503428643f7fe112dde7595c4f97fceda6eec9c5d63d7da32eba769a2bb9a44c4df670eb0f56bfda76c518669b1cb1dff3adceeb08211f46057436df0df52de756b6a206360a12ec80236950748b499c3e0635674e8bca1a2bd6e0d0cc3d8ef22ac224e9cf7b7051e4ca1b293941d58b524193ff05f046801d62a4be05a3f241e08b40aec920030f3f0498220734ede801ddce9fcf3e97c890879701b7c967058e0cc58a08468a78f1369b5b2e93a203102a12091ec6b6217b", @ANYRESDEC=r9], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x40048054) 4.206734165s ago: executing program 1 (id=2255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.16098276s ago: executing program 34 (id=2255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.143811505s ago: executing program 3 (id=2256): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r2) (async) close(r2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) r3 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0xf45f2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$packet_buf(r9, 0x107, 0x16, &(0x7f00000003c0)=""/93, &(0x7f0000000240)=0x5d) (async) getsockopt$packet_buf(r9, 0x107, 0x16, &(0x7f00000003c0)=""/93, &(0x7f0000000240)=0x5d) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x8, 0x7ff, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x64, 0x0, 0xe1, 0x29, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x7, 0xdd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x32, 0x3, [{0x1, 0x3, 'n'}, {0x7, 0xb, "8d689f8d2bbbdf3e6a"}, {0x1, 0x7, "5b8b546266"}, {0x2, 0x4, "a4a9"}, {0x5, 0x7, "c09e2468dc"}, {0x1, 0x5, "06b50a"}, {0x7, 0x7, "71fd445224"}]}, @rr={0x7, 0xf, 0x67, [@dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x0, 0x4000c, 0x1, 0x5, '\x00', r11, r7, 0x4, 0x0, 0x3, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0x8, 0x0, 0x4000c, 0x1, 0x5, '\x00', r11, r7, 0x4, 0x0, 0x3, 0x2}, 0x50) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) ioctl$FS_IOC_RESVSP(r9, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4$netrom(r7, &(0x7f0000000440)={{}, [@remote, @remote, @bcast, @netrom, @rose, @rose, @rose, @netrom]}, &(0x7f0000000340)=0x48, 0x80400) (async) r13 = accept4$netrom(r7, &(0x7f0000000440)={{}, [@remote, @remote, @bcast, @netrom, @rose, @rose, @rose, @netrom]}, &(0x7f0000000340)=0x48, 0x80400) connect$netrom(r13, &(0x7f00000004c0)={{0x3, @bcast, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$netrom(r13, &(0x7f00000004c0)={{0x3, @bcast, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 1.096168722s ago: executing program 3 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000240)=""/157, 0x9d}], 0x4}, 0x40002000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010203007f"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) 838.758647ms ago: executing program 35 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000240)=""/157, 0x9d}], 0x4}, 0x40002000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010203007f"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) 671.106812ms ago: executing program 2 (id=2267): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 550.768303ms ago: executing program 2 (id=2268): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0xd9b88f57fbb35c23, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2f6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 402.973587ms ago: executing program 2 (id=2269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10, r0}, 0x18) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e40)={'gre0\x00', 0x0, 0x7800, 0x700, 0x7fffffff, 0xa9, {{0x23, 0x4, 0x3, 0x7, 0x8c, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@generic={0x86, 0xe, "39ee34e72562df921a842f4b"}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x6, [0x1, 0x800]}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x11, "c2a1e7209372bfea809ff77e037f5b"}, {0x0, 0x9, "c0b3324cf60e9e"}, {0x7, 0x5, "594690"}]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x9, [{@local, 0x6}]}, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x3, [{@remote, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0xa}, {@broadcast, 0x5}, {@multicast1, 0x4000000}]}]}}}}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r0, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0], 0x0, 0xca, &(0x7f0000001080)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r0, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0], 0x0, 0xca, &(0x7f0000001080)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) (async) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) ioctl$sock_inet_sctp_SIOCINQ(r15, 0x541b, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r15, 0x541b, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, r15, 0x0, 0x4}, 0x50) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r16, r17, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r16, r17, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0x22, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x30}, [@ldst={0x1, 0x3, 0x4, 0x6, 0x4, 0xfffffffffffffff4}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0x7, 0xa, 0xfffffffffffffffe, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd06, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9eb1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x90, &(0x7f0000000d80)=""/144, 0x41000, 0x18, '\x00', r7, @cgroup_sock=0x2, r8, 0x8, &(0x7f0000000f40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x5, 0x1, 0x1, 0x4}, 0x10, r9, r10, 0x4, &(0x7f00000014c0)=[r11, r12, r13, 0xffffffffffffffff, r14, 0x1, r15, r16], &(0x7f0000001500)=[{0x4, 0x4, 0x2, 0x4}, {0x0, 0x1, 0x10, 0xb}, {0x2, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x8, 0x7}], 0x10, 0xe}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r18, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r18}]}, 0x54}}, 0x0) 259.195486ms ago: executing program 2 (id=2270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000000101040000000000c786ac540000002c0001801400018008000100e000000108000200e00000012c00028045000100000000000600032600030000"], 0x40}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept4(r2, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x80, 0x800) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0xfffffffffffffffe, {0x1, 0x1, 0x4}, 0x1}, 0x18) bind$packet(r3, &(0x7f0000000180)={0x11, 0xf6, r5, 0x1, 0x6, 0x6, @random="939e2a4551a1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020601080000000000010000000020080c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x54}}, 0x2800c0c4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0xffffff28, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 74.632826ms ago: executing program 2 (id=2271): r0 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) 0s ago: executing program 2 (id=2272): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0xed7bc000) socket(0x8, 0x0, 0x8000) ioctl$NS_GET_OWNER_UID(r1, 0x40106183, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 96.998304][ T6833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.037261][ T6837] veth3: entered promiscuous mode [ 97.055112][ T6835] vlan3: entered promiscuous mode [ 97.060842][ T6835] bond2: entered promiscuous mode [ 97.066267][ T6835] vlan3: entered allmulticast mode [ 97.072564][ T6835] bond2: entered allmulticast mode [ 97.112614][ T6841] veth5: entered promiscuous mode [ 97.631473][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 97.640601][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 97.665775][ T6876] pim6reg1: entered promiscuous mode [ 97.689361][ T6876] pim6reg1: entered allmulticast mode [ 98.001421][ T6897] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.141748][ T6901] xt_TCPMSS: Only works on TCP SYN packets [ 98.159363][ T6904] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 98.160749][ T6794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.184333][ T6794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.305112][ T6794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.344321][ T6794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.465695][ T6794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.507578][ T6794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 98.566005][ T6917] netlink: 'syz.0.269': attribute type 12 has an invalid length. [ 98.608098][ T6917] netlink: 'syz.0.269': attribute type 29 has an invalid length. [ 98.634734][ T6917] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 98.763399][ T6936] IPv6: addrconf: prefix option has invalid lifetime [ 98.782269][ T6926] hsr_slave_0 (unregistering): left promiscuous mode [ 98.790202][ T6937] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.920919][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 98.942172][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.004356][ T6412] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 99.025432][ T6412] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.107378][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 99.126963][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.188035][ T6412] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 99.211659][ T6412] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 99.529948][ T6983] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 99.550281][ T6974] can: request_module (can-proto-0) failed. [ 99.563716][ T6981] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 99.578691][ T6984] tipc: Failed to obtain node identity [ 99.585311][ T6984] tipc: Enabling of bearer rejected, failed to enable media [ 99.597771][ T6969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.792391][ T6995] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 99.864944][ T7002] x_tables: duplicate underflow at hook 1 [ 99.913329][ T7004] __nla_validate_parse: 9 callbacks suppressed [ 99.913346][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 100.001744][ T7010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.072785][ T7006] netlink: 6 bytes leftover after parsing attributes in process `syz.2.293'. [ 100.519643][ T7034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.527216][ T7034] IPv6: NLM_F_CREATE should be set when creating new route [ 100.529458][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 100.611280][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 100.741704][ T30] audit: type=1107 audit(1761932428.142:2): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 101.048800][ T7058] tc_dump_action: action bad kind [ 101.200482][ T7064] syzkaller0: entered promiscuous mode [ 101.209399][ T7064] syzkaller0: entered allmulticast mode [ 101.416124][ T7075] syzkaller0: entered promiscuous mode [ 101.431075][ T7075] syzkaller0: entered allmulticast mode [ 101.445088][ T7070] tipc: Started in network mode [ 101.461407][ T7070] tipc: Node identity c2968509ddc4, cluster identity 4711 [ 101.487106][ T7070] tipc: Enabled bearer , priority 0 [ 101.516791][ T7074] syzkaller0: entered promiscuous mode [ 101.536485][ T7074] syzkaller0: entered allmulticast mode [ 101.548995][ T7080] veth1_to_bond: entered allmulticast mode [ 101.583876][ T7079] veth1_to_bond: left allmulticast mode [ 101.682205][ T7070] tipc: Resetting bearer [ 101.703451][ T7095] validate_nla: 1 callbacks suppressed [ 101.703466][ T7095] netlink: 'syz.2.322': attribute type 33 has an invalid length. [ 101.718391][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 101.733037][ T7066] tipc: Resetting bearer [ 101.733458][ T7095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.322'. [ 101.788339][ T7066] tipc: Disabling bearer [ 101.805478][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.324'. [ 102.350672][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 102.573731][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 102.587797][ T7153] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 102.620202][ T7152] netlink: 'syz.2.340': attribute type 12 has an invalid length. [ 102.659213][ T7153] netlink: 232 bytes leftover after parsing attributes in process `syz.4.339'. [ 102.946774][ T7170] bond3: option xmit_hash_policy: invalid value (64) [ 102.987879][ T7170] bond3 (unregistering): Released all slaves [ 103.135051][ T7184] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 103.182919][ T7184] veth0_virt_wifi: entered allmulticast mode [ 103.417688][ T7209] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 103.477937][ T7209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.548356][ T7209] vlan3: entered promiscuous mode [ 103.553957][ T7209] bond2: entered promiscuous mode [ 103.559411][ T7209] vlan3: entered allmulticast mode [ 103.564874][ T7209] bond2: entered allmulticast mode [ 104.771193][ T7209] bond2: (slave gretap2): making interface the new active one [ 104.778998][ T7209] gretap2: entered promiscuous mode [ 104.784389][ T7209] gretap2: entered allmulticast mode [ 104.802758][ T7209] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 104.845001][ T7209] syz.4.356 (7209) used greatest stack depth: 18320 bytes left [ 104.927444][ T7240] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 104.951734][ T7235] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 105.106096][ T7245] __nla_validate_parse: 5 callbacks suppressed [ 105.106115][ T7245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.368'. [ 105.129563][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 105.144480][ T7249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.151816][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 105.159173][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 105.166410][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 105.169715][ T7252] ip6gre1: entered allmulticast mode [ 105.177058][ T7249] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 105.192859][ T7249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.391993][ T7262] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 105.430693][ T7262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.448445][ T7262] vlan2: entered promiscuous mode [ 105.453738][ T7262] bond3: entered promiscuous mode [ 105.459625][ T7262] vlan2: entered allmulticast mode [ 105.464792][ T7262] bond3: entered allmulticast mode [ 105.520519][ T7262] bond3: (slave gretap1): making interface the new active one [ 105.545443][ T7262] gretap1: entered promiscuous mode [ 105.558886][ T7262] gretap1: entered allmulticast mode [ 105.574639][ T7262] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 105.627268][ T7275] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 106.384496][ T7276] veth11: entered promiscuous mode [ 106.486270][ T7277] veth13: entered promiscuous mode [ 106.956490][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 106.977549][ T7314] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 107.010044][ T7314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 107.028969][ T7314] vlan3: entered promiscuous mode [ 107.034204][ T7314] bond4: entered promiscuous mode [ 107.058723][ T7314] vlan3: entered allmulticast mode [ 107.063893][ T7314] bond4: entered allmulticast mode [ 107.331099][ T7331] veth1_to_team: mtu less than device minimum [ 107.337382][ T7332] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 107.478746][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 107.488731][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 107.802799][ T7360] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 107.840015][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'. [ 107.860287][ T7360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.920900][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'. [ 107.953733][ T7360] vlan4: entered promiscuous mode [ 107.982908][ T7360] bond3: entered promiscuous mode [ 107.988180][ T7360] vlan4: entered allmulticast mode [ 108.008940][ T7360] bond3: entered allmulticast mode [ 108.033130][ T7377] netlink: 9 bytes leftover after parsing attributes in process `syz.0.409'. [ 108.103103][ T7360] bond3: (slave gretap1): making interface the new active one [ 108.113307][ T7360] gretap1: entered promiscuous mode [ 108.121216][ T7360] gretap1: entered allmulticast mode [ 108.129964][ T7360] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 108.560727][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 108.577812][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 108.866293][ T7426] syzkaller1: entered promiscuous mode [ 108.878626][ T7426] syzkaller1: entered allmulticast mode [ 109.000162][ T7437] netlink: 'syz.4.424': attribute type 10 has an invalid length. [ 109.017137][ T7437] dummy0: entered promiscuous mode [ 109.050866][ T7437] bridge0: port 3(dummy0) entered blocking state [ 109.076506][ T7437] bridge0: port 3(dummy0) entered disabled state [ 109.083310][ T7437] dummy0: entered allmulticast mode [ 109.103414][ T7437] bridge0: port 3(dummy0) entered blocking state [ 109.110120][ T7437] bridge0: port 3(dummy0) entered forwarding state [ 109.113868][ T7441] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 109.157757][ T7441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.195022][ T7441] vlan2: entered promiscuous mode [ 109.201402][ T7441] bond3: entered promiscuous mode [ 109.207671][ T7441] vlan2: entered allmulticast mode [ 109.244937][ T7441] bond3: entered allmulticast mode [ 109.276916][ T7441] bond3: (slave gretap1): making interface the new active one [ 109.284943][ T7441] gretap1: entered promiscuous mode [ 109.290826][ T7441] gretap1: entered allmulticast mode [ 109.298823][ T7441] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 109.314613][ T7441] syz.1.425 (7441) used greatest stack depth: 17800 bytes left [ 109.424578][ T7455] veth15: entered promiscuous mode [ 109.492642][ T7458] veth15: entered promiscuous mode [ 109.697413][ T7471] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 109.734694][ T7471] netlink: 'syz.1.435': attribute type 3 has an invalid length. [ 109.778675][ T7471] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 109.795593][ T7477] openvswitch: netlink: Message has -2 unknown bytes. [ 109.886154][ T7482] netlink: 'syz.4.439': attribute type 4 has an invalid length. [ 109.974773][ T7486] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 110.064820][ T7486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.118267][ T7486] vlan5: entered promiscuous mode [ 110.125070][ T7486] bond4: entered promiscuous mode [ 110.131643][ T7486] vlan5: entered allmulticast mode [ 110.137010][ T7486] bond4: entered allmulticast mode [ 110.151024][ T7493] __nla_validate_parse: 6 callbacks suppressed [ 110.151039][ T7493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.443'. [ 110.418729][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 110.450017][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 110.475100][ T7507] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 110.515715][ T7508] openvswitch: netlink: Missing key (keys=40, expected=80) [ 110.546439][ T7507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.725526][ T7501] syzkaller0: entered promiscuous mode [ 110.731377][ T7501] syzkaller0: entered allmulticast mode [ 110.863336][ T7528] tipc: Enabling of bearer rejected, failed to enable media [ 110.875615][ T7527] netlink: 300 bytes leftover after parsing attributes in process `syz.3.448'. [ 110.941285][ T7535] netlink: 104 bytes leftover after parsing attributes in process `syz.1.447'. [ 111.034888][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.451'. [ 111.115122][ T7528] syzkaller0: entered promiscuous mode [ 111.129136][ T7528] syzkaller0: entered allmulticast mode [ 111.196671][ T7548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.453'. [ 111.328274][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 111.340793][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 111.361008][ T7559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.454'. [ 112.406687][ T7558] geneve2: entered promiscuous mode [ 112.414733][ T7558] geneve2: entered allmulticast mode [ 112.526152][ T6412] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 112.549368][ T6412] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 112.579308][ T6412] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 112.588291][ T6412] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 112.841865][ T7584] macvtap1: entered allmulticast mode [ 112.847366][ T7584] veth0_macvtap: entered allmulticast mode [ 112.921589][ T7589] macvtap2: entered allmulticast mode [ 113.205973][ T7609] validate_nla: 4 callbacks suppressed [ 113.205991][ T7609] netlink: 'syz.4.473': attribute type 25 has an invalid length. [ 114.186770][ T7668] openvswitch: netlink: Duplicate or invalid key (type 0). [ 114.209159][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.250220][ T7669] syzkaller1: entered promiscuous mode [ 114.255726][ T7669] syzkaller1: entered allmulticast mode [ 114.596814][ T7687] rdma_op ffff88802fdf81f0 conn xmit_rdma 0000000000000000 [ 114.625201][ T7690] netlink: 'syz.3.498': attribute type 29 has an invalid length. [ 114.659379][ T7690] netlink: 'syz.3.498': attribute type 29 has an invalid length. [ 115.187134][ T7728] __nla_validate_parse: 9 callbacks suppressed [ 115.187153][ T7728] netlink: 80 bytes leftover after parsing attributes in process `syz.4.506'. [ 116.486777][ T7738] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.523415][ T7745] netlink: 52 bytes leftover after parsing attributes in process `syz.1.510'. [ 116.538399][ T7744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.511'. [ 116.559735][ T7747] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 116.792734][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'. [ 116.817845][ T7759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.516'. [ 117.111285][ T7781] netlink: 248 bytes leftover after parsing attributes in process `syz.2.522'. [ 117.710982][ T7817] veth3: entered promiscuous mode [ 117.835307][ T7839] netlink: 220 bytes leftover after parsing attributes in process `syz.0.539'. [ 117.862380][ T7828] veth3: entered promiscuous mode [ 117.966042][ T7842] tipc: Started in network mode [ 117.973530][ T7842] tipc: Node identity 0a3461644948, cluster identity 4711 [ 118.008846][ T7842] tipc: Enabled bearer , priority 0 [ 118.077180][ T7844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.087339][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 118.101862][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 118.112880][ T7852] netlink: 2 bytes leftover after parsing attributes in process `syz.1.541'. [ 118.141864][ T7849] tipc: Resetting bearer [ 118.275079][ T7841] tipc: Disabling bearer [ 118.571217][ T7881] rdma_op ffff88807bb991f0 conn xmit_rdma 0000000000000000 [ 118.665949][ T7888] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.775935][ T7893] bridge0: port 3(batadv1) entered blocking state [ 118.794720][ T7893] bridge0: port 3(batadv1) entered disabled state [ 118.820829][ T7893] batadv1: entered allmulticast mode [ 118.841726][ T7893] batadv1: entered promiscuous mode [ 118.908872][ T7899] gretap2: entered promiscuous mode [ 118.928644][ T7899] gretap2: entered allmulticast mode [ 119.261431][ T6412] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 119.271434][ T6412] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 119.318833][ T7924] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 120.541330][ T8000] __nla_validate_parse: 10 callbacks suppressed [ 120.541348][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 120.708828][ T8010] netlink: 'syz.2.594': attribute type 21 has an invalid length. [ 120.717579][ T8010] netlink: 128 bytes leftover after parsing attributes in process `syz.2.594'. [ 120.733047][ T8010] netlink: 3 bytes leftover after parsing attributes in process `syz.2.594'. [ 120.790545][ T8012] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 121.017523][ T8024] netlink: 244 bytes leftover after parsing attributes in process `syz.3.601'. [ 121.254851][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 121.485954][ T8048] tipc: Enabled bearer , priority 0 [ 121.505431][ T8048] syzkaller0: entered promiscuous mode [ 121.513017][ T8048] syzkaller0: entered allmulticast mode [ 121.532657][ T8048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.607992][ T8045] tipc: Resetting bearer [ 121.627189][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 121.662814][ T8045] tipc: Disabling bearer [ 121.691249][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.700532][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.709242][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.716833][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.760031][ T8062] IPv6: addrconf: prefix option has invalid lifetime [ 121.797464][ T8065] vxcan1: entered allmulticast mode [ 121.973852][ T8073] IPVS: set_ctl: invalid protocol: 129 172.20.20.187:20003 [ 121.983471][ T8073] IPVS: set_ctl: invalid protocol: 14 255.255.255.255:20003 [ 121.996949][ T8072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.616'. [ 122.006099][ T8072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.616'. [ 122.016115][ T8072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.616'. [ 122.026019][ T8073] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20002 [ 122.273639][ T8086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 122.283473][ T8091] netlink: 'syz.1.623': attribute type 5 has an invalid length. [ 122.292907][ T8084] veth7: entered promiscuous mode [ 122.391113][ T8089] veth7: entered promiscuous mode [ 122.616737][ T8101] xt_cgroup: xt_cgroup: no path or classid specified [ 122.857870][ T8109] syzkaller0: entered promiscuous mode [ 122.867709][ T8109] syzkaller0: entered allmulticast mode [ 122.925072][ T8119] pim6reg1: entered promiscuous mode [ 122.931005][ T8119] pim6reg1: entered allmulticast mode [ 123.633541][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.642964][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.885678][ T8170] lo speed is unknown, defaulting to 1000 [ 123.912995][ T8171] syzkaller0: entered promiscuous mode [ 123.919504][ T8171] syzkaller0: entered allmulticast mode [ 123.968529][ T8170] lo speed is unknown, defaulting to 1000 [ 124.058306][ T8170] lo speed is unknown, defaulting to 1000 [ 124.091303][ T8170] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.137866][ T8170] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 124.207633][ T8170] lo speed is unknown, defaulting to 1000 [ 124.217121][ T8170] lo speed is unknown, defaulting to 1000 [ 124.497057][ T8184] team0 (unregistering): Port device team_slave_0 removed [ 124.513337][ T8184] team0 (unregistering): Port device team_slave_1 removed [ 124.531770][ T8170] lo speed is unknown, defaulting to 1000 [ 124.542559][ T8190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.563687][ T8192] gre0: entered promiscuous mode [ 124.606293][ T8170] lo speed is unknown, defaulting to 1000 [ 124.631211][ T8170] lo speed is unknown, defaulting to 1000 [ 125.370889][ T8233] netlink: 'syz.0.665': attribute type 26 has an invalid length. [ 125.485818][ T8237] netlink: 'syz.4.667': attribute type 15 has an invalid length. [ 125.526026][ T8237] netlink: 'syz.4.667': attribute type 15 has an invalid length. [ 125.528942][ T150] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 125.553501][ T8239] SET target dimension over the limit! [ 125.563950][ T150] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 125.590610][ T150] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 125.615863][ T150] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 125.812599][ T8245] __nla_validate_parse: 4 callbacks suppressed [ 125.812618][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 126.248994][ T8262] syzkaller1: entered promiscuous mode [ 126.254516][ T8262] syzkaller1: entered allmulticast mode [ 126.256729][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 126.554303][ T8291] netlink: 'syz.4.686': attribute type 10 has an invalid length. [ 126.623308][ T8291] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 127.038767][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 127.053633][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 127.076775][ T8329] netlink: 'syz.3.699': attribute type 11 has an invalid length. [ 127.131219][ T8335] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 127.142152][ T8335] netlink: 'syz.1.700': attribute type 2 has an invalid length. [ 127.233607][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.264209][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.293466][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.338073][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.365249][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.378003][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 127.412970][ T8342] bridge0: port 3(dummy0) entered disabled state [ 127.419547][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.426958][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.488331][ T8342] veth0_to_bond: left allmulticast mode [ 127.516181][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.530270][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.602264][ T8342] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 127.610810][ T8342] vlan1: left allmulticast mode [ 127.615886][ T8342] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 127.626669][ T8342] gretap1: left promiscuous mode [ 127.631924][ T8342] gretap1: left allmulticast mode [ 127.643464][ T8342] vlan2: left promiscuous mode [ 127.648682][ T8342] bond1: left promiscuous mode [ 127.653692][ T8342] vlan2: left allmulticast mode [ 127.658864][ T8342] bond1: left allmulticast mode [ 127.664633][ T8342] geneve2: left promiscuous mode [ 127.670093][ T8342] geneve2: left allmulticast mode [ 127.685341][ T8342] vlan3: left promiscuous mode [ 127.690209][ T8342] bond2: left promiscuous mode [ 127.694986][ T8342] gretap2: left promiscuous mode [ 127.700263][ T8342] vlan3: left allmulticast mode [ 127.705133][ T8342] bond2: left allmulticast mode [ 127.710806][ T8342] gretap2: left allmulticast mode [ 127.718052][ T8342] macvtap1: left allmulticast mode [ 127.724364][ T8342] veth0_macvtap: left allmulticast mode [ 127.730385][ T8342] macvtap2: left allmulticast mode [ 127.755675][ T1167] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.772253][ T1167] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 127.781384][ T1167] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.792821][ T1167] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.809061][ T1167] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 127.820505][ T1167] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.830935][ T1167] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.839867][ T1167] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 127.848429][ T1167] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.911358][ T1167] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 127.921343][ T1167] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 127.930036][ T1167] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 129.391634][ T8452] veth3: entered promiscuous mode [ 129.612713][ T8460] veth3: entered promiscuous mode [ 129.636017][ T8474] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 129.782401][ T8474] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 129.786159][ T8481] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 129.840884][ T8474] bond5 (unregistering): Released all slaves [ 129.880292][ T8484] netlink: 'syz.3.737': attribute type 9 has an invalid length. [ 130.010863][ T8488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.020761][ T8490] tipc: Enabling of bearer rejected, failed to enable media [ 130.108718][ T8499] x_tables: duplicate underflow at hook 2 [ 130.573093][ T8529] veth3: entered promiscuous mode [ 130.733864][ T8530] veth3: entered promiscuous mode [ 130.933396][ T8559] tipc: Enabled bearer , priority 0 [ 130.959169][ T8556] syzkaller0: entered promiscuous mode [ 130.964884][ T8556] syzkaller0: entered allmulticast mode [ 131.033100][ T8556] tipc: Resetting bearer [ 131.055631][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.064072][ T8556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.148304][ T8555] tipc: Resetting bearer [ 131.234770][ T8555] tipc: Disabling bearer [ 131.479613][ T8588] __nla_validate_parse: 95 callbacks suppressed [ 131.479631][ T8588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.768'. [ 131.745899][ T8596] lo speed is unknown, defaulting to 1000 [ 132.166329][ T8628] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 132.264583][ T8635] x_tables: duplicate underflow at hook 3 [ 132.271095][ T8636] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 132.304973][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 132.319523][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 132.364104][ T8634] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 132.394791][ T8635] x_tables: duplicate underflow at hook 1 [ 132.545577][ T8653] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.555823][ T8653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.563684][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 132.567716][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 132.571068][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 132.596112][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 132.674888][ T8657] vlan4: entered allmulticast mode [ 132.707694][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.755729][ T8660] lo: entered promiscuous mode [ 132.771173][ T8660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.819276][ T8659] : entered promiscuous mode [ 132.839033][ T8667] sit1: entered promiscuous mode [ 132.854761][ T8667] sit1: entered allmulticast mode [ 132.867629][ T8665] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.790'. [ 132.881896][ T8665] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 132.962765][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.212466][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.801'. [ 133.637879][ T8713] netlink: 'syz.2.808': attribute type 5 has an invalid length. [ 133.685681][ T8713] netlink: 520 bytes leftover after parsing attributes in process `syz.2.808'. [ 133.755696][ T5831] Bluetooth: hci1: command tx timeout [ 133.823805][ T8730] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 133.892712][ T8730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.907432][ T8731] bond4: (slave geneve2): making interface the new active one [ 133.925558][ T8731] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 133.954258][ T8736] tipc: Enabled bearer , priority 0 [ 133.972687][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.001939][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.005971][ T8745] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.054754][ T8736] syzkaller0: MTU too low for tipc bearer [ 134.061725][ T8736] tipc: Disabling bearer [ 134.114990][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.135036][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 134.156188][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.185566][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 135.714963][ T8835] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 135.729906][ T8835] bond5 (unregistering): Released all slaves [ 136.157605][ T8869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.179092][ T8869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.195273][ T8869] bond0 (unregistering): Released all slaves [ 136.215477][ T8875] sctp: [Deprecated]: syz.2.856 (pid 8875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.215477][ T8875] Use struct sctp_sack_info instead [ 136.650986][ T8909] __nla_validate_parse: 9 callbacks suppressed [ 136.651004][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 136.833566][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 136.845521][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 136.972176][ T8927] netlink: 666 bytes leftover after parsing attributes in process `syz.2.874'. [ 137.005965][ T8880] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.016599][ T8930] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.100401][ T8934] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.179009][ T8938] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 137.252554][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 137.324992][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 137.626228][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.878621][ T8981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 137.933587][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 137.965760][ T8986] netlink: 'syz.2.894': attribute type 12 has an invalid length. [ 137.973829][ T8986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.894'. [ 138.003154][ T8987] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 138.022188][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.895'. [ 138.304220][ T9014] netlink: 'syz.0.901': attribute type 83 has an invalid length. [ 138.476712][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.484337][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.548820][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.564845][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.752795][ T9025] bond7: entered promiscuous mode [ 138.768095][ T1104] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.821156][ T1104] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.863465][ T9038] netlink: 'syz.1.909': attribute type 23 has an invalid length. [ 138.890752][ T1104] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.899280][ T9038] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 138.904812][ T1104] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.910688][ T9039] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 138.921910][ T9043] netlink: 'syz.3.912': attribute type 14 has an invalid length. [ 138.933071][ T1104] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.954905][ T1104] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 138.969425][ T9041] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 138.982722][ T9043] netlink: 'syz.3.912': attribute type 13 has an invalid length. [ 138.991038][ T1104] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.018625][ T1104] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 139.113091][ T9038] bond5: entered promiscuous mode [ 139.139068][ T9038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.210521][ T9052] bond5: (slave bridge3): making interface the new active one [ 139.251717][ T9052] bridge3: entered promiscuous mode [ 139.272332][ T9052] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 139.395572][ T9066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.492464][ T9070] veth7: entered promiscuous mode [ 139.510518][ T9070] bond8: (slave veth7): Enslaving as an active interface with an up link [ 139.535756][ T9066] veth9: entered promiscuous mode [ 139.548104][ T9066] bond8: (slave veth9): Enslaving as an active interface with an up link [ 139.721558][ T9090] syzkaller0: entered promiscuous mode [ 139.743407][ T9090] syzkaller0: entered allmulticast mode [ 139.760809][ T9095] x_tables: duplicate underflow at hook 1 [ 139.801890][ T9094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.939037][ T9108] pim6reg: entered allmulticast mode [ 140.048208][ T9114] netlink: 'syz.4.932': attribute type 23 has an invalid length. [ 140.142525][ T9120] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 140.253574][ T9126] netlink: 'syz.4.936': attribute type 39 has an invalid length. [ 140.263125][ T9125] xfrm1: entered allmulticast mode [ 140.341920][ T9130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.441698][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.487714][ T9138] tipc: Enabled bearer , priority 0 [ 140.503106][ T9138] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.567182][ T9140] veth3: entered promiscuous mode [ 140.588393][ T9140] bond0: (slave veth3): Enslaving as an active interface with an up link [ 140.615771][ T9132] veth5: entered promiscuous mode [ 140.624010][ T9132] bond0: (slave veth5): Enslaving as an active interface with an up link [ 140.637747][ T9137] tipc: Disabling bearer [ 140.655054][ T9144] C: renamed from lo [ 141.261068][ T9182] syzkaller0: entered promiscuous mode [ 141.276956][ T9182] syzkaller0: entered allmulticast mode [ 141.703825][ T9218] __nla_validate_parse: 15 callbacks suppressed [ 141.703850][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 143.011944][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 143.239047][ T9244] validate_nla: 1 callbacks suppressed [ 143.239063][ T9244] netlink: 'syz.1.973': attribute type 39 has an invalid length. [ 143.267093][ T9246] netlink: 'syz.1.973': attribute type 39 has an invalid length. [ 143.376084][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 143.641598][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 143.884854][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'. [ 143.962324][ T9282] sctp: [Deprecated]: syz.1.988 (pid 9282) Use of int in maxseg socket option. [ 143.962324][ T9282] Use struct sctp_assoc_value instead [ 144.071980][ T9287] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.989'. [ 144.273091][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 144.427580][ T9307] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 144.542200][ T9313] tipc: Enabled bearer , priority 0 [ 144.560132][ T9313] syzkaller0: entered promiscuous mode [ 144.565821][ T9313] syzkaller0: entered allmulticast mode [ 144.586025][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 144.591123][ T9313] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 144.651521][ T9313] tipc: Resetting bearer [ 144.671702][ T9311] tipc: Resetting bearer [ 144.727679][ T9311] tipc: Disabling bearer [ 144.761175][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 144.860264][ T9339] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 144.870014][ T9339] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1003'. [ 145.014072][ T9347] tipc: Enabling of bearer rejected, failed to enable media [ 145.104552][ T9355] x_tables: duplicate underflow at hook 1 [ 145.225333][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880318d0800: rx timeout, send abort [ 145.437838][ T9374] bond0: option ad_select: unable to set because the bond device is up [ 145.725601][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880318d2800: rx timeout, send abort [ 145.734916][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880318d0800: abort rx timeout. Force session deactivation [ 145.937587][ T9399] veth0: entered promiscuous mode [ 145.967780][ T9400] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 145.977536][ T9399] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 145.992040][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.999944][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.010680][ T9398] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 146.020016][ T9399] bridge0: left promiscuous mode [ 146.034005][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.041267][ T9399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.048835][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.056033][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.074038][ T9399] bridge0: entered promiscuous mode [ 146.106600][ T9399] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 146.118189][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.127805][ T9398] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.153661][ T9394] veth0: left promiscuous mode [ 146.175065][ T9408] tipc: Enabled bearer , priority 0 [ 146.183013][ T9408] syzkaller0: entered promiscuous mode [ 146.189677][ T9408] syzkaller0: entered allmulticast mode [ 146.227385][ T9408] tipc: Resetting bearer [ 146.233827][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880318d2800: abort rx timeout. Force session deactivation [ 146.278893][ T9405] tipc: Resetting bearer [ 146.317157][ T9405] tipc: Disabling bearer [ 146.718539][ T9441] __nla_validate_parse: 7 callbacks suppressed [ 146.718555][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 146.771479][ T9441] netlink: 'syz.2.1035': attribute type 32 has an invalid length. [ 146.783337][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 146.847588][ T9441] bond5: Setting coupled_control to off (0) [ 146.980087][ T9455] syzkaller0: entered promiscuous mode [ 146.985722][ T9455] syzkaller0: entered allmulticast mode [ 147.032029][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 147.059512][ T9410] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 147.077952][ T9462] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 147.168961][ T9464] tipc: Enabling of bearer rejected, failed to enable media [ 147.240858][ T9469] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 147.262525][ T9473] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 147.312368][ T9474] bond6: (slave gretap3): making interface the new active one [ 147.321562][ T9474] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 147.338974][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1044'. [ 147.352454][ T9477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 147.377731][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 147.389790][ T9473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 147.400863][ T9469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.412523][ T9482] GUP no longer grows the stack in syz.4.1048 (9482): 200000003000-20000000a000 (200000001000) [ 147.424509][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.4.1048 Not tainted syzkaller #0 PREEMPT(full) [ 147.424535][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.424552][ T9482] Call Trace: [ 147.424560][ T9482] [ 147.424570][ T9482] dump_stack_lvl+0x189/0x250 [ 147.424603][ T9482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.424627][ T9482] ? __pfx__printk+0x10/0x10 [ 147.424644][ T9482] ? find_vma+0xe7/0x160 [ 147.424681][ T9482] __get_user_pages+0x2470/0x2a00 [ 147.424709][ T9482] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 147.424756][ T9482] ? rcu_is_watching+0x15/0xb0 [ 147.424783][ T9482] __gup_longterm_locked+0xde4/0x1660 [ 147.424811][ T9482] ? try_grab_folio_fast+0x1bf/0x6a0 [ 147.424842][ T9482] ? gup_fast_fallback+0x1b86/0x22d0 [ 147.424865][ T9482] gup_fast_fallback+0x1d65/0x22d0 [ 147.424918][ T9482] ? __pfx_gup_fast_fallback+0x10/0x10 [ 147.424937][ T9482] ? __mutex_lock+0x335/0x1350 [ 147.424967][ T9482] ? is_valid_gup_args+0x11f/0x200 [ 147.424993][ T9482] ? get_user_pages_fast+0x4d/0xb0 [ 147.425018][ T9482] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 147.425050][ T9482] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 147.425068][ T9482] ? wait_for_space+0x248/0x2d0 [ 147.425094][ T9482] iov_iter_get_pages2+0x5e/0xa0 [ 147.425120][ T9482] __se_sys_vmsplice+0x548/0x10d0 [ 147.425147][ T9482] ? futex_private_hash_put+0x4b/0x280 [ 147.425177][ T9482] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 147.425199][ T9482] ? __pfx_futex_wake+0x10/0x10 [ 147.425281][ T9482] ? do_syscall_64+0xbe/0xfa0 [ 147.425307][ T9482] do_syscall_64+0xfa/0xfa0 [ 147.425327][ T9482] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.425348][ T9482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.425365][ T9482] ? clear_bhb_loop+0x60/0xb0 [ 147.425386][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.425403][ T9482] RIP: 0033:0x7f926db8efc9 [ 147.425424][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.425439][ T9482] RSP: 002b:00007f926eaf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 147.425459][ T9482] RAX: ffffffffffffffda RBX: 00007f926dde5fa0 RCX: 00007f926db8efc9 [ 147.425473][ T9482] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 147.425485][ T9482] RBP: 00007f926dc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.425495][ T9482] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 147.425503][ T9482] R13: 00007f926dde6038 R14: 00007f926dde5fa0 R15: 00007ffc30192008 [ 147.425532][ T9482] [ 147.743464][ T9481] veth11: entered promiscuous mode [ 147.771275][ T9481] bond9: (slave veth11): Enslaving as an active interface with an up link [ 147.845848][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 147.862882][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 147.876832][ T9473] veth13: entered promiscuous mode [ 147.888721][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.893455][ T9473] bond9: (slave veth13): Enslaving as an active interface with an up link [ 147.929501][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 148.236432][ T9502] : renamed from hsr0 [ 148.266798][ T9502] openvswitch: netlink: IP tunnel dst address not specified [ 148.706249][ T9558] syz.1.1069: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.722087][ T9558] CPU: 1 UID: 0 PID: 9558 Comm: syz.1.1069 Not tainted syzkaller #0 PREEMPT(full) [ 148.722101][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.722108][ T9558] Call Trace: [ 148.722112][ T9558] [ 148.722117][ T9558] dump_stack_lvl+0x189/0x250 [ 148.722136][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.722149][ T9558] ? __pfx__printk+0x10/0x10 [ 148.722160][ T9558] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.722175][ T9558] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.722196][ T9558] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 148.722220][ T9558] warn_alloc+0x214/0x310 [ 148.722245][ T9558] ? stack_depot_save_flags+0x40/0x860 [ 148.722273][ T9558] ? __pfx_warn_alloc+0x10/0x10 [ 148.722297][ T9558] ? kasan_save_track+0x3e/0x80 [ 148.722318][ T9558] ? __kasan_kmalloc+0x93/0xb0 [ 148.722336][ T9558] ? xsk_setsockopt+0x4dc/0x8d0 [ 148.722352][ T9558] ? do_sock_setsockopt+0x17c/0x1b0 [ 148.722367][ T9558] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 148.722381][ T9558] ? do_syscall_64+0xfa/0xfa0 [ 148.722400][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.722422][ T9558] __vmalloc_node_range_noprof+0x125/0x12d0 [ 148.722452][ T9558] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.722468][ T9558] ? __kasan_kmalloc+0x93/0xb0 [ 148.722484][ T9558] vmalloc_user_noprof+0xad/0xf0 [ 148.722497][ T9558] ? xskq_create+0xbf/0x170 [ 148.722509][ T9558] xskq_create+0xbf/0x170 [ 148.722522][ T9558] xsk_init_queue+0xb0/0x110 [ 148.722534][ T9558] xsk_setsockopt+0x4dc/0x8d0 [ 148.722546][ T9558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.722558][ T9558] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.722572][ T9558] ? aa_sock_opt_perm+0xff/0x1b0 [ 148.722588][ T9558] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.722597][ T9558] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.722608][ T9558] do_sock_setsockopt+0x17c/0x1b0 [ 148.722621][ T9558] __x64_sys_setsockopt+0x13f/0x1b0 [ 148.722633][ T9558] do_syscall_64+0xfa/0xfa0 [ 148.722644][ T9558] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.722657][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.722666][ T9558] ? clear_bhb_loop+0x60/0xb0 [ 148.722677][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.722687][ T9558] RIP: 0033:0x7f7aca38efc9 [ 148.722697][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.722704][ T9558] RSP: 002b:00007f7ac85f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.722715][ T9558] RAX: ffffffffffffffda RBX: 00007f7aca5e5fa0 RCX: 00007f7aca38efc9 [ 148.722722][ T9558] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 148.722728][ T9558] RBP: 00007f7aca411f91 R08: 0000000000000004 R09: 0000000000000000 [ 148.722734][ T9558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.722739][ T9558] R13: 00007f7aca5e6038 R14: 00007f7aca5e5fa0 R15: 00007ffdb437c8b8 [ 148.722756][ T9558] [ 148.722768][ T9558] Mem-Info: [ 149.018966][ T9558] active_anon:4866 inactive_anon:0 isolated_anon:0 [ 149.018966][ T9558] active_file:3012 inactive_file:39903 isolated_file:0 [ 149.018966][ T9558] unevictable:768 dirty:97 writeback:0 [ 149.018966][ T9558] slab_reclaimable:10949 slab_unreclaimable:98890 [ 149.018966][ T9558] mapped:29231 shmem:1361 pagetables:1048 [ 149.018966][ T9558] sec_pagetables:0 bounce:0 [ 149.018966][ T9558] kernel_misc_reclaimable:0 [ 149.018966][ T9558] free:1333862 free_pcp:14038 free_cma:0 [ 149.067531][ T9558] Node 0 active_anon:19464kB inactive_anon:0kB active_file:12048kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116924kB dirty:388kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12592kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.099863][ T9558] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.130874][ T9558] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.163139][ T9558] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 149.169829][ T9558] Node 0 DMA32 free:1434292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19428kB inactive_anon:0kB active_file:12048kB inactive_file:159408kB unevictable:1536kB writepending:388kB zspages:0kB present:3129332kB managed:2565172kB mlocked:0kB bounce:0kB free_pcp:36184kB local_pcp:16340kB free_cma:0kB [ 149.227718][ T9558] lowmem_reserve[]: 0 0 0 0 0 [ 149.232761][ T9558] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.262505][ T9558] lowmem_reserve[]: 0 0 0 0 0 [ 149.267382][ T9558] Node 1 Normal free:3885860kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:9632kB free_cma:0kB [ 149.303149][ T9558] lowmem_reserve[]: 0 0 0 0 0 [ 149.308066][ T9558] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.321735][ T9558] Node 0 DMA32: 109*4kB (ME) 116*8kB (UME) 114*16kB (UME) 284*32kB (UME) 101*64kB (UME) 57*128kB (UME) 21*256kB (UME) 14*512kB (UM) 7*1024kB (UME) 4*2048kB (ME) 337*4096kB (M) = 1434292kB [ 149.341140][ T9558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.363818][ T9558] Node 1 Normal: 197*4kB (UE) 42*8kB (UME) 36*16kB (UME) 68*32kB (UME) 22*64kB (UME) 7*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3885860kB [ 149.394623][ T9558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.443721][ T9558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.474385][ T9558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.505243][ T9558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.514980][ T9558] 44272 total pagecache pages [ 149.522694][ T9558] 0 pages in swap cache [ 149.527033][ T9558] Free swap = 124996kB [ 149.534070][ T9558] Total swap = 124996kB [ 149.545460][ T9558] 2097051 pages RAM [ 149.555587][ T9558] 0 pages HighMem/MovableOnly [ 149.565763][ T9558] 424116 pages reserved [ 149.578969][ T9558] 0 pages cma reserved [ 149.768417][ T9583] gtp0: entered promiscuous mode [ 149.775479][ T9583] gtp0: entered allmulticast mode [ 149.947660][ T9593] sit0: entered promiscuous mode [ 149.955032][ T9593] validate_nla: 3 callbacks suppressed [ 149.955049][ T9593] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 149.993650][ T9596] syzkaller0: entered promiscuous mode [ 150.010749][ T9596] syzkaller0: entered allmulticast mode [ 150.052740][ T9601] syzkaller1: entered promiscuous mode [ 150.061457][ T9601] syzkaller1: entered allmulticast mode [ 150.407353][ T9624] xt_l2tp: invalid flags combination: 0 [ 150.693003][ T9647] tc_dump_action: action bad kind [ 150.700340][ T9644] vlan0: entered promiscuous mode [ 150.705600][ T9644] vlan0: entered allmulticast mode [ 150.721284][ T9644] veth0_vlan: entered allmulticast mode [ 150.729641][ T9650] !: renamed from dummy0 (while UP) [ 151.114847][ T9680] x_tables: duplicate underflow at hook 2 [ 151.122218][ T9680] x_tables: duplicate underflow at hook 2 [ 151.137469][ T9680] x_tables: duplicate underflow at hook 2 [ 151.150484][ T9680] x_tables: duplicate underflow at hook 2 [ 151.151256][ T9674] veth3: entered promiscuous mode [ 151.159734][ T9680] x_tables: duplicate underflow at hook 2 [ 151.293300][ T9683] veth3: entered promiscuous mode [ 151.428398][ T9695] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 151.536922][ T9707] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 151.585550][ T9707] batadv0: entered allmulticast mode [ 151.603843][ T9707] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 151.647456][ T9713] xt_recent: Unsupported userspace flags (000000b1) [ 151.764951][ T9715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.805229][ T9722] __nla_validate_parse: 12 callbacks suppressed [ 151.805245][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 151.821748][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 152.067832][ T9733] netlink: 'syz.3.1123': attribute type 13 has an invalid length. [ 152.215305][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1128'. [ 152.495987][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 152.527585][ T9767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1135'. [ 152.656707][ T9773] netlink: 'syz.4.1136': attribute type 83 has an invalid length. [ 152.725664][ T9777] sctp: [Deprecated]: syz.0.1138 (pid 9777) Use of int in maxseg socket option. [ 152.725664][ T9777] Use struct sctp_assoc_value instead [ 152.751184][ T9777] netlink: 'syz.0.1138': attribute type 33 has an invalid length. [ 152.774612][ T9777] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1138'. [ 152.880836][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 153.107203][ T9799] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1144'. [ 153.120675][ T9803] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 153.153792][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'. [ 153.182673][ T9798] dummy0 (unregistering): left allmulticast mode [ 153.203968][ T9798] dummy0 (unregistering): left promiscuous mode [ 153.221245][ T9798] bridge0: port 3(dummy0) entered disabled state [ 153.397262][ T9809] syzkaller0: entered promiscuous mode [ 153.403009][ T9809] syzkaller0: entered allmulticast mode [ 153.763411][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 155.478701][ T9881] netlink: 'syz.0.1165': attribute type 13 has an invalid length. [ 155.485769][ T9884] bridge_slave_0: left allmulticast mode [ 155.493627][ T9884] bridge_slave_0: left promiscuous mode [ 155.500184][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.522431][ T9884] bridge_slave_1: left allmulticast mode [ 155.532025][ T9884] bridge_slave_1: left promiscuous mode [ 155.541681][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.595979][ T9889] netlink: 'syz.1.1168': attribute type 21 has an invalid length. [ 155.616072][ T9884] bond0: (slave bond_slave_0): Releasing backup interface [ 155.633685][ T9884] bond0: (slave bond_slave_1): Releasing backup interface [ 155.647650][ T9893] netlink: 'syz.1.1168': attribute type 2 has an invalid length. [ 155.670082][ T9884] team0: Port device team_slave_0 removed [ 155.703105][ T9884] team0: Port device team_slave_1 removed [ 155.720965][ T9884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.862503][ T9881] veth0_macvtap: left promiscuous mode [ 155.870310][ T9881] macvtap0: entered allmulticast mode [ 155.892832][ T9881] macvtap0: refused to change device tx_queue_len [ 155.904468][ T9889] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 157.310005][ T9923] __nla_validate_parse: 5 callbacks suppressed [ 157.310022][ T9923] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1173'. [ 157.344694][ T9917] lo speed is unknown, defaulting to 1000 [ 157.456206][ T9931] netlink: 'syz.2.1174': attribute type 6 has an invalid length. [ 157.739461][ T9958] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 157.763672][ T9958] netlink: 'syz.0.1181': attribute type 30 has an invalid length. [ 157.781647][ T9955] erspan0: entered promiscuous mode [ 157.786891][ T9955] erspan0: entered allmulticast mode [ 157.826050][ T9966] unsupported nla_type 52263 [ 157.861060][ T9960] batadv_slave_1: entered promiscuous mode [ 157.957928][ T9956] batadv_slave_1: left promiscuous mode [ 158.078976][ T9980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1185'. [ 158.159323][ T9981] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 158.284194][ T9981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.299173][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 158.577545][T10013] kthread_run failed with err -4 [ 158.800170][T10033] batadv_slave_0: entered promiscuous mode [ 158.996127][T10042] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1201'. [ 158.996597][T10048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'. [ 159.145172][T10054] batman_adv: batadv0: Adding interface: macsec1 [ 159.162212][T10054] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.197361][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.226292][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.253358][T10054] batman_adv: batadv0: Interface activated: macsec1 [ 159.329531][T10059] netlink: 'syz.3.1206': attribute type 2 has an invalid length. [ 159.420536][T10059] 9: entered promiscuous mode [ 159.501889][T10068] syzkaller1: entered promiscuous mode [ 159.507569][T10068] syzkaller1: entered allmulticast mode [ 159.579947][T10081] syzkaller0: entered promiscuous mode [ 159.585568][T10081] syzkaller0: entered allmulticast mode [ 159.667145][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'. [ 159.690557][T10081] netlink: 'syz.1.1208': attribute type 7 has an invalid length. [ 159.706076][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 159.803682][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 159.936284][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1211'. [ 159.938363][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 160.083466][T10107] veth3: entered promiscuous mode [ 160.122740][T10120] netlink: 'syz.1.1217': attribute type 32 has an invalid length. [ 160.211625][T10114] veth3: entered promiscuous mode [ 160.290716][T10120] bond7: Setting coupled_control to off (0) [ 160.406445][T10134] xt_ecn: cannot match TCP bits for non-tcp packets [ 160.672802][T10152] ipt_REJECT: ECHOREPLY no longer supported. [ 160.720227][T10143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 160.791971][T10143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 160.832360][T10143] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.854928][T10143] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 161.000855][T10170] tipc: Invalid UDP bearer configuration [ 161.000907][T10170] tipc: Enabling of bearer rejected, failed to enable media [ 161.497613][T10202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.858710][T10217] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 162.139276][T10244] netlink: 'syz.3.1253': attribute type 3 has an invalid length. [ 162.573389][T10273] __nla_validate_parse: 8 callbacks suppressed [ 162.573409][T10273] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1262'. [ 162.894240][T10273] bond0 (unregistering): Released all slaves [ 162.903489][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 162.939456][T10282] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.952751][T10282] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1264'. [ 163.053004][T10282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1264'. [ 163.210538][T10302] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 163.232874][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1269'. [ 163.254586][T10302] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 163.262684][T10302] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 163.285954][T10302] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 163.412879][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 163.691649][T10332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1277'. [ 164.118325][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 164.356643][T10360] syzkaller0: entered promiscuous mode [ 164.367064][T10360] syzkaller0: entered allmulticast mode [ 164.484625][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 164.493795][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 164.510221][T10375] netlink: 'syz.3.1290': attribute type 15 has an invalid length. [ 164.836074][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.631381][T10420] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 165.649859][T10419] netlink: 'syz.1.1306': attribute type 11 has an invalid length. [ 165.861604][T10439] veth3: entered promiscuous mode [ 165.942464][T10445] veth3: entered promiscuous mode [ 166.293165][T10469] syzkaller0: entered promiscuous mode [ 166.299260][T10469] syzkaller0: entered allmulticast mode [ 166.320233][T10469] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 166.570947][T10480] 8021q: VLANs not supported on ipvlan0 [ 166.622397][T10484] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 166.750578][T10489] Bluetooth: MGMT ver 1.23 [ 167.491605][T10537] Bluetooth: MGMT ver 1.23 [ 167.505681][T10537] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 167.521207][T10539] netlink: 'syz.0.1343': attribute type 83 has an invalid length. [ 167.559458][T10537] macvlan2: entered promiscuous mode [ 167.564899][T10537] macvlan2: entered allmulticast mode [ 167.571946][T10537] bond9: entered promiscuous mode [ 167.577873][T10537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.591552][T10537] bond9: left promiscuous mode [ 167.625157][T10539] tipc: Started in network mode [ 167.630338][T10539] tipc: Node identity 1e0b16ada1aa, cluster identity 4711 [ 167.637700][T10539] tipc: Enabled bearer , priority 0 [ 167.699491][T10539] syzkaller0: entered promiscuous mode [ 167.705071][T10539] syzkaller0: entered allmulticast mode [ 167.713156][T10539] tipc: Resetting bearer [ 167.724560][T10538] tipc: Resetting bearer [ 168.722709][ T984] tipc: Node number set to 3215005357 [ 168.792197][ T5831] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 168.799798][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 169.073785][T10538] tipc: Disabling bearer [ 169.090674][T10551] geneve3: entered promiscuous mode [ 169.095952][T10551] geneve3: entered allmulticast mode [ 169.129543][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.147765][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.179774][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.198837][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.260643][T10561] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 169.275829][T10563] __nla_validate_parse: 11 callbacks suppressed [ 169.275847][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'. [ 169.309124][T10561] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 169.390166][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'. [ 169.478720][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 169.507222][T10586] openvswitch: netlink: Message has 8 unknown bytes. [ 169.514408][T10586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.587473][T10583] netlink: 'syz.1.1354': attribute type 29 has an invalid length. [ 169.607319][T10583] netlink: 'syz.1.1354': attribute type 29 has an invalid length. [ 169.636726][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 169.760328][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 169.827004][T10598] veth7: entered promiscuous mode [ 169.908411][T10604] veth7: entered promiscuous mode [ 169.912960][T10609] siw: device registration error -23 [ 170.006143][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 170.112304][T10621] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1367'. [ 170.266960][T10636] batadv0: left allmulticast mode [ 170.673475][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 170.732474][T10673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1384'. [ 171.071502][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 171.113443][T10702] lo: entered allmulticast mode [ 171.125967][T10702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.277388][T10715] vlan7: entered allmulticast mode [ 171.285178][T10715] bridge_slave_0: entered allmulticast mode [ 171.606446][T10737] netlink: 'syz.0.1401': attribute type 6 has an invalid length. [ 171.698951][T10744] netlink: 'syz.0.1401': attribute type 142 has an invalid length. [ 171.753464][T10734] siw: device registration error -23 [ 172.205640][ T5917] IPVS: starting estimator thread 0... [ 172.225041][T10780] FAULT_INJECTION: forcing a failure. [ 172.225041][T10780] name failslab, interval 1, probability 0, space 0, times 1 [ 172.271490][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.2.1409 Not tainted syzkaller #0 PREEMPT(full) [ 172.271515][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.271525][T10780] Call Trace: [ 172.271532][T10780] [ 172.271540][T10780] dump_stack_lvl+0x189/0x250 [ 172.271569][T10780] ? __pfx____ratelimit+0x10/0x10 [ 172.271591][T10780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.271613][T10780] ? __pfx__printk+0x10/0x10 [ 172.271636][T10780] ? __pfx___might_resched+0x10/0x10 [ 172.271655][T10780] ? fs_reclaim_acquire+0x7d/0x100 [ 172.271684][T10780] should_fail_ex+0x414/0x560 [ 172.271713][T10780] should_failslab+0xa8/0x100 [ 172.271732][T10780] kmem_cache_alloc_node_noprof+0x77/0x710 [ 172.271759][T10780] ? __alloc_skb+0x112/0x2d0 [ 172.271782][T10780] ? netlink_autobind+0xdb/0x300 [ 172.271804][T10780] __alloc_skb+0x112/0x2d0 [ 172.271832][T10780] netlink_sendmsg+0x5c6/0xb30 [ 172.271858][T10780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.271878][T10780] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.271904][T10780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.271921][T10780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.271939][T10780] __sock_sendmsg+0x21c/0x270 [ 172.271962][T10780] ____sys_sendmsg+0x505/0x830 [ 172.271986][T10780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.272013][T10780] ? import_iovec+0x74/0xa0 [ 172.272037][T10780] ___sys_sendmsg+0x21f/0x2a0 [ 172.272058][T10780] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.272110][T10780] ? __fget_files+0x2a/0x420 [ 172.272125][T10780] ? __fget_files+0x3a0/0x420 [ 172.272152][T10780] __x64_sys_sendmsg+0x19b/0x260 [ 172.272173][T10780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.272201][T10780] ? __pfx_ksys_write+0x10/0x10 [ 172.272234][T10780] ? do_syscall_64+0xbe/0xfa0 [ 172.272260][T10780] do_syscall_64+0xfa/0xfa0 [ 172.272279][T10780] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.272300][T10780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.272318][T10780] ? clear_bhb_loop+0x60/0xb0 [ 172.272338][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.272355][T10780] RIP: 0033:0x7fea7018efc9 [ 172.272371][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.272386][T10780] RSP: 002b:00007fea70f7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.272405][T10780] RAX: ffffffffffffffda RBX: 00007fea703e5fa0 RCX: 00007fea7018efc9 [ 172.272418][T10780] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.272429][T10780] RBP: 00007fea70f7b090 R08: 0000000000000000 R09: 0000000000000000 [ 172.272440][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.272450][T10780] R13: 00007fea703e6038 R14: 00007fea703e5fa0 R15: 00007ffee4c09318 [ 172.272478][T10780] [ 172.273945][T10781] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 172.575146][T10779] IPVS: using max 31 ests per chain, 74400 per kthread [ 172.753291][T10791] openvswitch: netlink: Unknown nsh attribute 0 [ 172.769103][T10791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.212256][ T5917] IPVS: starting estimator thread 0... [ 173.219383][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.236432][T10795] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 173.311623][T10812] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.413130][T10808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.483619][T10827] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.634772][T10834] syzkaller1: entered promiscuous mode [ 173.640757][T10834] syzkaller1: entered allmulticast mode [ 174.348501][T10876] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 174.417293][T10876] 8021q: adding VLAN 0 to HW filter on device bond10 [ 174.439439][T10882] __nla_validate_parse: 7 callbacks suppressed [ 174.439455][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 174.461012][T10884] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1438'. [ 174.571040][T10876] veth15: entered promiscuous mode [ 174.611378][T10893] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1439'. [ 174.675935][T10891] syzkaller0: entered promiscuous mode [ 174.688999][T10891] syzkaller0: entered allmulticast mode [ 174.759233][T10897] netlink: 'syz.0.1442': attribute type 5 has an invalid length. [ 174.786275][T10897] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1442'. [ 175.084693][T10929] siw: device registration error -23 [ 175.525049][T10958] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 175.614440][T10958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.681308][T10960] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1457'. [ 175.710296][T10964] veth7: entered promiscuous mode [ 175.746763][T10958] veth9: entered promiscuous mode [ 175.764991][T10958] bond3: (slave veth9): Enslaving as an active interface with a down link [ 176.154932][T10992] dvmrp0: entered allmulticast mode [ 176.270551][T11001] FAULT_INJECTION: forcing a failure. [ 176.270551][T11001] name failslab, interval 1, probability 0, space 0, times 0 [ 176.319220][T11001] CPU: 1 UID: 0 PID: 11001 Comm: syz.3.1466 Not tainted syzkaller #0 PREEMPT(full) [ 176.319245][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.319254][T11001] Call Trace: [ 176.319262][T11001] [ 176.319271][T11001] dump_stack_lvl+0x189/0x250 [ 176.319300][T11001] ? __pfx____ratelimit+0x10/0x10 [ 176.319323][T11001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.319346][T11001] ? __pfx__printk+0x10/0x10 [ 176.319372][T11001] ? __pfx___might_resched+0x10/0x10 [ 176.319390][T11001] ? fs_reclaim_acquire+0x7d/0x100 [ 176.319421][T11001] should_fail_ex+0x414/0x560 [ 176.319452][T11001] should_failslab+0xa8/0x100 [ 176.319471][T11001] kmem_cache_alloc_node_noprof+0x77/0x710 [ 176.319495][T11001] ? __alloc_skb+0x112/0x2d0 [ 176.319526][T11001] __alloc_skb+0x112/0x2d0 [ 176.319565][T11001] netlink_dump+0x1b7/0xe90 [ 176.319596][T11001] ? __nla_parse+0x40/0x60 [ 176.319619][T11001] ? __pfx_netlink_dump+0x10/0x10 [ 176.319640][T11001] ? ip_set_dump_start+0x2ec/0x410 [ 176.319680][T11001] ? netlink_lookup+0x30/0x200 [ 176.319703][T11001] ? netlink_lookup+0x30/0x200 [ 176.319724][T11001] ? netlink_lookup+0x30/0x200 [ 176.319753][T11001] __netlink_dump_start+0x5cb/0x7e0 [ 176.319786][T11001] ip_set_dump+0x13e/0x1c0 [ 176.319808][T11001] ? __pfx_ip_set_dump+0x10/0x10 [ 176.319828][T11001] ? __pfx_ip_set_dump_start+0x10/0x10 [ 176.319849][T11001] ? __pfx_ip_set_dump_do+0x10/0x10 [ 176.319869][T11001] ? __pfx_ip_set_dump_done+0x10/0x10 [ 176.319907][T11001] nfnetlink_rcv_msg+0xb4d/0x1130 [ 176.319933][T11001] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 176.319980][T11001] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.320001][T11001] ? kasan_save_track+0x4f/0x80 [ 176.320070][T11001] netlink_rcv_skb+0x208/0x470 [ 176.320091][T11001] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.320114][T11001] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.320139][T11001] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.320172][T11001] ? bpf_lsm_capable+0x9/0x20 [ 176.320190][T11001] ? security_capable+0x7e/0x2e0 [ 176.320218][T11001] nfnetlink_rcv+0x282/0x2590 [ 176.320243][T11001] ? __dev_queue_xmit+0x27b/0x3b50 [ 176.320261][T11001] ? __dev_queue_xmit+0x1d79/0x3b50 [ 176.320276][T11001] ? kasan_save_track+0x3e/0x80 [ 176.320296][T11001] ? __kasan_slab_alloc+0x6c/0x80 [ 176.320325][T11001] ? __dev_queue_xmit+0x27b/0x3b50 [ 176.320353][T11001] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 176.320374][T11001] ? __pfx___dev_queue_xmit+0x10/0x10 [ 176.320408][T11001] ? ref_tracker_free+0x63a/0x7d0 [ 176.320424][T11001] ? __asan_memcpy+0x40/0x70 [ 176.320442][T11001] ? __pfx_ref_tracker_free+0x10/0x10 [ 176.320473][T11001] ? skb_clone+0x246/0x3a0 [ 176.320505][T11001] ? __netlink_deliver_tap+0x807/0x850 [ 176.320528][T11001] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.320564][T11001] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.320596][T11001] netlink_unicast+0x82f/0x9e0 [ 176.320629][T11001] ? __pfx_netlink_unicast+0x10/0x10 [ 176.320654][T11001] ? netlink_sendmsg+0x642/0xb30 [ 176.320669][T11001] ? skb_put+0x11b/0x210 [ 176.320689][T11001] netlink_sendmsg+0x805/0xb30 [ 176.320716][T11001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.320736][T11001] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.320761][T11001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.320787][T11001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.320803][T11001] __sock_sendmsg+0x21c/0x270 [ 176.320829][T11001] ____sys_sendmsg+0x505/0x830 [ 176.320853][T11001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.320881][T11001] ? import_iovec+0x74/0xa0 [ 176.320906][T11001] ___sys_sendmsg+0x21f/0x2a0 [ 176.320928][T11001] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.320985][T11001] ? __fget_files+0x2a/0x420 [ 176.320999][T11001] ? __fget_files+0x3a0/0x420 [ 176.321027][T11001] __x64_sys_sendmsg+0x19b/0x260 [ 176.321049][T11001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.321078][T11001] ? __pfx_ksys_write+0x10/0x10 [ 176.321105][T11001] ? do_syscall_64+0xbe/0xfa0 [ 176.321130][T11001] do_syscall_64+0xfa/0xfa0 [ 176.321148][T11001] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.321168][T11001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.321185][T11001] ? clear_bhb_loop+0x60/0xb0 [ 176.321206][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.321222][T11001] RIP: 0033:0x7f640118efc9 [ 176.321238][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.321252][T11001] RSP: 002b:00007f64020a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.321270][T11001] RAX: ffffffffffffffda RBX: 00007f64013e5fa0 RCX: 00007f640118efc9 [ 176.321282][T11001] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 176.321293][T11001] RBP: 00007f64020a2090 R08: 0000000000000000 R09: 0000000000000000 [ 176.321304][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.321314][T11001] R13: 00007f64013e6038 R14: 00007f64013e5fa0 R15: 00007ffd3bce6ff8 [ 176.321343][T11001] [ 177.112827][T11017] netlink: 'syz.0.1470': attribute type 5 has an invalid length. [ 178.559096][T11037] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1476'. [ 178.604084][T11043] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1479'. [ 178.922270][T11064] sctp: [Deprecated]: syz.2.1484 (pid 11064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.922270][T11064] Use struct sctp_sack_info instead [ 179.107292][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 179.176556][T11087] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.190430][T11087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.224985][ T984] lo speed is unknown, defaulting to 1000 [ 179.242427][ T984] syz2: Port: 1 Link ACTIVE [ 179.246434][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 179.256474][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 179.402145][T11097] netlink: 'syz.0.1493': attribute type 11 has an invalid length. [ 179.809578][T11128] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 179.960397][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.054328][T11134] veth5: entered promiscuous mode [ 180.064853][T11134] bond0: (slave veth5): Enslaving as an active interface with a down link [ 180.630003][T11164] __nla_validate_parse: 3 callbacks suppressed [ 180.630020][T11164] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 180.653487][T11154] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.783442][T11173] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 180.849614][T11173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.921958][T11178] veth3: entered promiscuous mode [ 180.934958][T11178] bond4: (slave veth3): Enslaving as an active interface with a down link [ 180.978688][T11185] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1517'. [ 181.309263][T11208] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 181.326553][T11208] dvmrp0: entered allmulticast mode [ 181.506013][T11222] netlink: 'syz.2.1526': attribute type 6 has an invalid length. [ 181.522637][T11222] netlink: 'syz.2.1526': attribute type 6 has an invalid length. [ 181.672621][T11229] batadv_slave_1: entered promiscuous mode [ 181.691031][T11229] batadv_slave_1: left promiscuous mode [ 181.696915][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1528'. [ 181.750792][T11234] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 181.834316][T11241] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1531'. [ 181.883075][T11234] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 181.967110][T11234] veth5: entered promiscuous mode [ 181.975741][T11234] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 182.021409][T11257] syzkaller1: entered promiscuous mode [ 182.052819][T11257] syzkaller1: entered allmulticast mode [ 182.206133][T11271] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 182.385717][T11287] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 182.420522][T11287] 8021q: adding VLAN 0 to HW filter on device bond11 [ 182.471881][T11287] veth17: entered promiscuous mode [ 182.481207][T11287] bond11: (slave veth17): Enslaving as an active interface with a down link [ 182.506105][T11292] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1547'. [ 182.629699][T11299] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 182.745925][T11314] sctp: [Deprecated]: syz.0.1553 (pid 11314) Use of int in max_burst socket option deprecated. [ 182.745925][T11314] Use struct sctp_assoc_value instead [ 183.076843][T11332] syzkaller1: entered promiscuous mode [ 183.111619][T11332] syzkaller1: entered allmulticast mode [ 183.164673][T11338] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 183.173919][T11338] netlink: 'syz.1.1560': attribute type 4 has an invalid length. [ 183.185642][T11338] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1560'. [ 183.627284][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 183.833080][T11345] xt_socket: unknown flags 0x50 [ 183.896929][T11369] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 183.905584][T11369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1570'. [ 183.925739][T11369] team0: Port device geneve0 added [ 183.932788][ T1104] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.941548][ T1104] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.952393][ T1104] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.961395][ T1104] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.971228][T11371] syzkaller0: entered promiscuous mode [ 183.976949][T11371] syzkaller0: entered allmulticast mode [ 184.123980][T11379] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1573'. [ 184.134269][T11379] netem: invalid attributes len -24 [ 184.140343][T11379] netem: change failed [ 184.260335][T11383] netlink: 'syz.4.1575': attribute type 21 has an invalid length. [ 184.269303][T11383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1575'. [ 184.780789][T11410] netlink: zone id is out of range [ 184.785978][T11410] netlink: zone id is out of range [ 184.818526][T11410] netlink: zone id is out of range [ 184.823849][T11410] netlink: zone id is out of range [ 184.833778][T11412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.837070][T11410] netlink: zone id is out of range [ 184.845639][T11412] netlink: 'syz.0.1585': attribute type 11 has an invalid length. [ 184.858849][T11418] netlink: zone id is out of range [ 184.863994][T11418] netlink: zone id is out of range [ 184.865305][T11410] netlink: zone id is out of range [ 184.870530][T11418] netlink: zone id is out of range [ 184.893670][T11405] macvtap3: entered promiscuous mode [ 184.900556][T11405] vlan0: entered promiscuous mode [ 184.906534][T11405] macvtap3: entered allmulticast mode [ 184.912652][T11405] vlan0: entered allmulticast mode [ 184.918075][T11405] veth0_vlan: entered allmulticast mode [ 184.950335][T11414] tipc: Enabled bearer , priority 0 [ 184.973218][T11414] syzkaller0: entered promiscuous mode [ 184.985965][T11414] syzkaller0: entered allmulticast mode [ 185.083787][T11413] tipc: Resetting bearer [ 185.162379][T11413] tipc: Disabling bearer [ 185.409907][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.687611][T11464] __nla_validate_parse: 4 callbacks suppressed [ 185.687629][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 185.929053][T11483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1608'. [ 185.938129][T11483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1608'. [ 186.105059][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 186.130585][T11490] netlink: 'syz.0.1610': attribute type 25 has an invalid length. [ 186.141033][T11495] geneve3: entered promiscuous mode [ 186.274220][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 186.340858][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 186.483788][T11523] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 186.509482][T11511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1619'. [ 186.574896][T11523] 8021q: adding VLAN 0 to HW filter on device bond12 [ 186.635138][T11531] veth19: entered promiscuous mode [ 186.675707][T11531] bond12: (slave veth19): Enslaving as an active interface with a down link [ 186.792852][ T6899] udevd[6899]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 187.028098][T11555] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.361877][T11565] SET target dimension over the limit! [ 187.556339][T11578] netlink: 'syz.2.1637': attribute type 1 has an invalid length. [ 187.634535][T11578] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.727050][T11595] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 187.750700][T11578] veth9: entered promiscuous mode [ 187.842281][T11599] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 187.853646][T11599] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1642'. [ 187.869539][T11589] veth11: entered promiscuous mode [ 187.875817][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 187.889653][T11589] bond7: (slave veth11): Enslaving as an active interface with a down link [ 187.971197][T11611] tipc: Enabled bearer , priority 0 [ 187.993150][T11609] syzkaller0: entered promiscuous mode [ 188.009368][T11609] syzkaller0: entered allmulticast mode [ 188.036929][T11610] tipc: Resetting bearer [ 188.057174][T11607] tipc: Resetting bearer [ 188.086439][T11607] tipc: Disabling bearer [ 188.120539][T11617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1650'. [ 188.489179][T11651] netlink: 'syz.4.1658': attribute type 9 has an invalid length. [ 188.543511][T11655] SET target dimension over the limit! [ 188.567269][T11651] tipc: Enabled bearer , priority 10 [ 188.607327][T11660] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 188.671770][T11660] 8021q: adding VLAN 0 to HW filter on device bond10 [ 188.750181][T11660] veth17: entered promiscuous mode [ 188.774907][T11670] netlink: 'syz.4.1663': attribute type 10 has an invalid length. [ 188.794678][T11666] veth19: entered promiscuous mode [ 188.805673][T11666] bond10: (slave veth19): Enslaving as an active interface with a down link [ 189.250976][T11697] delete_channel: no stack [ 189.301593][T11706] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 189.364762][T11708] tipc: Enabled bearer , priority 0 [ 189.424467][T11708] tipc: Disabling bearer [ 189.569610][T11718] tipc: Enabled bearer , priority 0 [ 189.592340][T11718] syzkaller0: entered promiscuous mode [ 189.597846][T11718] syzkaller0: entered allmulticast mode [ 189.643573][T11718] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.707564][T11717] tipc: Resetting bearer [ 189.732057][T11717] tipc: Disabling bearer [ 190.067331][T11753] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 190.658872][ T5917] tipc: Node number set to 525501705 [ 190.670489][T11805] syzkaller0: entered promiscuous mode [ 190.676317][T11805] syzkaller0: entered allmulticast mode [ 190.746844][T11807] __nla_validate_parse: 43 callbacks suppressed [ 190.746858][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 190.774715][T11807] team1: entered promiscuous mode [ 190.779931][T11807] team1: entered allmulticast mode [ 191.161537][T11809] netlink: 'syz.4.1704': attribute type 23 has an invalid length. [ 191.214986][T11815] macvtap1: entered promiscuous mode [ 191.232397][T11815] vlan0: entered promiscuous mode [ 191.241188][T11815] macvtap1: entered allmulticast mode [ 191.246619][T11815] vlan0: entered allmulticast mode [ 191.255134][T11815] veth0_vlan: entered allmulticast mode [ 191.284218][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 191.443852][T11829] ipvlan2: entered promiscuous mode [ 191.721733][T11852] tipc: Can't bind to reserved service type 0 [ 191.889512][T11864] net_ratelimit: 14 callbacks suppressed [ 191.889528][T11864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.959763][T11863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.980562][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 192.016772][T11872] netlink: 'syz.1.1722': attribute type 7 has an invalid length. [ 192.034481][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 192.111399][T11874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1723'. [ 192.134089][T11875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1723'. [ 192.146455][T11875] block nbd0: not configured, cannot reconfigure [ 192.161137][T11883] xt_addrtype: ipv6 does not support BROADCAST matching [ 192.168666][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'. [ 192.180715][T11882] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 192.281677][T11882] 8021q: adding VLAN 0 to HW filter on device bond11 [ 192.342063][T11882] veth21: entered promiscuous mode [ 192.352327][T11882] bond11: (slave veth21): Enslaving as an active interface with a down link [ 192.377438][T11893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'. [ 192.392730][T11892] tipc: Enabled bearer , priority 0 [ 192.402306][T11892] syzkaller0: entered promiscuous mode [ 192.407813][T11892] syzkaller0: entered allmulticast mode [ 192.505060][T11892] tipc: Resetting bearer [ 192.530135][T11902] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 192.587221][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 192.706684][T11889] tipc: Resetting bearer [ 192.752825][T11889] tipc: Disabling bearer [ 192.759625][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 192.858926][T11920] bond8: (slave bond_slave_1): Device is not bonding slave [ 192.871630][T11920] bond8: option active_slave: invalid value (bond_slave_1) [ 192.923289][T11920] bond8 (unregistering): Released all slaves [ 193.012645][T11922] bond8: (slave bond_slave_1): Device is not bonding slave [ 193.031668][T11922] bond8: option active_slave: invalid value (bond_slave_1) [ 193.059805][T11922] bond8 (unregistering): Released all slaves [ 193.165725][T11932] netlink: 'syz.3.1741': attribute type 23 has an invalid length. [ 193.232524][T11948] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 193.298263][T11948] macvlan2: entered promiscuous mode [ 193.304600][T11948] macvlan2: entered allmulticast mode [ 193.311391][T11948] bond12: entered promiscuous mode [ 193.317028][T11948] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.326549][T11948] bond12: left promiscuous mode [ 193.344495][T11956] netlink: 'syz.1.1745': attribute type 10 has an invalid length. [ 193.591874][T11970] sctp: [Deprecated]: syz.3.1751 (pid 11970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.591874][T11970] Use struct sctp_sack_info instead [ 193.733242][T11974] netlink: 'syz.1.1754': attribute type 3 has an invalid length. [ 193.958828][T11992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.117206][T12002] veth0: entered promiscuous mode [ 194.230320][T12002] veth0 (unregistering): left promiscuous mode [ 194.328092][T12020] netlink: 'syz.0.1765': attribute type 29 has an invalid length. [ 194.448390][T12028] bond13: Unable to set down delay as MII monitoring is disabled [ 194.460130][T12028] bond13 (unregistering): Released all slaves [ 194.565931][T12039] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.571979][T12038] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.764728][T12052] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 195.220073][T12080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.242551][T12076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.456602][T12081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.863820][T12127] validate_nla: 2 callbacks suppressed [ 195.863840][T12127] netlink: 'syz.1.1794': attribute type 1 has an invalid length. [ 195.952396][T12127] 8021q: adding VLAN 0 to HW filter on device bond13 [ 195.965547][T12133] team0: Mode changed to "activebackup" [ 196.163036][T12150] __nla_validate_parse: 15 callbacks suppressed [ 196.163054][T12150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1800'. [ 196.193701][T12150] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 196.203096][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.215747][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1800'. [ 196.341281][T12164] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1806'. [ 196.345162][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 196.363360][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 196.375046][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 196.386511][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 196.406836][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 196.441913][T12168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.453254][T12168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.472835][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 196.472863][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 196.488553][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 196.774302][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1814'. [ 196.785660][T12190] netlink: 'syz.3.1811': attribute type 11 has an invalid length. [ 196.807745][T12193] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 196.855899][T12197] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1813'. [ 197.022579][T12206] veth0_macvtap: entered promiscuous mode [ 197.039544][T12206] macvtap1: entered allmulticast mode [ 197.055269][T12206] veth0_macvtap: entered allmulticast mode [ 197.114026][T12208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.119970][T12216] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.297557][T12225] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 197.312048][T12224] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 197.350155][T12225] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.367157][T12222] tipc: Enabling of bearer rejected, failed to enable media [ 197.395278][T12225] veth7: entered promiscuous mode [ 197.412254][T12225] bond6: (slave veth7): Enslaving as an active interface with a down link [ 197.501589][T12233] veth9: entered promiscuous mode [ 197.806528][T12265] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 198.027369][T12285] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 198.101978][T12285] 8021q: adding VLAN 0 to HW filter on device bond13 [ 198.188281][T12287] veth21: entered promiscuous mode [ 198.238816][T12287] bond13: (slave veth21): Enslaving as an active interface with a down link [ 198.285868][T12285] veth23: entered promiscuous mode [ 198.507451][T12305] nbd: socks must be embedded in a SOCK_ITEM attr [ 198.606220][T12308] ksmbd: Unknown IPC event: 3, ignore. [ 198.763604][ T60] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 198.999639][T12325] ipt_REJECT: TCP_RESET invalid for non-tcp [ 199.224073][T12327] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 199.232714][T12327] netlink: 'syz.2.1854': attribute type 3 has an invalid length. [ 199.388213][T12338] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 199.414883][T12338] 8021q: adding VLAN 0 to HW filter on device bond14 [ 199.438016][T12338] veth25: entered promiscuous mode [ 199.446485][T12338] bond14: (slave veth25): Enslaving as an active interface with a down link [ 199.468670][T12338] veth27: entered promiscuous mode [ 199.653048][T12345] veth0: entered promiscuous mode [ 199.689142][T12344] veth0: left promiscuous mode [ 199.838752][T12354] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 199.864074][T12354] bond14 (unregistering): Released all slaves [ 199.880739][T12365] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 200.006102][T12365] 8021q: adding VLAN 0 to HW filter on device bond15 [ 200.085660][T12368] veth29: entered promiscuous mode [ 200.125200][T12368] bond15: (slave veth29): Enslaving as an active interface with a down link [ 201.327556][T12454] netlink: 'syz.3.1898': attribute type 3 has an invalid length. [ 201.507653][T12464] __nla_validate_parse: 27 callbacks suppressed [ 201.507670][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 201.547450][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1901'. [ 201.663129][T12472] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1904'. [ 201.934389][T12499] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1912'. [ 201.963571][T12498] syzkaller0: entered promiscuous mode [ 201.998682][T12498] syzkaller0: entered allmulticast mode [ 202.104741][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 202.119182][T12511] syzkaller0: entered promiscuous mode [ 202.134978][T12511] syzkaller0: entered allmulticast mode [ 202.257626][T12519] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1919'. [ 202.359012][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 202.437282][T12523] tipc: Enabled bearer , priority 0 [ 202.480725][T12523] syzkaller0: entered promiscuous mode [ 202.486292][T12523] syzkaller0: entered allmulticast mode [ 202.611554][T12523] tipc: Resetting bearer [ 202.624036][T12539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.636065][T12522] tipc: Resetting bearer [ 202.696372][T12522] tipc: Disabling bearer [ 202.717830][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 202.730125][T12542] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 203.015779][T12577] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1938'. [ 203.027112][T12577] netlink: 'syz.2.1938': attribute type 39 has an invalid length. [ 203.704756][T12593] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1942'. [ 203.951654][T12613] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 203.972288][T12616] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 204.007418][T12616] SET target dimension over the limit! [ 204.051138][T12619] netlink: 'syz.3.1949': attribute type 2 has an invalid length. [ 204.338214][T12626] hsr_slave_1 (unregistering): left promiscuous mode [ 205.099638][T12668] x_tables: unsorted entry at hook 1 [ 205.452839][T12695] netlink: 'syz.4.1971': attribute type 21 has an invalid length. [ 205.603736][T12681] syzkaller0: entered promiscuous mode [ 205.617356][T12681] syzkaller0: entered allmulticast mode [ 207.270238][T12728] netlink: 'syz.0.1976': attribute type 4 has an invalid length. [ 207.327246][T12733] netlink: 'syz.0.1976': attribute type 4 has an invalid length. [ 208.883744][T12749] __nla_validate_parse: 9 callbacks suppressed [ 208.883761][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 209.295640][T12774] ip6gre2: entered allmulticast mode [ 209.425813][T12782] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 209.453811][T12783] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 209.497795][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 209.678922][T12810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.809891][T12816] No such timeout policy "syz1" [ 209.823152][T12816] Bluetooth: MGMT ver 1.23 [ 209.975951][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 210.004198][T12831] !: renamed from dummy0 (while UP) [ 210.061551][T12832] netlink: 'syz.0.2013': attribute type 11 has an invalid length. [ 210.072748][T12834] syzkaller1: entered promiscuous mode [ 210.078245][T12834] syzkaller1: entered allmulticast mode [ 210.085216][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 210.223453][T12844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.438177][T12862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.610906][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 210.695638][T12876] netlink: 'syz.0.2027': attribute type 4 has an invalid length. [ 210.760812][T12880] : entered promiscuous mode [ 210.834111][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 210.856696][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 210.872154][T12888] netlink: 'syz.2.2032': attribute type 3 has an invalid length. [ 210.937469][T12894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2034'. [ 210.974353][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 210.984968][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 211.034909][T12894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.038172][T12903] netlink: 'syz.3.2037': attribute type 8 has an invalid length. [ 211.131787][T12903] vlan4: entered promiscuous mode [ 211.139850][T12903] erspan0: entered promiscuous mode [ 211.484368][T12929] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 211.519528][T12929] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 211.636006][T12941] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 212.223666][T12979] bridge3: entered promiscuous mode [ 212.230317][T12979] bridge3: entered allmulticast mode [ 212.445762][T12966] infiniband syz1: set active [ 212.468914][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 212.480131][T12966] infiniband syz1: added syz_tun [ 212.604512][T12966] RDS/IB: syz1: added [ 212.623649][T12966] smc: adding ib device syz1 with port count 1 [ 212.662177][T12999] netlink: 'syz.2.2072': attribute type 83 has an invalid length. [ 212.667280][T12966] smc: ib device syz1 port 1 has no pnetid [ 213.108095][T13023] syzkaller0: entered promiscuous mode [ 213.126222][T13023] syzkaller0: entered allmulticast mode [ 213.266121][T13030] openvswitch: netlink: IP tunnel dst address not specified [ 213.674755][T13055] sctp: [Deprecated]: syz.4.2089 (pid 13055) Use of int in maxseg socket option. [ 213.674755][T13055] Use struct sctp_assoc_value instead [ 214.028088][T13080] __nla_validate_parse: 16 callbacks suppressed [ 214.028107][T13080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'. [ 214.033548][T13081] syzkaller0: entered promiscuous mode [ 214.087452][T13081] syzkaller0: entered allmulticast mode [ 214.103555][T13086] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 214.176477][T13087] syzkaller0: entered promiscuous mode [ 214.182245][T13087] syzkaller0: entered allmulticast mode [ 214.404448][T13105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'. [ 214.891580][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 215.123082][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.285541][T13143] netlink: 'syz.0.2104': attribute type 83 has an invalid length. [ 215.300012][T13143] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 215.321643][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.336231][T13143] bridge_slave_1: left allmulticast mode [ 215.342887][T13143] bridge_slave_1: left promiscuous mode [ 215.349698][T13143] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.437882][T13151] tipc: Enabled bearer , priority 0 [ 215.453088][T13151] syzkaller0: entered promiscuous mode [ 215.461031][T13151] syzkaller0: entered allmulticast mode [ 215.487828][T13151] tipc: Resetting bearer [ 215.536024][T13161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2112'. [ 215.550155][T13150] tipc: Resetting bearer [ 215.581647][T13150] tipc: Disabling bearer [ 215.626630][T13169] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2113'. [ 215.717821][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 215.729308][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 215.754754][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 216.037685][T13187] netlink: 'syz.3.2117': attribute type 2 has an invalid length. [ 216.135591][T13199] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 216.186623][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 216.196985][T13209] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2124'. [ 216.208299][T13207] netlink: 'syz.4.2123': attribute type 10 has an invalid length. [ 216.245521][T13207] tap0: tun_chr_ioctl cmd 1074025672 [ 216.257541][T13207] tap0: ignored: set checksum disabled [ 216.405804][T13220] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 216.733296][T13245] syzkaller0: entered promiscuous mode [ 216.740710][T13245] syzkaller0: entered allmulticast mode [ 217.012024][T13259] syzkaller1: entered promiscuous mode [ 217.039617][T13259] syzkaller1: entered allmulticast mode [ 217.091169][T13269] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.186869][T13273] Driver unsupported XDP return value 0 on prog (id 355) dev N/A, expect packet loss! [ 217.330841][T13280] syzkaller0: entered promiscuous mode [ 217.332831][T13285] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 217.342181][T13280] syzkaller0: entered allmulticast mode [ 217.375631][T13285] netlink: 'syz.3.2154': attribute type 7 has an invalid length. [ 217.400854][T13285] netlink: 'syz.3.2154': attribute type 8 has an invalid length. [ 217.618037][T13299] tipc: Enabled bearer , priority 0 [ 217.626197][T13299] syzkaller0: entered promiscuous mode [ 217.653315][T13299] syzkaller0: entered allmulticast mode [ 217.678838][T13299] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.709688][T13311] ip6t_rpfilter: unknown options [ 217.727147][T13308] netem: change failed [ 217.749349][T13299] tipc: Resetting bearer [ 217.765274][T13308] Cannot find del_set index 512 as target [ 217.809404][T13312] bond14 (unregistering): Released all slaves [ 217.852683][T13298] tipc: Resetting bearer [ 217.894180][T13298] tipc: Disabling bearer [ 218.372417][T13356] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 218.760090][T13384] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 219.068007][T13406] __nla_validate_parse: 16 callbacks suppressed [ 219.068026][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2183'. [ 219.091785][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 219.230871][T13418] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 219.270274][T13422] netlink: 'syz.3.2188': attribute type 4 has an invalid length. [ 219.380476][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'. [ 219.415084][T13434] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 219.483260][T13434] bond7: entered promiscuous mode [ 219.490953][T13434] bond7: entered allmulticast mode [ 219.500056][T13434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.537800][T13439] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.558303][T13439] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 219.678005][T13444] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 219.973846][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 220.293805][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2203'. [ 221.740899][T13488] : renamed from hsr0 (while UP) [ 221.952696][T13511] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2209'. [ 222.019237][T13511] xt_policy: too many policy elements [ 222.074442][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 222.204880][T13532] netlink: 'syz.3.2214': attribute type 33 has an invalid length. [ 222.231707][T13537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.256571][T13532] bond16: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 222.268031][T13537] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2217'. [ 222.288655][T13532] bond16 (unregistering): Released all slaves [ 222.456733][T13549] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 222.687857][T13565] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 222.779649][T13571] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 222.818936][T13571] delete_channel: no stack [ 222.854088][T13576] tipc: Enabling of bearer rejected, failed to enable media [ 222.938535][T13582] C: entered allmulticast mode [ 222.951177][T13582] C: left allmulticast mode [ 222.956666][T13576] syzkaller0: entered promiscuous mode [ 222.988874][T13576] syzkaller0: entered allmulticast mode [ 223.196334][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2235'. [ 223.252362][T13605] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 223.261226][T13605] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2236'. [ 223.580644][T13626] openvswitch: netlink: Message has 592 unknown bytes. [ 223.595783][T13626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.990745][ T1167] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.140705][ T1167] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.250529][ T1167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.358319][ T1167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.513647][ T60] smc: removing ib device syz1 [ 224.534361][ T5871] syz1: Port: 1 Link DOWN [ 224.812947][ T1167] bridge_slave_1: left allmulticast mode [ 224.828692][ T1167] bridge_slave_1: left promiscuous mode [ 224.835902][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.918647][ T1167] bridge_slave_0: left promiscuous mode [ 224.924568][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.039001][ T1167] tipc: Resetting bearer [ 225.339962][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.352114][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.369208][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.385400][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.410626][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.420182][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.436928][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.437514][ T1167] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 225.456775][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.463337][ T1167] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a6:d1:06:b6:44:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 225.465382][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.498976][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.509558][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.509579][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.547286][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.579755][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.589181][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.952434][ T1167] bond2 (unregistering): (slave gretap2): Releasing active interface [ 225.987712][ T1167] tipc: Disabling bearer [ 226.140593][ T1167] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 226.192876][ T1167] team0: Port device geneve0 removed [ 226.580272][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.591309][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.601913][ T1167] bond0 (unregistering): (slave team0): Releasing backup interface [ 226.612021][ T1167] bond0 (unregistering): Released all slaves [ 226.718996][ T1167] bond1 (unregistering): Released all slaves [ 226.823983][ T1167] bond2 (unregistering): Released all slaves [ 226.913200][ T1167] bond3 (unregistering): Released all slaves [ 227.011379][ T1167] bond4 (unregistering): (slave veth3): Releasing active interface [ 227.021128][ T1167] bond4 (unregistering): Released all slaves [ 227.040126][ T1167] bond5 (unregistering): (slave veth5): Releasing backup interface [ 227.051266][ T1167] bond5 (unregistering): Released all slaves [ 227.147326][ T1167] bond6 (unregistering): (slave veth7): Releasing active interface [ 227.157705][ T1167] bond6 (unregistering): Released all slaves [ 227.251224][ T1167] bond7 (unregistering): Released all slaves [ 227.352296][T13651] lo speed is unknown, defaulting to 1000 [ 227.382115][T13654] lo speed is unknown, defaulting to 1000 [ 227.428344][T13653] lo speed is unknown, defaulting to 1000 [ 227.508874][ T5833] Bluetooth: hci0: command tx timeout [ 227.640558][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 227.669160][ T5831] Bluetooth: hci2: command tx timeout [ 227.675479][ T5833] Bluetooth: hci1: command tx timeout [ 227.827358][T13651] chnl_net:caif_netlink_parms(): no params data found [ 227.981836][T13653] chnl_net:caif_netlink_parms(): no params data found [ 228.064435][T13654] chnl_net:caif_netlink_parms(): no params data found [ 228.203633][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.212785][T13685] netlink: 'syz.2.2268': attribute type 33 has an invalid length. [ 228.218598][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.228163][T13651] bridge_slave_0: entered allmulticast mode [ 228.256320][T13651] bridge_slave_0: entered promiscuous mode [ 228.299563][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.321642][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.338821][T13651] bridge_slave_1: entered allmulticast mode [ 228.357078][T13651] bridge_slave_1: entered promiscuous mode [ 228.395881][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.405102][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.415922][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.427201][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.436064][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.553129][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.560622][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.567880][T13653] bridge_slave_0: entered allmulticast mode [ 228.569022][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2270'. [ 228.579383][T13653] bridge_slave_0: entered promiscuous mode [ 228.595458][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.609939][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.623818][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 228.634267][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.642067][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.649947][T13653] bridge_slave_1: entered allmulticast mode [ 228.658133][T13653] bridge_slave_1: entered promiscuous mode [ 228.733440][T13703] netlink: 'syz.2.2271': attribute type 21 has an invalid length. [ 228.755747][T13651] team0: Port device team_slave_0 added [ 228.762285][T13689] lo speed is unknown, defaulting to 1000 [ 228.766877][T13651] team0: Port device team_slave_1 added [ 228.798083][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.806625][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.815815][T13654] bridge_slave_0: entered allmulticast mode [ 228.823764][T13654] bridge_slave_0: entered promiscuous mode [ 228.834783][T13653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.849532][T13653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.889028][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.896081][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.923849][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.936555][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.943950][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.953169][T13654] bridge_slave_1: entered allmulticast mode [ 228.960698][T13654] bridge_slave_1: entered promiscuous mode [ 228.989084][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.996560][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.022760][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.034408][ T1167] : left promiscuous mode [ 229.087763][T13653] team0: Port device team_slave_0 added [ 229.117430][ T1167] tipc: Left network mode [ 229.120661][T13653] team0: Port device team_slave_1 added [ 229.163645][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.201119][T13653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.208106][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.234901][T13653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.261464][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.296079][T13653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.303650][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.330652][T13653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.418049][T13654] team0: Port device team_slave_0 added [ 229.432023][T13651] hsr_slave_0: entered promiscuous mode [ 229.440063][T13651] hsr_slave_1: entered promiscuous mode [ 229.446515][T13651] debugfs: 'hsr0' already exists in 'hsr' [ 229.452460][T13651] Cannot create hsr debugfs directory [ 229.486846][T13654] team0: Port device team_slave_1 added [ 229.523790][ T5871] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 229.536053][ T5871] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 229.544472][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 229.553835][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.563986][ T5871] Workqueue: events l2cap_info_timeout [ 229.569671][ T5871] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 229.575571][ T5871] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 229.595274][ T5871] RSP: 0018:ffffc900043ef788 EFLAGS: 00010202 [ 229.601435][ T5871] RAX: dffffc0000000000 RBX: ffffffff891ee6f8 RCX: d5769a1fb855d300 [ 229.609673][ T5871] RDX: 0000000000000000 RSI: ffffffff891ee6f8 RDI: 000000000000004c [ 229.617648][ T5871] RBP: ffffffff8a4fd6b5 R08: 0000000000000001 R09: 0000000000000000 [ 229.625607][ T5871] R10: dffffc0000000000 R11: ffffffff8a4fd670 R12: 0000000000000000 [ 229.633575][ T5871] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 229.641535][ T5871] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 229.650451][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.657126][ T5871] CR2: 00007f66fe9efd68 CR3: 0000000075058000 CR4: 00000000003526f0 [ 229.665273][ T5871] Call Trace: [ 229.668553][ T5871] [ 229.671485][ T5871] __kasan_check_byte+0x12/0x40 [ 229.676341][ T5871] lock_acquire+0x8d/0x360 [ 229.680741][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.685939][ T5871] ? __cancel_work+0x254/0x2e0 [ 229.690705][ T5871] lock_sock_nested+0x48/0x100 [ 229.695462][ T5871] ? l2cap_sock_ready_cb+0x45/0x140 [ 229.700752][ T5871] l2cap_sock_ready_cb+0x45/0x140 [ 229.706122][ T5871] l2cap_conn_start+0x76d/0xe50 [ 229.710985][ T5871] ? __pfx_l2cap_conn_start+0x10/0x10 [ 229.716434][ T5871] ? __lock_acquire+0xab9/0xd20 [ 229.721268][ T5871] ? __pfx___mutex_lock+0x10/0x10 [ 229.726283][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 229.732074][ T5871] l2cap_info_timeout+0x68/0xa0 [ 229.736923][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 229.742718][ T5871] process_scheduled_works+0xae1/0x17b0 [ 229.748257][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.754229][ T5871] worker_thread+0x8a0/0xda0 [ 229.758820][ T5871] kthread+0x711/0x8a0 [ 229.762879][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 229.768009][ T5871] ? __pfx_kthread+0x10/0x10 [ 229.772599][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.777794][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.782980][ T5871] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.787559][ T5871] ret_from_fork+0x4bc/0x870 [ 229.792152][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 229.797356][ T5871] ? __switch_to_asm+0x39/0x70 [ 229.802144][ T5871] ? __switch_to_asm+0x33/0x70 [ 229.806900][ T5871] ? __pfx_kthread+0x10/0x10 [ 229.811658][ T5871] ret_from_fork_asm+0x1a/0x30 [ 229.816428][ T5871] [ 229.819522][ T5871] Modules linked in: [ 229.824782][ T5871] ---[ end trace 0000000000000000 ]--- [ 229.833135][ T5833] Bluetooth: hci0: command tx timeout [ 229.836351][ T5831] Bluetooth: hci1: command tx timeout [ 229.838704][ T5833] Bluetooth: hci2: command tx timeout [ 229.860948][ T5871] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 229.867128][ T5871] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 229.934707][T13653] hsr_slave_0: entered promiscuous mode [ 229.957906][T13653] hsr_slave_1: entered promiscuous mode [ 229.966215][T13653] debugfs: 'hsr0' already exists in 'hsr' [ 229.992654][ T5871] RSP: 0018:ffffc900043ef788 EFLAGS: 00010202 [ 230.006260][T13653] Cannot create hsr debugfs directory [ 230.012010][ T5871] RAX: dffffc0000000000 RBX: ffffffff891ee6f8 RCX: d5769a1fb855d300 [ 230.034855][ T5871] RDX: 0000000000000000 RSI: ffffffff891ee6f8 RDI: 000000000000004c [ 230.063594][ T5871] RBP: ffffffff8a4fd6b5 R08: 0000000000000001 R09: 0000000000000000 [ 230.089447][ T5871] R10: dffffc0000000000 R11: ffffffff8a4fd670 R12: 0000000000000000 [ 230.097478][ T5871] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 230.132102][ T5871] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 230.155986][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.170147][ T5871] CR2: 0000561ddebf3000 CR3: 000000007c6ba000 CR4: 00000000003526f0 [ 230.178266][ T5871] Kernel panic - not syncing: Fatal exception [ 230.184694][ T5871] Kernel Offset: disabled [ 230.189105][ T5871] Rebooting in 86400 seconds..