last executing test programs: 14.45826391s ago: executing program 4 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000001b40)={&(0x7f0000000200)={0xa, 0x4e21, 0x5, @mcast2, 0x2}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000000240)="ce5642f65dfde3c4cf1f8b7b5e77c0710a4004c5381292c5c4730f087a4a5ec36beeb8949b552537754a91638e34e492a757f77fb439c746edc6f13cdbe4500c2154cf727fd4ce34615dc3ad63937bf6b4d855a90b1b5609ef33cc6bb60851325115583d2922454c414e775b7dd49acaecd192b60fbd58185afef8c6d16cc40e408bd4b5ba", 0x85}, {&(0x7f0000000300)="60fbdf86350ffcf624f8d6b8a52052c26b0cc95ccb053c93235bffeb8723f1a5ac231f0e2ebf8d920a2650ff6d0a500e248cc61dcfd1b9ab2219a77dfced459dada43dcc97e52ce2b3fc8e8e897346e1d2f5ebbd94be261b2ab1cb", 0x5b}, {&(0x7f0000000a00)="58593f2649c4224a251b67a058826e557d571e59a959a1508c06238fd756a9ce5747f9f51bcdfb7efb20a13118fab5ea0e594d6c131ff16d8e31a97809bd260c99a78dac51763f79370e426dc5b1ad80505d986fd5f5eac6dbb97258fff410000dd49593a97cfa59fc35fa8a848603318ebaef13c35fb0900367bc21a3747a70086224efe2d6fcab18d3c5116dab81b45690a399e70c83a7abc701de9add2769ffa93b50a35f928cce7b6f42fb3c502f6a307de0fdca66721fb3cb61585b1afa6da150327e22cb5dd686e103f5ee83649c1382", 0xd3}, {&(0x7f0000000b00)="693108acf0a4656fe30743b04cca56793752db50ae6e1ada32ee5b776cccfb5baac33927b34a057aa64ac0fcbef7aa36e30c9d83520fcc686757241fa3b6fcb3dc95760c7984c3990a0a2ada44ca51f8179c4a009fa7bd889e8687974a65cb602ac7a3ae1f6559466ae2ab3e035702a0ba549f7cf199bdda374e240e16c8d3283faa58725b642c2da5c7d461122dfd4f11c83d99948b647e7ff0adabdf03d1a3e0fcdfca8b3d80e183e7f55dda7a8f21d671010ea7c1e6db860d36cdd633f75d215a6f83c17da60900a6eccbdb35fc76416739531ff85e4e17eeafec702d8d7e43e399f0d03fb47b101f64cc8e408e615de169d38c210a637670045cd51d9d342b1c8f289c3a401f11c8b0dd62faef696604fbf57e835b742c3c209eaf449028e6fb601cdc8323d5276a4abb734b52306aa7ba5e208a02ab9bf90d2b098853763c20a0c1de52fa548b59fdd142c3c52b7269278133c98331a35a184e660be721cad0486c194624b976e423343c8731624656aa56abaef3e3b9b1c47e33ef15975fe06fca2dbc9100ad8fa86334608cf67265c6c012b3e79a82231ff3bbbb869fa09ecf60296ce10d4cd637a6a0fad0cc21dc1d80fca43736cc914043c9ed99808e65a3ab87b17e0de720b4c47928aa37d65869b1f1872f53895104843bb02be63c1d21abab1fec6f4f25c3447f19aa88d83f18947a54c5b8ac9eda53df519f3ff1614925f52f9585d37fd3294cb7f39ae044ef553909e5c2d4675954764a07721012cbfdd4186182dd2be55cee52a422b5b577d05fd7c07404929ac79c7116b9a3895a85bf78e51da6089a5e5e87aa1ed313a781c4d4407db8276c7f652e552f5c7a16182698386739e70a6418bc851f73a621f7da342157a8d15b900137e2dc267f7e5ea1b0299a2d79ad8275de26f8a3fd64c2dafa25f958d2af4b1a3013698be9713f44d54df1a5acfd64bd0db49e3cea9e6e07e6f48094d46e820c6c5bfa94c58a3de556eaa21878d0449acc8e54d52ee19444448bb55b0b2ecb8c4d50e9e22fcac4151db4d41b5eb316b138ff3caf7ab6b6370f9d6b5ffcd1a24751bc8a84b70aa4d2fb36489fa1fcb4ce6f7276b1f26ff1e6db0a1c92094ca95c431515f54fc7b1d2df13e669c033348972c048da4a65ebf6326778718d1755897cd1e7054ea5480f1353d093695f29072ad2739b0c5de7a6cadb5c8dab656f7bfbbbd63a633c43bc05f352466904cf7a5498bb33586f959c810d65a35985baa9a8e56b1ad4c2fd7afe0949c1f28dcfdc53684d84e0dd9ee8a45bc4943ba5b70ac855631943be4314d44eb05255a4f10fdf5c85d3b36ba409c807f14bbdfb636fa52e7e6f8456b7b52ca06a64b709aa0a3ecea1513e1c35ebd939a453ddf60433af63ed3545f90f51d5453945036f632b1843c34fa8efdd78fcb837f83a516fd238d8a0da7edadf22181de94296a3729d181ede66a2370749093102dae0e5c5a168ef01dc549df7a265e9f23d46cec6d2067beb6d5e00b83802329c376d446ee4b459fc65fbf6100ae2a1b69e34d1976f3304a9271ee31f9dd4ccff6e6dbd3f7aa76ac3d5e43153163c4fafdc60d4b1276f969b1a2ab8754ca1c7c7b99fbd7b1981c7a9cdff5644adfd04ea9088b5740c4ecb9a2092a421d53a720edc5bb92940f20d0bd7df669c17cec102cd2e99033eb5e72876c0c58217555206d8bfd50920640fb800e9cc913d422f40d856221420f4c4a224917b31ebd683483cc0470ae2ec1af420cf9cbde61474671e005f6ce359a806ea9907d30976cf9d0cf44f89943e81cfacc0e834b3c5ee5de4f59e0f7c86d7148a78ece2c51698b1beb019afdef813b2a3f0df1c5d34ac4a7baa257f922fbcc530bde8e23b2e1b44fe6b125a1322f05d1a382316d6edd74dfbeb83f6a7e4f108761cb12d1fa74e01b36fd719e82cbd896032c2b51ad41c6ca16b218caeed1e1bb645d5182f2159e1b9280a30f53c848beae2db8b555f883188edd347edd9c9a2f433ea4c7615767578a8de3ff1de36d0e9c5dbb435280b05773b85c1541366a81735c60d67f22a4ead329e14fffa8c228cb20381880ba7986fdd8e4f5eb8204211707e68134aa7d2995e10ccbc0560df76e78ef62ff520443bca8f235e4b3a9fd5fe6d856142d908a2c4b7693438bcc14aa9dd1ca8572721f3b0e65e69f0c455821765f1fcbab6391ae0590eb4ab044698e030a10e6581fc68c75b23edac9964f0bf26caf697d8ff2771ae582ff51df20a29cd39b8806761486dce3e7257e63f050a169b138e24cf884c5a552f7f84cb8651fcd4463c91919856e17431060a242b97390cbf4cd7f64d8631c3f49eeffa6f533c787d1813962887efdd377028f2eaeb9b148d88fcc09ecd5cb8fb46d62f9eea43f42f18cc14aa49404e72f5875defcce5788802277a73357aff69bed63b8d4988dc49b6a207af81e4c6849696a64c44284f234fd261382d58a7d02562ee4167b42c651735385b4fd21d1b88a080721b096431a103fca0f5f4d0156b56117e3b9b84532244a6363bc8f61f1c6133820f2cf472fa5effe0c8ba06c378a8c43e4ea9a2332cfa8e903df47903794d29d714111b7891aebebcb0d23d1008a1ba338d7d0ddf6afef70086de91b2d8fc088c12fdd6b0871e745597f7637cf4269200ee3fc96101eb09c4275bd6dc06940e437333c2eadeee5041b106c06d45b8ae150bb497406b9652a17206c3f3b1631fb8583578a6995c11023ae102ff28cd422b0e02710164d6f8ab22c3039ded4f4c4c5018639c7d1a7f848262287a307fe78fb281004ca56fc9e595c129ec87da8c806261b7fea2975b30bab2d9020821818928d07eafab805a4e0b7446809ac856212bb42b41db8dade13a8ec3fb515989464dcf3f8c3ca77b3825b648e37b146e46454802777e71f1d9d550c7f0ab3eede68590b4ff1a93cddd6f1718bfe3bbba35bdb7bceddbfe94eda10ab07f6359c310660b411099d6e9884cd430894aa776b8a112de50b872a0bbb8f013c96f9a47b1692fa52ed7a811243cf660534149a9aa66e03b84173b06e91d351081e14c2def731542286cdb57179dd4f36c06a9a96e3bd6aa2e186abdc44fcb35b910a36e498592eef80efaa47fd078545ae668d24d41a9150026335e440578f38321b8d69e48245ea02e0eb2d666f6942f8554ab7fc9be404c249cbc501658b5c7dc8149e0bcdadfcf1239bfe31f97ea492afb0c6c243d5d06ac6c1f28abc4708d56c966406420e3440df038f6218801b983ae48552cc65841b4b71ab0b3251f07bab7a1b8ce2292b81a852173bd9bd45e87528b320fd5b404d27bcbfb3617e83e21d1fc22e9ea1cd422135ae3bfbe25391fe4cbdf1aca3ce2149576df7c1ce99be05c26b153266601945fa9dc83ae102f2ba31c56dd5ea19f8cd789dadf42b9d9fc0688f7540913677fa6cc44dd97388ace0a2441018f8ed4d62b9707e9dbe5fc0dc0dd37eb49b5152d0f6a44a2e17d0eb5193080465c42751782503c7634f549807869c08c0b0b17eb30f885a0dc54f91830fc4ad20a0f3c8e7e5063dc2663dae73369b63460feace3763d2e56d94b672bfb39a2163581782b243bfac5229712166d271a6e963ec1dca41841ebae615ddca316b658c7bd615e8d74ba594a0332386b3efad72d13fdb07e9caf72dc12a6e1473704198520345075b5dc25969ddd7f08dbb4028d8560852dcad76f7c98820777f228d6152cf862d0f5957283ba7692a82b19ae595779898fce9c95c50065b04ea36bf9569de47386397e2c4b9fbb6d188aa1e7925dbb335ab5f9f2f8029d95b63b46af10f6ef6613936d4e8e169ce3921b8a4c42a027aac0b4e4db1a642fa484797e4aca996d87cecb2235b5abeda8fcca9aafec8a1a1e29a78c33d78736932923cfa0c88f2253f21916bbb15d354645206f5f14327b17e596ed38d0926a8391a2a58cdf8f1716a03a8df98c925c0a9945be35042d8f73d0a30c72197c7d7be9ba69c4849665f53be91ebade328316b3425edab768eb6f1063dab1ee798987e3eb07b8187a379a6dceb20828a4ee282b27f4dff955326e1059d4740fe0c8d98c75fff1609431cca455759be009ef4c6db85749b95939e89ac7161e743c3d25dbfe57df079a0c30a34081c1b5cdbb1d5106718d8b0fb86995f9f61901a9260df84b99769b962f37fe55eb10da37236e91d82430cbe51903c1f7532c74c73680ae7235558924b4bd219f3001c5b6448cca35cda5b0cc2ecd30aa4ed145e4d690c453a8f8518c17f2a70386cfedb0833c1b2177d8b42f0ec81f36f7adf33b2c406a8721ffeee809a7afec80c91dcda02b61c88def42f4bc2681e5dc6e779a48753b1a8b1b78794512c30d19406763fcf6e4aa4774cf9c8295eec18afa0ed84ab412fd1469eaf3f669c074400015c861bdf1991f67b6c45dadd89b248c548fd0e961ce3e2960728056a90a1ef60b22f63500a6e4962f2170d6e4e64124fd3ee6926224101e061ab7c75d54206121a674a963d5d685f3054b8acc53b35ed35cae02555520f7aec05f2d1e711e8db7de292ee9ac4d27fbfc1b5d02d5c568a85c3e9b61baaf395dc447e9f8566ad6e6eb5adfabc7218eac02ae448bbd35f6022a66932f362f2343943fb406aed79a700152ef1a663b3a560dbf72a7a1f57ed18a463a7762d088cea496225c8c8585c48f1ebf5bf4d464a01593c95b94c89a2d4d7124a4df135888b07b8af2a31a921a64434440d5ca78a692986eb95040f1c79ef6261ab34a0f04f2ef74ae047c3b58441e90d4825d289b660bdb00aead11937f4cf35f9626fef7cddbfde86595b01fb09a6a2e20034257f0e551fab57c3772899ddff0696b682d9517acc003a01f5781549ad5c1ffc787f28ac82b37060fdaaa2e58946a8eeeff2a9fb8587f5bdb02c184da2a49341a4de02e6f87f2e52e6d80b8b5a3e99dadbb2dc8c0b27771a67297a9ac53b804689396ace2b00f74de12241035dd03a72829b93352840c7feac3bd48b79aa1c3bb32fbfdd5aefdc8d843970e4a3ab4ddd7d18644bdc892b1d0b6f5f9d8139c939c6de7a75819afb8fa4dfa10cd31904a5d8954d2b5698c958d5071d93b5a7284c324b67dab3540755f76f0f50798e9cd1c04bd844072401f2da24ada1248918cff3f13bb0eaba5b2707785848817f6814b11a50dbbc88077cbde34abadbced8668f2b3f45ce3c4d40c4b6726d584ba3b7bbc9d02a95e13f5e49b6f7f828937de3b04af2a056d4bfdaff7a1356698e92ae9bb7d5c4a3d6b381bd83c671ff2b3d245b25cd878547d0caf6bd2abe5a86873958cce37d879a5e9f15064b5b85c887fcdcf2b04ada6f39c6ee4582a0cd064d70a834b5e0a37d170968587cd730bb3889a2d7543ffa5376a524772c09d0dba98727c92281c46cd8b80b76cc6f8f788dbd9d3ece346938dfa5a2cf4905a92c2d6f060b5d1a0af84859fe5a8d9bc95521ff76038985d739e8298b8b60408718a96c757636b835a0cdbe561c8df106ed3242329c4302ce167bff1b8e8855274191a5aa4d536179a312b76009644e07deb5b2160a56f684f911aa4184f59508dcf450e186e3ee700fd57ef718eac67ab4f33e10e540bbcf99f04bd8291969a36d447e22df424d90ae98656f3163209e8f512c64fc7595cf9eb7dcc9b242fc6b618b2ca138d5ac1dde92e2b60053dda06acabcb85721f318df6dd5c7aee44a622c7f0ac63e7d8c5b04713f3ef38f3ffcdcf2c5efc0d1389423de04b40b4df62de99a287c5cd2e9c7f01136d14cb4deae642", 0x1000}], 0x4}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x1d, 0xa, 0x4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000002240)={0x1b4, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x88}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x93f041ac, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa53}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x62e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbdb6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x20008094) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001380)=""/127, 0x7f}], 0x2}, 0x562a}], 0x1, 0x0, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000002200)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f00)={0x27c, r8, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x90, 0x18}}}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@cf={0x4, 0x6, {0x0, 0x7, 0x4, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x60}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x1, [{0x5}]}, @ssid={0x0, 0x11, @random="e5d663c24a99603e2ef9ca658fe5f05102"}]}, @NL80211_ATTR_IE={0xa5, 0x2a, [@preq={0x82, 0x6d, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x2, @device_b, 0x5, @value=@broadcast, 0x1, 0x3, 0x7, [{{}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x6}, {{}, @device_a, 0x2}, {{0x1}, @device_a, 0x5}, {{0x1}, @broadcast, 0x1}]}}, @link_id={0x65, 0x12, {@random="a98347bb324d", @device_a, @device_b}}, @peer_mgmt={0x75, 0x14, {0x1, 0xd, @void, @void, @val="6bc63a0786f0080618895390e6e42aff"}}, @cf={0x4, 0x6, {0xfa, 0x8, 0xfffe, 0x9}}]}, @NL80211_ATTR_IE={0x4a, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x30, 0x80, @broadcast, 0x2, 0xfffffff8, 0x10}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x5, @device_b, 0x0, @value=@broadcast, 0x3, 0x8, @device_b, 0x85a}}, @mesh_chsw={0x76, 0x6, {0xa7, 0x5, 0x3a, 0xad}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0xa, 0x1e, 0xf998}}, @mic={0x8c, 0x10, {0x74b, "a059dbf728ad", @short="a6c4628b069799ea"}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_IE={0x53, 0x2a, [@gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x7, 0x4, 0x22, 0x94}}, @supported_rates, @mesh_chsw={0x76, 0x6, {0x8e, 0x2, 0x37, 0xc57}}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x9, 0x3, 0x1, @device_b, 0x2, @void, 0x5, 0x7, 0x2, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x1}]}}, @dsss={0x3, 0x1, 0xb4}]}, @NL80211_ATTR_IE={0xb8, 0x2a, [@mic={0x8c, 0x18, {0xf8f, "9699cdecf514", @long="5a201ea973e90712f2fe7a10ea1a76b6"}}, @challenge={0x10, 0x1, 0x31}, @measure_req={0x26, 0x95, {0x68, 0x9, 0x9, "78bd7b3cda60d5eb59a4b516aafc450f393f846889583509d7bdbea3f53bd74acfda21686b163a7dfe2687f00a25a7ffe0b52c5f98388bcc7639dbbe30b6ff69f3f72116453e17537429bdc18e7615e8ae1c9f975b679f6bb8ca0ca640c578cd94eb717b7200afe35966fad3f45cbff8798717f3df65f02790a0fee619f4876e4c3de101decfe2af65804e981bd1a6ae3adf"}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000480)={0x4e0, r3, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "9ea819cdbf1b11b6e39cff3271c77ad65bf7e0e87ad305338ec6555fa6804e8ea90275df1dfccc3296b6bbfab13f61527b88a409f55a3c503ed5d602640797287030d2d99c14909ba693d6020240ede99f2acd235a858975014916b3fc8ad0b2fa2a43aa246a97d9c3f30c1cffd58c4ee848c47b1db007f661d371712eaf06efc96cde01e3b0577e475df6c647bf94003ce90da05e1ed04a17ded7eba21577c32425b0a3a2972b481a14f5197c0d74bd4735c5e7a826b6444d8c93a1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "7585f18188ef9d42426cd006ed30af209dd91d45dca60d32049783c8d4edbd4f28"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'[N\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "6e341e3481f99907ee23d64eb7d607c0c644ed5a723ff86034e14f9ba3bd8ffb0270167d3493efb7573e1506395bd68e4f5fc9fc1f9816d74407b671548d2e4652131533d0caf8dbbd449a543f576ef3c260d767f407cc40ccce5b6c25d54302e0ac40ff3a0bf49fbc69d02abf8debee56ecab75cd46367d8451be9d6f710f6c33bf4364a12d61a89bb9a422806cab96f4b4a2e53ea444afe2a080cb0b5d8f33ad6fc72c9a74b5613fc7a3b2341cd19d737e209ebb2007b8"}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "b07f01d7f918e4fb3760fa8a648738a7d4dfb0a7fc904cd40d4fa5e38bbd7e18e4ee682fb691b1baecbab1659c032c70ebc56dca1ed065ed0c1a00ae0991f50f8293bf5852448b344b575899952729d72d37f2c84b7059415123f6a466cbbb62b7600170679b751df9218001eadf3d10b6d53c5f8561554c4e8dc771596f91d04a4ddf9aee97dc7921dde7c8725b02491f5e993e1fe49a39603da5cab31a820997034b0133b5f16e32cf1e571ede2c53fbd09708ec18c14db5dc24b54b2677de5d37e41b9c701451c64977d56918722ce65d1c2341879cd55cedacf74ebefaf97398842db148dcb940036bd5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x219}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14.266459763s ago: executing program 4 (id=2990): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) 14.167860014s ago: executing program 4 (id=2994): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60430093000b3afffe800000000000000000000000000000ff02000000000000000000000000000180009078000d01209baff4410af3ca145a9942f0c61bb86fd86c1e46f2a86df98b59743e19e4cf784027a0b6a03ff4011753fa31a539484d7c509e2845982c42cb37afd5a2ef67a950a51f8661d059c83e387fb12cb596e7f0349b63d7228c44a022be940330fd23641153921a1a475805e2baa405243ccc00"/185], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000080)=0x401) 13.670327236s ago: executing program 4 (id=3002): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0xc000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 13.230409224s ago: executing program 4 (id=3006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000fe2300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 13.177023698s ago: executing program 4 (id=3008): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000011200183f2500000000000000000100007f0000017f00000100186371ae9b1c0300"/70], 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x62, 0x0, 0x2, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e1b, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 64) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x28, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 64) listen(r8, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r7, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff80fe}, 0x50) 3.258953346s ago: executing program 0 (id=3102): r0 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x800000b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r1, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2f4, 0x1f, 0x100, 0x70bd2d, 0x25dfdbfd, {0x14}, [@nested={0x1ea, 0x147, 0x0, 0x1, [@nested={0x4, 0x54}, @typed={0x4, 0xfe}, @typed={0x36, 0x113, 0x0, 0x0, @binary="a7471f7d318048c64fac80785333af2708087ea1e8d669a1cb8a23f3ef60b13342dea325155d7387ec5c7d571c1c6aa1574a"}, @typed={0x4, 0x9}, @nested={0x4, 0x140}, @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@broadcast}, @generic="54e04eb601b91288c22d6df0531aa6f489459feca94d1cabb42383fb5a2aaa2a4c974774306785d2b0a251b0a16ae8ebbfbd29d3ddcef0b6462c4ac44e4e050efee87bbf3e6358731a3537bb2988c952aaaea3186a8daf7892a356ec149ce5ff7b1dca6b3c0625220929e686f8f62a1802a182f29e472b55d67d86f7efe890696bc443f078b8077dbaf9df59e75e3e3ea79ffa15a761006167cc7c78422e6dc1cf2511a427516e970e587525a69c59e8609431a3a8877660bb9c3fc0d30b62f89813adb9af549888e0049364822daeb88ffcc1aac40a6ed98eb9a0b8f21a5a2978d137b27a510a89a97faaf19095", @generic="5e108e78e55674c54c7a1dfee8fe9fc25e228697272d9fbc31321c71b6904d4c12e742d5919c3dc8f8829a9bc2fb864b39978b41bbef2802de19e83a12727e9b43e6398927eba2d28c3f0cc4d26d757b9bb149b0caa752100d23f441b15198a5882092521abfc53809f5db549c503412ab4d3b8936f36a9501e1c31bb32b36e37142177bca465119030d044465615d315e07232f6aba1f017ddfdffa261dbfcae724a7ad0fdcc3ff"]}, @typed={0x6, 0xa9, 0x0, 0x0, @str='}\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @pid=r3}, @nested={0xe4, 0x5e, 0x0, 0x1, [@nested={0x4, 0x156}, @typed={0x8, 0x106, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x74}, @nested={0x4, 0x90}, @generic="dc410fc1aca62145c5cd51ad1006a840ff0a5c00c8f82adf25217d22e9d32bef38fc9f4919889a454f9fb6056453d0254db1c77b506160b9539f87c2acca9d8624cca51fb8e2200acf3e1012717d0bd5ea88e427c23de0956773651b9fa579f33e224c65a381f3a6f949f5fb91d97ab198f689a5e2a78e19fd3cedc5dd77cd2be5727f019cf6f36bb3ae6e2d50201b5a31e5f21f21004c4c412e2eff351ca746a7620a0682f6f83608afd1246008cc536d8459c9131920a14c734946abf466ce3a3043696d7aad5b", @nested={0x4, 0x95}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x400c080) close(r2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) 3.198135633s ago: executing program 1 (id=3104): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="8de7ee2c7cda0100000000c988ca", 0xe}], 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r7, &(0x7f0000000400)="0137ef1515268b1c4f848f5fb9cd0ea86dc58351fdb3a3abb0a0ec12487af966b975b7242e7dfc42afd98a33a368e0c7fd6fd6ed437488047598fd501b8c2284e46296699ff12166f6eb17d5632b458a15ae1f532d3d206cbfc1c6aeb1122b25ac3697f92f0c4232de64034d1d3d9be6385eb7c0db1afdc2fa4c4abf4998d2c6f231b6e253f244059dc1a32a0bb50399040c4d186d2f4980275112b7bf749e52f125431e8757be83d4e77e405729d6f433bc125b773a6c20e3718a04bc17e30ef14be6b909e04d9a", &(0x7f0000000500)=""/17}, 0x20) 3.058941489s ago: executing program 0 (id=3106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a07040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000000c000280050002"], 0x84}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2.945970068s ago: executing program 1 (id=3108): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c00000a0000060900020073797a31000000000900010073797a31000000000900020073797a310000000014000000110001000000000000006cbbcc9f125dfbe6f9da405fc80e000044fd9b536ec3543ccf5f0f65847260f4e0dedcfe9e1fb3a2cf3a396431695de9dd5b09316d00"/158], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000002f80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="0300a0e9796c02e399f4e376fdba1282800000219d205e81f4a7f71c1926aae1efd7e005c0d5c8fe5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3607bb37b4fe035bbb095873048", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000300)="240c8b8d8209463c62f0d5c93b4436f4ec74d78982eecd4ada893dd20c29b1c970f80796acb978477ffa92d8579681edd05cd069790b96c1b214d11d3a337596cf79ab03365d35bfe8fbefb8088d2dda050c8322c4c78370f641711cde04493f387b7f743fe7a1c0083ac14ad753d52ad0cd7f18cc19", 0x76}, {&(0x7f0000000680)="33f2b36e21653153880651d7396a267b12b174751e007d50cef648630facf925f6c89514c0e040e946bea8fa208002606bf9d52fd84fa3d771572722d67cedd77e06cbd4c63c275c03f24308863da1202b2d860f98c69f44d0d0efe449ef13855d79f4a7e35dcf0627d2e9fb0eef62cf16ba6b352fa7786bdb39759160f0b0684efd3cacfab65bfffddc3c040378e554c5c6b5125b49da0ffd83ace816f0d0052bf68d3397f6008e844f49c6a407ff2f0c0a", 0xb2}, {&(0x7f0000000b80)="18a1cf7dcb327059855de5c5df1107a1cfeefcd32943e9e759a8442a4819d8c3ac9af2022efefa0c8433a630ccf032793c5f0744cfecbf017027001a9aed50a788649d8c5087d3b4f65552c07e1df005626497da4b40054820c4bb5f92ac19aa9a66516bfdb9332a3bc32d522233192681c6cd1807907851f2618f7ad6e04e5cf6f875f989bfeb4a54c3c4e32ff2ebf21ba5e3c35197b6657a56ab4a871b3a759dbfd7db158cd1ee44727bfc98d8b3a3cc7e477c55a0000302e11eb980fcab8a00d0732d9755b06397a1fa2d8eba10300aa941c0e066203d4b4bc978ea092b61226f2641aa80234d3122e77e9a68899751342486df651611cc41a052db39bab0ee094336fc028b39671d02809c50b2f7967cf5615f4f515d58651ceed85fd4d787ad1a315f63f7265ce1aa4c10baadbd3ad0a67e90b0074049e7247cf90835686d29d4dece51da8c4b4bb13eeca6170170f95ca522fc404cfb764fe498d6b472f232c06843c44b9b09d2d98c7dcddf8e4069dffd6f331668ea23be1d0b2ac0470087d2503bcc58fbc2e9a20196b5e4979c2f74f56ec9a68c0b5dfe862e0746c01deb7362dc1eb1628d2c899dfef53d9fa6f148dd2cecc53b14c0842c700ef7b4211c4c3dc4b8afadfd28d7e64e94bd8ccaea1732d691763166f80df302bd935fd4e21b98e8033d9d2a22c9d043becf67897e731885b30661ee524d1405a90050379604f475c3af0524519e1947831c1880f531161ff7117b9b3733bcebd27f5a7001572ed6f0b0420dc1b41a2b85598b3286aaf76d63676f0cb1a771022216f69749ce2a2b79c7f8104e121a0a2c9f2c69fcad242794f6e18b7a58bc8728182fa3407728d89355c6a9e13b2ef69f778361ef06e9ab2caca5434efc21a656918c29336c0efb69409b9b91548b0e3da3fda708cba23cfacdc923c2033ceee65d6dfc39bbc47c427d9de15d1d7ca41f0ca825b5c5bea3e166d127498c1b4a179fd706f85c45975f1700ff4213a75f8a34787aee3554ce3d0aa20f8ca2aec79df1b48440e3a1f1c1dccaf42adb3ce5eeb0ae05b7a56d309e68b8f3d56c50eb7e346d27605a88a457a24bd3694ee6edb84dcdce7f125a9576c6b1e7420a1f16f20d1de8f323c86cd05aa81d9664c177fc038a04b2c23895f72dfb8dd7399e2357e77cfb59c8557791b09992f32f42d98bba682abbcfad8f418a9339b1a1ee53c4dd8e35ac33aa26b3cd5eff8efbf40c3920aeab98a2d6782af0ae2bc6d0148dcb77ff307c20664da3530987ee9b0ddc5313cb5dd0b1fcbe03aa8982bf0d4e9343a511267be69af317861914d501f0e305e8cd6759dfdec1bd8e78133142b5525892ffdbe51d0983ef7c70a400d60ae92aa6e041e6f5cb78aec70124be601ed120d135ff4d3e70212739cc8bb28d3864ac358de3f836526a984ee728f2b00a432caecd9a781a828be201f6e47d736a46281edb5e6f3e87756a93b60c5895bff5e46c6fea1bbcd7124424c4dabe2959b4d37fd8070025fa5ae201c0a02a89677f0a5bd76c1f4baa3cd395581e56a77d5df3be70fa6e724e087ef29eebe00835ebdadbf2fe2fb044703e47aee5d7cae87170dc5d8466c352a1372f6995334be7c78c9490b003c779c7286cfe70dfe0fb9ae757a986db738ecab5135fba2e609d2ff34aab142bfadc7585fbbbd895da177b33700e0dd49f0e2eeaf912946d918818fc358c0ede81b8711684385a4f5f3855cadbf3eee2cfc9353094c0bea1227c607ab6cf13adf4f135b949639379496e5c741e783dcbef7b6aeef05d8e8fef7c1fc11a31c79fbcb294e7352f45466f542950d5d3836037bd63f2b4283f7199bd82e60024d3bab4d5e78c6a92f920fff549295de75d1f6f8b151ce733517c6df1f6a5880319eba117bb36adf6eb7c666f552fb8608f128d7b49a58b882e8ba793fb9161e6d055f716a5aacac6083ac6f5ed39a7aa71118945bb37f02ef1eff6e1db7f8ec551a72f2f23fce04cfffaf5c2e3ca169842723b5d70f524fad5aa7e0352816352024e31eb1f7a4ea553ea703929ea5b7466e3d98a1eff19346c79832edc58c2a5bb407ec6c1fc48f8a08f619ec238aae024b0b5fae262c5affe2a63ed04ccca0c700f491d6c89391bae59aeffd07345149fc5a9b2f4df43cc23a0c7ddb2018545f42365e393f1080532907fd381088f818aa77d7e702260496087fcc2acbb4fb0b9a069bbace0625828157b82e828c6410ac9862d83af8e8f50593ed0161b5e5c359c8f90b24ee873e6dfb5d19e2c336bfb4f3d0baf0a1ed5e99b86aa9b04fd53d9aa94195e4a9b7005a1f6edbc196cbf550edc6c803861d71f9ef9bcd95aa891c52ee89c8adffccaed1b49aab55a5795c577a1891224bd8176896274cc3fa183b88d1d7730054d43517d27dbf711f15ec1749d396a121939855b1f5c1405dc5aa417284ac965adfe0b3762f49eb9b6460c7e9320fef166dd2ceb77282a56c95ae3ec297c224f60358fde26fdd55b7650e7e49d13d280e9f4490ff7def21a1f59409aa21f38ef9a1b61fdb8421022109319943294cd8c049c72c41898cfb7949d5f0c5fef94f45bbb98c0bf518d88af3e93896a9feb41a021fa4b92dbfc9ef7daeffebabbe6cd1221089ac89a4534949c272518fa7fa3ac7702d65bd592b85dfb0ab802d2f3e539631c58f0b0fb70d880b31167f80b1272dae19e5f78d3bd3e3f7a0ae3c3f9ebcb5bf71e9343e5364206b135b9fdb871124d475a0c40503d5d7181678e5dc0bf1ba8feddf9b8a485a031964509661cbc8e7bcef811236d58f7c2b3b88b42e435d922734c500d95bbaf4e6b2e5ce382ba949fee02183d732c7f07ed3caeb61ddf3d66d821ae5bf241ef0bcd1f499a71474936df0ee2787f39ad799f19cfbc8e21253cdfba4920c94e8f853d1924c01f51240795e42b959bd2c8ccd4985bf4911685a52cd462dad07a97b94e140641515aa459e5fcaec41e57941f4ddca7d628255c4f7ba94a624f42b397a098b1af9a299935c2d0777a9ccb7988c08d09abec88a8de0781a9dddd2139e8a2883672f4542e9aea181a9d6b4b2192211ccc14d86e6b9bef5d2147a09afe490900386772877b1cb536efaa5f449377a240c66c4ca1e4f92dfc2baa6c83a859c0be723e67de950444848795bca1d879db2a5e67b1b72c941cc5e6ce3cd9174dd090240c7b460cf8c06d082a673e4d757c54cae6c27e8581ba37accd97cbc2457f8fc5c0dbda61b4f03b957a9a94c4a799eb9779a0be8a9ab407e9d98970976fee3c523acfa85aab98fe165d25a6a8349d6664ee26cc4f2f3ef8d9ca4f5118d44b68b859e5f7f3b190a3fd8d3199d57ba577902991b29033380bfa841f94a77c03eaf07a561119a65e73883c7d6e9cf33142b8e99e3545fb337b12889dad5f931cf221d637f0241ba32019799471bf99f40278cb66500fc75baa6aa8251a89b51b8bbbb756798f66e681391de69875ed47c4bb1e3485a884b67dd135def3e0bb9dbb3b4610f919e6cf88d1bd62ca7fb312c2906623a141b15c3435830595228c8a43236a7a23920e337c3dba8b7b199258b4541df846a1031754b1ee61aa44feaa36518358d5ccccdbc678fc0bf53d44ac0dec8680f6835f91e9f33a003bc55aeda351b4352f395893c52a563281334b27797e376fa8cacef8e90cac19d5f41462f94ae6a8ba6b3d3257354df7ce590610f91ed539225eccd23efff0ce20a5a29bee120270dae870411a8479bdcd0e4695d3a77e9b7c4ef961a793528b0df4d90d5503d73ac33cdbe05f10ad5a657a332b77e6b3ecbd9550ef05fbeaf32c2a0dadfb44c9260aa9f5c30a6e89ffb939d792c362e3ddb3c90b0f30e48960992f1586f9735648ceba6b542ef86d00587ba048a66628ceb8d721687966afdf9cb3223c493485bb523c2cca77d2a0ce272744a85758fcd9e5bf816b54c3de558ac42292901cc6a57463563a06fe1032f522e63f70a29e243dcff9c90671e580b34ffd031f4c546415fac8e4197eb0dbd8b4a1854c0b036c62c3561e7a9367304acf03dc4c86fa7d7ca18a3c011474ea664a70682ce00d642d3b2675df25cd19ba14d896d6bafab09ad64e0768b9998493c83f8d3268b2c0fb759c772bf40eea553cfc83e80d7726f528e7f87705b9f83342914071432aa48af37bd3b92a60ff7339c59be4d1ccaae06e26f4ec922c84c9a8d0853e25d57cb63ee101bd8e8d1ea7363dc2823db9f5f759287e986d61f7fc8d60583ee2128b8ec9eee667b6951b5fec98936a7d9e19f2d47b4182f3fb219e35a824b4159bd5ca1997d6351ff7bb57dd43d0630eae76684ba502a572aa77ca780ce74eaf514b4ef81ad40b3cdd0313b0bfa17bb6b2973e239f829bc4d4af006761c0948570f5a6c757fd199c8445fe643fe4a9b78526fe70f7d35b341ee249dc27b8306a7f411f80b8dfedf0751e2e65f5a6b9af39e231fa16ededdc30c256fec0e6825c3af134fa6837fba2b9d44aeeb5e2dfe79de1fa540962a18226901da06376021f7d20f1c421d004241e8fec48a48b8a57ece410c825d20807212f587a4abfbaba0bee08ad4165f3dc614d296b43be974196af642680fc85364b5b2cedcc106a00d83644f0bbd012eaf86fecd69ab65c161dd5c869a94df71411fa96931710791d6a5baf43c3803c6de7284bace3a3687e3ba57fc0dda244be1eb1f52f6f063347ec613f745bd6e62ed244a6e0ff055aa4f81f06b94d48cc793c367fb4f96608a3846b6f5f8c18e94aa4716322a3aaf51941c231d292cecfb96aab6d420d963ca5906be67fdc4c963a89a9a66c6eb8d4f60ff3a476babfddfd236a4015a5664958d476b22ac31d5ed25ce4115401df32d7c050ecfcde81b5ab7e9289eb7302ede25300a5517283f509b2705f217cb0fdfc9df9c17c0023e5780e85d95db0d16c97bc1920363d04f8d621db4331102079b56aa5c556b5a91f8d61f41569f9762649019125019dabf09321a0972971b41ee127ce5f2be832d5cbe22cb17e160bfa86baa8c8443c6377571485335b2ffbe245c84bc9d537b01369f1b0d01b3122c93dfaf1e461c19b30d2dcc5e732f1f143ec3de3bb67f2f3434826cfd107393ee86d3086e9f59fb4ff61959c22174763e4a6bc773feaa10f0ce46b42a60b4657bf90ef0cdcc9a8c7eec675c288b01371a5ea1bf9b68b8281bf41b25321b353bd6725425decbe4bc5fbba00361b00b7201cfcef139a51ad5fe133825d4b73149565a2cc671843f9f81e3af17cf7c9d01cb9720952709c24ceb714ebfb4c87d9ad1a7c3dbd7a795bed135a973debcf036a81a57aed1436232be0289877da0317937db4a69f9f2e8eb04cd961ace2cb4bd95dc42afce52e633f2d16243e41fb9f73d49c01189280fcec57f45bcf74550aa163e66bca70ed17456b99866dff7e1be9b5ed34d1f90b3b2a8d75b61b1c13dac8635fed5f17645d47d27c2d09b3b3435bf21b2381d3763804de3cb712a56bbe95540642f9ef934297c8105c2b303928c1814f026bba036bde7cf40cb7ee89afaed6fb366fccba6bed860d776af1f8b646b9914c5b6d126169b09285593420b8ae615f4549173906173e38f17fea1467bfc4a1685f72266a96a985a4e57fef1e09afa665fe39aa12c8b288e55ebf055f0cc249ddefd14de9bb0941bd9268bb3fada32a70e133343838ea36c5d75290354dc2551b2c18d75482fd3d0caacbdbe34a6a3d05929c7eaf445bcb6beb9856cd38bcb1c4d04e57b15948e087835fbeab9c6f7196c29592a3e165657a342c2527", 0x1000}, {&(0x7f0000001b80)="008b00aef20f1b8c75c99e109e959e2092fa28aeb45ab7ef6acb8416890011", 0x1f}, {&(0x7f0000001bc0)="60b50f4edbf31dc5322568623c1ae982adbb", 0x12}, {&(0x7f0000001c00)="c0696991bb77b81c0eae0b3d2cf6baeedd968f875f350a074a9bcb41f1b47f476ea4dcd31fab78ecd0ec1ad08e559cc062d35f9ce2e9fa32f67408c26005a5b1d66156606d5ea11b92e62e3eb7ed0679d3d5139732774b668019a74a1435767a15c84bf0c647de999eb242c7e272008f274b6e0ed27605f7dd42947b54cfa8fcbb95df45bb79a7d3e6885ca07ef933f3eb6ce0d80ab15249b268b57dc53735b6809a581edf7048ed37a51dd69576ce7e4c4763b4687387abc603356c7226696d34dbd40a396bc619ad2e103bf080b73c", 0xd0}, {&(0x7f0000001d00)="04308fa81cb30d14c223d9d237b3034fcdb6a31b4a45bf3228b65f0134199c4d96cfefe7c53c61d541c3f53d65ff325fc0d1983cfe3e337c03a9a800022b90debf9b5cda9f87d81ff954716254754a950ea249eaf73b1b94d67d1c41f4fe89c1f0aee80fd7", 0x65}], 0x7, &(0x7f0000001e00)=[@iv={0xf0, 0x117, 0x2, 0xd5, "2719ee6c8713df3ddc165678487ffb65e3e269e806c21e02b2a85e8bd6c1814eb616d5ff054dbff3f99b68ecd3abb5f2b26a87cdb7d5a0741dd9d00d7ffd33d0f80e07913c67c5182f974338b0a6ddbd7f3a8114c900fe69da07182f9f95a796386ce46b57f53fc975f4b112dbdce75be0bb5a6619473ce91fef5335dec8e85e285664ab0668147435d089b6d582562e2faa2bc644904ae70ff0898f624474286bed02d4f6f5397e52fd38df25ec16a6d70f445ecf2ab0000d594fd75bb0d8fbbacca00534a36408ac98890caf2df31c3e1dec8292"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1150, 0x4010}], 0x2, 0x40801) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.750417488s ago: executing program 2 (id=3110): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1800}, 0x48) 2.697899853s ago: executing program 0 (id=3112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x11}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30040081}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) 2.482559347s ago: executing program 1 (id=3113): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) (async) shutdown(r1, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) 2.440126764s ago: executing program 2 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) 2.290093605s ago: executing program 1 (id=3116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f7, &(0x7f0000003200)={'ip6_vti0\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000f9000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e51a899aa3"], 0x68) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x22, 0x2, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x10) recvfrom$phonet(r0, &(0x7f00000007c0)=""/154, 0x9a, 0xc0, &(0x7f0000000880)={0x23, 0x8, 0x6, 0x44}, 0x10) sendfile(r2, r0, &(0x7f0000000000)=0x10, 0x1000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x5, 0x80000000, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x8000, 0x10, 0x3ff, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe45, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x48) 2.270150356s ago: executing program 2 (id=3117): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000001a00)=""/234, 0xea}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/105, 0x69}], 0x6}, 0x3}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r4, r2, 0x25, 0x8, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r5, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000005dc0)={0x1, 'team0\x00', 0x1}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x7}, {0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa4fb}]}, 0x2c}}, 0x4000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB="06"], 0x9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x8004) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040800) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 1.893440845s ago: executing program 3 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) (async) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) syz_genetlink_get_family_id$nl80211(0x0, r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = accept$alg(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="080003"], 0x44}}, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x48012244}, 0x4c, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r8, @ANYBLOB="00042dbd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="d800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fffeffff5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040002000d40050000000009045708000000ff017851000000000180040504000000ea5709350900000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r2, @ANYBLOB="f800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000004000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600b68ee9d9276e71a0bbde075683951f6511c57adb5e16e4d344b91eaf32f2a73561c4b571d7920d57a79accfc805c3dd31f8ad04dab057ab28dbe1b8ee6f7bdb78915905cabf36b320f60814b6cdbddd34ca170955959849c290bc61118e831914fd156b73d23817947", @ANYRES32=r2, @ANYBLOB], 0x240}}, 0x24040000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x48012244}, 0x4c, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r8, @ANYBLOB="00042dbd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="d800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fffeffff5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040002000d40050000000009045708000000ff017851000000000180040504000000ea5709350900000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r2, @ANYBLOB="f800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000004000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600b68ee9d9276e71a0bbde075683951f6511c57adb5e16e4d344b91eaf32f2a73561c4b571d7920d57a79accfc805c3dd31f8ad04dab057ab28dbe1b8ee6f7bdb78915905cabf36b320f60814b6cdbddd34ca170955959849c290bc61118e831914fd156b73d23817947", @ANYRES32=r2, @ANYBLOB], 0x240}}, 0x24040000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) (async) sendmmsg$inet(r6, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r12, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="0100cf001c"], 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000206010300000000000000000100e80405000400000000000500050085000000050004000100000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4009) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1414bb00000000000047000000008000000000ac1e01017f000001e0000002"], 0x20) 1.410552015s ago: executing program 2 (id=3120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002317000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.381613609s ago: executing program 3 (id=3121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x2f, 0x7, 0x6, 0xa2, 0x6d, @empty, @mcast2, 0x8000, 0x10, 0x28000000, 0x7}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xa96) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x629, 0x9f, &(0x7f0000000180)=""/159, 0x41000, 0x44, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000340)=[{0x4, 0x1, 0x6, 0xb}], 0x10, 0xffff}, 0x94) 1.380525176s ago: executing program 0 (id=3122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x41cc, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r3, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x40008c5) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x8, &(0x7f0000000000)="649b4248", 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x8, 0x0, &(0x7f0000001b80)) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) 1.206632116s ago: executing program 2 (id=3123): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2000}, 0x48) 1.110838801s ago: executing program 3 (id=3124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r1, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.080085793s ago: executing program 0 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) splice(r7, 0x0, r7, &(0x7f0000000100)=0x4, 0x7, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 862.112417ms ago: executing program 1 (id=3126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x20040051) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf251500000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="806be71c0000a7793548d26e0243d7207fdd00", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r8, 0x0) accept$nfc_llcp(r8, &(0x7f0000000340), &(0x7f00000003c0)=0x60) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8ed62c96", @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf25030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 861.643199ms ago: executing program 2 (id=3127): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c4, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x20004040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r6, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x100007, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r11, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 861.526264ms ago: executing program 3 (id=3128): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6d64ae2f772f87c6927ebc4f80"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x8000) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0x2, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) 676.772484ms ago: executing program 0 (id=3129): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000fc0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x174, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x6, 0x40, 0x6, @mcast1, @private0, 0x700, 0x8, 0x6}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="1867003d3da68705926c55a92c06c436627b2a00", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xa146, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r10 = socket(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r11, 0x0, 0xa0028000}, 0x38) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0xa, 0x7, 0x6, 0x3c, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff7f}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd0000000}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0xd9, &(0x7f0000000440)=""/217, 0x40f00, 0x18, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x4, 0x2, 0x6, 0xa}, {0xc, 0x4, 0x1, 0xc}, {0x5, 0x2, 0x1, 0x7}, {0x1, 0x2, 0xf, 0xa}], 0x10, 0x4}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000840)={{r6, &(0x7f00000006c0)='+\x00', 0x200, &(0x7f0000000700)={@align=0x3, {0xffff, 0x7, 0x37, 0x3}}, 0xe, &(0x7f0000000740), &(0x7f0000000780)=0x9}, {[0x0, 0x401, 0x8, 0x7fffffff]}, 0x42000000, 0x4d, &(0x7f00000007c0)=""/77}) sendmsg$nl_route(r6, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001640)=@bridge_dellink={0x41c, 0x11, 0x400, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x800, 0x80}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}, @IFLA_MTU={0x8, 0x4, 0x4cd}, @IFLA_VFINFO_LIST={0x2b4, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x40}}, @IFLA_VF_TRUST={0xc, 0x9, {0xa, 0xe6e4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000000, 0x7}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x2ae, 0x0, 0x8100}}]}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xc}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xc2d, 0x4}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3ff, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x10001}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x7c1, 0x1, 0x8100}}, {0x14, 0x1, {0x3, 0x3ea, 0x5, 0x88a8}}, {0x14, 0x1, {0x1483, 0x961, 0x5, 0x88a8}}, {0x14, 0x1, {0xfffffffc, 0xcba, 0x3, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x9}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @local}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x101, 0x6}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8001, 0xffffffff}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffb, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xf}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffa, @random="85e32da8d240"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x100, 0x81}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xa3f4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x1}}]}]}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r13}, @IFLA_XDP_FD={0x8, 0x1, r14}]}, @IFLA_VFINFO_LIST={0xf0, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x5}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x400, 0x0, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xbbe, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x400, 0x1}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x549, 0x6, 0x88a8}}, {0x14, 0x1, {0x877f, 0xa17, 0x0, 0x88a8}}, {0x14, 0x1, {0x7, 0x5e1, 0x9, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x203, 0xab}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x8000}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @multicast}}]}, {0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0xba}]}, 0x41c}, 0x1, 0x0, 0x0, 0x44044}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r15, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r16, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010500160002000000040012000500170040"], 0x60}}, 0x0) 519.665536ms ago: executing program 1 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{}, r1, 0x8, @unused=[0x2727, 0x6, 0x3, 0x10], @devid}) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, &(0x7f0000001080)="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", 0x1000, 0x24000840, &(0x7f0000002080)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x99}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f00000020c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000002100)={@broadcast, @remote, @void, {@arp={0x806, @generic={0x305, 0x86dd, 0x6, 0x5, 0xa, @empty, "3916f304d8", @broadcast, "b5ba05f5"}}}}, &(0x7f0000002140)={0x1, 0x3, [0xff0, 0x95c, 0x9c0, 0x530]}) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000002180), &(0x7f00000021c0)=0x12, 0x80800) bind$x25(r4, &(0x7f0000002200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000002240)={0x0, 0x4, [0x8, 0x98c, 0x0, 0x1126000000, 0x6, 0x8]}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000002280), &(0x7f00000022c0)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002380)={{0x1, 0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)}, 0x20) writev(r6, &(0x7f00000024c0)=[{&(0x7f00000023c0)="3b732ca3ac59e80ce3a7b416b56ab7160bf4067b7ec64c7d20f4e6a36e85423e800bb3a429f6cbb1f42ef145d594fd805524e54be70477b118032d6db60800d8fac6fe0ba8dcc196c6c7091f6d5bc506f6f0f43f343cdc544b5cf251a8bbcbdbe6860194c0bc65246a46bb001533d554cc52942d21aa237d0e67fd758d9032ecf3e3cbb0bc8d88b2020b886db4698925ef117baf76bc769bf11242569e5160608af02a2a45", 0xa5}, {&(0x7f0000002480)="1fcc741c5f057a0f2178631b370e0b698bdc2267558646aeede71c", 0x1b}], 0x2) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_lsm={0x1d, 0x9, &(0x7f0000002540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, [@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x0, 0x2, 0x6, 0x1, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x0, 0x1, 0x1, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x6, 0x4, 0x2, 0xde5c3531c353a0c3, 0x4}]}, &(0x7f00000025c0)='syzkaller\x00', 0x7, 0x33, &(0x7f0000002600)=""/51, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0x1, 0x1000, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000026c0)=[r6, r6, r6, r6], &(0x7f0000002700)=[{0x4, 0x3, 0xc, 0x5}], 0x10, 0xfffffffb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002800)=@o_path={&(0x7f0000002500)='./file0\x00', r7}, 0x18) shutdown(r5, 0x1) epoll_create(0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002880)=0x14) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f00000028c0)={0x1d, r8, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000002900)={0x2, 'dvmrp1\x00', {0x8}, 0x8202}) recvmmsg(r4, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002940)=""/175, 0xaf}, {&(0x7f0000002a00)=""/20, 0x14}, {&(0x7f0000002a40)=""/173, 0xad}], 0x3, &(0x7f0000002b40)=""/4096, 0x1000}, 0x3445}, {{0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000003b40)=""/170, 0xaa}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/175, 0xaf}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/114, 0x72}], 0x7, &(0x7f0000007dc0)=""/154, 0x9a}, 0x6507}, {{&(0x7f0000007e80)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/187, 0xbb}], 0x1, &(0x7f0000008000)=""/195, 0xc3}, 0x3}, {{&(0x7f0000008100)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000009580)=[{&(0x7f0000008180)=""/22, 0x16}, {&(0x7f00000081c0)=""/22, 0x16}, {&(0x7f0000008200)=""/96, 0x60}, {&(0x7f0000008280)=""/22, 0x16}, {&(0x7f00000082c0)=""/235, 0xeb}, {&(0x7f00000083c0)=""/85, 0x55}, {&(0x7f0000008440)=""/184, 0xb8}, {&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000009500)=""/80, 0x50}], 0x9, &(0x7f0000009640)=""/107, 0x6b}, 0x80000001}, {{&(0x7f00000096c0)=@qipcrtr, 0x80, &(0x7f0000009900)=[{&(0x7f0000009740)=""/203, 0xcb}, {&(0x7f0000009840)=""/181, 0xb5}], 0x2, &(0x7f0000009940)=""/187, 0xbb}, 0x8}, {{&(0x7f0000009a00)=@l2, 0x80, &(0x7f0000009d80)=[{&(0x7f0000009a80)=""/121, 0x79}, {&(0x7f0000009b00)=""/18, 0x12}, {&(0x7f0000009b40)=""/96, 0x60}, {&(0x7f0000009bc0)=""/140, 0x8c}, {&(0x7f0000009c80)=""/20, 0x14}, {0xfffffffffffffffc}, {&(0x7f0000009cc0)=""/183, 0xb7}], 0x7, &(0x7f0000009e00)=""/211, 0xd3}, 0x200}, {{&(0x7f0000009f00)=@hci, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000009f80)=""/39, 0x27}], 0x1}, 0x9}], 0x7, 0x40000100, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f000000a1c0)) socket$key(0xf, 0x3, 0x2) bind$can_j1939(r2, &(0x7f000000a200)={0x1d, r8, 0x1, {0x0, 0xff, 0x2}, 0xff}, 0x18) r10 = accept4$ax25(0xffffffffffffffff, &(0x7f000000a240)={{0x3, @null}, [@default, @bcast, @bcast, @default, @netrom, @remote, @remote, @rose]}, &(0x7f000000a2c0)=0x48, 0x80800) ioctl$sock_ax25_SIOCDELRT(r10, 0x890c, &(0x7f000000a300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 30.583004ms ago: executing program 3 (id=3131): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000ffffac141418fe880000000000000000000000000001000000004e2400000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000000000000000000000000000000000000000000e6c240bab0ee6324d24b9d00000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/191], 0xfc}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24800000", @ANYRES16=r4, @ANYBLOB="71062abd7000fddbdf251a00000004002e800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800010003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r7) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r7, 0x0}, 0x20) r8 = socket(0x28, 0x801, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(r8) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x10, 0x803, 0x0) (async) shutdown(r8, 0x1) (async) poll(&(0x7f0000000040)=[{r8, 0x82}], 0x1, 0x7) 0s ago: executing program 3 (id=3132): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010a0300000066487bb619f95aa7000509af010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x6804}, 0x488c0) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000429bd70008f06d32153fedbdf253200000074dc70e3696d4449b689e1f610d9760c1b8d6931233303374e2be7c1d005ebfe381a059c42ad6b483c7fbc651d785d487882fda5db", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400000426bd7000fcdbdf250a1800fd", @ANYRES32=0x0, @ANYBLOB="08000a0003000001"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) kernel console output (not intermixed with test programs): I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.844476][ T6213] Buffer I/O error on dev nbd4, logical block 0, async page read [ 164.867861][ T6213] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.891286][ T6213] Buffer I/O error on dev nbd4, logical block 1, async page read [ 164.899893][ T6213] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.954552][ T6213] Buffer I/O error on dev nbd4, logical block 2, async page read [ 164.979090][ T8783] smc: net device team0 applied user defined pnetid SYZ2 [ 164.997681][ T6213] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.042538][ T6213] Buffer I/O error on dev nbd4, logical block 3, async page read [ 165.070783][ T8787] gretap0: entered promiscuous mode [ 165.074698][ T6213] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.103209][ T8787] vlan2: entered promiscuous mode [ 165.119984][ T6213] Buffer I/O error on dev nbd4, logical block 0, async page read [ 165.157276][ T6213] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.188975][ T6213] Buffer I/O error on dev nbd4, logical block 1, async page read [ 165.242568][ T6213] ldm_validate_partition_table(): Disk read failed. [ 165.278345][ T6213] Dev nbd4: unable to read RDB block 0 [ 165.297324][ T6213] nbd4: unable to read partition table [ 165.329774][ T6213] ldm_validate_partition_table(): Disk read failed. [ 165.346108][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 165.363487][ T6213] Dev nbd4: unable to read RDB block 0 [ 165.398378][ T6213] nbd4: unable to read partition table [ 165.424294][ T8808] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.442551][ T8799] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 165.455361][ T8808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.462705][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 165.464607][ T8799] syzkaller1: Refused to change device type [ 165.470070][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 165.483103][ T8808] IPv6: NLM_F_CREATE should be set when creating new route [ 165.562605][ T8811] netlink: 88 bytes leftover after parsing attributes in process `syz.1.777'. [ 165.572155][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 165.582595][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 165.609254][ T8815] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 165.612746][ T8808] syzkaller0: entered promiscuous mode [ 165.634749][ T8808] syzkaller0: entered allmulticast mode [ 165.652939][ T8808] tc action pedit offset must be on 32 bit boundaries [ 165.765875][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 165.931947][ T8826] validate_nla: 1 callbacks suppressed [ 165.931965][ T8826] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 165.950062][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 165.959583][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 165.975303][ T8826] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 165.995328][ T8830] chnl_net:caif_netlink_parms(): no params data found [ 166.016940][ T8826] netlink: 'syz.1.781': attribute type 32 has an invalid length. [ 166.051968][ T8826] netlink: 500 bytes leftover after parsing attributes in process `syz.1.781'. [ 166.287917][ T8865] bridge_slave_0: left allmulticast mode [ 166.301739][ T8865] bridge_slave_0: left promiscuous mode [ 166.309301][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.328564][ T8865] bridge_slave_1: left allmulticast mode [ 166.344676][ T8865] bridge_slave_1: left promiscuous mode [ 166.365361][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.392503][ T8865] bond0: (slave bond_slave_0): Releasing backup interface [ 166.434040][ T8865] bond0: (slave bond_slave_1): Releasing backup interface [ 166.489421][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 166.499309][ T8865] team0: Port device team_slave_0 removed [ 166.519633][ T8865] team0: Port device team_slave_1 removed [ 166.529129][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.537526][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.547499][ T8865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.607854][ T5902] syz2: Port: 1 Link DOWN [ 166.897276][ T8912] macsec1: entered promiscuous mode [ 167.456481][ T8917] vlan0: left promiscuous mode [ 167.461911][ T8917] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 168.046121][ T8970] netlink: 'syz.0.806': attribute type 39 has an invalid length. [ 168.157193][ T8970] hsr_slave_1 (unregistering): left promiscuous mode [ 168.262112][ T8973] delete_channel: no stack [ 168.901427][ T9009] block nbd0: Unsupported socket: should be TCP or UNIX. [ 169.165001][ T9024] ipt_REJECT: TCP_RESET invalid for non-tcp [ 169.235681][ T9017] team0 (unregistering): Port device team_slave_1 removed [ 169.304172][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.333613][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.742514][ T9052] syzkaller0: entered promiscuous mode [ 169.748615][ T9052] syzkaller0: entered allmulticast mode [ 169.868962][ T9058] bridge_slave_0 (unregistering): left allmulticast mode [ 169.880127][ T9058] bridge_slave_0 (unregistering): left promiscuous mode [ 169.894963][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.913217][ T9059] Cannot find add_set index 65532 as target [ 170.030259][ T9068] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 170.039503][ T9069] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 170.049815][ T9068] veth0_macvtap: left promiscuous mode [ 170.205560][ T9079] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 170.379583][ T9085] __nla_validate_parse: 8 callbacks suppressed [ 170.379597][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'. [ 170.439176][ T9085] IPVS: Error connecting to the multicast addr [ 170.619291][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.951693][ T9100] IPVS: rr: FWM 3 0x00000003 - no destination available [ 170.979210][ T9102] netlink: 596 bytes leftover after parsing attributes in process `syz.4.853'. [ 171.260627][ T9110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.856'. [ 171.676553][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 171.967845][ T9146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.970084][ T9147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.023959][ T9152] netlink: 808 bytes leftover after parsing attributes in process `syz.4.870'. [ 172.050695][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 172.182048][ T9165] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 172.206270][ T9165] netlink: 228 bytes leftover after parsing attributes in process `syz.3.873'. [ 172.621221][ T9187] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 172.855523][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 172.922980][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 172.980560][ T9213] bond4: entered promiscuous mode [ 172.997778][ T9213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.205730][ T9222] netlink: 'syz.4.887': attribute type 16 has an invalid length. [ 173.213695][ T9222] netlink: 'syz.4.887': attribute type 17 has an invalid length. [ 173.667762][ T9238] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.892'. [ 175.603463][ T9222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.870232][ T9252] sch_fq: defrate 0 ignored. [ 175.906801][ T9252] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 176.106292][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 176.137513][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 176.191907][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 176.203441][ T9268] xt_hashlimit: size too large, truncated to 1048576 [ 176.231804][ T9260] bond5: (slave ip_vti0): Device is not bonding slave [ 176.255683][ T9260] bond5: option active_slave: invalid value (ip_vti0) [ 176.272631][ T9260] bond5 (unregistering): Released all slaves [ 176.422328][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 176.470534][ T9281] netlink: 27 bytes leftover after parsing attributes in process `syz.1.903'. [ 176.488349][ T9286] netlink: 260 bytes leftover after parsing attributes in process `syz.3.904'. [ 176.816095][ T9301] netlink: 144 bytes leftover after parsing attributes in process `syz.3.907'. [ 177.329962][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 177.367601][ T9338] syzkaller0: entered promiscuous mode [ 177.396541][ T9338] syzkaller0: entered allmulticast mode [ 177.650341][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 177.681615][ T9358] netlink: 176 bytes leftover after parsing attributes in process `syz.4.920'. [ 177.711946][ T9358] netlink: 'syz.4.920': attribute type 5 has an invalid length. [ 177.939568][ T9379] netlink: 'syz.0.926': attribute type 11 has an invalid length. [ 178.054629][ T9388] nbd: must specify at least one socket [ 178.795190][ T9429] x_tables: duplicate underflow at hook 3 [ 179.551847][ T9463] xt_hashlimit: size too large, truncated to 1048576 [ 179.635550][ T9469] ipvlan1: entered allmulticast mode [ 179.646572][ T9469] veth0_vlan: entered allmulticast mode [ 179.662451][ T9466] openvswitch: netlink: EtherType 50a is less than min 600 [ 179.941565][ T9481] : entered promiscuous mode [ 180.591236][ T9519] bridge0: port 3(syz_tun) entered blocking state [ 180.625260][ T9519] bridge0: port 3(syz_tun) entered disabled state [ 180.648579][ T9525] netlink: 'syz.1.963': attribute type 21 has an invalid length. [ 180.662031][ T9519] syz_tun: entered allmulticast mode [ 180.698705][ T9519] syz_tun: entered promiscuous mode [ 180.879455][ T9535] x_tables: duplicate underflow at hook 1 [ 181.156368][ T9549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.217063][ T9556] __nla_validate_parse: 14 callbacks suppressed [ 181.217079][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 181.253803][ T9562] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 181.347988][ T9565] : entered promiscuous mode [ 181.432426][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 182.091387][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 182.145828][ T9619] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 182.188340][ T9613] netlink: 92 bytes leftover after parsing attributes in process `syz.4.985'. [ 182.191113][ T9622] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 182.249866][ T9622] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 182.566066][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 182.579565][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 182.645368][ T9648] tipc: Started in network mode [ 182.660913][ T9648] tipc: Node identity 96cad16b5854, cluster identity 4711 [ 182.686669][ T9648] tipc: Enabled bearer , priority 0 [ 182.723129][ T9649] syzkaller0: entered promiscuous mode [ 182.745431][ T9649] syzkaller0: entered allmulticast mode [ 182.907672][ T9648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.998'. [ 182.950545][ T9649] tipc: Resetting bearer [ 183.008983][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 183.055825][ T9646] tipc: Resetting bearer [ 183.167898][ T9646] tipc: Disabling bearer [ 183.420941][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 183.473120][ T9697] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1008'. [ 183.494171][ T9697] 8021q: VLANs not supported on gre0 [ 183.761837][ T9715] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 184.149300][ T9741] delete_channel: no stack [ 184.193347][ T9741] tipc: Enabling of bearer rejected, failed to enable media [ 184.299272][ T9748] IPv6: sit2: Disabled Multicast RS [ 184.305881][ T9748] sit2: entered allmulticast mode [ 184.672726][ T9768] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.030515][ T9783] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20002 [ 185.301469][ T9805] netlink: 'syz.0.1039': attribute type 16 has an invalid length. [ 185.312593][ T9805] netlink: 'syz.0.1039': attribute type 17 has an invalid length. [ 185.407776][ T9805] ip6tnl0: left promiscuous mode [ 185.496348][ T9805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.548795][ T9807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.757409][ T9823] tipc: Enabling of bearer rejected, failed to enable media [ 186.162333][ T9852] wg1: entered promiscuous mode [ 186.178310][ T9852] wg1: entered allmulticast mode [ 186.297992][ T9856] syzkaller0: entered promiscuous mode [ 186.319667][ T9860] netlink: 'syz.0.1059': attribute type 2 has an invalid length. [ 186.324155][ T9856] syzkaller0: entered allmulticast mode [ 186.398201][ T9862] __nla_validate_parse: 8 callbacks suppressed [ 186.398220][ T9862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1060'. [ 186.477743][ T9862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1060'. [ 186.498470][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1061'. [ 186.525061][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1061'. [ 186.567746][ T9882] tls_set_device_offload_rx: netdev not found [ 186.591921][ T9883] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1061'. [ 186.721261][ T9877] tc_dump_action: action bad kind [ 186.730292][ T9887] netlink: 'syz.1.1063': attribute type 75 has an invalid length. [ 186.746823][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 186.870580][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 187.053914][ T9896] openvswitch: netlink: IPv4 tun info is not correct [ 187.168598][ T9908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1071'. [ 187.238451][ T9914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1071'. [ 187.268369][ T9914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1071'. [ 187.387985][ T9921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.395322][ T9921] IPv6: NLM_F_CREATE should be set when creating new route [ 187.595656][ T9932] xt_hashlimit: size too large, truncated to 1048576 [ 187.926784][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.013135][ T9957] netlink: 'syz.0.1087': attribute type 5 has an invalid length. [ 188.020425][ T9958] veth0: entered promiscuous mode [ 188.046911][ T9955] veth0: left promiscuous mode [ 188.206545][ T9974] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 188.934532][T10019] xt_cgroup: path and classid specified [ 188.983064][T10016] openvswitch: netlink: Missing key (keys=40, expected=100) [ 189.003582][T10019] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 189.019891][T10020] netlink: 'syz.0.1102': attribute type 4 has an invalid length. [ 189.022289][T10019] netlink: 'syz.0.1102': attribute type 11 has an invalid length. [ 189.297920][T10028] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 189.312122][T10028] bond5 (unregistering): Released all slaves [ 189.342721][T10040] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 190.196225][T10083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.261460][T10086] tipc: Enabling of bearer rejected, failed to enable media [ 190.283246][T10086] tipc: Enabling of bearer rejected, failed to enable media [ 190.431012][T10096] ipvlan2: entered allmulticast mode [ 190.448690][T10096] syz_tun: entered allmulticast mode [ 190.988831][T10113] netlink: zone id is out of range [ 191.006657][T10113] netlink: zone id is out of range [ 191.023537][T10113] netlink: zone id is out of range [ 191.045771][T10113] netlink: zone id is out of range [ 191.063238][T10113] netlink: zone id is out of range [ 191.075063][T10113] netlink: zone id is out of range [ 191.088092][T10113] netlink: zone id is out of range [ 191.097181][T10113] netlink: zone id is out of range [ 191.113352][T10113] netlink: zone id is out of range [ 191.148217][T10136] netlink: 'syz.0.1142': attribute type 11 has an invalid length. [ 191.428416][T10149] sctp: [Deprecated]: syz.0.1147 (pid 10149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.428416][T10149] Use struct sctp_sack_info instead [ 191.430177][T10146] validate_nla: 1 callbacks suppressed [ 191.430194][T10146] netlink: 'syz.2.1148': attribute type 16 has an invalid length. [ 191.479874][T10146] netlink: 'syz.2.1148': attribute type 17 has an invalid length. [ 191.526684][T10150] ip6gre1: entered promiscuous mode [ 191.537085][T10150] ip6gre1: entered allmulticast mode [ 191.766280][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.786460][T10168] __nla_validate_parse: 38 callbacks suppressed [ 191.786478][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 191.816870][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.870583][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 192.033663][T10173] »»»»»»: renamed from bond_slave_0 [ 192.055578][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.114609][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.506572][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 192.656656][T10204] xt_hashlimit: size too large, truncated to 1048576 [ 192.698084][T10202] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1162'. [ 192.807346][ T8874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.848516][T10211] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 192.988777][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 193.009860][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1168'. [ 193.076753][T10213] netlink: 'syz.4.1168': attribute type 9 has an invalid length. [ 193.242749][T10233] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 193.275434][T10233] netlink: 'syz.0.1173': attribute type 2 has an invalid length. [ 193.294230][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 193.316186][T10233] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 193.516972][T10250] netlink: 'syz.1.1178': attribute type 25 has an invalid length. [ 193.528113][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 193.546701][T10249] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1177'. [ 193.575835][ T8855] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.589484][T10250] netlink: 'syz.1.1178': attribute type 25 has an invalid length. [ 193.608138][ T8855] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.621260][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 193.639967][ T8855] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.672267][ T8855] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.845415][ T8855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.878127][ T8855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.124638][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.269348][T10279] syzkaller0: entered promiscuous mode [ 194.288586][T10279] syzkaller0: entered allmulticast mode [ 194.336466][T10294] can: request_module (can-proto-0) failed. [ 194.337897][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.350458][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.846355][T10334] syzkaller0: entered promiscuous mode [ 196.852222][T10334] syzkaller0: entered allmulticast mode [ 197.041227][T10358] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 198.089190][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.686170][T10360] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.908015][T10379] __nla_validate_parse: 36 callbacks suppressed [ 198.908034][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 199.001935][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 199.073573][T10388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1224'. [ 199.391670][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.547404][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 199.586379][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 199.657940][T10417] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 199.718538][T10420] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 199.721269][T10417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.782350][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'. [ 199.794634][T10426] net_ratelimit: 813 callbacks suppressed [ 199.794652][T10426] openvswitch: netlink: Flow key attr not present in new flow. [ 199.808525][T10420] s5ÿÿø: renamed from vlan1 (while UP) [ 199.895150][T10432] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1237'. [ 199.937768][T10432] openvswitch: netlink: Message has 6 unknown bytes. [ 200.242327][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 200.480464][T10473] xt_HMARK: spi-set and port-set can't be combined [ 200.564940][T10476] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1253'. [ 200.790971][T10488] lo: MTU too low for tipc bearer [ 200.805613][T10488] tipc: Enabling of bearer rejected, failed to enable media [ 201.060283][T10506] netlink: 'syz.3.1261': attribute type 3 has an invalid length. [ 201.135894][T10512] netlink: 'syz.0.1263': attribute type 4 has an invalid length. [ 202.096476][T10559] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 202.139226][T10559] bond6 (unregistering): Released all slaves [ 202.960825][T10608] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 202.988775][T10608] veth0_vlan: left promiscuous mode [ 202.992715][T10610] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 202.996256][T10608] veth0_vlan: entered promiscuous mode [ 203.012867][T10608] team0: Device veth0_vlan failed to register rx_handler [ 203.298843][T10623] netlink: 'syz.2.1300': attribute type 33 has an invalid length. [ 203.437946][T10630] syzkaller0: entered promiscuous mode [ 203.446297][T10630] syzkaller0: entered allmulticast mode [ 203.617534][T10639] netlink: 'syz.0.1306': attribute type 21 has an invalid length. [ 203.776287][T10648] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 204.013412][T10665] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 204.057796][T10665] __nla_validate_parse: 75 callbacks suppressed [ 204.057814][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 204.146920][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 204.196934][T10669] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 204.410895][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1317'. [ 204.669117][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1321'. [ 204.694848][T10693] syz_tun: left allmulticast mode [ 204.708915][T10693] syz_tun: left promiscuous mode [ 204.720527][T10693] bridge0: port 3(syz_tun) entered disabled state [ 204.752390][T10693] bridge_slave_1: left allmulticast mode [ 204.779256][T10693] bridge_slave_1: left promiscuous mode [ 204.801814][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.828587][T10693] bridge_slave_0: left allmulticast mode [ 204.860483][T10693] bridge_slave_0: left promiscuous mode [ 204.887936][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.224144][ T12] bond0: (slave bond_slave_0): interface is now down [ 205.244562][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.268266][ T12] bond0: (slave bond_slave_1): interface is now down [ 205.330144][ T12] bond0: now running without any active interface! [ 205.488047][T10714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1329'. [ 205.537710][T10725] validate_nla: 2 callbacks suppressed [ 205.537726][T10725] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 205.760338][T10725] bond5: entered promiscuous mode [ 205.767947][T10725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.774245][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 205.785553][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 205.794922][T10738] netlink: 'syz.3.1337': attribute type 15 has an invalid length. [ 205.803777][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 205.813287][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 205.822417][T10738] netlink: 'syz.3.1337': attribute type 15 has an invalid length. [ 205.828893][T10731] syzkaller0: entered promiscuous mode [ 205.854968][T10731] syzkaller0: entered allmulticast mode [ 205.889146][ T8855] syzkaller0: tun_net_xmit 70 [ 205.946896][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 205.972556][T10735] syzkaller0: tun_net_xmit 14 [ 205.978943][T10735] syzkaller0: tun_net_xmit 14 [ 206.310614][T10765] netlink: 'syz.4.1345': attribute type 10 has an invalid length. [ 206.416948][T10769] netlink: 'syz.1.1347': attribute type 8 has an invalid length. [ 206.623277][T10783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.630588][T10783] IPv6: NLM_F_CREATE should be set when creating new route [ 207.129025][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.948384][T10834] openvswitch: netlink: IP tunnel TTL not specified. [ 207.996396][T10799] dvmrp8: entered allmulticast mode [ 208.032285][T10834] tipc: MTU too low for tipc bearer [ 208.156518][T10838] bond3: (slave bond_slave_1): Device is not bonding slave [ 208.164103][T10838] bond3: option active_slave: invalid value (bond_slave_1) [ 208.176889][T10838] bond3 (unregistering): Released all slaves [ 208.272618][T10850] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 208.696356][T10865] netlink: 'syz.4.1376': attribute type 13 has an invalid length. [ 208.748445][T10865] veth0_macvtap: left promiscuous mode [ 208.767470][T10865] macvtap0: entered allmulticast mode [ 208.787660][T10865] macvtap0: refused to change device tx_queue_len [ 209.202729][T10903] __nla_validate_parse: 3 callbacks suppressed [ 209.202748][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1383'. [ 209.583962][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 209.601552][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.720735][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.776904][T10924] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1395'. [ 209.806501][T10924] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1395'. [ 209.833069][T10924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1395'. [ 210.140789][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 210.512080][T10960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1406'. [ 210.552388][T10964] netlink: 'syz.0.1408': attribute type 2 has an invalid length. [ 210.556057][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 210.589423][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1407'. [ 210.607031][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 211.004938][T10988] Bluetooth: hci1: too big key_count value 32778 [ 211.122309][T10997] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 211.386147][T11011] dvmrp0: entered allmulticast mode [ 211.389722][T11010] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 211.493775][T11014] bond6: (slave veth5): Enslaving as an active interface with a down link [ 211.516668][T11010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.673495][T11023] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 211.844177][T11029] macvlan0: entered promiscuous mode [ 211.866697][T11034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.940864][T11029] vlan2: entered allmulticast mode [ 211.955034][T11029] bond0: entered allmulticast mode [ 211.966933][T11029] bridge_slave_1: entered allmulticast mode [ 212.059639][T11037] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 212.103374][T11037] bridge_slave_1: left allmulticast mode [ 212.126814][T11037] bond0 (unregistering): Released all slaves [ 212.192928][T11051] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 212.402763][T11051] bond7: entered promiscuous mode [ 212.427294][T11051] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.643574][T11085] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 213.179467][T11117] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 213.241285][T11119] openvswitch: netlink: Multiple metadata blocks provided [ 213.328448][T11126] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 213.376019][T11126] bond0 (unregistering): Released all slaves [ 213.706935][T11140] syzkaller0: entered promiscuous mode [ 213.727400][T11140] syzkaller0: entered allmulticast mode [ 213.987851][T11160] smc: net device team0 applied user defined pnetid SYZ2 [ 214.210828][T11176] __nla_validate_parse: 29 callbacks suppressed [ 214.210847][T11176] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1471'. [ 214.403135][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 214.446247][T11182] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1473'. [ 214.547103][T11182] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.564676][T11192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1478'. [ 214.599776][T11182] syzkaller1: linktype set to 823 [ 214.712106][T11205] netlink: 'syz.2.1481': attribute type 3 has an invalid length. [ 214.892678][T11215] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1484'. [ 214.909249][T11216] nft_compat: unsupported protocol 0 [ 214.921397][T11215] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1484'. [ 214.932967][T11218] netlink: 'syz.0.1486': attribute type 83 has an invalid length. [ 214.961535][T11216] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 214.980012][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1485'. [ 215.128982][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1490'. [ 215.243452][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1491'. [ 215.253233][T11232] syzkaller0: entered promiscuous mode [ 215.259299][T11232] syzkaller0: entered allmulticast mode [ 215.268532][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1491'. [ 215.366706][T11235] erspan0: entered promiscuous mode [ 215.372246][T11235] erspan0: entered allmulticast mode [ 215.457177][T11240] netlink: 'syz.4.1494': attribute type 32 has an invalid length. [ 215.626226][T11249] netlink: 'syz.1.1496': attribute type 6 has an invalid length. [ 216.385073][T11292] tipc: Started in network mode [ 216.390182][T11292] tipc: Node identity ac14140f, cluster identity 4711 [ 216.409344][T11292] tipc: Enabled bearer , priority 10 [ 216.433911][T11292] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 216.453178][T11295] xt_cgroup: invalid path, errno=-2 [ 216.541930][T11299] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 216.571191][T11299] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.796022][T11311] bond5: entered allmulticast mode [ 216.802632][T11310] dvmrp0: left allmulticast mode [ 216.823528][T11310] dvmrp8: left allmulticast mode [ 216.964809][T11323] xt_l2tp: missing protocol rule (udp|l2tpip) [ 216.983649][T11325] hsr_slave_0: left promiscuous mode [ 217.012776][T11325] hsr_slave_1: left promiscuous mode [ 217.373669][T11345] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 217.386470][T11345] dummy0: entered promiscuous mode [ 217.412101][T11345] bridge0: port 1(dummy0) entered blocking state [ 217.429294][T11345] bridge0: port 1(dummy0) entered disabled state [ 217.443419][T11348] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.451591][T11345] dummy0: entered allmulticast mode [ 217.524905][ T7540] tipc: Node number set to 2886997007 [ 218.318862][T11399] xt_hashlimit: size too large, truncated to 1048576 [ 219.180537][T11443] raw_sendmsg: syz.1.1557 forgot to set AF_INET. Fix it! [ 219.219581][T11450] __nla_validate_parse: 13 callbacks suppressed [ 219.219601][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 219.256286][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 219.266773][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 219.267819][T11445] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.281419][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 219.412594][T11445] bond2: (slave lo): Enslaving as an active interface with an up link [ 219.457772][T11445] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 219.616707][T11456] veth7: entered allmulticast mode [ 219.649432][T11459] syzkaller0: entered allmulticast mode [ 219.707721][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 219.748117][T11483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1565'. [ 220.288175][T11513] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 220.322515][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 220.598416][T11513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.619622][T11521] bond0: option mode: unable to set because the bond device is up [ 220.677285][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 220.718334][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 220.792004][T11527] bond8 (unregistering): Released all slaves [ 220.968834][T11537] syzkaller0: create flow: hash 2801375775 index 1 [ 221.132970][ T8855] syzkaller0: tun_net_xmit 76 [ 221.146573][ T8855] syzkaller0: tun_net_xmit 48 [ 221.154740][ T5929] syzkaller0: tun_net_xmit 76 [ 221.163132][T11557] 8021q: VLANs not supported on lo [ 221.178140][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 221.408181][T11569] openvswitch: netlink: Multiple metadata blocks provided [ 221.676485][T11530] syzkaller0: delete flow: hash 2801375775 index 1 [ 221.790798][T11594] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 223.770316][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.228088][ T29] audit: type=1800 audit(1776359913.118:2): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1594" name="memory.events" dev="tmpfs" ino=1627 res=0 errno=0 [ 224.253024][T11634] __nla_validate_parse: 2 callbacks suppressed [ 224.253042][T11634] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1595'. [ 224.642684][T11654] netlink: 'syz.1.1600': attribute type 8 has an invalid length. [ 224.786913][T11657] syzkaller0: entered allmulticast mode [ 224.935431][T11661] syzkaller0 (unregistering): left allmulticast mode [ 225.049659][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 225.061622][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 225.081439][T11672] netlink: 'syz.4.1603': attribute type 5 has an invalid length. [ 225.102930][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 225.223403][T11672] geneve2: entered promiscuous mode [ 225.326032][T11672] geneve2: entered allmulticast mode [ 225.359313][ T8854] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 256 - 0 [ 225.392439][ T8854] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 225.437879][ T8854] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 225.439079][ T5929] IPVS: starting estimator thread 0... [ 225.480288][ T8854] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 225.543480][T11699] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1607'. [ 225.546063][T11693] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1606'. [ 225.606074][T11692] IPVS: using max 29 ests per chain, 69600 per kthread [ 225.956923][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1612'. [ 226.239535][T11737] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 226.577615][T11756] netlink: 'syz.2.1623': attribute type 72 has an invalid length. [ 226.722659][T11767] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 226.973499][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 227.233806][T11804] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1636'. [ 227.278401][T11804] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1636'. [ 227.294090][T11808] tipc: Started in network mode [ 227.299564][T11808] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 227.307090][T11808] tipc: Enabled bearer , priority 24 [ 227.543462][T11831] xt_hashlimit: size too large, truncated to 1048576 [ 227.551749][T11836] xt_hashlimit: size too large, truncated to 1048576 [ 227.743197][T11837] openvswitch: netlink: EtherType 50a is less than min 600 [ 227.823198][T11838] openvswitch: netlink: EtherType 50a is less than min 600 [ 228.442939][ T5968] tipc: Node number set to 15444650 [ 228.550459][T11885] syzkaller0: entered promiscuous mode [ 228.564714][T11885] syzkaller0: entered allmulticast mode [ 228.655734][T11895] syzkaller0: left promiscuous mode [ 228.682675][T11895] syzkaller0: left allmulticast mode [ 229.126980][T11922] xt_hashlimit: size too large, truncated to 1048576 [ 229.323464][T11933] openvswitch: netlink: EtherType 50a is less than min 600 [ 229.459555][T11933] __nla_validate_parse: 8 callbacks suppressed [ 229.459575][T11933] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 230.991303][T11938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.010269][T11949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1670'. [ 231.031748][T11938] bridge0: port 2(bond3) entered blocking state [ 231.042894][T11938] bridge0: port 2(bond3) entered disabled state [ 231.056754][T11938] bond3: entered allmulticast mode [ 231.082433][T11938] bond3: entered promiscuous mode [ 231.090067][T11938] bridge0: port 2(bond3) entered blocking state [ 231.096466][T11938] bridge0: port 2(bond3) entered forwarding state [ 231.270684][T11954] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 231.307878][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 231.332157][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 231.377864][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 231.414927][ T8872] bridge0: port 2(bond3) entered disabled state [ 231.435112][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 231.672221][T11977] x_tables: duplicate underflow at hook 3 [ 231.768907][T11985] xt_hashlimit: size too large, truncated to 1048576 [ 231.778035][T11981] syzkaller0: entered allmulticast mode [ 231.809991][T11990] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1685'. [ 231.824080][T11987] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.824208][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 231.877525][T11993] openvswitch: netlink: EtherType 50a is less than min 600 [ 231.915245][T11993] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1684'. [ 231.927751][T11993] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1684'. [ 232.448728][T12019] netlink: 'syz.4.1694': attribute type 13 has an invalid length. [ 232.473792][T12019] macvtap0: refused to change device tx_queue_len [ 232.860820][T12034] IPv6: sit1: Disabled Multicast RS [ 233.039363][T12047] xt_hashlimit: size too large, truncated to 1048576 [ 233.117952][T12050] openvswitch: netlink: EtherType 50a is less than min 600 [ 233.137690][T12051] PKCS7: Unknown OID: [4] (bad) [ 233.164213][T12051] PKCS7: Only support pkcs7_signedData type [ 234.341671][T12112] tipc: Resetting bearer [ 234.401378][T12119] IPVS: length: 72 != 8 [ 234.528991][T12124] syzkaller0: entered promiscuous mode [ 234.536402][T12125] __nla_validate_parse: 9 callbacks suppressed [ 234.536421][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 234.567890][T12124] syzkaller0: entered allmulticast mode [ 234.582032][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'. [ 234.828740][T12141] netlink: 'syz.4.1734': attribute type 8 has an invalid length. [ 234.861661][T12144] tipc: Started in network mode [ 234.872894][T12144] tipc: Node identity 0104000000000000cc, cluster identity 4711 [ 235.210804][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1741'. [ 235.220919][T12159] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.328835][T12172] netlink: 'syz.3.1744': attribute type 11 has an invalid length. [ 235.375031][T12175] syzkaller0: entered promiscuous mode [ 235.393758][T12175] syzkaller0: entered allmulticast mode [ 235.702471][T12190] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1751'. [ 235.732897][T12191] nftables ruleset with unbound set [ 235.777189][T12194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.784513][T12194] IPv6: NLM_F_CREATE should be set when creating new route [ 235.791765][T12194] IPv6: NLM_F_CREATE should be set when creating new route [ 235.900970][T12199] bond6 (unregistering): Released all slaves [ 236.006979][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1755'. [ 236.030071][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 236.234315][T12218] syzkaller0: entered promiscuous mode [ 236.248070][T12218] syzkaller0: entered allmulticast mode [ 236.269518][T12221] netlink: 'syz.1.1762': attribute type 21 has an invalid length. [ 236.486033][T12234] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 236.666872][T12234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1765'. [ 236.681291][T12231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.699506][T12231] bond3: (slave bond4): making interface the new active one [ 236.707968][T12231] bond3: (slave bond4): Enslaving as an active interface with an up link [ 236.719948][T12234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.793775][T12242] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 236.848333][T12247] tipc: Enabled bearer , priority 10 [ 236.863024][T12257] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1770'. [ 237.068117][T12269] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1773'. [ 237.169019][T12282] syzkaller0: entered promiscuous mode [ 237.194792][T12282] syzkaller0: entered allmulticast mode [ 237.577760][T12303] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 237.595173][T12303] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1783'. [ 237.741481][T12317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.783988][T12317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.955348][ T5929] tipc: Node number set to 3439591424 [ 238.162799][T12335] syzkaller0: entered promiscuous mode [ 238.186959][T12335] syzkaller0: entered allmulticast mode [ 238.567957][T12361] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 238.630578][T12365] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 238.669181][T12365] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 238.831158][T12365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.657499][T12398] syzkaller0: entered promiscuous mode [ 239.684282][T12398] syzkaller0: entered allmulticast mode [ 239.859958][T12422] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.041230][T12460] __nla_validate_parse: 5 callbacks suppressed [ 242.041249][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 242.058423][T12458] xt_bpf: check failed: parse error [ 242.088439][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 242.123702][T12456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1823'. [ 242.182099][T12452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1823'. [ 242.257513][T12466] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1827'. [ 242.453520][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 242.632043][T12490] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 242.676798][T12489] bond_slave_1: entered promiscuous mode [ 242.893141][T12500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1837'. [ 242.952246][T12500] syzkaller1: entered promiscuous mode [ 242.963105][T12500] syzkaller1: entered allmulticast mode [ 243.105023][T12511] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 243.337821][T12520] netlink: 'syz.4.1843': attribute type 29 has an invalid length. [ 243.687119][T12532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1847'. [ 243.723745][T12535] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1849'. [ 243.742915][T12530] syzkaller0: entered promiscuous mode [ 243.757808][T12530] syzkaller0: entered allmulticast mode [ 243.799742][T12532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.922773][T12543] tipc: New replicast peer: 172.20.20.187 [ 243.953235][T12543] tipc: Enabled bearer , priority 10 [ 243.978517][T12541] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1850'. [ 244.143999][T12557] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 244.221807][T12557] bond8: entered promiscuous mode [ 244.228373][T12557] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.236673][T12561] macsec0: entered promiscuous mode [ 244.241918][T12561] macsec0: entered allmulticast mode [ 244.253693][T12562] veth1_macvtap: entered allmulticast mode [ 244.261010][T12562] macsec0: left promiscuous mode [ 244.267464][T12562] macsec0: left allmulticast mode [ 244.272629][T12562] veth1_macvtap: left allmulticast mode [ 244.295726][T12564] bond8: (slave bridge5): making interface the new active one [ 244.309998][T12564] bridge5: entered promiscuous mode [ 244.318741][T12564] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 244.379237][T12566] bond5: Unable to set down delay as MII monitoring is disabled [ 244.389883][T12566] bond5 (unregistering): Released all slaves [ 244.448223][T12557] bond8: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.461595][T12557] bond8: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 244.633879][T12582] netlink: 'syz.3.1863': attribute type 11 has an invalid length. [ 244.667229][T12582] netlink: 'syz.3.1863': attribute type 11 has an invalid length. [ 244.731418][T12585] wireguard0: entered promiscuous mode [ 244.762708][T12585] wireguard0: entered allmulticast mode [ 244.981191][T12598] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 244.989017][T12599] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 245.051895][T12598] bond0: (slave wlan1): Opening slave failed [ 245.112160][T12599] bond0: (slave wlan1): Opening slave failed [ 245.144094][ T5902] tipc: Node number set to 3466514795 [ 245.381316][T12625] netlink: 'syz.4.1876': attribute type 10 has an invalid length. [ 245.463409][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.496840][T12625] bridge_slave_1: left allmulticast mode [ 245.508609][T12625] bridge_slave_1: left promiscuous mode [ 245.530780][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.598489][T12625] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 245.677569][T12651] x_tables: unsorted entry at hook 1 [ 245.692065][T12652] netlink: 'syz.3.1882': attribute type 16 has an invalid length. [ 245.711747][T12652] netlink: 'syz.3.1882': attribute type 3 has an invalid length. [ 246.931418][T12722] IPv6: sit2: Disabled Multicast RS [ 247.028005][T12725] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 247.060625][T12730] __nla_validate_parse: 11 callbacks suppressed [ 247.060643][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 247.066532][T12725] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 247.085361][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 247.351350][T12750] 8021q: VLANs not supported on gre0 [ 247.418922][T12753] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1914'. [ 247.698317][T12774] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1919'. [ 247.727847][T12774] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1919'. [ 248.013192][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 248.196563][T12789] ipt_ECN: cannot use operation on non-tcp rule [ 249.126130][T12827] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 249.165189][T12828] validate_nla: 1 callbacks suppressed [ 249.165205][T12828] netlink: 'syz.3.1936': attribute type 58 has an invalid length. [ 249.210158][T12828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 249.229275][T12831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1938'. [ 249.246920][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 249.415802][T12842] sctp: [Deprecated]: syz.2.1941 (pid 12842) Use of int in max_burst socket option deprecated. [ 249.415802][T12842] Use struct sctp_assoc_value instead [ 249.542171][T12851] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1943'. [ 249.842978][T12867] "syz.3.1947" (12867) uses obsolete ecb(arc4) skcipher [ 250.107799][T12883] ip6gre1: entered allmulticast mode [ 250.871327][T12923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.084504][T12941] hsr_slave_0: left promiscuous mode [ 251.502746][T12971] block nbd0: Unsupported socket: should be TCP or UNIX. [ 251.559488][T12971] bridge0: port 1(veth0_to_bridge) entered blocking state [ 251.580218][T12971] bridge0: port 1(veth0_to_bridge) entered disabled state [ 251.606032][T12971] veth0_to_bridge: entered allmulticast mode [ 251.638954][T12971] veth0_to_bridge: entered promiscuous mode [ 251.966336][T13003] veth0: entered promiscuous mode [ 252.000592][T13003] veth0 (unregistering): left promiscuous mode [ 252.174162][T13015] __nla_validate_parse: 12 callbacks suppressed [ 252.174179][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'. [ 252.385671][T13015] syzkaller0: entered promiscuous mode [ 252.399311][T13015] syzkaller0: entered allmulticast mode [ 252.471514][T13030] bond5: (slave bond_slave_1): Device is not bonding slave [ 252.512025][T13030] bond5: option active_slave: invalid value (bond_slave_1) [ 252.542364][T13036] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2000'. [ 252.560441][T13030] bond5 (unregistering): Released all slaves [ 253.843980][T13057] x_tables: duplicate underflow at hook 2 [ 253.860890][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2005'. [ 254.990910][T13073] bond6: option resend_igmp: invalid value (32767) [ 255.000158][T13073] bond6: option resend_igmp: allowed values 0 - 255 [ 255.020025][T13073] bond6 (unregistering): Released all slaves [ 255.066609][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 255.077002][T13078] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 255.107046][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'. [ 255.124633][T13078] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 255.210344][T13083] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 255.230095][T13083] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2013'. [ 255.769157][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091555][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 256.162482][T13118] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.807989][T13117] bond2: (slave lo): Releasing backup interface [ 256.834116][T13117] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 256.882174][T13117] bond0: (slave bond_slave_0): Releasing backup interface [ 256.915725][T13117] bond0: (slave bond_slave_1): Releasing backup interface [ 256.974245][T13117] team0: Port device team_slave_0 removed [ 256.993438][T13132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2027'. [ 257.009751][T13117] team0: Port device team_slave_1 removed [ 257.016468][T13117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.024005][T13117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.033105][T13117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.055210][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.148608][T13132] siw: device registration error -23 [ 257.363813][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 257.400072][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2030'. [ 257.824567][T13160] xt_hashlimit: size too large, truncated to 1048576 [ 257.833360][T13164] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2033'. [ 257.898113][T13166] openvswitch: netlink: EtherType 50a is less than min 600 [ 258.723875][T13212] IPVS: set_ctl: invalid protocol: 0 172.20.20.25:20001 [ 258.854008][T13219] tipc: Enabled bearer , priority 0 [ 258.987358][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 259.049014][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2048'. [ 259.081422][T13219] syzkaller0: entered promiscuous mode [ 259.089466][T13219] syzkaller0: entered allmulticast mode [ 259.103678][T13219] tipc: Resetting bearer [ 259.278637][T13243] xt_hashlimit: size too large, truncated to 1048576 [ 259.281196][ T8874] tipc: Resetting bearer [ 259.318348][T13218] tipc: Resetting bearer [ 259.441626][T13251] openvswitch: netlink: EtherType 50a is less than min 600 [ 259.714909][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2055'. [ 261.197196][T13218] tipc: Disabling bearer [ 261.267998][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 261.452572][T13272] openvswitch: netlink: IP tunnel dst address not specified [ 261.485048][T13270] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2060'. [ 261.503446][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 261.535404][T13276] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 261.542531][T13270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2060'. [ 261.568604][T13272] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 261.581796][T13272] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 261.590229][T13272] gretap1: entered promiscuous mode [ 261.595829][T13272] gretap1: entered allmulticast mode [ 261.647626][T13278] syzkaller0: entered promiscuous mode [ 261.676438][T13278] syzkaller0: entered allmulticast mode [ 261.862351][T13278] syzkaller0: tun_net_xmit 14 [ 261.864869][T13293] sctp: [Deprecated]: syz.1.2067 (pid 13293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.864869][T13293] Use struct sctp_sack_info instead [ 261.867188][T13278] syzkaller0: tun_net_xmit 14 [ 261.903824][T13291] syzkaller0: entered promiscuous mode [ 261.909899][T13291] syzkaller0: entered allmulticast mode [ 262.026390][T13298] xt_l2tp: unknown flags: 10 [ 262.053858][T13298] xt_l2tp: unknown flags: 10 [ 262.264070][T13306] xt_hashlimit: size too large, truncated to 1048576 [ 262.289413][T13304] syzkaller1: entered promiscuous mode [ 262.305262][T13304] syzkaller1: entered allmulticast mode [ 262.340279][T13313] openvswitch: netlink: EtherType 50a is less than min 600 [ 262.431212][T13309] netlink: 'syz.2.2072': attribute type 5 has an invalid length. [ 262.446471][T13309] __nla_validate_parse: 3 callbacks suppressed [ 262.446489][T13309] netlink: 528 bytes leftover after parsing attributes in process `syz.2.2072'. [ 262.477954][T13319] ¾x9ÿ: renamed from bridge_slave_0 [ 262.532771][T13322] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 262.560518][T13322] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2076'. [ 262.810065][T13337] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2081'. [ 262.855866][T13337] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 262.882309][T13337] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2081'. [ 263.065481][T13353] syzkaller0: entered promiscuous mode [ 263.073366][T13355] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 263.084666][T13353] syzkaller0: entered allmulticast mode [ 263.436277][T13378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2093'. [ 263.453009][T13381] xt_hashlimit: size too large, truncated to 1048576 [ 263.543676][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 263.971119][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 264.018517][T13410] vlan2: entered allmulticast mode [ 264.029550][T13413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2101'. [ 264.035793][T13410] bond0: entered allmulticast mode [ 264.096814][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 264.110077][T13417] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2101'. [ 264.681167][T13450] xt_hashlimit: size too large, truncated to 1048576 [ 264.861625][T13462] syzkaller0: entered promiscuous mode [ 264.875476][T13462] syzkaller0: entered allmulticast mode [ 266.229699][T13544] syzkaller0: entered promiscuous mode [ 266.243846][T13544] syzkaller0: entered allmulticast mode [ 266.260933][T13544] netlink: 'syz.3.2143': attribute type 9 has an invalid length. [ 266.304844][T13545] netlink: 'syz.3.2143': attribute type 9 has an invalid length. [ 267.210710][T13596] syzkaller0: entered promiscuous mode [ 267.222610][T13596] syzkaller0: entered allmulticast mode [ 267.398179][T13603] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 267.494514][T13605] xt_hashlimit: size too large, truncated to 1048576 [ 267.528117][T13607] sock: sock_timestamping_bind_phc: sock not bind to device [ 268.309824][T13659] netlink: 'syz.1.2178': attribute type 2 has an invalid length. [ 268.332602][T13659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.357251][T13659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.367687][T13662] netlink: 'syz.3.2180': attribute type 10 has an invalid length. [ 268.411554][T13666] __nla_validate_parse: 6 callbacks suppressed [ 268.411572][T13666] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2182'. [ 268.455427][T13661] wireguard0: entered promiscuous mode [ 268.488457][T13662] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 268.493794][T13672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.498144][T13666] 8021q: VLANs not supported on gre0 [ 268.551473][T13672] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2183'. [ 268.687800][T13676] xt_hashlimit: size too large, truncated to 1048576 [ 268.701634][T13680] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2186'. [ 268.764057][T13681] syzkaller0: entered promiscuous mode [ 268.780395][T13681] syzkaller0: entered allmulticast mode [ 268.866625][T13692] netlink: 932 bytes leftover after parsing attributes in process `syz.1.2189'. [ 269.117075][T13703] netlink: 'syz.0.2195': attribute type 1 has an invalid length. [ 269.148577][T13703] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2195'. [ 269.173049][T13703] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2195'. [ 269.189342][T13703] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2195'. [ 269.213899][T13709] netlink: 5124 bytes leftover after parsing attributes in process `syz.1.2196'. [ 269.226440][T13707] netlink: 5124 bytes leftover after parsing attributes in process `syz.1.2196'. [ 269.259833][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 269.267543][T13713] netlink: 'syz.3.2198': attribute type 83 has an invalid length. [ 289.563587][T13757] xt_hashlimit: size too large, truncated to 1048576 [ 289.581685][T13750] __nla_validate_parse: 1 callbacks suppressed [ 289.581701][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2212'. [ 289.586980][T13755] Cannot find del_set index 49151 as target [ 289.626646][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 289.645281][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2212'. [ 289.832516][T13773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 289.963227][T13777] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 289.985127][T13777] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2218'. [ 290.020214][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2218'. [ 290.096760][T13780] atomic_op ffff88802492c198 conn xmit_atomic 0000000000000000 [ 290.108942][T13785] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 290.242500][T13791] openvswitch: netlink: IP tunnel dst address not specified [ 290.275177][T13791] openvswitch: netlink: IP tunnel dst address not specified [ 290.315957][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 290.371623][T13803] netlink: 54 bytes leftover after parsing attributes in process `syz.3.2227'. [ 290.380783][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 290.479284][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 290.580074][T13806] bridge0: entered promiscuous mode [ 290.588967][T13806] macsec1: entered promiscuous mode [ 290.595757][T13806] macsec1: entered allmulticast mode [ 290.601209][T13806] bridge0: entered allmulticast mode [ 290.611648][T13806] bridge0: port 2(macsec1) entered blocking state [ 290.649070][T13806] bridge0: port 2(macsec1) entered disabled state [ 290.663515][T13806] bridge0: left allmulticast mode [ 290.669155][T13806] bridge0: left promiscuous mode [ 290.843097][T13820] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 290.870596][T13824] xt_hashlimit: size too large, truncated to 1048576 [ 290.942554][T13831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.136262][T13832] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 291.149356][T13839] Set syz1 is full, maxelem 14 reached [ 291.161673][T13832] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 291.213789][T13832] bond9: (slave vxcan1): making interface the new active one [ 291.223225][T13832] bond9: (slave vxcan1): Enslaving as an active interface with an up link [ 291.538293][T13865] syzkaller0: entered promiscuous mode [ 291.562787][T13865] syzkaller0: entered allmulticast mode [ 291.977090][T13901] xt_hashlimit: size too large, truncated to 1048576 [ 292.691870][T13929] syzkaller0: entered promiscuous mode [ 292.718983][T13929] syzkaller0: entered allmulticast mode [ 292.884119][T13940] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 292.906113][T13940] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 292.925544][T13910] infiniband syz0: set down [ 292.939292][T13910] infiniband syz0: added ipvlan0 [ 293.035457][T13940] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 293.072300][T13955] netlink: 'syz.3.2268': attribute type 7 has an invalid length. [ 293.196038][T13910] RDS/IB: syz0: added [ 293.220097][T13910] smc: adding ib device syz0 with port count 1 [ 293.245763][T13959] tipc: Can't bind to reserved service type 1 [ 293.253175][T13910] smc: ib device syz0 port 1 has no pnetid [ 294.576226][T13993] syzkaller0: entered promiscuous mode [ 294.593974][T13993] syzkaller0: entered allmulticast mode [ 294.856678][T14003] __nla_validate_parse: 11 callbacks suppressed [ 294.856698][T14003] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2282'. [ 294.915210][ T29] audit: type=1800 audit(1776359983.818:3): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2283" name="memory.events" dev="tmpfs" ino=2116 res=0 errno=0 [ 294.921021][T14006] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2283'. [ 294.977233][ T29] audit: type=1804 audit(1776359983.878:4): pid=14007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2283" name="/newroot/411/memory.events" dev="tmpfs" ino=2116 res=1 errno=0 [ 295.318232][T14020] netlink: 'syz.2.2287': attribute type 4 has an invalid length. [ 295.356068][T14020] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2287'. [ 295.386231][T14022] netlink: 'syz.3.2288': attribute type 5 has an invalid length. [ 295.401825][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2287'. [ 295.405914][T14022] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 295.437002][T14022] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 295.474534][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 296.148117][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2294'. [ 296.251537][T14048] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.507859][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 296.542274][T14079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.558893][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 296.933829][T14107] xt_hashlimit: size too large, truncated to 1048576 [ 297.003948][T14109] netlink: 'syz.2.2309': attribute type 29 has an invalid length. [ 297.025426][T14115] netlink: 'syz.2.2309': attribute type 29 has an invalid length. [ 297.043893][T14106] netlink: 95 bytes leftover after parsing attributes in process `syz.3.2307'. [ 297.178558][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 297.388271][T14134] netlink: 'syz.4.2317': attribute type 11 has an invalid length. [ 297.415471][T14136] netlink: 'syz.4.2317': attribute type 11 has an invalid length. [ 297.452562][T14139] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 297.502594][T14136] bridge_slave_0: left allmulticast mode [ 297.521736][T14136] bridge_slave_0: left promiscuous mode [ 297.566855][T14136] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.612803][T14136] bond0: (slave bridge_slave_1): Releasing backup interface [ 297.673240][T14136] bond0: (slave bond_slave_0): Releasing backup interface [ 297.723917][T14136] bond0: (slave bond_slave_1): Releasing backup interface [ 297.762119][T14136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.431201][T14196] xt_hashlimit: size too large, truncated to 1048576 [ 298.567480][T14206] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 298.746595][T14211] tipc: Enabling of bearer rejected, already enabled [ 298.930850][T14228] syzkaller1: entered promiscuous mode [ 298.937453][T14228] syzkaller1: entered allmulticast mode [ 299.235418][T14245] xt_hashlimit: size too large, truncated to 1048576 [ 299.513949][T14263] x_tables: duplicate underflow at hook 4 [ 299.606619][T14269] tipc: Disabling bearer [ 300.209564][T14312] xt_hashlimit: size too large, truncated to 1048576 [ 300.334118][T14321] netlink: 'syz.3.2373': attribute type 11 has an invalid length. [ 300.492313][T14328] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 300.631132][T14338] syzkaller0: entered promiscuous mode [ 300.645026][T14338] syzkaller0: entered allmulticast mode [ 301.007773][T14354] block nbd0: not configured, cannot reconfigure [ 301.028753][T14357] __nla_validate_parse: 4 callbacks suppressed [ 301.028773][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 301.066641][T14358] delete_channel: no stack [ 301.362591][T14370] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 301.380703][T14379] openvswitch: netlink: IPv4 tun info is not correct [ 301.400335][T14370] bond7 (unregistering): Released all slaves [ 301.568508][T14370] netlink: 'syz.1.2389': attribute type 4 has an invalid length. [ 301.584922][T14370] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 301.605106][T14370] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2389'. [ 301.753817][T14403] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 301.756237][T14402] block nbd4: not configured, cannot reconfigure [ 301.841564][T14403] bond10: entered promiscuous mode [ 301.859889][T14403] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.902877][T14413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.915229][T14413] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 301.925985][T14413] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 301.938113][T14413] bond10: (slave vti0): making interface the new active one [ 301.947733][T14413] vti0: entered promiscuous mode [ 301.957935][T14413] bond10: (slave vti0): Enslaving as an active interface with an up link [ 302.005396][T14416] can: request_module (can-proto-4) failed. [ 302.238068][T14433] lo: entered promiscuous mode [ 302.260384][T14433] tunl0: entered promiscuous mode [ 302.311079][T14433] gre0: entered promiscuous mode [ 302.372124][T14433] gretap0: entered promiscuous mode [ 302.459453][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 302.468568][T14433] erspan0: entered promiscuous mode [ 302.491379][T14433] ip_vti0: entered promiscuous mode [ 302.699136][T14454] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 [ 302.783666][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2407'. [ 302.799032][T14463] block nbd2: not configured, cannot reconfigure [ 302.918019][T14454] team0 (unregistering): Port device team_slave_0 removed [ 302.951335][T14454] team0 (unregistering): Port device team_slave_1 removed [ 303.037384][T14439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.489234][T14509] block nbd0: not configured, cannot reconfigure [ 303.745618][T14518] xt_hashlimit: size too large, truncated to 1048576 [ 303.772506][T14523] wg1: entered promiscuous mode [ 303.798130][T14523] wg1: entered allmulticast mode [ 303.814848][T14522] tipc: Enabled bearer , priority 10 [ 304.011365][T14536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2437'. [ 304.211087][T14544] block nbd1: not configured, cannot reconfigure [ 304.253712][T14539] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 304.289729][T14539] bond11 (unregistering): Released all slaves [ 304.606833][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 304.621970][T14577] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 304.662941][T14579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2449'. [ 304.697182][T14577] xt_hashlimit: size too large, truncated to 1048576 [ 304.711096][T14579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2449'. [ 304.717388][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 304.976542][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2452'. [ 304.996047][T14590] bridge: RTM_NEWNEIGH with invalid ether address [ 305.013532][T14590] bridge: RTM_NEWNEIGH with invalid ether address [ 305.043681][T14595] pimreg: entered allmulticast mode [ 305.215593][T14601] tipc: Enabled bearer , priority 0 [ 305.249136][T14601] +: renamed from syzkaller0 [ 305.300840][T14601] tipc: Disabling bearer [ 305.573435][T14623] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 305.581439][T14623] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 305.644110][T14626] FAULT_INJECTION: forcing a failure. [ 305.644110][T14626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.680155][T14626] CPU: 1 UID: 0 PID: 14626 Comm: syz.1.2463 Not tainted syzkaller #0 PREEMPT(full) [ 305.680182][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.680204][T14626] Call Trace: [ 305.680211][T14626] [ 305.680219][T14626] dump_stack_lvl+0xe8/0x150 [ 305.680250][T14626] should_fail_ex+0x412/0x560 [ 305.680280][T14626] _copy_from_user+0x2d/0xb0 [ 305.680299][T14626] ___sys_recvmsg+0x175/0x590 [ 305.680321][T14626] ? __pfx____sys_recvmsg+0x10/0x10 [ 305.680340][T14626] ? __fget_files+0x2a/0x420 [ 305.680375][T14626] ? __fget_files+0x3a0/0x420 [ 305.680405][T14626] do_recvmmsg+0x334/0x800 [ 305.680428][T14626] ? __pfx_do_recvmmsg+0x10/0x10 [ 305.680458][T14626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.680497][T14626] __x64_sys_recvmmsg+0x198/0x250 [ 305.680518][T14626] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 305.680544][T14626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.680564][T14626] do_syscall_64+0x15f/0xf80 [ 305.680583][T14626] ? trace_irq_disable+0x3b/0x140 [ 305.680609][T14626] ? clear_bhb_loop+0x40/0x90 [ 305.680631][T14626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.680649][T14626] RIP: 0033:0x7f098cd9c819 [ 305.680667][T14626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.680682][T14626] RSP: 002b:00007f098dc1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 305.680703][T14626] RAX: ffffffffffffffda RBX: 00007f098d015fa0 RCX: 00007f098cd9c819 [ 305.680717][T14626] RDX: 0000000000000002 RSI: 0000200000003e00 RDI: 0000000000000003 [ 305.680728][T14626] RBP: 00007f098dc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 305.680739][T14626] R10: 0000000040000140 R11: 0000000000000246 R12: 0000000000000001 [ 305.680750][T14626] R13: 00007f098d016038 R14: 00007f098d015fa0 R15: 00007ffe67e316c8 [ 305.680779][T14626] [ 306.043133][T14634] netlink: 'syz.4.2466': attribute type 10 has an invalid length. [ 306.171102][T14648] __nla_validate_parse: 5 callbacks suppressed [ 306.171120][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'. [ 306.214934][T14634] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 306.536648][T14667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.659316][T14670] netlink: 'syz.0.2475': attribute type 11 has an invalid length. [ 306.711616][T14670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2475'. [ 306.722391][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 306.738987][T14679] FAULT_INJECTION: forcing a failure. [ 306.738987][T14679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.753462][T14679] CPU: 0 UID: 0 PID: 14679 Comm: syz.1.2477 Not tainted syzkaller #0 PREEMPT(full) [ 306.753489][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.753500][T14679] Call Trace: [ 306.753507][T14679] [ 306.753514][T14679] dump_stack_lvl+0xe8/0x150 [ 306.753543][T14679] should_fail_ex+0x412/0x560 [ 306.753572][T14679] _copy_to_iter+0x1e4/0x17d0 [ 306.753609][T14679] ? process_measurement+0x7ce/0x1c80 [ 306.753628][T14679] ? __pfx__copy_to_iter+0x10/0x10 [ 306.753654][T14679] ? up_write+0x1ab/0x410 [ 306.753676][T14679] ? aa_label_sk_perm+0x532/0x6e0 [ 306.753705][T14679] __skb_datagram_iter+0x41a/0x980 [ 306.753725][T14679] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 306.753751][T14679] skb_copy_datagram_iter+0xb5/0x240 [ 306.753772][T14679] mptcp_recvmsg+0x563/0x1380 [ 306.753811][T14679] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 306.753839][T14679] ? __lock_acquire+0x6b5/0x2cf0 [ 306.753860][T14679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 306.753880][T14679] ? inet6_recvmsg+0x10a/0x490 [ 306.753898][T14679] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 306.753920][T14679] ? security_socket_recvmsg+0x7e/0x2c0 [ 306.753946][T14679] ? __pfx_inet6_recvmsg+0x10/0x10 [ 306.753964][T14679] sock_recvmsg+0xfa/0x1b0 [ 306.753988][T14679] ____sys_recvmsg+0x1e6/0x4a0 [ 306.754020][T14679] ? __pfx_____sys_recvmsg+0x10/0x10 [ 306.754059][T14679] ? import_iovec+0x73/0xa0 [ 306.754078][T14679] ___sys_recvmsg+0x215/0x590 [ 306.754099][T14679] ? __pfx____sys_recvmsg+0x10/0x10 [ 306.754122][T14679] ? __fget_files+0x2a/0x420 [ 306.754159][T14679] ? __fget_files+0x3a0/0x420 [ 306.754189][T14679] do_recvmmsg+0x334/0x800 [ 306.754214][T14679] ? __pfx_do_recvmmsg+0x10/0x10 [ 306.754243][T14679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.754291][T14679] __x64_sys_recvmmsg+0x198/0x250 [ 306.754310][T14679] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 306.754334][T14679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.754352][T14679] do_syscall_64+0x15f/0xf80 [ 306.754372][T14679] ? trace_irq_disable+0x3b/0x140 [ 306.754390][T14679] ? clear_bhb_loop+0x40/0x90 [ 306.754412][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.754430][T14679] RIP: 0033:0x7f098cd9c819 [ 306.754447][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.754463][T14679] RSP: 002b:00007f098dc1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 306.754483][T14679] RAX: ffffffffffffffda RBX: 00007f098d015fa0 RCX: 00007f098cd9c819 [ 306.754495][T14679] RDX: 0000000000000002 RSI: 0000200000003e00 RDI: 0000000000000003 [ 306.754506][T14679] RBP: 00007f098dc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 306.754516][T14679] R10: 0000000040000140 R11: 0000000000000246 R12: 0000000000000001 [ 306.754527][T14679] R13: 00007f098d016038 R14: 00007f098d015fa0 R15: 00007ffe67e316c8 [ 306.754557][T14679] [ 307.318420][T14702] bridge0: port 2(gretap0) entered blocking state [ 307.353654][T14702] bridge0: port 2(gretap0) entered disabled state [ 307.374173][T14702] gretap0: entered allmulticast mode [ 307.543560][T14720] 8021q: VLANs not supported on gre0 [ 307.549738][T14719] 8021q: VLANs not supported on gre0 [ 307.739280][T14737] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 307.772181][T14737] IPVS: set_ctl: invalid protocol: 33 172.20.20.44:20001 [ 307.973880][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2496'. [ 308.213318][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'. [ 308.308223][T14783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.318353][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 308.675946][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 308.886939][T14831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2519'. [ 308.921961][T14831] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2519'. [ 308.974758][T14831] netlink: 'syz.4.2519': attribute type 5 has an invalid length. [ 308.997625][T14831] netlink: 'syz.4.2519': attribute type 6 has an invalid length. [ 309.014011][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 309.843144][ T29] audit: type=1107 audit(1776359998.738:5): pid=14874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 309.848887][T14869] netlink: 'syz.4.2531': attribute type 33 has an invalid length. [ 310.040074][T14869] veth0_macvtap: entered promiscuous mode [ 310.047952][T14869] macvtap1: entered allmulticast mode [ 310.053570][T14869] veth0_macvtap: entered allmulticast mode [ 310.582347][T14890] macsec1: entered promiscuous mode [ 310.792704][T14902] 8021q: VLANs not supported on gre0 [ 310.808333][T14902] netlink: 'syz.1.2541': attribute type 32 has an invalid length. [ 310.937321][T14899] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 310.938872][T14902] bond7: option coupled_control: invalid value (192) [ 310.961900][T14902] bond7 (unregistering): Released all slaves [ 311.788863][T14957] syzkaller1: entered promiscuous mode [ 311.809769][T14957] syzkaller1: entered allmulticast mode [ 312.060240][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.071675][T14978] netlink: 'syz.3.2560': attribute type 10 has an invalid length. [ 312.075110][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.090807][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.095863][T14978] __nla_validate_parse: 5 callbacks suppressed [ 312.095879][T14978] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.2560'. [ 312.100805][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.141051][T14977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.374829][T14991] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 312.470226][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 312.579753][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2568'. [ 312.681108][T15012] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.2571'. [ 312.723086][T15012] netlink: 'syz.2.2571': attribute type 11 has an invalid length. [ 312.919990][T15027] sctp: [Deprecated]: syz.2.2578 (pid 15027) Use of int in max_burst socket option. [ 312.919990][T15027] Use struct sctp_assoc_value instead [ 313.053599][T15034] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.241909][T15046] wireguard1: entered promiscuous mode [ 313.261228][T15046] wireguard1: entered allmulticast mode [ 313.595378][T15064] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 313.603368][T15064] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2588'. [ 313.613492][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 313.640541][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 313.660660][T15068] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 313.718360][T15068] 8021q: adding VLAN 0 to HW filter on device bond11 [ 313.745734][T15068] vlan2: entered promiscuous mode [ 313.750989][T15068] bond11: entered promiscuous mode [ 313.757070][T15068] vlan2: entered allmulticast mode [ 313.765354][T15068] bond11: entered allmulticast mode [ 313.789968][T15068] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 313.805848][T15068] bond11: (slave batadv1): making interface the new active one [ 313.813667][T15068] batadv1: entered promiscuous mode [ 313.819726][T15068] batadv1: entered allmulticast mode [ 313.827134][T15068] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 314.157453][T15086] netlink: 'syz.0.2597': attribute type 2 has an invalid length. [ 314.172467][T15086] netlink: 'syz.0.2597': attribute type 8 has an invalid length. [ 314.204957][T15086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2597'. [ 314.423653][T15101] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2602'. [ 314.430077][T15098] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2601'. [ 314.769871][T15113] netlink: 'syz.0.2606': attribute type 21 has an invalid length. [ 315.041234][T15135] nbd: must specify a device to reconfigure [ 315.086246][T15135] nbd: must specify a device to reconfigure [ 315.255792][T15145] syzkaller0: entered promiscuous mode [ 315.278671][T15145] syzkaller0: entered allmulticast mode [ 315.350064][T15152] netlink: 'syz.2.2619': attribute type 3 has an invalid length. [ 315.807110][T15194] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 315.920066][T15197] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 316.115441][T15209] xt_hashlimit: size too large, truncated to 1048576 [ 316.327900][T15219] netlink: 'syz.3.2642': attribute type 12 has an invalid length. [ 317.019437][T15264] xt_hashlimit: size too large, truncated to 1048576 [ 317.213334][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.605813][T15296] syzkaller0: entered promiscuous mode [ 317.619632][T15296] syzkaller0: entered allmulticast mode [ 318.022630][T15324] xt_hashlimit: size too large, truncated to 1048576 [ 318.194219][T15337] netlink: 'syz.3.2681': attribute type 9 has an invalid length. [ 318.275157][T15339] __nla_validate_parse: 9 callbacks suppressed [ 318.275175][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 318.463553][T15347] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2686'. [ 318.507295][T15343] syzkaller0: entered promiscuous mode [ 318.520033][T15343] syzkaller0: entered allmulticast mode [ 318.550282][ T29] audit: type=1800 audit(1776360007.448:6): pid=15351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2687" name="memory.events" dev="tmpfs" ino=2473 res=0 errno=0 [ 318.600274][ T29] audit: type=1804 audit(1776360007.448:7): pid=15351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2687" name="/newroot/482/memory.events" dev="tmpfs" ino=2473 res=1 errno=0 [ 318.877764][T15376] xt_hashlimit: size too large, truncated to 1048576 [ 318.914261][T15371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2692'. [ 318.951031][T15370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2692'. [ 319.161968][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2699'. [ 319.207667][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2700'. [ 319.317609][T15404] Cannot find add_set index 2 as target [ 319.364248][T15407] syzkaller0: entered promiscuous mode [ 319.379037][T15407] syzkaller0: entered allmulticast mode [ 319.448701][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 319.491653][T15414] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 319.520744][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'. [ 319.631515][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 319.664528][T15421] bridge_slave_1: left allmulticast mode [ 319.672233][T15421] bridge_slave_1: left promiscuous mode [ 319.690531][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.990936][T15443] xt_cgroup: invalid path, errno=-2 [ 319.999059][T15447] xt_hashlimit: size too large, truncated to 1048576 [ 320.573413][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 320.624919][T15484] syzkaller0: entered promiscuous mode [ 320.641089][T15484] syzkaller0: entered allmulticast mode [ 320.662013][T15484] IPVS: Error connecting to the multicast addr [ 320.785010][T15486] team0: Cannot enslave team device to itself [ 321.100672][T15508] xt_hashlimit: size too large, truncated to 1048576 [ 321.231590][T15520] netlink: 'syz.2.2733': attribute type 15 has an invalid length. [ 321.318176][T15521] syzkaller0: entered promiscuous mode [ 321.329109][T15521] syzkaller0: entered allmulticast mode [ 321.710737][T15539] netlink: 'syz.3.2741': attribute type 10 has an invalid length. [ 321.785665][T15539] team0: Device ipvlan1 failed to register rx_handler [ 322.549755][T15596] netlink: 'syz.4.2759': attribute type 14 has an invalid length. [ 322.562184][T15596] netlink: 'syz.4.2759': attribute type 13 has an invalid length. [ 322.822957][T15604] netlink: 'syz.3.2761': attribute type 2 has an invalid length. [ 322.835919][T15604] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 322.852370][T15604] ip6tnl0: entered promiscuous mode [ 322.989775][T15606] macvlan0: entered promiscuous mode [ 323.831644][T15650] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 323.928881][T15654] __nla_validate_parse: 20 callbacks suppressed [ 323.928901][T15654] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2777'. [ 324.875988][T15689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.084645][T15699] netlink: 'syz.4.2789': attribute type 63 has an invalid length. [ 325.128267][T15699] netlink: 'syz.4.2789': attribute type 63 has an invalid length. [ 325.413716][T15707] block nbd0: not configured, cannot reconfigure [ 325.435691][T15710] FAULT_INJECTION: forcing a failure. [ 325.435691][T15710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.469547][T15710] CPU: 1 UID: 0 PID: 15710 Comm: syz.1.2793 Not tainted syzkaller #0 PREEMPT(full) [ 325.469573][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.469584][T15710] Call Trace: [ 325.469592][T15710] [ 325.469599][T15710] dump_stack_lvl+0xe8/0x150 [ 325.469630][T15710] should_fail_ex+0x412/0x560 [ 325.469660][T15710] _copy_from_user+0x2d/0xb0 [ 325.469680][T15710] ___sys_sendmsg+0x1c6/0x360 [ 325.469709][T15710] ? __lock_acquire+0x6b5/0x2cf0 [ 325.469737][T15710] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.469809][T15710] ? __fget_files+0x2a/0x420 [ 325.469831][T15710] ? __fget_files+0x3a0/0x420 [ 325.469858][T15710] __x64_sys_sendmsg+0x1bd/0x2a0 [ 325.469886][T15710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.469929][T15710] ? __pfx_ksys_write+0x10/0x10 [ 325.469962][T15710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.469982][T15710] do_syscall_64+0x15f/0xf80 [ 325.470004][T15710] ? trace_irq_disable+0x3b/0x140 [ 325.470023][T15710] ? clear_bhb_loop+0x40/0x90 [ 325.470045][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.470063][T15710] RIP: 0033:0x7f098cd9c819 [ 325.470079][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.470094][T15710] RSP: 002b:00007f098dc1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.470115][T15710] RAX: ffffffffffffffda RBX: 00007f098d015fa0 RCX: 00007f098cd9c819 [ 325.470128][T15710] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 325.470139][T15710] RBP: 00007f098dc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.470150][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.470160][T15710] R13: 00007f098d016038 R14: 00007f098d015fa0 R15: 00007ffe67e316c8 [ 325.470187][T15710] [ 325.833052][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 326.125198][T15743] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2805'. [ 326.145554][T15745] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2806'. [ 326.410077][T15771] ip6gre2: entered promiscuous mode [ 326.417530][T15771] ip6gre2: entered allmulticast mode [ 326.431045][T15771] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.501486][T15775] sctp: [Deprecated]: syz.4.2815 (pid 15775) Use of int in maxseg socket option. [ 326.501486][T15775] Use struct sctp_assoc_value instead [ 326.675903][ T8857] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.701465][ T8857] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.711341][ T5888] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.767429][ T5888] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.798154][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 326.925687][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2822'. [ 327.018793][T15802] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2822'. [ 327.028621][ T5888] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.081732][T15818] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2825'. [ 327.239756][T15822] netem: change failed [ 327.298813][T15825] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 327.306505][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.373942][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 327.445407][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 327.539209][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 327.688696][T15849] openvswitch: netlink: Flow actions attr not present in new flow. [ 328.052932][T15866] xt_hashlimit: size too large, truncated to 1048576 [ 328.478370][T15892] syzkaller0: entered promiscuous mode [ 328.495805][T15892] syzkaller0: entered allmulticast mode [ 329.041234][T15913] wg1: left promiscuous mode [ 329.059626][T15913] wg1: left allmulticast mode [ 329.244019][T15929] netlink: 'syz.0.2856': attribute type 3 has an invalid length. [ 329.252174][T15929] __nla_validate_parse: 5 callbacks suppressed [ 329.252191][T15929] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2856'. [ 329.273428][T15916] netlink: 'syz.1.2854': attribute type 1 has an invalid length. [ 329.275629][T15906] dvmrp8: entered allmulticast mode [ 329.476164][T15916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 329.526632][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2858'. [ 330.332809][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2869'. [ 330.516972][T15981] xt_hashlimit: size too large, truncated to 1048576 [ 330.771738][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.783926][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.793342][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.802386][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.811638][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.868677][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.882445][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.884509][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 330.910660][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.926829][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.935891][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.269143][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 331.534142][T16012] FAULT_INJECTION: forcing a failure. [ 331.534142][T16012] name failslab, interval 1, probability 0, space 0, times 1 [ 331.550996][T16012] CPU: 1 UID: 0 PID: 16012 Comm: syz.4.2880 Not tainted syzkaller #0 PREEMPT(full) [ 331.551019][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.551028][T16012] Call Trace: [ 331.551034][T16012] [ 331.551041][T16012] dump_stack_lvl+0xe8/0x150 [ 331.551069][T16012] should_fail_ex+0x412/0x560 [ 331.551093][T16012] should_failslab+0xa8/0x100 [ 331.551111][T16012] __kmalloc_noprof+0xe8/0x760 [ 331.551132][T16012] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 331.551155][T16012] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 331.551179][T16012] genl_family_rcv_msg_doit+0xd9/0x330 [ 331.551199][T16012] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.551218][T16012] ? __pfx_genl_get_cmd+0x10/0x10 [ 331.551230][T16012] ? stack_trace_save+0xa9/0x100 [ 331.551245][T16012] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 331.551262][T16012] ? __lock_acquire+0x6b5/0x2cf0 [ 331.551289][T16012] genl_rcv_msg+0x61c/0x7a0 [ 331.551308][T16012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.551323][T16012] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 331.551349][T16012] netlink_rcv_skb+0x232/0x4b0 [ 331.551371][T16012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.551387][T16012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.551418][T16012] ? down_read+0x270/0x2e0 [ 331.551436][T16012] ? genl_rcv+0xd/0x40 [ 331.551454][T16012] genl_rcv+0x28/0x40 [ 331.551469][T16012] netlink_unicast+0x75c/0x8e0 [ 331.551495][T16012] netlink_sendmsg+0x813/0xb40 [ 331.551526][T16012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.551551][T16012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.551575][T16012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.551603][T16012] ____sys_sendmsg+0x972/0x9f0 [ 331.551635][T16012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.551668][T16012] ? import_iovec+0x73/0xa0 [ 331.551688][T16012] ___sys_sendmsg+0x2a5/0x360 [ 331.551722][T16012] ? __lock_acquire+0x6b5/0x2cf0 [ 331.551747][T16012] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.551805][T16012] ? __fget_files+0x2a/0x420 [ 331.551825][T16012] ? __fget_files+0x3a0/0x420 [ 331.551854][T16012] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.551882][T16012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.551915][T16012] ? __pfx_ksys_write+0x10/0x10 [ 331.551946][T16012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.551968][T16012] do_syscall_64+0x15f/0xf80 [ 331.551987][T16012] ? trace_irq_disable+0x3b/0x140 [ 331.552006][T16012] ? clear_bhb_loop+0x40/0x90 [ 331.552026][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.552043][T16012] RIP: 0033:0x7f4dc419c819 [ 331.552060][T16012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.552074][T16012] RSP: 002b:00007f4dc23f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.552094][T16012] RAX: ffffffffffffffda RBX: 00007f4dc4415fa0 RCX: 00007f4dc419c819 [ 331.552106][T16012] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 331.552116][T16012] RBP: 00007f4dc23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 331.552127][T16012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.552137][T16012] R13: 00007f4dc4416038 R14: 00007f4dc4415fa0 R15: 00007ffeebefb338 [ 331.552166][T16012] [ 331.917946][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 331.927716][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 332.029957][ T8874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.041590][ T8874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.239457][ T8874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.251665][ T8874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.455334][ T8874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.487979][ T8874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.611163][ T8874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.648435][ T8874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.691063][T16037] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2888'. [ 332.980528][T16046] xt_hashlimit: size too large, truncated to 1048576 [ 333.059066][ T5824] Bluetooth: hci5: command tx timeout [ 333.331570][T16060] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2894'. [ 333.382097][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.477178][T15989] chnl_net:caif_netlink_parms(): no params data found [ 333.530007][ T8874] dvmrp0: left allmulticast mode [ 333.550727][T16069] block nbd4: not configured, cannot reconfigure [ 333.664672][ T8874] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 333.847879][ T8874] tipc: Disabling bearer [ 334.199924][ T8874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.216273][ T8874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.226942][ T8874] bond0 (unregistering): Released all slaves [ 334.237813][ T8874] bond1 (unregistering): Released all slaves [ 334.252632][ T8874] bond2 (unregistering): (slave veth5): Releasing active interface [ 334.262536][ T8874] bond2 (unregistering): Released all slaves [ 334.283896][ T8874] bond3 (unregistering): Released all slaves [ 334.297692][ T8874] bond4 (unregistering): Released all slaves [ 334.312906][ T8874] bond5 (unregistering): Released all slaves [ 334.334147][ T8874] bond6 (unregistering): Released all slaves [ 334.349441][ T8874] bond7 (unregistering): Released all slaves [ 334.623931][T16074] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 334.652468][T16075] syzkaller1: entered promiscuous mode [ 334.661455][T16075] syzkaller1: entered allmulticast mode [ 334.705360][T16092] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2903'. [ 334.719053][ T8874] : left promiscuous mode [ 334.831509][ T8874] tipc: Left network mode [ 334.841346][T15989] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.849671][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.872859][T15989] bridge_slave_0: entered allmulticast mode [ 334.897853][T15989] bridge_slave_0: entered promiscuous mode [ 334.920495][T15989] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.928137][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.936425][T15989] bridge_slave_1: entered allmulticast mode [ 334.953944][T15989] bridge_slave_1: entered promiscuous mode [ 334.991229][T16103] block nbd4: not configured, cannot reconfigure [ 335.075937][T15989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.102717][T15989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.127378][ T5824] Bluetooth: hci5: command tx timeout [ 335.214358][T16114] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.253129][T16114] team0: Cannot enslave team device to itself [ 335.254872][T16112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2909'. [ 335.344229][T15989] team0: Port device team_slave_0 added [ 335.351716][ T8874] IPVS: stopping backup sync thread 13785 ... [ 335.372975][T15989] team0: Port device team_slave_1 added [ 335.510081][T15989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.541991][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.611115][T15989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.655740][T15989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.680938][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.698549][T16130] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2913'. [ 335.729334][T16131] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 335.750485][T15989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.761524][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 335.960909][T16144] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2916'. [ 335.970321][T16144] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2916'. [ 336.253733][T15989] hsr_slave_0: entered promiscuous mode [ 336.261844][T15989] hsr_slave_1: entered promiscuous mode [ 336.277374][T15989] debugfs: 'hsr0' already exists in 'hsr' [ 336.293171][T15989] Cannot create hsr debugfs directory [ 336.307344][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 336.626454][T16173] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2926'. [ 336.660532][T16173] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2926'. [ 337.163188][T16204] ip6t_rpfilter: unknown options [ 337.207817][ T5824] Bluetooth: hci5: command tx timeout [ 337.430763][T16221] xt_hashlimit: size too large, truncated to 1048576 [ 337.569233][T16229] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2940'. [ 337.582695][T16229] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2940'. [ 337.656484][T16232] syzkaller0: entered allmulticast mode [ 338.044955][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 338.421151][T16262] gre2: entered promiscuous mode [ 338.426836][T16262] gre2: entered allmulticast mode [ 338.600711][ T8874] veth1_macvtap: left promiscuous mode [ 338.612119][ T8874] veth0_macvtap: left promiscuous mode [ 338.622970][ T8874] veth1_vlan: left promiscuous mode [ 338.638072][ T8874] veth0_vlan: left promiscuous mode [ 338.964500][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 339.285376][ T5824] Bluetooth: hci5: command tx timeout [ 339.585092][T16304] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 339.616476][T16304] bond9 (unregistering): Released all slaves [ 339.937425][T16325] __nla_validate_parse: 4 callbacks suppressed [ 339.937446][T16325] netlink: 1492 bytes leftover after parsing attributes in process `syz.0.2958'. [ 340.028279][T16337] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2961'. [ 340.047071][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 340.107254][T16334] bridge0: port 3(ipvlan2) entered blocking state [ 340.130858][T16334] bridge0: port 3(ipvlan2) entered disabled state [ 340.148863][T16334] ipvlan2: entered allmulticast mode [ 340.166498][T16334] bridge0: entered allmulticast mode [ 340.182776][T16334] ipvlan2: left allmulticast mode [ 340.189856][T16334] bridge0: left allmulticast mode [ 340.346362][T15989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.350925][T16359] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2966'. [ 340.387402][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.406110][T15989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.437434][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.272282][T15989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.307966][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.337217][ T8853] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.353275][ T8853] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.395584][T15989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.437760][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.471371][ T8853] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.495873][ T8853] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.519749][T16404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2973'. [ 341.679533][T16415] bond12: (slave erspan0): Device is not bonding slave [ 341.687182][T16415] bond12: option active_slave: invalid value (erspan0) [ 341.697169][T16415] bond12 (unregistering): Released all slaves [ 341.940640][T16397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.078465][T15989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.156243][T15989] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.206451][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.213632][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.255567][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2980'. [ 342.295396][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.302795][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.868886][T15989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.011483][T15989] veth0_vlan: entered promiscuous mode [ 343.019496][T16490] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 343.046694][T15989] veth1_vlan: entered promiscuous mode [ 343.060413][T16490] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 343.321023][T15989] veth0_macvtap: entered promiscuous mode [ 343.343514][T15989] veth1_macvtap: entered promiscuous mode [ 343.371333][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3000'. [ 343.382116][T15989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.424473][T15989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.454540][T16518] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 343.473668][ T8857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.477072][T16518] netlink: 'syz.4.3002': attribute type 11 has an invalid length. [ 343.490725][T16518] netlink: 'syz.4.3002': attribute type 11 has an invalid length. [ 343.492949][ T8857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.515748][T16518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3002'. [ 343.536177][ T8857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.579836][ T8857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.676282][T16523] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 343.839690][ T8857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.874360][ T8857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.964784][ T8853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.983933][T16539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3009'. [ 343.992500][ T8853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.065813][T16548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3010'. [ 344.400283][T16559] block nbd1: not configured, cannot reconfigure [ 344.424725][ T24] IPVS: starting estimator thread 0... [ 344.525877][T16563] IPVS: using max 29 ests per chain, 69600 per kthread [ 344.699431][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.713640][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.724115][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.741359][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.772191][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.906226][T16582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.992214][T16593] __nla_validate_parse: 2 callbacks suppressed [ 344.992234][T16593] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3018'. [ 345.181373][T16604] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 345.266673][T16604] tipc: New replicast peer: 255.255.255.255 [ 345.300179][T16604] tipc: Enabled bearer , priority 10 [ 345.310695][T16614] IPVS: length: 239 != 24 [ 345.343343][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3022'. [ 345.696111][T16632] netlink: 'syz.3.3028': attribute type 11 has an invalid length. [ 345.784174][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.809023][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.027475][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.054482][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.107476][T16647] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3034'. [ 346.120488][T16647] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3034'. [ 346.213742][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.226424][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.290603][T16655] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3038'. [ 346.411152][ T12] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.422950][ T12] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.516120][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 346.674218][T16671] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 346.884779][ T5824] Bluetooth: hci3: command tx timeout [ 347.202256][T16711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3048'. [ 347.224043][T16575] chnl_net:caif_netlink_parms(): no params data found [ 347.332489][T16717] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 347.589985][T16726] tipc: Enabling of bearer rejected, already enabled [ 347.954713][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 348.246298][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 348.821968][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 348.832454][ T12] bond0 (unregistering): Released all slaves [ 348.842694][ T12] bond1 (unregistering): Released all slaves [ 348.858419][ T12] bond2 (unregistering): Released all slaves [ 348.871868][ T12] bond3 (unregistering): Released all slaves [ 348.886582][ T12] bond4 (unregistering): Released all slaves [ 348.913381][ T12] bond5 (unregistering): Released all slaves [ 348.928017][ T12] bond6 (unregistering): Released all slaves [ 348.941395][ T12] bond7 (unregistering): Released all slaves [ 348.954764][ T12] bond8 (unregistering): Released all slaves [ 348.964956][ T5824] Bluetooth: hci3: command tx timeout [ 348.970438][ T12] bond9 (unregistering): Released all slaves [ 349.001411][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.008908][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.017770][T16575] bridge_slave_0: entered allmulticast mode [ 349.026789][T16575] bridge_slave_0: entered promiscuous mode [ 349.102445][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.142531][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.166605][T16575] bridge_slave_1: entered allmulticast mode [ 349.190691][T16575] bridge_slave_1: entered promiscuous mode [ 349.309303][T16790] x_tables: unsorted entry at hook 3 [ 349.362471][ T12] tipc: Disabling bearer [ 349.390932][T16794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3067'. [ 349.390995][T16797] x_tables: unsorted entry at hook 3 [ 349.401822][T16799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3067'. [ 349.416384][ T12] tipc: Left network mode [ 349.436978][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.476252][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.501956][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.600108][T16804] xt_hashlimit: invalid interval [ 349.690080][T16810] netlink: 'syz.0.3072': attribute type 2 has an invalid length. [ 349.761179][T16575] team0: Port device team_slave_0 added [ 349.800530][T16575] team0: Port device team_slave_1 added [ 349.952392][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.970258][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.031262][T16827] netlink: 'syz.1.3076': attribute type 3 has an invalid length. [ 350.068121][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.201831][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.237517][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.348683][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.599264][T16834] syzkaller0: entered promiscuous mode [ 350.612128][T16834] syzkaller0: entered allmulticast mode [ 350.621734][T16864] __nla_validate_parse: 2 callbacks suppressed [ 350.621752][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 350.781112][T16864] bond0: entered promiscuous mode [ 350.782818][T16872] xt_time: unknown flags 0xf4 [ 350.798586][T16864] bond0: left promiscuous mode [ 351.047189][ T5824] Bluetooth: hci3: command tx timeout [ 351.054767][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 351.178372][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3091'. [ 353.021007][T16575] hsr_slave_0: entered promiscuous mode [ 353.027598][T16575] hsr_slave_1: entered promiscuous mode [ 353.033874][T16575] debugfs: 'hsr0' already exists in 'hsr' [ 353.040069][T16575] Cannot create hsr debugfs directory [ 353.049708][T16874] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 353.051988][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 353.067648][T16869] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3087'. [ 353.084445][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'. [ 353.098269][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'. [ 353.119281][T16876] netlink: 'syz.1.3089': attribute type 4 has an invalid length. [ 353.127062][ T5824] Bluetooth: hci3: command tx timeout [ 354.191525][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3106'. [ 354.237438][T16946] nbd: must specify at least one socket [ 354.467288][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 354.497270][T16962] openvswitch: netlink: Unknown nsh attribute 0 [ 355.023975][T16978] IPVS: Error connecting to the multicast addr [ 355.207905][T16989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3119'. [ 355.349723][T16995] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 355.436702][T16991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3119'. [ 356.091881][T17021] __nla_validate_parse: 1 callbacks suppressed [ 356.091899][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 356.277258][T17026] netlink: 'syz.2.3127': attribute type 30 has an invalid length. [ 356.287203][T16575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.307967][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.313284][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'. [ 356.368623][ T12] hsr_slave_0: left promiscuous mode [ 356.392187][ T12] hsr_slave_1: left promiscuous mode [ 356.423963][T17037] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 356.432157][ T12] veth0_macvtap: left allmulticast mode [ 356.432187][ T12] veth0_macvtap: left promiscuous mode [ 356.467421][ T12] veth1_vlan: left promiscuous mode [ 356.628599][T17045] netlink: 'syz.0.3129': attribute type 2 has an invalid length. [ 356.712278][ T8854] smc: removing ib device syz0 [ 356.762351][T17050] netlink: 'syz.0.3129': attribute type 5 has an invalid length. [ 356.946674][T16575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.990058][T16575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.993931][T17052] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3131'. [ 357.070027][T17037] bond8: entered promiscuous mode [ 357.075731][T17037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 357.109009][T17042] bond8: (slave bridge7): making interface the new active one [ 357.118055][T17042] bridge7: entered promiscuous mode [ 357.127556][T17042] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 357.167586][ T7540] ================================================================== [ 357.175739][ T7540] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 357.184494][ T7540] Read of size 8 at addr ffff8880341a42f0 by task kworker/1:8/7540 [ 357.192385][ T7540] [ 357.194697][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 357.194719][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.194728][ T7540] Workqueue: events smc_ib_port_event_work [ 357.194749][ T7540] Call Trace: [ 357.194755][ T7540] [ 357.194761][ T7540] dump_stack_lvl+0xe8/0x150 [ 357.194777][ T7540] print_report+0xba/0x230 [ 357.194789][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.194800][ T7540] kasan_report+0x117/0x150 [ 357.194811][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.194823][ T7540] __ethtool_get_link_ksettings+0x5e/0x170 [ 357.194835][ T7540] ib_get_eth_speed+0x180/0x7f0 [ 357.194847][ T7540] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 357.194861][ T7540] ? do_raw_spin_unlock+0xf5/0x210 [ 357.194874][ T7540] rxe_query_port+0x93/0x3d0 [ 357.194886][ T7540] ib_query_port+0x170/0x830 [ 357.194899][ T7540] smc_ib_port_event_work+0x15a/0x940 [ 357.194917][ T7540] ? process_scheduled_works+0xa70/0x1860 [ 357.194929][ T7540] ? process_scheduled_works+0xa70/0x1860 [ 357.194942][ T7540] process_scheduled_works+0xb5d/0x1860 [ 357.194962][ T7540] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.194976][ T7540] ? assign_work+0x3d5/0x5e0 [ 357.194988][ T7540] worker_thread+0xa53/0xfc0 [ 357.195008][ T7540] kthread+0x388/0x470 [ 357.195017][ T7540] ? __pfx_worker_thread+0x10/0x10 [ 357.195029][ T7540] ? __pfx_kthread+0x10/0x10 [ 357.195038][ T7540] ret_from_fork+0x514/0xb70 [ 357.195052][ T7540] ? __pfx_ret_from_fork+0x10/0x10 [ 357.195065][ T7540] ? __switch_to+0xc79/0x1410 [ 357.195076][ T7540] ? __pfx_kthread+0x10/0x10 [ 357.195085][ T7540] ret_from_fork_asm+0x1a/0x30 [ 357.195103][ T7540] [ 357.195107][ T7540] [ 357.362397][ T7540] Allocated by task 5819: [ 357.366716][ T7540] kasan_save_track+0x3e/0x80 [ 357.371387][ T7540] __kasan_kmalloc+0x93/0xb0 [ 357.375963][ T7540] __kvmalloc_node_noprof+0x528/0x8a0 [ 357.381323][ T7540] alloc_netdev_mqs+0xa6/0x11b0 [ 357.386160][ T7540] rtnl_create_link+0x31f/0xd70 [ 357.391085][ T7540] rtnl_newlink_create+0x277/0xb70 [ 357.396188][ T7540] rtnl_newlink+0x166a/0x1bb0 [ 357.400849][ T7540] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 357.405773][ T7540] netlink_rcv_skb+0x232/0x4b0 [ 357.410525][ T7540] netlink_unicast+0x75c/0x8e0 [ 357.415278][ T7540] netlink_sendmsg+0x813/0xb40 [ 357.420029][ T7540] __sys_sendto+0x672/0x710 [ 357.424519][ T7540] __x64_sys_sendto+0xde/0x100 [ 357.429269][ T7540] do_syscall_64+0x15f/0xf80 [ 357.433847][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.439723][ T7540] [ 357.442034][ T7540] Freed by task 12: [ 357.445821][ T7540] kasan_save_track+0x3e/0x80 [ 357.450494][ T7540] kasan_save_free_info+0x46/0x50 [ 357.455508][ T7540] __kasan_slab_free+0x5c/0x80 [ 357.460262][ T7540] kfree+0x1c1/0x620 [ 357.464144][ T7540] device_release+0xc4/0x1f0 [ 357.468726][ T7540] kobject_put+0x228/0x560 [ 357.473134][ T7540] netdev_run_todo+0xc75/0xde0 [ 357.477889][ T7540] default_device_exit_batch+0x986/0xa00 [ 357.483547][ T7540] ops_undo_list+0x52b/0x940 [ 357.488125][ T7540] cleanup_net+0x56b/0x800 [ 357.492539][ T7540] process_scheduled_works+0xb5d/0x1860 [ 357.498076][ T7540] worker_thread+0xa53/0xfc0 [ 357.502748][ T7540] kthread+0x388/0x470 [ 357.506804][ T7540] ret_from_fork+0x514/0xb70 [ 357.511384][ T7540] ret_from_fork_asm+0x1a/0x30 [ 357.516144][ T7540] [ 357.518456][ T7540] The buggy address belongs to the object at ffff8880341a4000 [ 357.518456][ T7540] which belongs to the cache kmalloc-cg-4k of size 4096 [ 357.532760][ T7540] The buggy address is located 752 bytes inside of [ 357.532760][ T7540] freed 4096-byte region [ffff8880341a4000, ffff8880341a5000) [ 357.546638][ T7540] [ 357.548958][ T7540] The buggy address belongs to the physical page: [ 357.555351][ T7540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x341a0 [ 357.564106][ T7540] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 357.572677][ T7540] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 357.580211][ T7540] page_type: f5(slab) [ 357.584180][ T7540] raw: 00fff00000000040 ffff88813fe44500 dead000000000100 dead000000000122 [ 357.592764][ T7540] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 357.601347][ T7540] head: 00fff00000000040 ffff88813fe44500 dead000000000100 dead000000000122 [ 357.609998][ T7540] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 357.618655][ T7540] head: 00fff00000000003 ffffea0000d06801 00000000ffffffff 00000000ffffffff [ 357.627333][ T7540] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 357.635986][ T7540] page dumped because: kasan: bad access detected [ 357.642475][ T7540] page_owner tracks the page as allocated [ 357.648186][ T7540] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5197, tgid 5197 (udevd), ts 41041403052, free_ts 33752144322 [ 357.669023][ T7540] post_alloc_hook+0x231/0x280 [ 357.673785][ T7540] get_page_from_freelist+0x24dc/0x2580 [ 357.679318][ T7540] __alloc_frozen_pages_noprof+0x18d/0x380 [ 357.685130][ T7540] allocate_slab+0x77/0x660 [ 357.689642][ T7540] refill_objects+0x331/0x3c0 [ 357.694323][ T7540] __pcs_replace_empty_main+0x2e6/0x730 [ 357.699858][ T7540] __kvmalloc_node_noprof+0x657/0x8a0 [ 357.705215][ T7540] seq_read_iter+0x202/0xe10 [ 357.709790][ T7540] vfs_read+0x582/0xa70 [ 357.713943][ T7540] ksys_read+0x150/0x270 [ 357.718170][ T7540] do_syscall_64+0x15f/0xf80 [ 357.722755][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.728645][ T7540] page last free pid 5289 tgid 5289 stack trace: [ 357.734956][ T7540] __free_frozen_pages+0xc2b/0xdb0 [ 357.740151][ T7540] __slab_free+0x263/0x2b0 [ 357.744558][ T7540] qlist_free_all+0x97/0x100 [ 357.749184][ T7540] kasan_quarantine_reduce+0x148/0x160 [ 357.754739][ T7540] __kasan_slab_alloc+0x22/0x80 [ 357.759593][ T7540] kmem_cache_alloc_noprof+0x2bc/0x650 [ 357.765059][ T7540] do_getname+0x2e/0x250 [ 357.769307][ T7540] __x64_sys_execve+0x7a/0xc0 [ 357.774012][ T7540] do_syscall_64+0x15f/0xf80 [ 357.778593][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.784486][ T7540] [ 357.786795][ T7540] Memory state around the buggy address: [ 357.792407][ T7540] ffff8880341a4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.800452][ T7540] ffff8880341a4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.808498][ T7540] >ffff8880341a4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.816548][ T7540] ^ [ 357.824240][ T7540] ffff8880341a4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.832482][ T7540] ffff8880341a4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.840535][ T7540] ================================================================== [ 357.862147][ T7540] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.869534][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 357.878919][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.888999][ T7540] Workqueue: events smc_ib_port_event_work [ 357.895008][ T7540] Call Trace: [ 357.898301][ T7540] [ 357.901253][ T7540] vpanic+0x56c/0xa60 [ 357.905253][ T7540] ? __pfx_vpanic+0x10/0x10 [ 357.909776][ T7540] ? __pfx___schedule+0x10/0x10 [ 357.914647][ T7540] panic+0xc5/0xd0 [ 357.918386][ T7540] ? __pfx_panic+0x10/0x10 [ 357.922830][ T7540] ? preempt_schedule_common+0x82/0xd0 [ 357.928301][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.934289][ T7540] check_panic_on_warn+0x89/0xb0 [ 357.939241][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.945246][ T7540] end_report+0x73/0x170 [ 357.949477][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.955451][ T7540] kasan_report+0x128/0x150 [ 357.960046][ T7540] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.966014][ T7540] __ethtool_get_link_ksettings+0x5e/0x170 [ 357.971819][ T7540] ib_get_eth_speed+0x180/0x7f0 [ 357.976665][ T7540] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 357.982029][ T7540] ? do_raw_spin_unlock+0xf5/0x210 [ 357.987219][ T7540] rxe_query_port+0x93/0x3d0 [ 357.991798][ T7540] ib_query_port+0x170/0x830 [ 357.996392][ T7540] smc_ib_port_event_work+0x15a/0x940 [ 358.001767][ T7540] ? process_scheduled_works+0xa70/0x1860 [ 358.007507][ T7540] ? process_scheduled_works+0xa70/0x1860 [ 358.013217][ T7540] process_scheduled_works+0xb5d/0x1860 [ 358.018776][ T7540] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.024847][ T7540] ? assign_work+0x3d5/0x5e0 [ 358.029430][ T7540] worker_thread+0xa53/0xfc0 [ 358.034017][ T7540] kthread+0x388/0x470 [ 358.038079][ T7540] ? __pfx_worker_thread+0x10/0x10 [ 358.043177][ T7540] ? __pfx_kthread+0x10/0x10 [ 358.047752][ T7540] ret_from_fork+0x514/0xb70 [ 358.052334][ T7540] ? __pfx_ret_from_fork+0x10/0x10 [ 358.057431][ T7540] ? __switch_to+0xc79/0x1410 [ 358.062097][ T7540] ? __pfx_kthread+0x10/0x10 [ 358.066672][ T7540] ret_from_fork_asm+0x1a/0x30 [ 358.071539][ T7540] [ 358.074886][ T7540] Kernel Offset: disabled [ 358.079221][ T7540] Rebooting in 86400 seconds..