last executing test programs: 6.359322424s ago: executing program 2 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0xf4, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r6, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94b54cce6396c3599431c882366da01"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000410}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040840}, 0x40000) (async) syz_emit_ethernet(0x1d2, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x19c, 0x11, 0x0, @remote, @mcast2, {[@fragment={0x2b, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x5c, 0x2, '\x00', [@hao={0xc9, 0x10, @local}, @padn]}, @routing={0x33, 0x12, 0x2, 0x1, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00', @mcast2, @empty, @mcast2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x9, 0x18, 0x9, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2]}, @fragment={0x5c, 0x0, 0x3, 0x1, 0x0, 0x1e, 0x65}, @hopopts={0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb69a691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) 6.040708236s ago: executing program 2 (id=2688): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 5.747693042s ago: executing program 2 (id=2692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1, 0x7fffffff}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'team0\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 5.092005271s ago: executing program 2 (id=2700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.897116839s ago: executing program 1 (id=2702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000107010200000000000000000a0000091400078008000240ffff06000800014000000190fbc00423908c6e7656383505f2d6579202abb1e1007833ada980eecebf593818d9862a1a4849992bf9242b89675b7d1d3c9a5d0a3c6d12df9a225c21ae"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 4.530314534s ago: executing program 4 (id=2706): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'batadv_slave_1\x00', {0x7}, 0xc87d}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a3000000000080009"], 0x558}}, 0x40) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="220b20078ea09a4e000202"], 0xb) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r1, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 4.367854515s ago: executing program 3 (id=2709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @private, @loopback}, &(0x7f0000000540)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x400000, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1e39cc67eb00ec94}}, [@qdisc_kind_options=@q_cake={{0xfffffffffffffeef}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4049004) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@deltclass={0x24, 0x29, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {0xfff0, 0xa}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x11) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f00000002c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="72a85c2933939e2d7e91802ebec04d14212a6e474c577fea6fbbb15551753ea4f2aebf331100c11955b5b25817121ebf487a6f4c2272f6368267cf9d05f400001fb41a868bbd4c36c55a3e2cf6d69aa5d3fbe9236c192c60a70e263d340864b09aa4fb3fac1387c63b60fb521f5f221f5d2c93f9b848bd88306d80848088e460c9e8934d597f67ae09", @ANYRES16=r9, @ANYBLOB="000425bd7000fcdbdf252600000008000300", @ANYRES32=r10, @ANYBLOB="0a004f00caaf85a0641400000a00060008021100000000001e00940008001e388200000000000009000000060000000600ff7f0000070000"], 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x40440c0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 4.203654111s ago: executing program 1 (id=2710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010026bd7002ffdbb9250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048854}, 0x40044) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0xd, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) 4.171147122s ago: executing program 2 (id=2711): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90) 4.125775482s ago: executing program 4 (id=2712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 3.911496035s ago: executing program 1 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe35, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x48000) 3.897790558s ago: executing program 0 (id=2715): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r7) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, 0x0, 0x0) (async) close(0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async) syz_emit_ethernet(0xae, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "fe06000000e3"}]}}}}}}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5034eceb61780000"], 0x0) (async) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000001800)={0x0, 0xea60}, 0x10) (async, rerun: 32) read(r10, &(0x7f0000008840)=""/4096, 0x1000) (rerun: 32) socket(0x2b, 0x1, 0x0) 3.722790972s ago: executing program 3 (id=2716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket(0x22, 0x1, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f00000003c0)='cubic\x00', 0x6) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x12c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8c, 0x1d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xa6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xf113}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7de}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e51}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xec}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8d}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x200}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x101, 0x9, 0x7fffffff, 0xfffffffeffffffff, 0xd8, 0xc], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) (async) r6 = socket$inet6(0xa, 0x3, 0x2f) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f00000000c0)={0x21}) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x1000, 0xfffc, 0x0, 0xa}, {0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0x80000000000000}, 0x0, 0x6e6bb3, 0x1, 0x0, 0x6}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010102, 0x34ff, 0x0, 0x0, 0x3, 0xe7, 0x0, 0x2c07}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.699791398s ago: executing program 1 (id=2717): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r1, &(0x7f0000000400)=""/130, 0x82, 0x82, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket(0x400000000010, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000040)="946058c8b3b6b3c2915df08b786883535d117fc7d56886cbb690d5fd9c2200bc0fdb5a5f4cbcd335", 0x28, 0x8040, &(0x7f00000000c0)={0x11, 0x1a, r5, 0x1, 0x9, 0x6, @link_local}, 0x14) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) 3.452187814s ago: executing program 0 (id=2718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000a702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000d00b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) 3.3755266s ago: executing program 3 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x118, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd1e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffc01}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4841}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="054b24298a00000000006b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) 3.124095275s ago: executing program 0 (id=2720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b"], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r2], 0xfe33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000000000007110390000000900a1ff10bbfe000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 3.110110606s ago: executing program 3 (id=2721): close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x37, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000844) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000540)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) 3.006840601s ago: executing program 4 (id=2722): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_POLICE={0x0, 0x4, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x5}, @TCA_POLICE_RESULT={0x0, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x0, 0x1, {0x10001, 0x8, 0x1, 0x3, 0x1, {0xbc, 0x2, 0x8000, 0x1000, 0x4, 0x5}, {0x67, 0x1, 0x9, 0x6, 0x3, 0xfffffc01}, 0x3, 0xbc, 0x383f}}, @TCA_POLICE_RATE={0x0, 0x2, [0x200, 0x10000, 0x2, 0x4, 0x2, 0x9, 0x0, 0x0, 0x9, 0x7fff, 0x1, 0x1, 0x9, 0xfffffffd, 0x7f, 0x40, 0x1000, 0x7, 0x0, 0x43, 0x1, 0x5da, 0x1, 0x0, 0x748, 0x6, 0x7f, 0x80000000, 0x6, 0x4, 0x7, 0x7, 0x7, 0x9, 0x81, 0x8, 0x3c, 0x8, 0xd3, 0x6, 0x80000000, 0x40, 0x4, 0x3, 0x9, 0xdae9, 0x3, 0x8, 0xfffffff9, 0xfffffffc, 0x2, 0x0, 0xffffff7f, 0x7, 0x5, 0x7, 0x1ff, 0xffffffff, 0x1, 0x40, 0x1, 0x3, 0x7, 0x6, 0x3, 0x158, 0x4ced13b8, 0x9, 0x9, 0x5, 0xbb7e, 0x1, 0x756, 0xfffffffe, 0xfffffff9, 0x9, 0x3, 0x7, 0x12, 0x0, 0x1316b499, 0x2, 0x10000, 0x81, 0x7fffffff, 0x0, 0x5, 0x9, 0xfffffc00, 0x4, 0x0, 0x8, 0xffffffff, 0x8, 0x1, 0x101, 0x1000, 0xa, 0x7fffffff, 0x76, 0x3264, 0x6, 0x80000001, 0xb21, 0x7, 0x2, 0x2, 0x5, 0x5, 0xd5, 0xf11b, 0x9, 0x9, 0x8, 0x6, 0x1, 0x401, 0xffff0001, 0x6, 0x8, 0x1, 0x4, 0xfffffffd, 0x3ff, 0x4, 0x3, 0x5, 0xb, 0x1000, 0x80000001, 0xb, 0x5, 0x3ff, 0x1ff, 0x5, 0x7, 0x0, 0x53, 0x2, 0x8d8a, 0x2, 0x1ff, 0x1, 0xffffff81, 0x40, 0x3b1, 0xf, 0x3, 0x9, 0x234, 0x9, 0xd, 0xa, 0x35f06b20, 0x0, 0x8, 0x50b, 0x1, 0x7ff, 0xa7944e2, 0x3, 0xfff, 0x4, 0x8, 0x0, 0x0, 0x6, 0x30d, 0x9, 0x6, 0xc, 0x5, 0x4, 0x0, 0x5, 0x1000, 0x0, 0x7ff, 0x2, 0x0, 0x10, 0xe62, 0x9, 0x2, 0x0, 0x19e000, 0x6, 0x7, 0x7, 0x2, 0x5, 0x0, 0x1b, 0x100, 0x200, 0x3, 0x0, 0x6, 0x40, 0x8a9, 0x81, 0x2, 0x2, 0x7, 0xf7, 0xf3c, 0x1, 0x0, 0x8, 0x0, 0x5, 0x6, 0x2, 0x7, 0x400, 0x5, 0x3, 0x1, 0x7, 0x8, 0x8, 0x6, 0x40, 0x3ff, 0x9, 0xf, 0x7, 0x48, 0x7ff, 0x8, 0x3, 0x5, 0x7, 0x5, 0x9, 0x9, 0x3, 0x200, 0x1000, 0x4, 0xfffffe00, 0x3, 0x3, 0x9dfe, 0x3, 0x3, 0xe56c, 0xfffffff0, 0x3, 0x2, 0x9, 0x3ff, 0x7, 0x9a59, 0x2, 0x6]}, @TCA_POLICE_RATE64={0x0, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x1}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r6 = socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700090700bd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x6, 0x0, 0x19, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x1, 0x6, 0x1, 0x7, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r7], &(0x7f0000000500)=[{0x3, 0x5, 0x6, 0xa}, {0x5, 0x3, 0xe, 0x8}, {0x1, 0x3, 0xe, 0x6}, {0x1, 0x2, 0xc, 0xc}, {0x5, 0x5, 0xe, 0x5}, {0x1, 0x4, 0x6}, {0x5, 0x5, 0x4, 0x5}, {0x3, 0x2, 0x6, 0x2}], 0x10, 0x654e}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='+\x00'/12, @ANYRES32=r10, @ANYBLOB="c52c7c1bdf132d6a8432a091ab9d6d", @ANYRES64=r9], 0x20) 2.845304288s ago: executing program 3 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) (async) 2.737601417s ago: executing program 0 (id=2724): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r1}, 0x38) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xae, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2f, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x21c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4ff}, @ldst={0x2, 0x3, 0x6, 0xb, 0xa, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000580)='syzkaller\x00', 0x28, 0x2f, &(0x7f00000005c0)=""/47, 0x41100, 0x0, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x7, 0xffff, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0x14, 0x31, &(0x7f0000000740)="c756512a5ba4cb80fe393017b1f3b0d22ea3cbab", &(0x7f0000000780)=""/49, 0x7, 0x0, 0xd6, 0x58, &(0x7f00000007c0)="bd6f933523dadaa723ebe64db8380bb132a76c12318d942591c40a09d54f098c82f3e0f2445f0aa7a1f6f41e902a0175a72da1caace57dc56d3e78450d410fa638d25a6724f09c109dbbb3572103deed41771a14ed16e0b1c2b3f41e972a71c67fa05e275fa125a5634ae2c7c011a6f7af2a85ff09b38dd0a0c54d516e4b3b0a1ae44560ca53ca2379213ec40c098a965c44d25cbcc6c488ca79165800d6d2e9835636441c0fdcfff5310a3141ac6a374d223faccfe5d35332e638e798e30e0b1afa59147c2a1a29ec29d3c92436bf3daef7b6abe7c9", &(0x7f00000008c0)="183101bf54d1fb402c2b1b4108e96a0b12ab5be4e2db4bfe76499d6011a3c079471c4bcef5ba00425889bd220f4bfc983454c649462752b8e7dfad0abc7b26f2dbd3472e8306544a9e06b95d95883adef994f4771c23af67", 0xd, 0x0, 0xf4f7}, 0x50) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf25070000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.662903621s ago: executing program 4 (id=2725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x68}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 2.662208346s ago: executing program 2 (id=2726): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0x6}, {0xa, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4008080) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) pread64(r5, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) 2.659010322s ago: executing program 1 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000001080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0xa, 0x3, 0x3a) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xffffffff, 0xfffffffc}, 0x10) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) ioctl$SIOCGETVIFCNT(r10, 0x89e0, &(0x7f0000000000)) getsockopt$bt_hci(r9, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 2.544529391s ago: executing program 3 (id=2728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040886}, 0x80) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r8, 0x11b, 0x9, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c087}, 0x2000400c) accept4(r0, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r13) sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000002e00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 2.361177994s ago: executing program 0 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf, 0x34}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x41800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x0, &(0x7f0000000200)}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x4000011) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9e}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r3) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x53}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38c}]}, 0x2c}}, 0xc040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0x7e, "b8021826774d1f0fb7308bfb3afc793d8909c6fb7481b1f4f6c3afd6d6f049cf2d4dd32367b1779088df9a550ad95d8d3213e47cb2bae44baf0a11f8f749e4fac29ba49c06675a6994ada6707eb9ef7eb4160b587663e308ec54209c9d3151c82c3083b4e72624d56e69faf72032675ddba00711c5afe41318708967c40b"}, &(0x7f00000006c0)=0x86) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x440}, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x50000040}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x2, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r7) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r10, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x40, 0x32}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "54d24c3c25"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "002b13afa3"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "29858b"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "fafe356f"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000cc0)) getpeername$packet(r3, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000d80)={'netpci0\x00', {0x2, 0x4e21, @loopback}}) sendmsg$nl_generic(r9, &(0x7f0000002140)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000000e00)={0x12f4, 0x31, 0x30a, 0x70bd26, 0x25dfdbff, {0x7}, [@nested={0x113b, 0xb7, 0x0, 0x1, [@typed={0x8, 0xd3, 0x0, 0x0, @str=':.}\x00'}, @typed={0x8, 0x14a, 0x0, 0x0, @fd=r7}, @typed={0x1004, 0x50, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x4b}, @generic="1d7bd75646950b199de6d8e8991306c56983d1d4f6356850f075cd1b8b0519149552d4aa3e6277fd74f9d6e912919195d9d486ca36de3d9e3ed76da680c03d973087c99b90b0d9d1436ac29e4b63d517ca330896c470ff", @generic="97cbe942831e84b05507509ca83fe82d516f3e766fd854a72b970f123c4f01e3b4d2817a848077d76e66ac869ec36651d22b1aa2b8a6407145dd92cf46f5bac0ac833c48e39ee9f2ab2e52abb4a544ec227b83da49202eadc28b831abe29b4cec712357f15916e49422c731ad68dbe9242352b8a5e9bcebfea3bdfffa375d2f0a0cd8db962df05f1db4d2ffd97cf34855b50ec2dde2bbd2137407c24ee196c3963eafe233ba9fb54685119b2664eab7ef9fc89d85e5cb0e342002ac3b6a5315b86704e08", @typed={0x4, 0x5f}]}, @generic="e24271cd349321e8b5dcc9aa8c50d7bcdf4faff87653b0cd127bddd136134ec7df7ddc99f3872198ff0b8f9297fc378c32a5d380184af69804016f2b25519228c781bfff75e7eeacab87a6dc097e95da3549591a0ad9fb520be6c2d2b6012bf1fa4f91b53398f2748b47c8aff12f08cc764afa8faa7fde9a9e8679cc3d0829bd57c9369c4a92479aacf258c92c7f15b8779415e05b3594e7817e3df615c07cb4a0e750", @generic="615387709ed9607008614e4068a5143f4c11601c8c043c00f43c574daadfc328bd2d2e5066bf966afd06c1155e85cc0b188d1fe11ccec87e9e8a1a354c82677c7dbc8887439ca4dd0aa2e2ba8cfb562f0b949ab0482617b56dfd3c401045500d4e53eb2d7987b5e7014e6b73c6152540cdc1e6eb8555635b6fb99a4c9a54090332c7f7699959a88c59e4d3f91ac372dc21349fc57512646bf36df58295494e34d5fcb21897c1ffcf8ff49fc5f6b9d65ff9803d41617a63d3b57318d4873188b15abb8fa3164a9b5192dccacb92fb77d1e45649a212fbb787f478cc43babe267668201dbc0a2a224459c66696b263eebad0be0a844600f4c38f27f5c696f9"]}, 0x12f4}, 0x1, 0x0, 0x0, 0x80000}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002180)={'wlan1\x00'}) 2.36012434s ago: executing program 4 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000a702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000e00b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) 1.439355261s ago: executing program 4 (id=2731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000040)="79877d46a32efb24d973ec68d4e96a7121ea0c447616240677bd2110fd0ee79c7283188e631d255ade95078f87c93051ceb4b21d", &(0x7f0000000080)=""/174, &(0x7f0000000140)="439ba97b0b506f675f8165d6ea0d847dd6d0888c1ba98bb21a032ea7dfdb7b36e05a2b44b6fb1bfaef4230ff6c71697006880a741144d53b7c098d6c7e0e881fd054dd80e54b6c3799daa6caa6beee2ce318d1f8f26a05b251a8918754c5cbffd509ba883ff60ef2ef9213dfd545275c8bdf4a92bce2e1d94e1ad0324f2c1e3eb3843e77c341415140ca8c1296562b593c54366351333903f8e20f91d724001aa2aa624ef0ca7f2e0cbd949b5d09e1288f19", &(0x7f00000002c0)="37280913e4101e8ef229f6be6c380545f1800ed314869445f1c94016b717f6dd4c9ca68e6ff8214428c49df75c1678575a0019d5115f70b9975d4035", 0xfffffffa, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r3, @ANYRES32=r0], 0xfdef) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r5, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) 915.293619ms ago: executing program 0 (id=2732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 1 (id=2733): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, r1, 0x215eb000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x14c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000002000000000000000000800084e639d43bc06aade800000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB="008000000000000000000000000000000000e5ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07000000000000009cb4fbd11ca006c59cf6a3d2e3692f41d34fa2340367543ce70986926e3fdaa78a"], 0x340a) (async, rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140)="14b823fd096a9d1333520980dd4f267af80b0efc7b3b2b775ecd015bf98a63495e13b2ec104bd0d707ddbe672c71aba9828f022e1139dc312f804308ec8382", &(0x7f0000000400)=""/112}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r4, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000080)={0x200, 0x401, 0x2, 0xb34, 0x401}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) kernel console output (not intermixed with test programs): are; use nl80211 [ 87.845241][ T5842] Zero length message leads to an empty skb [ 87.856177][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.896006][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.925821][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.992295][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.032212][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.063330][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.093359][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.146093][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.177103][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.214377][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.236708][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.246558][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.320830][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.634949][ T5877] syz.4.28 uses obsolete (PF_INET,SOCK_PACKET) [ 88.652746][ T5878] team0: Cannot enslave team device to itself [ 88.929811][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.133721][ T5903] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 89.173397][ T5903] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 89.674344][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 89.694978][ T5922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.38'. [ 89.718134][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 89.852496][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 89.920404][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 90.364232][ T5950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.881202][ T5971] netlink: 80 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.885929][ T5974] netlink: 88 bytes leftover after parsing attributes in process `syz.3.57'. [ 132.763105][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769579][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.957948][ T6053] __nla_validate_parse: 8 callbacks suppressed [ 140.957966][ T6053] netlink: 72 bytes leftover after parsing attributes in process `syz.0.78'. [ 140.972256][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 141.032243][ T6051] syzkaller0: entered promiscuous mode [ 141.045349][ T6051] syzkaller0: entered allmulticast mode [ 141.225491][ T6065] gre1: entered promiscuous mode [ 141.259365][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'. [ 141.304228][ T6071] tipc: Enabling of bearer rejected, failed to enable media [ 141.493374][ T134] IPVS: starting estimator thread 0... [ 141.493659][ T6082] IPVS: ip_vs_edit_dest(): server weight less than zero [ 141.525261][ T6083] netlink: 'syz.0.88': attribute type 3 has an invalid length. [ 141.593510][ T6087] IPVS: using max 32 ests per chain, 76800 per kthread [ 141.620025][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 141.683135][ T6097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.92'. [ 141.693604][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 141.786676][ T6102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.828259][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 142.250664][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 142.315902][ T6144] netlink: 'syz.4.103': attribute type 30 has an invalid length. [ 142.317023][ T6126] geneve1: entered promiscuous mode [ 142.347695][ T6126] geneve1: entered allmulticast mode [ 142.477233][ T6159] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 142.485368][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.107'. [ 142.515657][ T6144] bond1: option arp_missed_max: invalid value (0) [ 142.536022][ T6162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.105'. [ 142.562165][ T6144] bond1: option arp_missed_max: allowed values 1 - 255 [ 142.645922][ T6170] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 142.760283][ T6144] bond1 (unregistering): Released all slaves [ 143.035258][ T6186] netlink: 'syz.4.112': attribute type 11 has an invalid length. [ 143.043793][ T6187] netlink: 'syz.4.112': attribute type 11 has an invalid length. [ 143.250624][ T6196] Bluetooth: MGMT ver 1.23 [ 143.488632][ T6197] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.525623][ T6197] bond1 (unregistering): Released all slaves [ 143.564152][ T6196] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.579070][ T6196] bond1 (unregistering): Released all slaves [ 144.035542][ T6235] bond1: Unable to set down delay as MII monitoring is disabled [ 144.046748][ T6235] bond1 (unregistering): Released all slaves [ 144.614973][ T6281] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 144.636365][ T6281] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 145.753542][ T6350] x_tables: duplicate underflow at hook 1 [ 145.793662][ T6353] x_tables: duplicate underflow at hook 1 [ 145.970963][ T6360] __nla_validate_parse: 13 callbacks suppressed [ 145.970982][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.163'. [ 146.046902][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 146.371837][ T6379] netlink: 344 bytes leftover after parsing attributes in process `syz.1.168'. [ 146.598536][ T6398] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'. [ 146.620137][ T6394] sctp: [Deprecated]: syz.4.174 (pid 6394) Use of int in max_burst socket option. [ 146.620137][ T6394] Use struct sctp_assoc_value instead [ 146.683376][ T6391] syzkaller0: entered promiscuous mode [ 146.690621][ T6391] syzkaller0: entered allmulticast mode [ 146.735815][ T6391] netlink: 'syz.2.172': attribute type 29 has an invalid length. [ 146.747408][ T6395] netlink: 'syz.2.172': attribute type 29 has an invalid length. [ 147.260236][ T6427] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 147.380063][ T6430] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 148.655432][ T6445] netlink: 'syz.4.186': attribute type 2 has an invalid length. [ 148.695704][ T6445] netlink: 'syz.4.186': attribute type 8 has an invalid length. [ 148.866250][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 149.114131][ T6464] bond1: entered promiscuous mode [ 149.136702][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.179475][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'. [ 149.216895][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.241839][ T6482] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 149.277554][ T6482] bond1: (slave sit1): Error -95 calling set_mac_address [ 149.450246][ T6500] netlink: 'syz.0.201': attribute type 15 has an invalid length. [ 149.527377][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 150.541631][ T6558] xt_ipcomp: unknown flags 1D [ 150.564410][ T6558] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.219'. [ 150.621701][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'. [ 150.777130][ T6569] batadv_slave_1: entered promiscuous mode [ 150.783915][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'. [ 151.606169][ T6567] batadv_slave_1: left promiscuous mode [ 153.011348][ T6532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.201465][ T6581] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 153.211869][ T6582] ipt_REJECT: TCP_RESET invalid for non-tcp [ 153.220713][ T6581] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 153.374963][ T6592] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 153.504937][ T6603] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 153.549647][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 153.558432][ T6610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.235'. [ 153.560846][ T6599] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 153.589057][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 153.618282][ T6602] veth3: entered promiscuous mode [ 153.626515][ T6602] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 153.733990][ T6603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.843692][ T6622] netlink: 'syz.0.238': attribute type 2 has an invalid length. [ 153.970396][ T6619] bond2: (slave geneve2): making interface the new active one [ 153.981633][ T6619] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 154.196081][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 154.229068][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 154.255599][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 154.435538][ T57] IPVS: starting estimator thread 0... [ 154.439818][ T6651] netlink: 116 bytes leftover after parsing attributes in process `syz.3.246'. [ 154.455109][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.247'. [ 154.476806][ T6651] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 154.478472][ T6654] netlink: 'syz.0.247': attribute type 5 has an invalid length. [ 154.523383][ T6655] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.978407][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 154.988578][ T6684] netlink: 6 bytes leftover after parsing attributes in process `syz.0.259'. [ 155.324116][ T6701] tipc: Can't bind to reserved service type 0 [ 155.586214][ T6724] Cannot find add_set index 2 as target [ 155.591957][ T6723] Cannot find add_set index 2 as target [ 155.979194][ T6742] netlink: 'syz.1.276': attribute type 26 has an invalid length. [ 156.308098][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.317432][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.844550][ T6762] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 157.183920][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.215432][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.470333][ T6755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.497689][ T6772] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 157.513960][ T6772] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 157.529022][ T6788] syzkaller0: entered promiscuous mode [ 157.581181][ T6788] syzkaller0: entered allmulticast mode [ 157.612207][ T751] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.682192][ T1110] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.706651][ T1110] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.743623][ T1110] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.764082][ T6807] tipc: Trying to set illegal importance in message [ 158.171214][ T6830] tipc: Started in network mode [ 158.195710][ T6830] tipc: Node identity 625dc47bf82, cluster identity 4711 [ 158.236882][ T6830] tipc: Enabled bearer , priority 11 [ 158.833605][ T6866] 8021q: VLANs not supported on ipvlan1 [ 158.884880][ T6865] __nla_validate_parse: 8 callbacks suppressed [ 158.884897][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 159.072727][ T6880] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 159.125761][ T6883] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 159.145523][ T6880] : entered promiscuous mode [ 159.319806][ T6892] ip6erspan0: entered allmulticast mode [ 159.368620][ T6801] tipc: Node number set to 2591933563 [ 159.385260][ T6897] netlink: 'syz.4.318': attribute type 10 has an invalid length. [ 159.439825][ T6897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.318'. [ 159.477520][ T6897] team0: entered allmulticast mode [ 159.511532][ T6897] team_slave_0: entered allmulticast mode [ 159.533635][ T6897] team_slave_1: entered allmulticast mode [ 159.545603][ T6897] bridge0: port 3(team0) entered blocking state [ 159.555142][ T6897] bridge0: port 3(team0) entered disabled state [ 159.567799][ T6897] team0: entered promiscuous mode [ 159.576355][ T6897] team_slave_0: entered promiscuous mode [ 159.583040][ T6912] netlink: 420 bytes leftover after parsing attributes in process `syz.3.320'. [ 159.583156][ T6897] team_slave_1: entered promiscuous mode [ 159.599167][ T6897] bridge0: port 3(team0) entered blocking state [ 159.605664][ T6897] bridge0: port 3(team0) entered forwarding state [ 159.648615][ T6912] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 159.777557][ T6920] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 159.781213][ T6917] Cannot find set identified by id 0 to match [ 159.791964][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 159.816471][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.817390][ T6917] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 159.997973][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 160.531551][ T6960] ipt_REJECT: TCP_RESET invalid for non-tcp [ 160.682688][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.243260][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.306654][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 161.319065][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 161.372292][ T751] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.395477][ T751] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.409760][ T751] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.428233][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 161.450603][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 161.474083][ T751] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.506166][ T7020] netlink: Failed to add  helper -22 [ 161.511905][ T7020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.727040][ T3290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.737465][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.750223][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.186601][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 162.535188][ T7078] bond2: option xmit_hash_policy: invalid value (64) [ 162.568759][ T7095] netlink: 'syz.4.377': attribute type 6 has an invalid length. [ 162.586104][ T7078] bond2 (unregistering): Released all slaves [ 162.597316][ T7093] Bluetooth: MGMT ver 1.23 [ 162.781337][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.011907][ T7112] tipc: Started in network mode [ 163.029482][ T7112] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 163.054514][ T7112] tipc: Enabled bearer , priority 10 [ 163.066667][ T7119] bond0: invalid NS target :: specified for addition [ 163.076610][ T7119] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 163.249490][ T7125] sctp: [Deprecated]: syz.3.386 (pid 7125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.249490][ T7125] Use struct sctp_sack_info instead [ 163.583993][ T7152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.784965][ T7169] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 163.802885][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.903810][ T7175] syzkaller1: entered promiscuous mode [ 163.922696][ T7175] syzkaller1: entered allmulticast mode [ 164.112703][ T7184] __nla_validate_parse: 4 callbacks suppressed [ 164.112720][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 164.171835][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.405'. [ 164.173410][ T42] tipc: Node number set to 10136234 [ 164.273242][ T7193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.409'. [ 164.503465][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 164.540225][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 164.561624][ T7215] netlink: 2 bytes leftover after parsing attributes in process `syz.3.415'. [ 164.631642][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 164.680071][ T7225] xt_ipcomp: unknown flags 1D [ 164.913571][ T7233] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 164.928021][ T7233] bond3 (unregistering): Released all slaves [ 165.053142][ T7253] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 165.231679][ T7254] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 165.380246][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 165.465242][ T7275] ovs-system: entered promiscuous mode [ 165.486147][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 165.542991][ T7275] openvswitch: ovs-system: Dropping previously announced user features [ 165.620513][ T7279] syzkaller0: entered promiscuous mode [ 165.655715][ T7279] syzkaller0: entered allmulticast mode [ 165.678780][ T7290] macvlan2: entered promiscuous mode [ 165.684191][ T7290] macvlan2: entered allmulticast mode [ 165.689959][ T7290] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 165.723035][ T7279] IPv6: sit1: Disabled Multicast RS [ 165.729593][ T7279] sit1: entered allmulticast mode [ 165.881439][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 165.892415][ T5808] net_ratelimit: 3 callbacks suppressed [ 165.892431][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.039124][ T7291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.061175][ T7311] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 166.116876][ T7291] bond0: (slave bond2): Enslaving as an active interface with a down link [ 166.137023][ T7313] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 166.392443][ T7327] netlink: 'syz.4.451': attribute type 2 has an invalid length. [ 166.409653][ T7329] xt_TCPMSS: Only works on TCP SYN packets [ 166.436120][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.520943][ T7331] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 166.587551][ T7336] tunl0: entered promiscuous mode [ 166.607410][ T7336] netlink: 'syz.3.456': attribute type 3 has an invalid length. [ 166.923671][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.714664][ T7400] netlink: 'syz.4.482': attribute type 2 has an invalid length. [ 167.964257][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.973590][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.983173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.273161][ T7440] IPVS: set_ctl: invalid protocol: 39746 0.0.0.0:20001 [ 168.427241][ T7447] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 168.489093][ T7447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.873616][ T7464] bridge_slave_0: left allmulticast mode [ 168.893201][ T7464] bridge_slave_0: left promiscuous mode [ 168.913494][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.936743][ T7464] bridge_slave_1: left allmulticast mode [ 168.943062][ T7464] bridge_slave_1: left promiscuous mode [ 168.948981][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.971474][ T7464] bond0: (slave bond_slave_0): Releasing backup interface [ 169.000986][ T7464] bond0: (slave bond_slave_1): Releasing backup interface [ 169.010305][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.027722][ T7476] xt_hashlimit: size too large, truncated to 1048576 [ 169.033439][ T7464] team0: Port device team_slave_0 removed [ 169.035110][ T7476] xt_hashlimit: max too large, truncated to 1048576 [ 169.047631][ T7476] xt_hashlimit: overflow, rate too high: 0 [ 169.060009][ T7464] team0: Port device team_slave_1 removed [ 169.074513][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.106240][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.125202][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.132847][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.141581][ T7464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.387147][ T7487] __nla_validate_parse: 9 callbacks suppressed [ 169.387164][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 170.208791][ T7532] netlink: 768 bytes leftover after parsing attributes in process `syz.3.523'. [ 170.358564][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 170.371347][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 170.494995][ T7543] syzkaller0: entered promiscuous mode [ 170.507713][ T7543] syzkaller0: entered allmulticast mode [ 170.595304][ T7551] geneve2: entered promiscuous mode [ 170.600630][ T7551] geneve2: entered allmulticast mode [ 170.608067][ T7551] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 170.725229][ T7555] xt_bpf: check failed: parse error [ 170.777023][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 171.027255][ T1110] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 171.050160][ T7571] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 171.058342][ T7571] netlink: 232 bytes leftover after parsing attributes in process `syz.0.535'. [ 171.074600][ T7571] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 171.512863][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 171.537366][ T7602] netlink: 2 bytes leftover after parsing attributes in process `syz.0.544'. [ 172.089870][ T7629] netlink: 'syz.0.553': attribute type 11 has an invalid length. [ 172.118249][ T7629] netlink: 'syz.0.553': attribute type 11 has an invalid length. [ 172.157457][ T7631] net_ratelimit: 3 callbacks suppressed [ 172.157473][ T7631] openvswitch: netlink: IP tunnel dst address not specified [ 172.174198][ T7629] netlink: 228 bytes leftover after parsing attributes in process `syz.0.553'. [ 172.215436][ T7638] netlink: 'syz.0.553': attribute type 11 has an invalid length. [ 172.226688][ T7634] netlink: 132 bytes leftover after parsing attributes in process `syz.3.555'. [ 172.283013][ T7638] netlink: 'syz.0.553': attribute type 11 has an invalid length. [ 172.311464][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.348571][ T7642] tap0: tun_chr_ioctl cmd 2148553947 [ 172.560085][ T7658] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 172.639950][ T7665] ip_tables: iptables: counters copy to user failed while replacing table [ 172.649387][ T7666] ip_tables: iptables: counters copy to user failed while replacing table [ 172.663610][ T7665] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 172.749626][ T7673] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 172.765038][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.778751][ T7673] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.959380][ T7682] smc: net device team0 applied user defined pnetid SYZ2 [ 173.435597][ T7701] syzkaller0: entered promiscuous mode [ 173.453255][ T7701] syzkaller0: entered allmulticast mode [ 174.026874][ T7735] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 174.083026][ T7749] netlink: 'syz.1.590': attribute type 2 has an invalid length. [ 174.147141][ T7747] netlink: 'syz.0.591': attribute type 21 has an invalid length. [ 174.550068][ T7782] __nla_validate_parse: 9 callbacks suppressed [ 174.550085][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 174.650500][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 174.825998][ T7795] netlink: 388 bytes leftover after parsing attributes in process `syz.1.602'. [ 174.957121][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 175.070069][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 175.101677][ T7818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.165628][ T7821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.316785][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 175.361317][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 175.666400][ T7848] Bluetooth: hci0: unsupported parameter 5135 [ 175.711731][ T7848] Bluetooth: hci0: unsupported parameter 8192 [ 175.735532][ T7848] Bluetooth: hci0: unsupported parameter 5135 [ 175.758005][ T7848] Bluetooth: hci0: unsupported parameter 8192 [ 175.949077][ T7864] syzkaller1: entered promiscuous mode [ 175.958875][ T7864] syzkaller1: entered allmulticast mode [ 175.990848][ T7869] hsr0: entered allmulticast mode [ 176.019559][ T7869] hsr_slave_0: entered allmulticast mode [ 176.031725][ T7869] hsr_slave_1: entered allmulticast mode [ 176.176070][ T7868] bridge_slave_1: entered promiscuous mode [ 176.204807][ T7868] bridge_slave_1: entered allmulticast mode [ 176.896148][ T7924] syzkaller0: entered promiscuous mode [ 176.907290][ T7924] syzkaller0: entered allmulticast mode [ 177.090463][ T7939] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.434285][ T7951] team0: entered promiscuous mode [ 177.515933][ T7953] netlink: 88 bytes leftover after parsing attributes in process `syz.4.650'. [ 177.540458][ T7955] sock: sock_set_timeout: `syz.0.651' (pid 7955) tries to set negative timeout [ 177.560905][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 177.778401][ T7965] syzkaller0: entered promiscuous mode [ 177.794334][ T7965] syzkaller0: entered allmulticast mode [ 177.863367][ T7973] vlan2: entered promiscuous mode [ 177.879974][ T7973] bridge0: entered promiscuous mode [ 177.958803][ T7980] xt_hashlimit: size too large, truncated to 1048576 [ 178.030839][ T7985] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.660'. [ 178.110215][ T7985] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 178.136350][ T7985] 0ªX¹¦Dö»: entered allmulticast mode [ 178.627417][ T8011] netlink: Conntrack attr has 12 unknown bytes [ 178.651551][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.666166][ T8010] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 178.734364][ T8010] bond1: entered promiscuous mode [ 178.741470][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.884395][ T8010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.911325][ T8010] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 178.945999][ T8010] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 178.968999][ T8010] bond1: (slave ipip0): making interface the new active one [ 178.980003][ T8010] ipip0: entered promiscuous mode [ 178.987836][ T8010] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 179.445029][ T8052] xfrm1: entered promiscuous mode [ 179.453359][ T8052] xfrm1: entered allmulticast mode [ 179.650489][ T8066] __nla_validate_parse: 81 callbacks suppressed [ 179.650507][ T8066] netlink: 168 bytes leftover after parsing attributes in process `syz.4.687'. [ 179.689794][ T8052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.731343][ T8052] bond0: (slave bond2): Enslaving as an active interface with a down link [ 179.800303][ T8070] netlink: 348 bytes leftover after parsing attributes in process `syz.0.688'. [ 179.818226][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 180.062331][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 180.087603][ T8090] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 180.096374][ T8090] netlink: 'syz.2.696': attribute type 29 has an invalid length. [ 180.104521][ T8090] netlink: 148 bytes leftover after parsing attributes in process `syz.2.696'. [ 180.129486][ T8090] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 180.148506][ T8090] netlink: 'syz.2.696': attribute type 2 has an invalid length. [ 180.157816][ T8090] netlink: 35 bytes leftover after parsing attributes in process `syz.2.696'. [ 180.187609][ T8096] batadv0: entered promiscuous mode [ 180.204314][ T8096] macsec0: entered promiscuous mode [ 180.231410][ T8096] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 180.268263][ T8096] batadv0: left promiscuous mode [ 180.591688][ T8116] gtp0: entered promiscuous mode [ 180.618155][ T8116] gtp0: entered allmulticast mode [ 180.714290][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807abe5800: rx timeout, send abort [ 181.125197][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 181.224234][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807abe5800: abort rx timeout. Force session deactivation [ 181.506208][ T8154] team0 (unregistering): Port device team_slave_0 removed [ 181.544957][ T8154] team0 (unregistering): Port device team_slave_1 removed [ 181.721167][ T8175] netlink: 244 bytes leftover after parsing attributes in process `syz.4.717'. [ 194.204656][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.210977][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.409050][ T8179] Bluetooth: hci2: command 0x0406 tx timeout [ 201.410339][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 201.415279][ T8179] Bluetooth: hci3: command 0x0406 tx timeout [ 203.448965][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 203.480066][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 203.587686][ T8202] smc: removing net device team0 with user defined pnetid SYZ2 [ 203.652999][ T8207] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.667890][ T8202] team0 (unregistering): Port device team_slave_0 removed [ 203.703074][ T8202] team0 (unregistering): Port device team_slave_1 removed [ 203.755047][ T8213] netlink: 96 bytes leftover after parsing attributes in process `syz.4.728'. [ 203.764352][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 203.799342][ T8209] netlink: 64 bytes leftover after parsing attributes in process `syz.2.726'. [ 203.800385][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.726'. [ 203.830858][ T8213] syzkaller0: entered promiscuous mode [ 203.836530][ T8213] syzkaller0: entered allmulticast mode [ 203.872438][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'. [ 204.018915][ T8222] ip_tables: iptables: counters copy to user failed while replacing table [ 204.178243][ T8229] syzkaller0: entered promiscuous mode [ 204.184559][ T8229] syzkaller0: entered allmulticast mode [ 204.514646][ T3290] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 204.589364][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 204.679856][ T8248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.825601][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.825959][ T8266] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 204.913989][ T8266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.918687][ T8243] netlink: 84 bytes leftover after parsing attributes in process `syz.0.737'. [ 204.931483][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 204.964994][ T8277] team0: left promiscuous mode [ 204.969908][ T8277] team_slave_0: left promiscuous mode [ 204.977718][ T8277] team_slave_1: left promiscuous mode [ 204.988129][ T8277] bridge0: port 3(team0) entered disabled state [ 205.014501][ T8277] bridge_slave_1: left allmulticast mode [ 205.023974][ T8277] bridge_slave_1: left promiscuous mode [ 205.029995][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.048221][ T8277] bridge_slave_0: left allmulticast mode [ 205.100703][ T8277] bridge_slave_0: left promiscuous mode [ 205.107572][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.168664][ T8282] netlink: NAT attribute has 8 unknown bytes [ 205.176751][ T8282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.339745][ T8290] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 205.359124][ T8296] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 205.577267][ T8301] netlink: 'syz.2.755': attribute type 2 has an invalid length. [ 205.594681][ T8305] netlink: zone id is out of range [ 205.659332][ T8305] netlink: zone id is out of range [ 205.683299][ T8305] netlink: zone id is out of range [ 205.699237][ T8305] netlink: zone id is out of range [ 205.719954][ T8305] netlink: zone id is out of range [ 205.911719][ T57] bond0: (slave bond_slave_0): interface is now down [ 205.932415][ T57] bond0: (slave bond_slave_1): interface is now down [ 205.955077][ T57] bond0: (slave team0): interface is now down [ 206.169112][ T8331] xfrm2: entered allmulticast mode [ 206.239258][ T8332] syzkaller0: entered promiscuous mode [ 206.247620][ T8332] syzkaller0: entered allmulticast mode [ 206.564610][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.652712][ T8365] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 206.689198][ T8365] syz_tun: entered promiscuous mode [ 206.704857][ T8365] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 206.756652][ T8363] pimreg: entered allmulticast mode [ 208.534363][ T3382] bond0: (slave bond_slave_0): interface is now down [ 208.541350][ T3382] bond0: (slave bond_slave_1): interface is now down [ 208.549526][ T3382] bond0: (slave team0): interface is now down [ 208.561807][ T3382] bond0: now running without any active interface! [ 216.202507][ T12] bond0: (slave bond_slave_1): link status definitely up [ 216.209778][ T12] bond0: (slave team0): link status definitely up [ 216.219689][ T12] bond0: active interface up! [ 221.323019][ T12] bond0: (slave bond_slave_1): interface is now down [ 221.329933][ T12] bond0: (slave team0): interface is now down [ 221.339735][ T12] bond0: now running without any active interface! [ 228.921324][ T8386] __nla_validate_parse: 12 callbacks suppressed [ 228.921342][ T8386] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.785'. [ 228.942974][ T8387] xt_TCPMSS: Only works on TCP SYN packets [ 228.958052][ T8392] unsupported nlmsg_type 40 [ 229.621489][ T8432] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 229.718330][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 229.743581][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 229.855243][ T8446] ip6gre1: entered allmulticast mode [ 229.927824][ T8456] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 230.418863][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 230.640294][ T8496] netlink: 204 bytes leftover after parsing attributes in process `syz.4.817'. [ 230.787163][ T3382] IPVS: starting estimator thread 0... [ 230.882435][ T8505] IPVS: using max 35 ests per chain, 84000 per kthread [ 230.894948][ T8513] ip_tables: iptables: counters copy to user failed while replacing table [ 231.033109][ T8503] syz.3.821 (8503) used greatest stack depth: 18088 bytes left [ 231.118794][ T8523] ipvlan1: entered promiscuous mode [ 231.126513][ T8523] ipvlan1: entered allmulticast mode [ 231.135328][ T8523] veth0_vlan: entered allmulticast mode [ 231.359700][ T8541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.408794][ T8546] netlink: 'syz.2.834': attribute type 11 has an invalid length. [ 231.426583][ T8546] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.834'. [ 231.551738][ T8551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.627366][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 231.668193][ T8551] netlink: 176 bytes leftover after parsing attributes in process `syz.3.836'. [ 231.690438][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 231.739437][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'. [ 231.944918][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.221179][ T8608] netlink: 'syz.0.849': attribute type 4 has an invalid length. [ 232.269794][ T8608] netlink: 'syz.0.849': attribute type 4 has an invalid length. [ 232.298373][ T8610] sctp: [Deprecated]: syz.2.848 (pid 8610) Use of int in maxseg socket option. [ 232.298373][ T8610] Use struct sctp_assoc_value instead [ 232.475151][ T8620] netlink: 'syz.2.853': attribute type 2 has an invalid length. [ 233.167408][ T8650] vcan0: entered allmulticast mode [ 233.458343][ T8671] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 233.515526][ T8675] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 233.806941][ T8693] 0·: renamed from hsr0 (while UP) [ 233.849542][ T8693] 0·: entered allmulticast mode [ 233.854925][ T8693] hsr_slave_0: entered allmulticast mode [ 233.860811][ T8693] hsr_slave_1: entered allmulticast mode [ 233.871144][ T8693] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 234.106747][ T8711] __nla_validate_parse: 8 callbacks suppressed [ 234.106764][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 234.244597][ T8717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.276138][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 234.305554][ T8714] netlink: Setting conntrack mark requires 'commit' flag. [ 234.330902][ T8714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.903421][ T8705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.932107][ T8705] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 234.944647][ T8751] gre0: entered promiscuous mode [ 234.964548][ T8751] gre0: entered allmulticast mode [ 235.029019][ T8705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.045872][ T8760] netlink: 'syz.3.892': attribute type 10 has an invalid length. [ 235.053458][ T8705] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 235.120484][ T8705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.149364][ T8763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.150274][ T8705] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 235.203380][ T8760] team0: Port device dummy0 added [ 235.220844][ T8705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.231932][ T8705] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 235.419198][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 235.530088][ T8771] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 235.541202][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 235.555160][ T8771] netlink: 'syz.0.894': attribute type 2 has an invalid length. [ 235.887558][ T8776] netlink: 'syz.3.898': attribute type 3 has an invalid length. [ 235.948239][ T8776] netlink: 68 bytes leftover after parsing attributes in process `syz.3.898'. [ 236.564835][ T8817] sctp: [Deprecated]: syz.4.909 (pid 8817) Use of int in max_burst socket option. [ 236.564835][ T8817] Use struct sctp_assoc_value instead [ 236.719999][ T8828] netlink: 'syz.1.911': attribute type 3 has an invalid length. [ 236.823519][ T8828] netlink: 666 bytes leftover after parsing attributes in process `syz.1.911'. [ 237.244835][ T8856] Unknown options in mask 4 [ 237.539051][ T8867] syzkaller0: entered promiscuous mode [ 237.559170][ T8867] syzkaller0: entered allmulticast mode [ 237.755604][ T8881] netlink: 256 bytes leftover after parsing attributes in process `syz.3.926'. [ 237.763385][ T8883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.816932][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 238.150120][ T8905] netlink: 80 bytes leftover after parsing attributes in process `syz.1.930'. [ 238.183626][ T8912] IPVS: set_ctl: invalid protocol: 2658 0.0.0.0:28944 [ 238.265084][ T8907] veth3: entered allmulticast mode [ 238.387021][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 238.394667][ T8916] syzkaller1: entered promiscuous mode [ 238.409053][ T8916] syzkaller1: entered allmulticast mode [ 238.485716][ T8916] netlink: 'syz.3.935': attribute type 7 has an invalid length. [ 255.653146][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.659496][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.939012][ T8968] __nla_validate_parse: 3 callbacks suppressed [ 261.939028][ T8968] netlink: 34 bytes leftover after parsing attributes in process `syz.1.939'. [ 262.509833][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 262.584325][ T9003] netlink: 128 bytes leftover after parsing attributes in process `syz.0.950'. [ 262.636468][ T9003] netlink: 128 bytes leftover after parsing attributes in process `syz.0.950'. [ 262.683061][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 262.828804][ T9021] gre0: left allmulticast mode [ 262.856566][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 262.877487][ T9021] team0: left allmulticast mode [ 262.882790][ T9021] team_slave_0: left allmulticast mode [ 262.892569][ T9026] Bluetooth: hci0: unsupported parameter 5135 [ 262.895789][ T9021] team_slave_1: left allmulticast mode [ 262.907095][ T9026] Bluetooth: hci0: unsupported parameter 8192 [ 262.914374][ T9026] Bluetooth: hci0: unsupported parameter 5135 [ 262.920760][ T9026] Bluetooth: hci0: unsupported parameter 8192 [ 262.961787][ T9031] netlink: 548 bytes leftover after parsing attributes in process `syz.2.953'. [ 263.118533][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 263.129211][ T9027] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 263.145290][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 263.181397][ T9027] bond3 (unregistering): Released all slaves [ 263.237517][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 263.583547][ T9069] bridge0: entered allmulticast mode [ 263.746979][ T9072] bond0: entered promiscuous mode [ 263.775780][ T9072] bond_slave_0: entered promiscuous mode [ 263.806440][ T9072] bond_slave_1: entered promiscuous mode [ 263.841011][ T9072] batadv0: entered promiscuous mode [ 263.864598][ T9072] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 263.895833][ T9072] bond0: left promiscuous mode [ 263.907525][ T9072] bond_slave_0: left promiscuous mode [ 263.917080][ T9072] bond_slave_1: left promiscuous mode [ 263.944161][ T9072] batadv0: left promiscuous mode [ 264.077378][ T9081] macvlan0: entered promiscuous mode [ 264.224731][ T9104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.391069][ T9112] netlink: 'syz.0.979': attribute type 2 has an invalid length. [ 264.401344][ T9114] netlink: 'syz.0.979': attribute type 2 has an invalid length. [ 264.440714][ T9112] netlink: 'syz.0.979': attribute type 8 has an invalid length. [ 264.461060][ T9114] netlink: 'syz.0.979': attribute type 8 has an invalid length. [ 265.035332][ T9144] netlink: NAT attribute has 4 unknown bytes [ 265.064803][ T9144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.170325][ T9151] only policy match revision 0 supported [ 265.170344][ T9151] unable to load match [ 265.461592][ T9157] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 265.628985][ T9157] bond2: entered promiscuous mode [ 265.646579][ T9157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.712154][ T9183] nbd: must specify a size in bytes for the device [ 265.773447][ T9178] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 265.836624][ T9171] syzkaller0: entered promiscuous mode [ 265.844170][ T9171] syzkaller0: entered allmulticast mode [ 266.108438][ T9202] netlink: 'syz.4.1004': attribute type 178 has an invalid length. [ 266.581052][ T9232] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 267.760509][ T9232] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 267.946742][ T9238] team0: entered allmulticast mode [ 267.997620][ T9238] team_slave_0: entered allmulticast mode [ 268.013801][ T9238] team_slave_1: entered allmulticast mode [ 268.023856][ T9238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.089282][ T9249] syzkaller0: entered promiscuous mode [ 268.114861][ T9249] syzkaller0: entered allmulticast mode [ 268.198984][ T9253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.262424][ T9255] __nla_validate_parse: 21 callbacks suppressed [ 268.262442][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 268.979112][ T9278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1027'. [ 268.991903][ T9288] xt_hashlimit: size too large, truncated to 1048576 [ 269.005554][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 269.030395][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.056213][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 269.087252][ T6800] syz1: Port: 1 Link DOWN [ 269.118012][ T9293] xt_hashlimit: size too large, truncated to 1048576 [ 269.185332][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 269.533065][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 269.597911][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 269.611606][ T9319] ip_tables: iptables: counters copy to user failed while replacing table [ 269.788120][ T9328] netlink: 'syz.0.1042': attribute type 29 has an invalid length. [ 269.840349][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 269.863419][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 269.914861][ T9334] xt_hashlimit: size too large, truncated to 1048576 [ 269.950935][ T9335] syzkaller0: entered promiscuous mode [ 269.978072][ T9335] syzkaller0: entered allmulticast mode [ 270.002937][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 271.227998][ T9367] pim6reg1: entered promiscuous mode [ 271.238914][ T9367] pim6reg1: entered allmulticast mode [ 271.284845][ T9373] vlan3: entered promiscuous mode [ 271.323897][ T9373] bridge0: entered promiscuous mode [ 271.705455][ T9393] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 272.057123][ T9410] netlink: 'syz.1.1071': attribute type 17 has an invalid length. [ 272.077699][ T9410] gretap0: entered promiscuous mode [ 272.086272][ T9410] gretap0: left promiscuous mode [ 272.154823][ T9418] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 272.176819][ T50] block nbd0: Receive control failed (result -32) [ 272.176819][ T5618] block nbd0: Receive control failed (result -32) [ 272.193897][ T9418] bond3 (unregistering): Released all slaves [ 272.273333][ T9423] netlink: 'syz.1.1073': attribute type 7 has an invalid length. [ 272.729557][ T9446] nftables ruleset with unbound chain [ 273.112527][ T9472] netlink: 'syz.1.1090': attribute type 9 has an invalid length. [ 273.191745][ T9476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.496673][ T9491] __nla_validate_parse: 10 callbacks suppressed [ 273.496690][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 273.816913][ T9512] netlink: Unknown conntrack attr (type=14853, max=9) [ 273.881786][ T9512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.164504][ T9522] syzkaller0: entered promiscuous mode [ 274.175932][ T9522] syzkaller0: entered allmulticast mode [ 274.369405][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 274.388932][ T9534] netlink: 'syz.1.1110': attribute type 10 has an invalid length. [ 274.406039][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 274.429831][ T9541] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 274.434874][ T9540] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 274.549934][ T9544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1113'. [ 274.585810][ T9544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1113'. [ 274.658911][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 274.886308][ T9561] openvswitch: netlink: IPv4 tunnel dst address is zero [ 274.905206][ T9557] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 275.474975][ T9596] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 275.561867][ T9594] bridge2: entered promiscuous mode [ 275.571797][ T9588] IPVS: set_ctl: invalid protocol: 18976 172.30.0.2:20004 [ 275.596341][ T9594] bridge2: entered allmulticast mode [ 275.732692][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 275.765931][ T9606] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 275.791038][ T9606] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 275.850338][ T9606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.888370][ T9606] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1132'. [ 276.051530][ T9626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1137'. [ 276.360607][ T9643] xt_bpf: check failed: parse error [ 276.816097][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 277.357614][ T9696] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 277.405395][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.421602][ T9696] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 277.653731][ T751] bond0: (slave netdevsim1): link status definitely up [ 277.729749][ T9722] syzkaller1: entered promiscuous mode [ 277.764710][ T9722] syzkaller1: entered allmulticast mode [ 277.988174][ T9734] netlink: 'syz.0.1173': attribute type 49 has an invalid length. [ 278.200611][ T9749] xt_hashlimit: size too large, truncated to 1048576 [ 278.246996][ T9734] ip6gretap0: entered promiscuous mode [ 278.306234][ T9734] ip6gretap0: entered allmulticast mode [ 278.516000][ T9740] __nla_validate_parse: 3 callbacks suppressed [ 278.516017][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 279.477954][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 279.662325][ T9805] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1190'. [ 279.736879][ T9809] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 279.750840][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 280.188105][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 280.260579][ T9839] netlink: 'syz.3.1199': attribute type 5 has an invalid length. [ 280.275695][ T9839] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1199'. [ 280.897343][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 281.193851][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1210'. [ 281.352948][ T9906] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 281.454997][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 281.485761][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 281.571143][ T9908] can: request_module (can-proto-0) failed. [ 281.868643][ T9932] hsr_slave_0: left promiscuous mode [ 281.892788][ T9932] hsr_slave_1: left promiscuous mode [ 282.073116][ T9935] netlink: 'syz.3.1221': attribute type 29 has an invalid length. [ 282.212542][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.236281][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.313903][ T3290] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.331622][ T3290] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.631137][ T9974] ip6gre1: entered promiscuous mode [ 282.960101][ T9993] netlink: 'syz.3.1236': attribute type 32 has an invalid length. [ 283.036326][ T9993] bond3: option coupled_control: invalid value (192) [ 283.075707][ T9993] bond3 (unregistering): Released all slaves [ 283.555675][T10019] __nla_validate_parse: 5 callbacks suppressed [ 283.555724][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 283.980751][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 284.070448][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 284.081058][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 284.175567][T10040] netlink: 'syz.4.1250': attribute type 11 has an invalid length. [ 284.391659][T10057] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 284.563034][T10057] syzkaller1: entered promiscuous mode [ 284.588536][T10057] syzkaller1: entered allmulticast mode [ 284.626284][T10075] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 284.720269][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 284.751990][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 284.784110][T10081] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1261'. [ 284.803481][T10081] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1261'. [ 285.057661][T10095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'. [ 285.107725][T10095] syzkaller0: entered promiscuous mode [ 285.154512][T10095] syzkaller0: entered allmulticast mode [ 285.209127][T10109] tipc: Started in network mode [ 285.223324][T10109] tipc: Node identity 16f82ac92eed, cluster identity 4711 [ 285.233339][T10109] tipc: Enabled bearer , priority 0 [ 285.254048][T10094] tipc: Resetting bearer [ 285.290394][T10094] tipc: Disabling bearer [ 285.356316][T10119] syzkaller0: entered promiscuous mode [ 285.382636][T10119] syzkaller0: entered allmulticast mode [ 285.541002][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 285.613073][T10131] syzkaller0: entered promiscuous mode [ 285.663301][T10131] syzkaller0: entered allmulticast mode [ 285.760433][T10131] xt_nfacct: accounting object `' does not exist [ 286.786015][T10192] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 286.900949][ T5275] veth0_vlan: left promiscuous mode [ 286.925510][ T6799] veth0_vlan: entered promiscuous mode [ 287.361363][T10217] ip_tables: iptables: counters copy to user failed while replacing table [ 287.395396][T10225] netlink: 'syz.3.1302': attribute type 16 has an invalid length. [ 287.429623][T10225] netlink: 'syz.3.1302': attribute type 17 has an invalid length. [ 287.465383][T10225] tunl0: left promiscuous mode [ 287.684082][T10225] 0·: left allmulticast mode [ 287.690288][T10225] hsr_slave_0: left allmulticast mode [ 287.726484][T10225] hsr_slave_1: left allmulticast mode [ 287.760843][T10225] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 287.883539][ T57] bond0: (slave bond_slave_0): link status definitely up [ 287.905834][ T57] bond0: (slave bond_slave_1): link status definitely up [ 287.930291][ T57] bond0: (slave team0): link status definitely up [ 288.357224][T10273] macvtap1: entered promiscuous mode [ 288.363443][T10273] dummy0: entered promiscuous mode [ 288.410593][T10285] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.443538][T10277] vcan0: entered allmulticast mode [ 288.486823][ T24] dummy0: left promiscuous mode [ 288.665712][T10299] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 288.761569][T10306] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 288.796802][T10306] syz_tun: entered promiscuous mode [ 288.838449][T10306] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 289.107976][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.127418][T10325] __nla_validate_parse: 4 callbacks suppressed [ 289.127434][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1329'. [ 289.195885][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 289.240791][T10329] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1330'. [ 289.268077][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 289.305830][T10329] netlink: 'syz.0.1330': attribute type 5 has an invalid length. [ 289.352242][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 289.366244][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 289.509166][ T1110] IPVS: starting estimator thread 0... [ 289.621676][T10354] netlink: 'syz.2.1338': attribute type 21 has an invalid length. [ 289.635470][T10349] IPVS: using max 33 ests per chain, 79200 per kthread [ 289.707750][T10360] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 289.708636][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 289.764010][T10360] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 289.779078][T10362] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 289.884183][T10362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.000677][T10370] vlan2: entered promiscuous mode [ 290.011406][T10370] bond2: entered promiscuous mode [ 290.019297][T10370] vlan2: entered allmulticast mode [ 290.026766][T10370] bond2: entered allmulticast mode [ 290.070105][T10362] bond2: (slave bridge4): making interface the new active one [ 290.095402][T10362] bridge4: entered promiscuous mode [ 290.115416][T10362] bridge4: entered allmulticast mode [ 290.128516][T10362] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 290.442499][ T57] bond0: (slave bond_slave_0): link status definitely up [ 290.483984][ T57] bond0: (slave bond_slave_1): link status definitely up [ 290.530022][ T57] bond0: (slave team0): link status definitely up [ 290.627845][T10408] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 291.035518][T10429] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 291.984983][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1366'. [ 292.348995][T10485] smbdirect: ib_dev[syz1] removed [ 292.592393][T10523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.644497][T10526] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 292.667221][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1378'. [ 292.775433][T10535] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 292.808615][T10535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1383'. [ 292.830048][T10526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.947517][T10538] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 292.989733][T10538] syz_tun: entered promiscuous mode [ 293.031808][T10538] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.561909][T10570] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 294.237362][T10593] __nla_validate_parse: 8 callbacks suppressed [ 294.237381][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1396'. [ 294.586933][T10627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.944761][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1406'. [ 295.209645][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 295.254255][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 295.309382][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'. [ 295.598824][T10680] xt_hashlimit: size too large, truncated to 1048576 [ 295.669839][T10689] xt_hashlimit: size too large, truncated to 1048576 [ 295.775898][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 295.859268][T10702] netlink: 'syz.4.1421': attribute type 21 has an invalid length. [ 295.875879][T10702] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.261667][T10724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1429'. [ 296.438716][T10728] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 296.454607][T10735] xt_hashlimit: overflow, try lower: 3/0 [ 296.466389][T10728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'. [ 296.559354][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 296.651072][T10750] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.678833][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1436'. [ 296.875162][T10763] xt_hashlimit: size too large, truncated to 1048576 [ 297.309163][T10778] GUP no longer grows the stack in syz.3.1446 (10778): 200000003000-20000000a000 (200000001000) [ 297.341244][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.3.1446 Not tainted syzkaller #0 PREEMPT(full) [ 297.341270][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.341289][T10778] Call Trace: [ 297.341297][T10778] [ 297.341308][T10778] dump_stack_lvl+0xe8/0x150 [ 297.341354][T10778] __get_user_pages+0x238c/0x2720 [ 297.341388][T10778] ? __gup_longterm_locked+0xc3b/0x15c0 [ 297.341422][T10778] ? __gup_longterm_locked+0xc3b/0x15c0 [ 297.341448][T10778] __gup_longterm_locked+0xd52/0x15c0 [ 297.341470][T10778] ? lock_acquire+0x106/0x350 [ 297.341514][T10778] gup_fast_fallback+0x1d92/0x20e0 [ 297.341580][T10778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 297.341616][T10778] ? is_valid_gup_args+0x11f/0x200 [ 297.341649][T10778] ? get_user_pages_fast+0x4d/0xb0 [ 297.341682][T10778] __iov_iter_get_pages_alloc+0x378/0xa40 [ 297.341707][T10778] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 297.341742][T10778] iov_iter_get_pages2+0x5e/0xa0 [ 297.341763][T10778] __se_sys_vmsplice+0x7b5/0x1660 [ 297.341808][T10778] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 297.341833][T10778] ? __pfx_futex_wait+0x10/0x10 [ 297.341926][T10778] do_syscall_64+0x166/0x520 [ 297.341950][T10778] ? trace_irq_disable+0x3b/0x140 [ 297.341972][T10778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.341991][T10778] ? clear_bhb_loop+0x70/0xc0 [ 297.342012][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.342031][T10778] RIP: 0033:0x7fbf1599e0d9 [ 297.342058][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.342075][T10778] RSP: 002b:00007fbf167bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 297.342094][T10778] RAX: ffffffffffffffda RBX: 00007fbf15c25fa0 RCX: 00007fbf1599e0d9 [ 297.342109][T10778] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 297.342122][T10778] RBP: 00007fbf15a35024 R08: 0000000000000000 R09: 0000000000000000 [ 297.342135][T10778] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 297.342147][T10778] R13: 00007fbf15c26038 R14: 00007fbf15c25fa0 R15: 00007ffc9ddab9b8 [ 297.342189][T10778] [ 297.565521][T10784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.774649][T10844] wg0: entered allmulticast mode [ 298.815793][T10844] wg0: left allmulticast mode [ 299.051001][T10853] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 299.299381][T10867] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 299.315786][T10853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.441597][T10858] vlan3: entered promiscuous mode [ 299.455378][T10858] bond3: entered promiscuous mode [ 299.460857][T10858] vlan3: entered allmulticast mode [ 299.468696][T10858] bond3: entered allmulticast mode [ 299.571648][T10876] netlink: 'syz.3.1478': attribute type 1 has an invalid length. [ 299.590154][T10876] __nla_validate_parse: 4 callbacks suppressed [ 299.590172][T10876] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1478'. [ 299.755322][T10883] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1480'. [ 299.797621][T10887] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1482'. [ 299.902371][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 300.038734][T10892] macvtap1: entered promiscuous mode [ 300.068539][T10892] dummy0: entered promiscuous mode [ 300.093113][T10896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1484'. [ 300.127758][T10900] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 300.158978][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'. [ 300.325295][ T6800] dummy0: left promiscuous mode [ 300.391600][T10900] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 300.609931][T10929] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 300.729735][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 300.762888][T10929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1491'. [ 300.783652][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 301.508573][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1499'. [ 303.322521][ T3290] bond0: (slave bond_slave_0): interface is now up [ 303.370773][ T3290] bond0: (slave bond_slave_1): interface is now up [ 303.410665][ T3290] bond0: (slave team0): interface is now up [ 303.492318][T11032] geneve0: entered allmulticast mode [ 303.554303][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.587785][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.662258][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.716429][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.750565][T11038] syzkaller1: entered promiscuous mode [ 303.782004][T11038] syzkaller1: entered allmulticast mode [ 304.353275][T11056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.473898][T11055] gretap1: entered promiscuous mode [ 304.763607][T11077] x_tables: duplicate underflow at hook 1 [ 304.772246][T11078] __nla_validate_parse: 7 callbacks suppressed [ 304.772262][T11078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1525'. [ 304.969608][T11089] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1528'. [ 305.983048][T11133] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1542'. [ 307.997523][T11181] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1555'. [ 308.123412][T11174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.253533][T11191] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 308.298146][T11191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1560'. [ 308.371898][T11198] netlink: 'syz.3.1561': attribute type 2 has an invalid length. [ 308.438071][T11198] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1561'. [ 308.440574][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.602124][ T751] bond0: (slave bond_slave_0): interface is now down [ 308.640333][ T751] bond0: (slave bond_slave_1): interface is now down [ 308.668322][ T751] bond0: (slave team0): interface is now down [ 309.568132][T11254] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 309.603050][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 310.431402][ T5275] v: left promiscuous mode [ 310.450169][T11268] nftables ruleset with unbound set [ 310.545135][ T42] v: entered promiscuous mode [ 310.960440][T11280] tipc: New replicast peer: 172.20.20.187 [ 310.986701][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 311.007611][T11280] tipc: Enabled bearer , priority 10 [ 311.041220][T11282] netlink: 'syz.1.1580': attribute type 23 has an invalid length. [ 311.158007][T11280] ip6gre3: entered allmulticast mode [ 311.237986][ T751] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 311.253155][ T3382] bond0: (slave bond_slave_0): interface is now down [ 311.282468][ T3382] bond0: (slave bond_slave_1): interface is now down [ 311.300370][ T3382] bond0: (slave team0): interface is now down [ 311.535566][T11291] tipc: Enabled bearer , priority 11 [ 311.743505][T11306] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1587'. [ 311.942996][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 312.127464][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 312.215772][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 313.738820][T11383] blkio.reset_stats is deprecated [ 313.776882][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'. [ 313.813531][T11381] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1605'. [ 313.860208][T11391] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.883991][ T3290] bond0: (slave bond_slave_0): interface is now down [ 313.903262][ T3290] bond0: (slave bond_slave_1): interface is now down [ 313.921548][ T3290] bond0: (slave team0): interface is now down [ 314.293447][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 314.651948][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1618'. [ 314.697984][T11422] netlink: 'syz.2.1618': attribute type 4 has an invalid length. [ 314.785508][T11422] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1618'. [ 314.868400][T11422] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 315.402222][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 315.891662][T11459] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 315.908603][T11459] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 316.126669][T11467] __nla_validate_parse: 4 callbacks suppressed [ 316.126686][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1632'. [ 316.191347][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 316.212862][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 316.273923][T11473] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 316.283310][T11472] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 316.352582][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 316.407826][T11477] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 316.445326][T11477] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1636'. [ 316.456115][ T57] bond0: (slave bond_slave_0): interface is now down [ 316.480336][ T57] bond0: (slave bond_slave_1): interface is now down [ 316.494026][T11477] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 316.514287][ T57] bond0: (slave team0): interface is now down [ 316.581651][T11477] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1636'. [ 316.789668][T11492] IPv6: Can't replace route, no match found [ 316.812365][T11495] netlink: 'syz.2.1640': attribute type 10 has an invalid length. [ 316.988661][T11503] netlink: 'syz.3.1643': attribute type 12 has an invalid length. [ 317.016988][T11503] netlink: 'syz.3.1643': attribute type 29 has an invalid length. [ 317.064544][T11503] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1643'. [ 317.089800][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.096529][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.181980][T11503] netlink: 'syz.3.1643': attribute type 3 has an invalid length. [ 317.220222][T11503] netlink: 'syz.3.1643': attribute type 2 has an invalid length. [ 317.253328][T11503] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1643'. [ 317.560783][T11528] bridge0: port 3(veth1_to_bridge) entered blocking state [ 317.608512][T11528] bridge0: port 3(veth1_to_bridge) entered disabled state [ 317.687263][T11528] veth1_to_bridge: entered allmulticast mode [ 317.703151][T11531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1649'. [ 317.734008][T11528] veth1_to_bridge: entered promiscuous mode [ 317.841792][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1651'. [ 318.710138][T11563] smc: net device lo applied user defined pnetid SYZ0 [ 318.741114][T11563] smc: smcd device lo applied user defined pnetid SYZ0 [ 319.577140][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.328768][T11625] netlink: Conntrack attr has 1 unknown bytes [ 320.343253][T11628] netlink: Conntrack attr has 1 unknown bytes [ 320.387950][T11625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.411116][T11628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.728716][T11645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.989241][T11655] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 321.323848][T11668] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 321.343816][T11672] __nla_validate_parse: 6 callbacks suppressed [ 321.343832][T11672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1686'. [ 321.375383][T11668] bond4 (unregistering): Released all slaves [ 321.725567][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 322.234909][T11706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.847733][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 322.884423][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1697'. [ 323.009710][T11727] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1696'. [ 323.416394][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1702'. [ 323.482202][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 323.701474][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 323.747551][T11755] tipc: Enabling of bearer rejected, failed to enable media [ 323.861180][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 323.951793][T11759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 324.082482][T11755] xt_CT: No such helper "snmp_trap" [ 324.165775][T11769] bond0: entered promiscuous mode [ 324.285094][T11769] bond_slave_0: entered promiscuous mode [ 324.411405][T11769] bond_slave_1: entered promiscuous mode [ 324.454374][T11778] sctp: [Deprecated]: syz.3.1709 (pid 11778) Use of int in max_burst socket option deprecated. [ 324.454374][T11778] Use struct sctp_assoc_value instead [ 324.537089][T11769] batadv0: entered promiscuous mode [ 324.598099][T11769] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 324.690411][T11769] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 324.729572][T11769] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 324.774391][T11769] bond0: left promiscuous mode [ 324.784807][T11769] bond_slave_0: left promiscuous mode [ 324.799754][T11769] bond_slave_1: left promiscuous mode [ 324.838814][T11769] batadv0: left promiscuous mode [ 325.659917][T11829] veth1_to_bond: entered allmulticast mode [ 325.830495][T11829] veth1_to_bond: left allmulticast mode [ 326.282469][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 326.729179][T11889] xt_hashlimit: size too large, truncated to 1048576 [ 326.745649][T11889] xt_hashlimit: max too large, truncated to 1048576 [ 326.762608][ T43] bond0: (slave bond_slave_0): interface is now up [ 326.779707][T11889] xt_hashlimit: invalid rate [ 326.807350][ T43] bond0: (slave bond_slave_1): interface is now up [ 326.849921][ T43] bond0: (slave team0): interface is now up [ 326.860872][T11893] gre1: entered promiscuous mode [ 326.890349][T11893] gre1: entered allmulticast mode [ 327.128161][T11904] __nla_validate_parse: 2 callbacks suppressed [ 327.128179][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'. [ 327.969886][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 328.156697][T11935] bond4 (unregistering): Released all slaves [ 329.403552][ T43] bond0: (slave bond_slave_0): interface is now up [ 329.429658][ T43] bond0: (slave bond_slave_1): interface is now up [ 329.474193][ T43] bond0: (slave team0): interface is now up [ 329.822044][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.995571][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 330.028393][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 330.136731][T12017] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 330.159177][T12017] bond5: (slave lo): Enslaving as an active interface with an up link [ 330.167998][T12017] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 330.197912][T11987] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1756'. [ 330.208950][T11987] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1756'. [ 331.263161][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 331.504994][T12064] ipvlan1: entered promiscuous mode [ 331.533527][T12064] ipvlan1: entered allmulticast mode [ 331.564798][T12064] v: entered allmulticast mode [ 331.677799][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 332.026885][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 332.052439][T12092] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1784'. [ 332.188404][T12096] bond4: entered promiscuous mode [ 332.228700][T12096] bond4: entered allmulticast mode [ 332.248659][T12096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.848921][T12128] netlink: 'syz.1.1792': attribute type 3 has an invalid length. [ 333.005138][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 333.064010][T12134] FAULT_INJECTION: forcing a failure. [ 333.064010][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 333.116599][T12134] CPU: 1 UID: 0 PID: 12134 Comm: syz.4.1793 Not tainted syzkaller #0 PREEMPT(full) [ 333.116624][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.116634][T12134] Call Trace: [ 333.116642][T12134] [ 333.116649][T12134] dump_stack_lvl+0xe8/0x150 [ 333.116679][T12134] should_fail_ex+0x410/0x560 [ 333.116710][T12134] _copy_from_user+0x2d/0xb0 [ 333.116730][T12134] __sys_bpf+0x2e7/0xd90 [ 333.116759][T12134] ? __pfx___sys_bpf+0x10/0x10 [ 333.116789][T12134] ? __fget_files+0x2a/0x420 [ 333.116826][T12134] ? ksys_write+0x242/0x270 [ 333.116853][T12134] ? __pfx_ksys_write+0x10/0x10 [ 333.116882][T12134] __x64_sys_bpf+0xba/0xd0 [ 333.116910][T12134] do_syscall_64+0x166/0x520 [ 333.116933][T12134] ? trace_irq_disable+0x3b/0x140 [ 333.116958][T12134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.116977][T12134] ? clear_bhb_loop+0x70/0xc0 [ 333.117000][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.117019][T12134] RIP: 0033:0x7fae4db9e0d9 [ 333.117036][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.117052][T12134] RSP: 002b:00007fae4ea69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.117072][T12134] RAX: ffffffffffffffda RBX: 00007fae4de25fa0 RCX: 00007fae4db9e0d9 [ 333.117086][T12134] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000002 [ 333.117098][T12134] RBP: 00007fae4ea69090 R08: 0000000000000000 R09: 0000000000000000 [ 333.117110][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.117121][T12134] R13: 00007fae4de26038 R14: 00007fae4de25fa0 R15: 00007fffe2b83348 [ 333.117151][T12134] [ 333.130461][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 333.663983][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 334.490270][T12185] netlink: 'syz.4.1808': attribute type 2 has an invalid length. [ 334.613324][ T43] bond0: (slave bond_slave_0): interface is now down [ 334.631366][ T43] bond0: (slave bond_slave_1): interface is now down [ 334.683901][ T43] bond0: (slave team0): interface is now down [ 335.195701][T12212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1817'. [ 335.224630][T12216] IPVS: Unknown mcast interface: pim6reg1 [ 335.525121][T12229] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 335.707387][T12229] bond4: entered promiscuous mode [ 335.741437][T12229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.769245][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 337.106992][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 337.251173][ T3382] bond0: (slave syz_tun): interface is now down [ 337.774174][T12317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.830208][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 337.931351][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 338.058080][T12324] netlink: Unknown NAT attribute (type=16383, max=9) [ 338.081129][T12324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.638474][T12355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.706943][T12358] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.772992][T12337] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 338.863815][T12337] bond4 (unregistering): Released all slaves [ 339.144611][T12362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1852'. [ 339.482185][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.496873][T12375] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1855'. [ 340.291961][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 340.591000][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 340.900830][T12429] can: request_module (can-proto-0) failed. [ 340.915120][T12433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1870'. [ 341.434075][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 341.867960][T12478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1884'. [ 341.936996][T12480] Bluetooth: hci0: unsupported parameter 5135 [ 341.970965][T12480] Bluetooth: hci0: unsupported parameter 8192 [ 342.004368][T12480] Bluetooth: hci0: unsupported parameter 5135 [ 342.046513][T12480] Bluetooth: hci0: unsupported parameter 8192 [ 343.046320][T12520] syzkaller0: entered promiscuous mode [ 343.063784][T12520] syzkaller0: entered allmulticast mode [ 343.115832][T12524] pim6reg1: entered promiscuous mode [ 343.141014][T12524] pim6reg1: entered allmulticast mode [ 343.583067][T12538] bond0: invalid NS target ff00:: specified for addition [ 343.610752][T12538] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 343.927674][T12559] trusted_key: syz.2.1905 sent an empty control message without MSG_MORE. [ 343.969125][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 343.990379][T12540] veth5: entered allmulticast mode [ 344.195989][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1903'. [ 344.485679][T12562] xfrm1: entered allmulticast mode [ 344.572350][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1910'. [ 344.681726][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 344.750146][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 344.931707][ T12] bond0: (slave team0): interface is now up [ 345.695501][T12644] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 345.767250][T12645] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 345.808537][T12644] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 345.832737][T12645] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 346.945092][T12691] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 346.971896][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 347.015002][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 347.112157][T12698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.160927][T12698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.246603][T12698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.248479][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 347.303741][T12701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.319522][T12701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.359962][T12706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1937'. [ 347.360030][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1937'. [ 347.382353][T12701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.410192][T12698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.443925][T12697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.482982][ T13] bond0: (slave syz_tun): interface is now down [ 347.548896][T12697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.892072][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1943'. [ 347.906677][T12716] Cannot find add_set index 4 as target [ 347.960497][T12731] Cannot find add_set index 0 as target [ 348.098318][T12734] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 348.349831][T12734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.454126][T12738] vlan2: entered promiscuous mode [ 348.460252][T12738] bond4: entered promiscuous mode [ 348.467065][T12738] vlan2: entered allmulticast mode [ 348.474402][T12738] bond4: entered allmulticast mode [ 348.571048][T12748] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 348.732473][T12748] bond4: entered allmulticast mode [ 349.347097][T12782] netlink: 'syz.4.1959': attribute type 9 has an invalid length. [ 349.575206][T12788] x_tables: duplicate underflow at hook 1 [ 349.741811][T12793] __nla_validate_parse: 2 callbacks suppressed [ 349.741929][T12793] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1963'. [ 350.050704][T11786] bond0: (slave team0): interface is now down [ 350.319180][T12820] Bluetooth: hci0: unsupported parameter 5135 [ 350.345107][T12820] Bluetooth: hci0: unsupported parameter 8192 [ 350.369180][T12820] Bluetooth: hci0: unsupported parameter 5135 [ 350.386236][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1970'. [ 350.411869][T12820] Bluetooth: hci0: unsupported parameter 8192 [ 350.453947][T12827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.469445][T12824] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 350.591939][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.665996][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.690644][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.800412][T12839] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 350.948968][T12843] netlink: 'syz.3.1980': attribute type 12 has an invalid length. [ 350.957213][T12843] netlink: 'syz.3.1980': attribute type 29 has an invalid length. [ 350.967039][T12843] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1980'. [ 351.273734][T12852] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 351.287636][T12858] netlink: 'syz.4.1985': attribute type 58 has an invalid length. [ 351.313717][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1985'. [ 351.363002][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 351.448574][T12862] Cannot find del_set index 0 as target [ 351.650913][T12874] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1990'. [ 351.735245][T12870] netlink: 'syz.4.1990': attribute type 5 has an invalid length. [ 351.927340][T12885] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1992'. [ 352.014235][T12887] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 352.297979][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 352.841906][T12914] netlink: 'syz.1.2003': attribute type 6 has an invalid length. [ 352.934858][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'. [ 353.259332][T12926] 8021q: VLANs not supported on ip_vti0 [ 353.351906][T12941] syzkaller0: entered promiscuous mode [ 353.372495][T12941] syzkaller0: entered allmulticast mode [ 353.737670][T12950] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2014'. [ 353.853982][T12950] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 354.863442][T12989] syzkaller0: entered promiscuous mode [ 354.886294][T12989] syzkaller0: entered allmulticast mode [ 355.118785][T13007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.163741][ T43] bond0: (slave bond_slave_1): interface is now up [ 355.440971][T13014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.490568][T13014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.921486][T13039] openvswitch: netlink: VLAN attribute unexpected. [ 356.141908][T13045] bond0: Error: CAN devices cannot be enslaved [ 356.627865][T13062] __nla_validate_parse: 7 callbacks suppressed [ 356.627884][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 356.929055][T13073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2045'. [ 356.940568][T13074] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2045'. [ 356.970491][T13073] openvswitch: netlink: Flow actions attr not present in new flow. [ 356.990798][T13074] openvswitch: netlink: Flow actions attr not present in new flow. [ 357.107911][T13081] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2047'. [ 357.717444][T13098] bond6: Removing last ns target with arp_interval on [ 357.731357][T11786] bond0: (slave syz_tun): interface is now down [ 357.748200][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 357.760582][T13099] sit0: entered promiscuous mode [ 357.779858][T13099] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 357.801173][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2052'. [ 357.827369][T13110] netlink: 'syz.3.2053': attribute type 32 has an invalid length. [ 357.879744][T13099] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2051'. [ 357.986712][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 358.067637][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2052'. [ 358.615166][T13137] tipc: Enabled bearer , priority 0 [ 358.675341][T13137] syzkaller0: entered promiscuous mode [ 358.708518][T13137] syzkaller0: entered allmulticast mode [ 358.764746][T13137] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 358.936937][T13137] tipc: Resetting bearer [ 358.967644][T13145] netlink: 'syz.1.2062': attribute type 2 has an invalid length. [ 359.057514][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'. [ 359.379138][T13132] tipc: Resetting bearer [ 359.460059][T13162] netlink: 'syz.3.2067': attribute type 11 has an invalid length. [ 359.490279][T13132] tipc: Disabling bearer [ 359.524493][T13165] netlink: 'syz.0.2068': attribute type 3 has an invalid length. [ 359.611646][T13163] netlink: 'syz.0.2068': attribute type 3 has an invalid length. [ 360.285665][ T3338] bond0: (slave bond_slave_1): interface is now down [ 360.315720][ T3338] bond0: (slave syz_tun): interface is now down [ 360.339093][ T3338] bond0: now running without any active interface! [ 361.174313][T13216] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 361.225639][T13216] netlink: 'syz.3.2083': attribute type 2 has an invalid length. [ 361.513385][T13225] openvswitch: netlink: Flow key attr not present in new flow. [ 361.713378][T13230] openvswitch: netlink: IP tunnel dst address not specified [ 362.005043][T13247] __nla_validate_parse: 9 callbacks suppressed [ 362.005062][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'. [ 362.174674][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'. [ 362.265864][T13239] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 362.551092][T13266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.707430][T13272] xt_TCPMSS: Only works on TCP SYN packets [ 363.211919][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 363.226878][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2106'. [ 363.266260][T13295] gre1: entered promiscuous mode [ 363.278830][T13295] gre1: entered allmulticast mode [ 363.504531][T13305] netlink: 'syz.3.2109': attribute type 14 has an invalid length. [ 363.801775][T13317] tipc: Enabling of bearer rejected, failed to enable media [ 364.242297][T13333] Unknown options in mask 4 [ 364.468457][T13338] netlink: 'syz.2.2119': attribute type 7 has an invalid length. [ 364.506077][T13333] netlink: Failed to add  helper -22 [ 364.560883][T13333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.589736][T13338] netlink: 'syz.2.2119': attribute type 7 has an invalid length. [ 364.624856][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.687239][T13343] syzkaller0: entered promiscuous mode [ 364.728001][T13343] syzkaller0: entered allmulticast mode [ 364.795761][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.834530][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.968473][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 365.053313][ T3338] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.649270][T13381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.237876][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'. [ 366.592763][T13415] netlink: 'syz.4.2141': attribute type 12 has an invalid length. [ 366.619271][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 366.622390][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 366.834877][T13415] netlink: 'syz.4.2141': attribute type 12 has an invalid length. [ 366.859357][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2143'. [ 366.874451][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 367.271243][T13436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2147'. [ 367.509322][T13447] IPv6: Can't replace route, no match found [ 367.529358][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 367.544575][T13450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.610321][T13450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.652128][T13450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.775477][T13448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.821274][T13448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.098079][T13473] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 368.357060][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 368.455243][T13490] sctp: [Deprecated]: syz.2.2162 (pid 13490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.455243][T13490] Use struct sctp_sack_info instead [ 368.514955][T13480] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.579462][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.588141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.618989][T13490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.659511][T13497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.915856][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 369.018709][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 369.381902][T13537] netlink: 'syz.3.2176': attribute type 16 has an invalid length. [ 369.402441][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2176'. [ 369.423870][T13537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2176'. [ 369.508202][T13540] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 369.720206][T13548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2178'. [ 369.752616][T13549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2178'. [ 370.499430][T13576] netlink: 'syz.3.2188': attribute type 21 has an invalid length. [ 370.521759][T13576] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2188'. [ 370.603915][ T13] bond0: (slave syz_tun): link status definitely up [ 370.842202][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 371.558840][T13598] xt_CT: No such helper "snmp_trap" [ 371.638942][T13610] netlink: 'syz.0.2196': attribute type 13 has an invalid length. [ 372.254020][T13643] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 372.365339][T13647] __nla_validate_parse: 1 callbacks suppressed [ 372.365358][T13647] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2208'. [ 372.777873][T13664] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2212'. [ 372.842383][T13664] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2212'. [ 373.231388][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2219'. [ 373.303848][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2219'. [ 373.451277][T13684] gretap0: entered promiscuous mode [ 373.556274][T13684] gretap0: left promiscuous mode [ 373.614034][T13692] net_ratelimit: 60 callbacks suppressed [ 373.614140][T13692] openvswitch: netlink: IP tunnel dst address not specified [ 373.668429][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 373.678001][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.961736][T13712] netlink: 'syz.1.2230': attribute type 2 has an invalid length. [ 374.061901][T13712] netlink: 'syz.1.2230': attribute type 2 has an invalid length. [ 374.093245][T13712] netlink: 'syz.1.2230': attribute type 2 has an invalid length. [ 374.121883][T13715] atomic_op ffff88807c7159e0 conn xmit_atomic 0000000000000000 [ 374.331807][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 374.407815][T13722] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 374.561076][T13735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2238'. [ 375.396545][T13766] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2245'. [ 376.075574][T13793] openvswitch: netlink: IP tunnel dst address not specified [ 376.331034][T13804] sock: sock_set_timeout: `syz.2.2256' (pid 13804) tries to set negative timeout [ 376.386400][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2258'. [ 376.490091][T13808] gretap2: entered promiscuous mode [ 376.508638][T13808] gretap2: entered allmulticast mode [ 376.972894][T13833] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 377.194224][T13833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.295229][T13845] xfrm1: entered allmulticast mode [ 377.876550][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 378.025595][T13883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2271'. [ 378.100186][T13878] bond9: entered promiscuous mode [ 378.119274][T13878] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.284829][ T3382] bond0: (slave syz_tun): link status definitely up [ 378.309489][ T3382] bond0: active interface up! [ 378.470613][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 378.527937][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.535097][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.673285][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'. [ 379.517462][T13933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.526206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.551254][T13930] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 379.582073][T13930] netlink: 'syz.3.2287': attribute type 3 has an invalid length. [ 379.604220][T13930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2287'. [ 380.560637][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 382.995591][T13969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2296'. [ 383.793965][T14006] netlink: NAT attribute has 4 unknown bytes [ 383.838016][T14006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.921609][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 384.187119][T14025] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 384.274458][T14024] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2311'. [ 384.440922][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 385.106894][T14058] geneve2: entered promiscuous mode [ 385.349510][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 385.407486][T14086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2326'. [ 385.826713][T14102] xt_nat: multiple ranges no longer supported [ 385.881301][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 385.972636][ T3382] bond0: (slave syz_tun): interface is now down [ 386.000281][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 386.171846][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 386.325884][T14116] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2334'. [ 386.575311][T14097] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 386.608188][T14122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.758891][T14125] Cannot find set identified by id 0 to match [ 387.878855][T14158] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.915010][T14177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.000534][T14182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.049075][T14173] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 388.101240][T14173] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 388.163069][T14175] vlan4: entered promiscuous mode [ 388.178040][T14175] bridge0: entered promiscuous mode [ 388.197152][T14173] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 388.213186][T14175] vlan4: entered allmulticast mode [ 388.265470][T14175] bridge0: entered allmulticast mode [ 388.384700][T14173] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 388.413505][T14196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.535025][ T134] bond0: (slave syz_tun): interface is now down [ 388.570535][ T134] bond0: now running without any active interface! [ 388.653949][T14205] __nla_validate_parse: 3 callbacks suppressed [ 388.653968][T14205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2356'. [ 389.051433][T14214] netlink: 'syz.2.2361': attribute type 4 has an invalid length. [ 389.227569][T14225] Bluetooth: hci0: unsupported parameter 5135 [ 389.245579][T14225] Bluetooth: hci0: unsupported parameter 8192 [ 389.266395][T14225] Bluetooth: hci0: unsupported parameter 5135 [ 389.277548][T14225] Bluetooth: hci0: unsupported parameter 8192 [ 389.341961][T14223] netlink: 'syz.0.2363': attribute type 11 has an invalid length. [ 389.379118][T14223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2363'. [ 390.017013][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 390.027297][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 390.455635][T14254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.566853][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.574088][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.633368][T14273] syzkaller0: entered promiscuous mode [ 390.687381][T14273] syzkaller0: entered allmulticast mode [ 390.773950][T14254] 0ªX¹¦Dö»: left allmulticast mode [ 390.924334][T14254] hsr0: left allmulticast mode [ 390.934463][T14254] hsr_slave_0: left allmulticast mode [ 390.941155][T14254] hsr_slave_1: left allmulticast mode [ 390.954727][T14254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.961856][T14285] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.209626][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 391.405924][T14292] netlink: 'syz.2.2381': attribute type 21 has an invalid length. [ 391.423070][T14292] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.653117][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 391.689162][T14297] netlink: 'syz.3.2382': attribute type 10 has an invalid length. [ 391.732441][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 391.857531][T14297] geneve2: entered promiscuous mode [ 391.889996][T14297] geneve2: entered allmulticast mode [ 392.353659][T14339] lo: Caught tx_queue_len zero misconfig [ 392.361956][T14345] netlink: 'syz.0.2393': attribute type 9 has an invalid length. [ 392.386554][T14339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2393'. [ 392.684516][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 392.940997][T14367] netlink: 'syz.1.2401': attribute type 21 has an invalid length. [ 392.979014][T14367] netlink: 'syz.1.2401': attribute type 6 has an invalid length. [ 393.011109][T14368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2399'. [ 393.054167][T14374] ipt_REJECT: TCP_RESET invalid for non-tcp [ 393.072487][T14375] netlink: 'syz.3.2403': attribute type 2 has an invalid length. [ 393.998423][T14408] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 394.174831][T14423] __nla_validate_parse: 2 callbacks suppressed [ 394.174850][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 394.198600][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 394.768170][T14440] veth1: entered promiscuous mode [ 394.831303][T14440] veth1: entered allmulticast mode [ 394.997170][T14451] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2420'. [ 395.317085][T14463] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 395.406273][ T5275] veth1_vlan: left promiscuous mode [ 396.005895][T14483] lo: entered promiscuous mode [ 396.041795][T14477] lo: left promiscuous mode [ 396.231528][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 396.279892][T14486] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 396.291925][ T13] bond0: (slave syz_tun): link status definitely up [ 396.330427][ T13] bond0: active interface up! [ 396.369581][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 396.394239][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 396.444935][T14488] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 396.455358][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 396.498791][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2425'. [ 396.583120][T14483] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.809278][T14518] netlink: 'syz.1.2433': attribute type 11 has an invalid length. [ 397.689767][T14550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2442'. [ 397.729372][T14550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2442'. [ 399.328991][T14603] __nla_validate_parse: 2 callbacks suppressed [ 399.329051][T14603] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2455'. [ 399.889699][T14622] pimreg: left allmulticast mode [ 399.910016][T14624] x_tables: duplicate underflow at hook 1 [ 399.998228][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2460'. [ 400.011318][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2460'. [ 401.773531][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 401.937318][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 402.160351][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2470'. [ 402.601731][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2475'. [ 403.177240][T14702] netlink: Unknown NAT attribute (type=9518, max=9) [ 403.211708][T14702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.454174][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 403.834492][T14713] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.844978][T14713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.872234][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2492'. [ 404.050837][ T1110] bond0: (slave syz_tun): interface is now down [ 404.176273][T14741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.300073][T14744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.367687][T14766] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 405.392639][T14766] bond6 (unregistering): Released all slaves [ 405.499343][T14767] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2501'. [ 405.805519][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 405.895241][T14797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.021229][T14797] netlink: 'syz.4.2507': attribute type 33 has an invalid length. [ 406.032692][T14803] netlink: 'syz.4.2507': attribute type 33 has an invalid length. [ 406.395337][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 406.507474][T14818] openvswitch: netlink: Flow actions attr not present in new flow. [ 406.572672][T14823] syzkaller1: entered promiscuous mode [ 406.596869][T14823] syzkaller1: entered allmulticast mode [ 406.607811][ T1110] bond0: (slave syz_tun): interface is now down [ 406.657200][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.903826][T14836] syzkaller1: entered promiscuous mode [ 406.911604][T14836] syzkaller1: entered allmulticast mode [ 407.085398][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 407.408872][T14851] netlink: 'syz.1.2522': attribute type 2 has an invalid length. [ 407.638623][T14855] bond6: option lp_interval: invalid value (0) [ 407.662933][T14855] bond6: option lp_interval: allowed values 1 - 2147483647 [ 407.673351][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 407.760321][T14855] bond6 (unregistering): Released all slaves [ 407.900584][T14872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2525'. [ 408.100676][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 408.221718][T14885] macsec0: entered promiscuous mode [ 408.393163][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 408.517354][T14896] netlink: 'syz.2.2534': attribute type 21 has an invalid length. [ 408.534081][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 408.558862][T14898] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 409.039812][T14918] netlink: 'syz.3.2540': attribute type 4 has an invalid length. [ 409.078858][T14923] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 409.106425][T14908] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 409.120233][T14923] netlink: 'syz.3.2540': attribute type 3 has an invalid length. [ 409.143977][T14923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2540'. [ 409.163229][ T134] bond0: (slave syz_tun): interface is now down [ 409.913046][T14952] netlink: 'syz.3.2549': attribute type 2 has an invalid length. [ 410.664188][T14981] __nla_validate_parse: 1 callbacks suppressed [ 410.664207][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 410.925612][T14993] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2559'. [ 410.961172][T14987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2556'. [ 411.214007][T15001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2560'. [ 411.236944][T15002] netlink: 'syz.4.2560': attribute type 21 has an invalid length. [ 411.520477][T15002] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 411.547534][T15002] bond6 (unregistering): Released all slaves [ 411.723103][ T134] bond0: (slave syz_tun): interface is now down [ 412.281270][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2567'. [ 412.314242][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 412.731524][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 413.067517][T15058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2576'. [ 413.347903][T15062] sctp: [Deprecated]: syz.2.2578 (pid 15062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.347903][T15062] Use struct sctp_sack_info instead [ 413.651944][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 413.690981][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2583'. [ 414.361817][T15112] sch_fq: defrate 0 ignored. [ 414.845566][T15134] batadv_slave_0: Caught tx_queue_len zero misconfig [ 415.009172][T15144] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 415.078593][T15144] netlink: 'syz.1.2602': attribute type 268 has an invalid length. [ 415.816345][T15183] __nla_validate_parse: 6 callbacks suppressed [ 415.816364][T15183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2613'. [ 416.147215][T15197] netlink: 'syz.4.2615': attribute type 2 has an invalid length. [ 416.187521][T15197] tipc: Enabled bearer , priority 10 [ 416.480743][T15191] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2615'. [ 416.619112][T15191] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 416.669675][T15191] tipc: Enabled bearer , priority 10 [ 416.988885][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 417.098296][T15242] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 417.124696][T15251] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 417.219287][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 417.405587][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 417.493556][T15254] veth7: entered allmulticast mode [ 417.722422][ T9] tipc: Node number set to 940911305 [ 417.929365][T15273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2633'. [ 418.235620][T15276] bond7: entered promiscuous mode [ 418.259445][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 418.345737][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 418.428554][T15301] xt_ecn: cannot match TCP bits for non-tcp packets [ 418.519788][T15304] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 418.600514][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2644'. [ 418.686177][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 419.480371][T15344] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 420.457821][T15379] tipc: Enabling of bearer rejected, media not registered [ 420.794041][T15393] netlink: 'syz.2.2665': attribute type 12 has an invalid length. [ 420.818194][T15393] netlink: 'syz.2.2665': attribute type 2 has an invalid length. [ 420.851522][T15393] __nla_validate_parse: 2 callbacks suppressed [ 420.851544][T15393] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2665'. [ 420.903801][T15394] netlink: 'syz.2.2665': attribute type 12 has an invalid length. [ 421.029481][T15400] xt_hashlimit: size too large, truncated to 1048576 [ 421.070927][T15397] syzkaller0: entered promiscuous mode [ 421.095175][T15397] syzkaller0: entered allmulticast mode [ 421.105723][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2657'. [ 421.550161][T15409] syzkaller0: entered promiscuous mode [ 421.607912][T15414] netlink: 'syz.1.2669': attribute type 9 has an invalid length. [ 421.609284][T15409] syzkaller0: entered allmulticast mode [ 421.796240][T15422] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2672'. [ 421.911031][T15427] netlink: 'syz.0.2674': attribute type 58 has an invalid length. [ 421.946260][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'. [ 422.158334][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 422.307256][T15432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.441321][T15450] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 422.478174][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2677'. [ 422.631187][T15464] xt_cgroup: xt_cgroup: no path or classid specified [ 422.816550][T15472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2684'. [ 422.906636][T15475] ip6gre2: entered allmulticast mode [ 422.913817][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2687'. [ 422.952447][T15472] netlink: 'syz.3.2684': attribute type 8 has an invalid length. [ 422.990680][T15472] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.2684'. [ 423.091123][T15482] ip6erspan1: entered allmulticast mode [ 423.919111][T15515] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 424.034823][T15515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.189658][T15520] bridge0: port 1(vlan3) entered blocking state [ 424.219216][T15520] bridge0: port 1(vlan3) entered disabled state [ 424.257647][T15520] vlan3: entered allmulticast mode [ 424.265934][T15520] geneve0: entered allmulticast mode [ 424.277141][T15520] vlan3: entered promiscuous mode [ 424.288538][T15520] geneve0: entered promiscuous mode [ 424.300240][T15537] syzkaller0: entered promiscuous mode [ 424.323474][T15537] syzkaller0: entered allmulticast mode [ 424.626617][T15554] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2706'. [ 424.881439][T15560] pim6reg: entered allmulticast mode [ 425.773234][T15567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.028451][T15614] __nla_validate_parse: 1 callbacks suppressed [ 426.028470][T15614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2720'. [ 426.093677][T15614] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.2720'. [ 426.918747][T15645] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 428.921868][ T57] bond0: (slave syz_tun): interface is now down [ 434.842339][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 533.932042][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 533.939043][ C0] rcu: 1-...!: (1 GPs behind) idle=ab1c/1/0x4000000000000000 softirq=69232/69235 fqs=18 [ 533.949842][ C0] rcu: (detected by 0, t=10502 jiffies, g=67041, q=1361 ncpus=2) [ 533.957678][ C0] Sending NMI from CPU 0 to CPUs 1: [ 533.957716][ C1] NMI backtrace for cpu 1 [ 533.957741][ C1] CPU: 1 UID: 0 PID: 4980 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 533.957838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.957852][ C1] RIP: 0010:lock_is_held_type+0xec/0x150 [ 533.957991][ C1] Code: 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 ba db 4d 8e e8 f1 1a 00 00 b8 ff ff ff ff 65 0f c1 05 dc 4c 97 07 <83> f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 [ 533.958007][ C1] RSP: 0018:ffffc90000a08d40 EFLAGS: 00000057 [ 533.958056][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000001000001 [ 533.958068][ C1] RDX: 0000000001000001 RSI: ffffffff8e4ddbba RDI: ffffffff8c4cd780 [ 533.958081][ C1] RBP: 00000000ffffffff R08: 0000000001000001 R09: 1ffffffff35329c8 [ 533.958093][ C1] R10: dffffc0000000000 R11: fffffbfff35329c9 R12: 0000000000000046 [ 533.958106][ C1] R13: ffff88807e450000 R14: ffff8880b8728198 R15: 0000000000000001 [ 533.958119][ C1] FS: 00007f48a9542880(0000) GS:ffff888125021000(0000) knlGS:0000000000000000 [ 533.958135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.958148][ C1] CR2: 00007f0b2739dff8 CR3: 000000007e550000 CR4: 00000000003526f0 [ 533.958165][ C1] Call Trace: [ 533.958205][ C1] [ 533.958244][ C1] __remove_hrtimer+0x82/0x3e0 [ 533.958376][ C1] __hrtimer_run_queues+0x295/0xa10 [ 533.958406][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 533.958441][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 533.958471][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 533.958491][ C1] [ 533.958497][ C1] [ 533.958534][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.958576][ C1] RIP: 0010:tomoyo_check_acl+0xda/0x400 [ 533.958688][ C1] Code: 84 e6 01 00 00 4d 8d 7e 18 4c 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 09 01 00 00 45 0f b6 3f 31 ff 44 89 fe e8 e6 5a 3c fd <45> 85 ff 74 0a e8 5c 57 3c fd e9 b4 00 00 00 4d 8d 7e 19 4c 89 f8 [ 533.958703][ C1] RSP: 0018:ffffc90002eafa30 EFLAGS: 00000293 [ 533.958718][ C1] RAX: ffffffff848ab5ea RBX: dffffc0000000000 RCX: ffff88807e450000 [ 533.958731][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.958742][ C1] RBP: ffff888034efd810 R08: ffff88807e450000 R09: 0000000000000003 [ 533.958755][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000007 [ 533.958766][ C1] R13: 0000000000000000 R14: ffff88803320d780 R15: 0000000000000000 [ 533.958782][ C1] ? tomoyo_check_acl+0xda/0x400 [ 533.958840][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 533.958866][ C1] tomoyo_path_permission+0x1a6/0x3b0 [ 533.958893][ C1] tomoyo_path_perm+0x3f3/0x560 [ 533.958916][ C1] ? tomoyo_path_perm+0x251/0x560 [ 533.958939][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 533.958968][ C1] ? __x64_sys_openat+0x138/0x170 [ 533.959038][ C1] security_inode_getattr+0x12b/0x310 [ 533.959106][ C1] __x64_sys_newfstat+0x133/0x270 [ 533.959142][ C1] ? do_sys_openat2+0x14e/0x200 [ 533.959163][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 533.959203][ C1] do_syscall_64+0x166/0x520 [ 533.959255][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.959273][ C1] ? clear_bhb_loop+0x70/0xc0 [ 533.959293][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.959310][ C1] RIP: 0033:0x7f48a8f11ad7 [ 533.959327][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 533.959342][ C1] RSP: 002b:00007ffd8c22e928 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 533.959363][ C1] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f48a8f11ad7 [ 533.959375][ C1] RDX: 0000000000090800 RSI: 00007ffd8c22e930 RDI: 000000000000000d [ 533.959387][ C1] RBP: 00007ffd8c22e930 R08: 0000000000000000 R09: 0000000000000001 [ 533.959399][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000563a4b3377b0 [ 533.959410][ C1] R13: 00000000000000ff R14: 0000563a438bfbe0 R15: 00007ffd8c22ec50 [ 533.959432][ C1] [ 533.959709][ C0] rcu: rcu_preempt kthread starved for 10464 jiffies! g67041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 534.362280][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 534.372255][ C0] rcu: RCU grace-period kthread stack dump: [ 534.378135][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 534.391650][ C0] Call Trace: [ 534.394932][ C0] [ 534.397864][ C0] __schedule+0x17d4/0x5630 [ 534.402468][ C0] ? __lock_acquire+0x683/0x2cf0 [ 534.407446][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 534.412568][ C0] ? __pfx___schedule+0x10/0x10 [ 534.417430][ C0] ? schedule+0x90/0x2b0 [ 534.421682][ C0] schedule+0x164/0x2b0 [ 534.425844][ C0] schedule_timeout+0x152/0x2c0 [ 534.430699][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 534.436074][ C0] ? __pfx_process_timeout+0x10/0x10 [ 534.441371][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.447184][ C0] ? prepare_to_swait_event+0x322/0x350 [ 534.452759][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 534.457645][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 534.463842][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 534.469134][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 534.474341][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 534.480157][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 534.484758][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 534.489968][ C0] ? __kthread_parkme+0x71/0x1f0 [ 534.494940][ C0] ? __kthread_parkme+0x199/0x1f0 [ 534.499977][ C0] kthread+0x38b/0x480 [ 534.504058][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 534.509307][ C0] ? __pfx_kthread+0x10/0x10 [ 534.513913][ C0] ret_from_fork+0x514/0xb70 [ 534.518547][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 534.523664][ C0] ? __switch_to+0xc89/0x1420 [ 534.528349][ C0] ? __pfx_kthread+0x10/0x10 [ 534.532959][ C0] ret_from_fork_asm+0x1a/0x30 [ 534.537773][ C0] [ 534.540790][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 534.547112][ C0] CPU: 0 UID: 0 PID: 5275 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 534.556049][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.566107][ C0] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 534.572888][ C0] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 91 36 0c 00 41 83 e7 01 75 07 e8 86 31 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 534.592516][ C0] RSP: 0018:ffffc9000338f460 EFLAGS: 00000293 [ 534.598607][ C0] RAX: ffffffff81badbee RBX: ffff8880b8741208 RCX: ffff8880283c3e80 [ 534.606684][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 534.614665][ C0] RBP: ffffc9000338f5b0 R08: ffff8880283c5417 R09: 1ffff11005078a82 [ 534.622641][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170e8241 [ 534.630611][ C0] R13: 0000000000000001 R14: ffff8880b8741200 R15: 0000000000000001 [ 534.638586][ C0] FS: 00007f7f65b4d780(0000) GS:ffff888124f21000(0000) knlGS:0000000000000000 [ 534.647516][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.654100][ C0] CR2: 00007f431aa38642 CR3: 000000007acde000 CR4: 00000000003526f0 [ 534.662072][ C0] Call Trace: [ 534.665352][ C0] [ 534.668289][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 534.673542][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 534.679879][ C0] ? rcu_is_watching+0x16/0xb0 [ 534.684647][ C0] ? trace_tlb_flush+0x3c/0x160 [ 534.689518][ C0] flush_tlb_mm_range+0x8ff/0x1090 [ 534.694637][ C0] ? ldt_dup_context+0x336/0x3e0 [ 534.699590][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 534.705144][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.711140][ C0] ? dup_mmap+0x176b/0x1d90 [ 534.715688][ C0] ? up_write+0x19d/0x4a0 [ 534.720034][ C0] dup_mmap+0x1786/0x1d90 [ 534.724388][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 534.729066][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 534.734106][ C0] ? copy_mm+0x10f/0x480 [ 534.738355][ C0] ? copy_mm+0x10f/0x480 [ 534.742615][ C0] copy_mm+0x11a/0x480 [ 534.746689][ C0] ? copy_process+0xd3c/0x43e0 [ 534.751479][ C0] copy_process+0x1e75/0x43e0 [ 534.756196][ C0] ? copy_process+0xd3c/0x43e0 [ 534.760997][ C0] ? __pfx_copy_process+0x10/0x10 [ 534.766043][ C0] kernel_clone+0x2d7/0x940 [ 534.770559][ C0] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 534.776060][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 534.781129][ C0] __x64_sys_clone+0x1b6/0x230 [ 534.785906][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 534.791215][ C0] ? do_sock_setsockopt+0x185/0x1b0 [ 534.796596][ C0] do_syscall_64+0x166/0x520 [ 534.801196][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.807264][ C0] ? clear_bhb_loop+0x70/0xc0 [ 534.811946][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.817858][ C0] RIP: 0033:0x7f7f65c21636 [ 534.822373][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 534.841983][ C0] RSP: 002b:00007ffe320f1320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 534.850405][ C0] RAX: ffffffffffffffda RBX: 00007ffe320f1328 RCX: 00007f7f65c21636 [ 534.858465][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 534.866433][ C0] RBP: 00007ffe32111870 R08: 0000000000000000 R09: 0000000000000001 [ 534.874490][ C0] R10: 00007f7f65b4da50 R11: 0000000000000246 R12: 00007ffe320f1460 [ 534.882461][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005592b4de0ac0 [ 534.890450][ C0]