last executing test programs: 1m4.574267112s ago: executing program 0 (id=2073): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:'], 0x8) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1m4.421342581s ago: executing program 0 (id=2078): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x100000, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1d}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m4.158393581s ago: executing program 0 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0xed86d8af621c75dc) 1m3.954089578s ago: executing program 0 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x64, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m3.622111401s ago: executing program 0 (id=2093): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a008313", @ANYRESOCT], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m3.337041071s ago: executing program 0 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 48.344738784s ago: executing program 32 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3.733072601s ago: executing program 2 (id=2731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c0000800800034000000002"], 0xfc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="348000001000f807fdffffffcf8baaab3f00ffb1", @ANYRESDEC=r0, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 3.531849159s ago: executing program 2 (id=2733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) unshare(0x6a040000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async, rerun: 32) listen(r7, 0x0) (rerun: 32) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = accept(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async, rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvfrom(r8, &(0x7f0000000080)=""/60, 0x3c, 0x140, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (rerun: 64) 3.527468532s ago: executing program 4 (id=2734): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0xa8, 0x32, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x3fff, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x84) 3.305840639s ago: executing program 4 (id=2736): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r2, r4, 0x2f, 0x10, 0x4, @void, @value=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'lo\x00', 0x2}, 0x18) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]]}, 0x60}}, 0x50) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000340)=0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) 2.844685254s ago: executing program 2 (id=2738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r0, 0x0, 0x90, 0x6c, &(0x7f0000000e00)="c6e48b4194f207dd53a93f7e5ffe59f133fb04c2409b19ff4cf59a8d9140f0c71c61dbb7363591b91d451c814587a775ac6e0ce973e302105348437e9a5ba4318a294b363f9cf2e83061f431e6af1080bb50e915ace7d3f195b516b84a51d2e7236d17aef1a7c4c18f68476ca34d60fb5b75a9d14ac39dd8b389f712e8152acc297219f5a48684cc6f190ddc6c185850", &(0x7f0000000ec0)=""/108, 0x423, 0x0, 0x4e, 0xbb, &(0x7f0000000f40)="77bd56665f30222764e96c8f8895cc36db8ccdf30a7e11865c1397bdadc4d1b024b73a7826b7072aca36787a5eac76e6be1348a5661d98fceeb72faf3bab655cb8bb7408bb929c1f6859f1e01c4b", &(0x7f0000000fc0)="83cd07458f9f8702929f93d66997ec6cf086ecc531fd1df3e23d60f379ccb75bc0a77c0e82daf3154bd821d92b685801f5981d64adb07ff3d874bb635f4abf78b7938db71e14563c61666edff36165590df1bad93fc333f16fabe47d71f5d328720526f42273db0e4526d68c7e2d5bda3995c8c379dc4e7cf13b67cc1910bdc4da0cb6277077224077484e3828eda1095be06071db9b92781c53596490669b90e055d63c19761aa3a3d481e5f753785bf6e50b6abef68f1ab797a6", 0x1, 0x0, 0xa}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000000d40)={0x14, 0x4, 0x1, 0xfb, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004a090}, 0x4042cd5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=r8, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB='\x00'/10], 0x4c}}, 0x884) 2.573732856s ago: executing program 4 (id=2742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x170bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000980)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000900)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x8, 0x9}}}, 0x6) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480), 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000001) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r7, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0xa, 0x400, 0x8, 0x6, 0x3, 0x80016, 0xfffffc00, 0xfffffffe, 0xfff, 0xf, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x900, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0xa, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x71, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xfffffefe, 0x1, 0x244f, 0x8, 0xffffffff, 0x7fff, 0xfffffff9, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0xfffffff9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0xd, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0x80000d3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0x7ff, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e4, 0x5, 0x8, 0x5e, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x1, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x34, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x34}}, 0x2008040) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_ro(r16, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r17, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000400)=""/81, 0x51, 0x0, &(0x7f00000005c0)=""/109, 0x6d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5420, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x4, &(0x7f0000000280)=""/4, 0x40f00, 0x0, '\x00', r11, @fallback=0xe, r17, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x3, 0x400}, 0x10, r18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) 2.274967351s ago: executing program 5 (id=2743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x6, 0x5, 0xfffffffb, 0x0, 0x101, 0x6, 0x327}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0100001000130400007000000000000000000000000000608a75b196221ab4c239129a2ec300000000000000fc010000000000000000000000000000000012d0947e01645b69a45e2cf96befca387bc61a22ddc42400000000fafee78f85f063ffe79ca894fefbb50a79280664251c273e6328a25ea0fbe24b732be76d89518c1ef6fdd411d02f867e3177ea79d3338f3930ca11836b7dc5dcf2335764897bdab9c2ac210d3f89e819c41e4a7f5e829b80da5111a4e05aac0938d0a0c6848e185ca76ed196d670cb771f6e5f92886121a0cbb5d79d52302e346bf87862", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e0000001000000000000000000000000ff03000000000000feffffffffffffff000000000000000000000000000000000300000000000000000008000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff2000080000000000000000000a00018168000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r10, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}}, 0x0, 0x0, 0x50, 0x0, "cebd7ceedb7b0ad952e966bbe32e10256456deac64e782206bd4aee372005a52a40b7961161a8b2749050000000000000090010a1ed2bf603d3a3fcc250c30136f9ef2ef8b00"}, 0xd8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0xe, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket(0x10, 0x3, 0x0) 1.827274433s ago: executing program 2 (id=2746): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x0, 0x101, 0x9, {{0x2c, 0x4, 0x3, 0x14, 0xb0, 0x68, 0x0, 0x63, 0x4, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xb4, [@remote, @private=0xa010102, @empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x44, 0x4c, 0x3, 0x2, [{@multicast1, 0x80000001}, {@rand_addr=0x64010100}, {@rand_addr=0x64010100, 0xb58}, {@private=0xa010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x14b}, {@private=0xa010101}, {@rand_addr=0x64010101, 0xd5aa}, {@private=0xa010100, 0x80000000}]}, @rr={0x7, 0x27, 0xf3, [@remote, @multicast1, @local, @loopback, @rand_addr=0x64010102, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @end, @ssrr={0x89, 0x17, 0x20, [@dev={0xac, 0x14, 0x14, 0x1c}, @empty, @broadcast, @multicast2, @loopback]}]}}}}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)={0x74, 0xaa, 0x723, 0x0, 0x0, "", [@typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@local}, @generic="4b7ee61bb31a39c174544ea0e407a7092f", @generic="9742e69ddbad0c0e101d403db5369e1ae9bede1cd23f3b605660d243d3b6284bc59ec7c54269afd39216600717f611586d78bbf563175ef754b7a1323f734217d5da5fd157060161d6c5"]}, 0x74}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.812336233s ago: executing program 1 (id=2747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x54}, {@multicast2, 0x9}, {@local, 0x9}]}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) 1.553044631s ago: executing program 3 (id=2748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000b40)={&(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="afad7c5b72c48bddc229585c7f4b98e3b119f21e24899548b304efd84cd867a428061140aecd72c1533a74d1b58a9424ebda80c937fed1ddac2e5b74b66f", 0x3e}, {&(0x7f0000000880)="6958ab333cf6c43ff60962bf360bbe4e7c68f2cdfb422e6ae907bb5ccca11253ca59a0a528fb895561384a583a1360f58469744c3558164859f96d471f176af34d8cb5c652c5166cb14456f61429a5a021ce0ff4927b57cd5bc8380afae021586dd5537c02a7b05edd5156e07e6401ba0d7d00b1cee007f8873d99adb9fafe07155752d93ad560595ad54818c1ceb3518e9b7265d724418253b4e61f8a4d92db9e34983e28bce8131520fb1774f8b38509ab4d41b0129930063c41eff30c48a057e1af178b43d43fa80b2f4347245d838468d8113357cf0e36c27b6ce5386b31ae8a55a8fda962da1d23148d7adafadb18d10db668", 0xf5}, {&(0x7f0000000980)="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", 0xfb}], 0x3, &(0x7f0000000ac0)=[{0x58, 0x101, 0x6, "0135b1728f92fca63ab5a3bfd68f012c273e331c70a4f8e248516a575dcb5ac28a95497ee7ec826130f4bdbfe37aba2a1ba720642c1eb649bb41701ef9037770daac619405"}], 0x58}, 0x4040) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4f2c2b36cecb5088}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x4064040}, 0x0) 1.453502143s ago: executing program 1 (id=2749): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0xd22f7c2db1585cba}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x0, 0x1, 0xffff, 0xf, 0x9d8d, 0x2, 0x401, [{0x7, 0x7, 0xa, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) 1.387841394s ago: executing program 2 (id=2750): r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x40, 0x10000, {{0x2e, 0x4, 0x1, 0x25, 0xb8, 0x66, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x17, 0x5d, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @local, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x1f, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x81}, {@multicast1, 0xd3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0xb1}, {@broadcast, 0xbaa2}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7763}, {@multicast1, 0xa}]}, @rr={0x7, 0x7, 0x10, [@loopback]}, @timestamp={0x44, 0x1c, 0x2b, 0x0, 0xf, [0x4, 0xee, 0x80, 0x80, 0x401, 0x0]}, @lsrr={0x83, 0x13, 0x10, [@empty, @multicast2, @empty, @multicast2]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x400, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x46c8b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xefff}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffffe}]}}}]}, 0x48}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) 1.330750597s ago: executing program 3 (id=2751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.287898839s ago: executing program 4 (id=2752): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x11) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f0000000280)='\x00', 0x60801, &(0x7f00000002c0)={@align=0x1, {0xcaa, 0x9, 0x7f, 0x3}}, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x7}) openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) 1.227725777s ago: executing program 5 (id=2753): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.170139701s ago: executing program 2 (id=2754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000040)=0x401, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x20048440) 1.050187246s ago: executing program 4 (id=2755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000cee00)={{0x0, 0x305, 0xfffffffffffffffc, 0x401, 0x6, 0x7fffffff, 0x9, 0x3ff, 0x1, 0x1000, 0x3, 0x7, 0x0, 0x8, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) writev(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x15, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a14000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) accept$inet(r8, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x164, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x71, 0x14, {{'xcbc(aes)\x00'}, 0x128, 0x0, "000000000000000000000000000000003fe380589cc8d6d2287e1ad94098733cb609bf729c"}}]}, 0x164}}, 0x0) 992.385861ms ago: executing program 5 (id=2756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x8b8d07f48e0c52df, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ad}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4c000) unshare(0x24020400) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1000001, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 894.060287ms ago: executing program 3 (id=2757): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) getsockopt(r2, 0xfffffffa, 0x7, &(0x7f0000000080)=""/253, &(0x7f0000000180)=0xfd) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 893.244791ms ago: executing program 1 (id=2758): syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0xffffffff, 0xfffffff8, 0x400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000004a00010000000000000000000a0000006e87170ee8"], 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x1a0000010}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x2010}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000100)={{r1}, "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"}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x188, 0x0, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @icmp_id=0x68, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port=0x4e22}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 847.530145ms ago: executing program 3 (id=2759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008084) r3 = socket(0x1, 0x803, 0x0) (async) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x8000) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1e48, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000280)='GPL\x00', 0x10001, 0x7b, &(0x7f00000002c0)=""/123, 0x41100, 0x20, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x5, 0x22fddc83}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r8, r9], 0x0, 0x10, 0xd}, 0x94) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r5}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 800.967374ms ago: executing program 5 (id=2760): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, 0x0, 0x40000) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) shutdown(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x801888, 0x488d7f4ab1a9e3db) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 579.761971ms ago: executing program 3 (id=2761): socket$netlink(0x10, 0x3, 0x13) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) (rerun: 64) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket(0x10, 0x803, 0x0) (rerun: 32) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 578.460322ms ago: executing program 1 (id=2762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04a00025bd7000fcdbdf252300000005002500df00000005002500030000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050829bd7000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20048840) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) (async) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04a00025bd7000fcdbdf252300000005002500df00000005002500030000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050829bd7000fbdbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20048840) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) 573.408253ms ago: executing program 5 (id=2763): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x230}]}}}]}, 0x48}}, 0x20048440) 444.584409ms ago: executing program 5 (id=2764): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x200000006c832, r2, 0x26d23000) sendmmsg$inet(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008081) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="9f00d4f3"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0xd29, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x4000004) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r8 = socket(0x40000000015, 0x805, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @multicast2}}}, 0x88) getsockopt(r8, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x20, 0xfffffffe, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x5, 0x6}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24001844) 310.077873ms ago: executing program 1 (id=2765): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0xb0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 190.096767ms ago: executing program 3 (id=2766): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3", 0x1}], 0x1}}], 0x1, 0x20000044) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0xfffffffe, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 40.507419ms ago: executing program 4 (id=2767): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="100000002a00000800ad7000fcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff03, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) 0s ago: executing program 1 (id=2768): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x20803}, 0xc004) kernel console output (not intermixed with test programs): 479312][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 261.538188][ T9978] bond5: entered promiscuous mode [ 261.544933][ T9978] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.703607][ T9989] bond7: entered allmulticast mode [ 261.725628][ T9985] lo speed is unknown, defaulting to 1000 [ 262.179912][T10007] xfrm1: entered allmulticast mode [ 262.630100][T10022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1028'. [ 262.677014][T10022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.035103][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 263.322831][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.360746][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.387008][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.414088][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.433546][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 263.443066][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.470569][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.503182][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 263.521599][T10051] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 264.445567][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.476649][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1045'. [ 266.493353][T10099] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 266.826601][T10115] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 266.978176][T10122] macsec1: entered promiscuous mode [ 267.259755][T10117] "syz.4.1051" (10117) uses obsolete ecb(arc4) skcipher [ 267.708206][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 267.718758][ T24] bridge0: entered promiscuous mode [ 268.055600][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 268.081564][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1061'. [ 268.522453][T10185] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1068'. [ 268.531324][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 268.600582][T10187] validate_nla: 25 callbacks suppressed [ 268.600604][T10187] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 268.636950][T10187] netlink: 'syz.3.1067': attribute type 8 has an invalid length. [ 268.656465][T10187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1067'. [ 268.780866][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 268.803877][T10196] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 268.826892][T10196] netlink: 'syz.3.1067': attribute type 8 has an invalid length. [ 268.850814][T10196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1067'. [ 268.900366][T10197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.017649][T10204] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 269.051715][ T1002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.078566][ T1002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.109438][ T8669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.136620][ T8669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.185864][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 269.594048][T10220] xt_cgroup: path and classid specified [ 269.603525][T10219] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 269.841642][T10227] netlink: 'syz.3.1079': attribute type 3 has an invalid length. [ 269.915459][T10233] vlan3: entered promiscuous mode [ 269.935214][T10233] bond_slave_1: entered promiscuous mode [ 270.254922][T10238] lo speed is unknown, defaulting to 1000 [ 270.393350][T10255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.532454][T10260] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.547099][T10260] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.835561][T10268] tc_dump_action: action bad kind [ 271.962442][T10306] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 272.018813][T10306] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 272.284323][T10303] lo speed is unknown, defaulting to 1000 [ 272.405612][T10313] netlink: 'syz.2.1101': attribute type 9 has an invalid length. [ 272.425774][T10313] __nla_validate_parse: 3 callbacks suppressed [ 272.425794][T10313] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1101'. [ 272.471943][T10315] tipc: Started in network mode [ 272.482663][T10315] tipc: Node identity ac14140f, cluster identity 4711 [ 272.499876][T10315] tipc: New replicast peer: 255.255.255.255 [ 272.513174][T10315] tipc: Enabled bearer , priority 10 [ 272.552629][T10313] xt_hashlimit: size too large, truncated to 1048576 [ 272.730090][T10320] netlink: 'syz.0.1103': attribute type 31 has an invalid length. [ 272.848201][T10326] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 272.936480][T10322] syzkaller0: entered promiscuous mode [ 272.958878][T10322] syzkaller0: entered allmulticast mode [ 272.995187][T10326] team0: Device veth1_virt_wifi failed to register rx_handler [ 273.254262][T10336] IPVS: Scheduler module ip_vs_sip not found [ 273.318090][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.073429][ T24] tipc: Node number set to 2886997007 [ 275.263215][T10346] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1112'. [ 275.297779][T10346] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1112'. [ 275.318730][T10345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1111'. [ 275.358451][T10345] vlan2: entered promiscuous mode [ 275.574378][T10356] vxcan2: entered allmulticast mode [ 275.646891][T10367] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1116'. [ 275.937268][ T30] audit: type=1107 audit(1777613592.004:6): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 277.725737][T10378] žÿ: renamed from team_slave_1 (while UP) [ 277.768726][ T873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.801857][ T873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.843614][ T873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.862527][ T873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.944965][T10398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1124'. [ 278.034516][T10401] macvlan2: entered promiscuous mode [ 278.048953][T10401] macvlan2: entered allmulticast mode [ 278.226054][T10411] geneve6: entered promiscuous mode [ 278.251375][T10411] geneve6: entered allmulticast mode [ 278.320335][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 278.562841][T10433] vlan0: entered promiscuous mode [ 278.568990][T10431] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 278.582584][T10433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.810556][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1134'. [ 278.962420][T10449] lo speed is unknown, defaulting to 1000 [ 278.971081][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 279.123191][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 279.577936][T10463] bond6 (unregistering): Released all slaves [ 279.887551][T10474] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 279.915518][T10474] sctp: [Deprecated]: syz.2.1144 (pid 10474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.915518][T10474] Use struct sctp_sack_info instead [ 280.223878][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 280.482950][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 280.508614][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 280.603574][T10505] hmac(sha224): entered promiscuous mode [ 280.830289][T10523] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 281.060997][T10533] netlink: 'syz.0.1158': attribute type 39 has an invalid length. [ 281.121499][T10537] netlink: 'syz.0.1158': attribute type 39 has an invalid length. [ 281.360463][T10547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.490235][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 281.509427][T10547] netlink: 'syz.0.1162': attribute type 7 has an invalid length. [ 281.538752][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 281.913558][T10575] : entered promiscuous mode [ 281.941140][T10575] openvswitch: : Dropping previously announced user features [ 282.356964][T10593] syzkaller1: entered promiscuous mode [ 282.372713][T10593] syzkaller1: entered allmulticast mode [ 282.390917][T10595] dummy0: entered promiscuous mode [ 282.413194][T10595] dummy0: entered allmulticast mode [ 282.459731][T10595] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 282.710473][T10607] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 282.759967][T10607] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 282.772284][T10602] xt_hashlimit: size too large, truncated to 1048576 [ 282.845611][T10612] netlink: 'syz.4.1179': attribute type 7 has an invalid length. [ 282.977465][T10616] netlink: 'syz.1.1180': attribute type 13 has an invalid length. [ 283.063499][T10618] netlink: 'syz.1.1180': attribute type 8 has an invalid length. [ 283.150561][T10618] __nla_validate_parse: 4 callbacks suppressed [ 283.150581][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 283.256441][T10625] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 283.516420][T10625] bond11: entered promiscuous mode [ 283.548963][T10625] 8021q: adding VLAN 0 to HW filter on device bond11 [ 283.645860][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'. [ 284.004922][T10673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1194'. [ 284.026580][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 284.177955][T10681] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 284.242389][T10681] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 284.276017][T10681] macvlan2: entered promiscuous mode [ 284.294478][T10681] macvlan2: entered allmulticast mode [ 284.316851][T10681] bond8: entered promiscuous mode [ 284.329705][T10681] bridge7: entered promiscuous mode [ 284.329984][T10684] netlink: 'syz.2.1197': attribute type 39 has an invalid length. [ 284.346103][T10681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.355283][T10681] bond8: left promiscuous mode [ 284.360384][T10681] bridge7: left promiscuous mode [ 284.416389][T10685] syzkaller0: entered promiscuous mode [ 284.422222][T10685] syzkaller0: entered allmulticast mode [ 284.605615][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 285.126278][T10707] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1204'. [ 285.184620][ T30] audit: type=1804 audit(1777613601.254:7): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1205" name="/newroot/232/memory.events" dev="tmpfs" ino=1206 res=1 errno=0 [ 285.207188][ T30] audit: type=1800 audit(1777613601.254:8): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1205" name="memory.events" dev="tmpfs" ino=1206 res=0 errno=0 [ 287.343375][T10709] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 287.645126][T10705] lo speed is unknown, defaulting to 1000 [ 287.946615][T10735] gtp1: entered promiscuous mode [ 287.970501][T10735] gtp1: entered allmulticast mode [ 288.036519][T10739] netlink: 'syz.3.1213': attribute type 3 has an invalid length. [ 288.051927][T10736] gtp2: entered promiscuous mode [ 288.066836][T10739] netlink: 'syz.3.1213': attribute type 3 has an invalid length. [ 288.093409][T10736] gtp2: entered allmulticast mode [ 288.101659][T10739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1213'. [ 288.432643][T10748] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 288.480745][T10748] netlink: 476 bytes leftover after parsing attributes in process `syz.1.1215'. [ 288.522792][T10748] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1215'. [ 289.049776][T10764] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 289.089344][T10764] bond8 (unregistering): Released all slaves [ 289.415513][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'. [ 289.698941][T10783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 289.796487][T10783] batman_adv: batadv0: Adding interface: ip6gretap2 [ 289.837381][T10783] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 289.876419][T10783] batman_adv: batadv0: Interface activated: ip6gretap2 [ 290.175390][T10794] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1226'. [ 290.214227][T10786] netlink: 'syz.4.1225': attribute type 6 has an invalid length. [ 290.223523][T10786] netlink: 'syz.4.1225': attribute type 7 has an invalid length. [ 290.233773][T10786] netlink: 'syz.4.1225': attribute type 8 has an invalid length. [ 290.990528][T10827] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1232'. [ 291.238017][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.658722][T10809] block nbd1: server does not support multiple connections per device. [ 291.673658][T10809] block nbd1: shutting down sockets [ 291.921432][T10844] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 291.932903][T10844] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 291.964458][T10844] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 292.087238][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1235'. [ 292.109720][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 292.862142][T10882] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 292.888428][T10881] syzkaller0: entered promiscuous mode [ 292.901093][T10881] syzkaller0: entered allmulticast mode [ 292.954975][T10884] syzkaller0: entered promiscuous mode [ 292.960941][T10884] syzkaller0: entered allmulticast mode [ 293.033874][T10884] tipc: Started in network mode [ 293.040136][T10884] tipc: Node identity 0207f0912a2d, cluster identity 4711 [ 293.048590][T10884] tipc: Enabled bearer , priority 0 [ 293.061387][T10883] tipc: Resetting bearer [ 293.089639][T10883] tipc: Disabling bearer [ 293.145836][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 293.209641][T10896] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 293.250100][T10896] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 293.465427][T10906] netlink: 'syz.2.1256': attribute type 12 has an invalid length. [ 293.475391][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1256'. [ 293.515711][T10906] netlink: 'syz.2.1256': attribute type 39 has an invalid length. [ 294.096378][T10920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1259'. [ 294.109339][T10920] syzkaller0: entered promiscuous mode [ 294.115094][T10920] syzkaller0: entered allmulticast mode [ 294.413141][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 294.475947][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 294.505177][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 294.512854][T10933] nbd: must specify at least one socket [ 294.666017][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 294.701569][T10941] netlink: 'syz.3.1267': attribute type 10 has an invalid length. [ 294.719344][T10941] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1267'. [ 294.787296][T10945] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1270'. [ 295.101354][T10962] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1274'. [ 295.280467][T10970] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1277'. [ 295.316589][T10972] smc: net device wlan0 applied user defined pnetid SYZ0 [ 295.349074][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 295.730591][T10983] netlink: 'syz.4.1282': attribute type 32 has an invalid length. [ 298.815799][T11037] m1Ie5nè‹Ò: entered promiscuous mode [ 298.861937][T11033] lo speed is unknown, defaulting to 1000 [ 299.011479][T11053] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.105697][T11056] __nla_validate_parse: 7 callbacks suppressed [ 299.105715][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1299'. [ 299.176995][T11053] netlink: 'syz.4.1299': attribute type 12 has an invalid length. [ 299.177142][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 299.198932][T11053] netlink: 'syz.4.1299': attribute type 29 has an invalid length. [ 299.206864][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 299.219880][T11053] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1299'. [ 299.280719][T11062] bridge0: port 4(team0) entered blocking state [ 299.296508][T11062] bridge0: port 4(team0) entered disabled state [ 299.322881][T11062] team0: entered allmulticast mode [ 299.328595][T11062] team_slave_0: entered allmulticast mode [ 299.334593][T11062] team_slave_1: entered allmulticast mode [ 299.347000][T11062] team0: entered promiscuous mode [ 299.358749][T11062] team_slave_0: entered promiscuous mode [ 299.376212][T11062] team_slave_1: entered promiscuous mode [ 299.458251][T11060] bridge4: entered promiscuous mode [ 299.464973][T11060] bridge4: entered allmulticast mode [ 299.486146][T11060] team0: Port device bridge4 added [ 299.766691][T11077] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 299.816659][T11077] gretap1: entered allmulticast mode [ 299.851711][T11082] netlink: 'syz.0.1308': attribute type 21 has an invalid length. [ 300.110310][ T29] IPVS: starting estimator thread 0... [ 300.208518][T11097] IPVS: using max 26 ests per chain, 62400 per kthread [ 300.260968][T11100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 300.344392][T11100] ip6gre3: entered promiscuous mode [ 300.356068][T11100] ip6gre3: entered allmulticast mode [ 300.418249][T11100] netlink: 'syz.0.1314': attribute type 6 has an invalid length. [ 300.427869][T11100] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1314'. [ 300.525072][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 301.051653][T11133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.475738][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1328'. [ 301.519959][T11154] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1328'. [ 301.636233][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 301.850263][T11171] veth0: entered promiscuous mode [ 302.504578][T11164] veth0: left promiscuous mode [ 302.689670][T11206] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 302.906889][T11215] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 302.948452][T11215] netlink: 'syz.1.1343': attribute type 2 has an invalid length. [ 303.242683][T11229] xfrm1: entered allmulticast mode [ 303.422681][T11233] netlink: 'syz.1.1349': attribute type 7 has an invalid length. [ 303.691098][T11248] geneve2: entered promiscuous mode [ 303.895861][T11255] netlink: 'syz.2.1355': attribute type 9 has an invalid length. [ 304.129593][ T9] bridge0: entered promiscuous mode [ 304.356596][T11267] __nla_validate_parse: 13 callbacks suppressed [ 304.356616][T11267] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1358'. [ 304.530581][T11274] netlink: 'syz.1.1362': attribute type 16 has an invalid length. [ 304.585116][T11282] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1363'. [ 304.589847][T11274] netlink: 'syz.1.1362': attribute type 17 has an invalid length. [ 304.782032][T11274] bridge0: port 3(syz_tun) entered blocking state [ 304.788759][T11274] bridge0: port 3(syz_tun) entered forwarding state [ 304.873638][T11274] bond0: left promiscuous mode [ 304.908999][T11274] bond_slave_0: left promiscuous mode [ 304.933864][T11274] bond_slave_1: left promiscuous mode [ 304.958844][T11274] dummy0: left promiscuous mode [ 304.992713][T11274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.051259][T11274] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.126528][T11274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.333782][T11307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1369'. [ 305.348211][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.364870][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.380733][T11274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.392140][T11274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.412514][T11274] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 305.438193][ T24] lo speed is unknown, defaulting to 1000 [ 305.458760][ T873] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.466068][ T873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.477806][ T24] sqz0: Port: 1 Link ACTIVE [ 305.508991][ T873] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.516272][ T873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.574597][T11310] xt_nat: multiple ranges no longer supported [ 305.616301][ T873] bridge0: port 4(team0) entered blocking state [ 305.622801][ T873] bridge0: port 4(team0) entered forwarding state [ 305.664839][ T1223] lo speed is unknown, defaulting to 1000 [ 305.894943][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1374'. [ 306.199832][T11329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1375'. [ 306.232185][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1375'. [ 307.229154][T11361] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 307.304151][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 307.331059][T11356] lo speed is unknown, defaulting to 1000 [ 307.364839][T11367] netlink: 'syz.4.1387': attribute type 7 has an invalid length. [ 307.452090][T11364] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.516883][T11368] bond6: (slave batadv1): Opening slave failed [ 307.851317][T11372] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.974252][T11375] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 307.997040][T11375] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.1388'. [ 308.053890][T11372] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.112161][T11359] lo speed is unknown, defaulting to 1000 [ 308.318792][T11372] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.478879][T11372] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.755772][T11391] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 308.820004][T11385] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 308.829248][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.837113][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.872392][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1392'. [ 308.980624][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.995521][T11385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.237274][T11393] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.256928][T11393] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 309.313384][T11394] bond12: (slave bridge2): Enslaving as an active interface with a down link [ 309.344773][T11395] ip6gretap1: entered promiscuous mode [ 309.364369][T11395] ip6gretap1: entered allmulticast mode [ 309.400312][T11395] bond12: (slave ip6gretap1): making interface the new active one [ 309.439406][T11395] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 309.470232][ T8680] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.497766][ T8680] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.622050][ T8680] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.642724][ T8680] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.779228][ T8680] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.001253][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.046553][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.084249][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.149564][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 310.296431][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 310.312737][T11434] : entered promiscuous mode [ 310.397948][T11428] syzkaller0: entered promiscuous mode [ 310.406256][T11428] syzkaller0: entered allmulticast mode [ 310.424420][T11438] openvswitch: : Dropping previously announced user features [ 310.652932][T11448] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 310.747224][T11451] netlink: 5888 bytes leftover after parsing attributes in process `syz.3.1403'. [ 310.861552][T11451] pimreg: left allmulticast mode [ 310.940925][T11463] netlink: 'syz.4.1406': attribute type 4 has an invalid length. [ 311.137018][T11472] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1409'. [ 311.172933][T11472] netlink: Unknown conntrack attr (type=2304, max=9) [ 311.509609][T11487] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1411'. [ 311.528247][T11487] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 311.601154][T11487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1411'. [ 311.788370][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 311.806193][T11502] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1416'. [ 311.826861][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 311.852599][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 312.389808][T11534] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:21 [ 312.473109][T11530] lo speed is unknown, defaulting to 1000 [ 312.629179][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.666061][T11550] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 312.800139][T11550] 8021q: adding VLAN 0 to HW filter on device bond13 [ 312.980065][T11555] bond13: (slave veth9): Enslaving as an active interface with a down link [ 313.021151][T11566] netlink: 'syz.1.1431': attribute type 4 has an invalid length. [ 313.044991][T11562] bond13: (slave dummy0): making interface the new active one [ 313.079363][T11562] dummy0: entered promiscuous mode [ 313.094464][T11562] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 313.743626][T11585] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 314.735560][T11609] syzkaller1: entered promiscuous mode [ 314.766754][T11609] syzkaller1: entered allmulticast mode [ 314.945098][ T13] tipc: Subscription rejected, illegal request [ 315.115496][T11628] netlink: 'syz.0.1445': attribute type 4 has an invalid length. [ 315.262612][T11630] xt_l2tp: v2 sid > 0xffff: 262144 [ 315.683232][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.692501][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.705319][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.812385][T11649] __nla_validate_parse: 5 callbacks suppressed [ 315.812405][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 315.848036][T11653] netlink: 'syz.2.1451': attribute type 39 has an invalid length. [ 316.014505][T11656] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 316.062592][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.121125][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.142857][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.158973][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.183822][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.867112][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1461'. [ 316.907397][T11691] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1461'. [ 316.949778][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1461'. [ 316.999705][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 317.049372][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 317.355602][T11698] pim6reg: entered allmulticast mode [ 317.402588][T11696] pim6reg: left allmulticast mode [ 317.489413][T11714] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 317.524248][T11714] bond0: (slave dummy0): Releasing backup interface [ 317.542368][T11717] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 317.588419][T11714] dummy0: entered promiscuous mode [ 317.608284][T11714] dummy0: entered allmulticast mode [ 317.621819][T11714] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 317.643045][T11714] team0: Failed to send options change via netlink (err -105) [ 317.666358][T11714] team0: Port device dummy0 added [ 317.758538][T11717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 317.799782][T11717] dummy0: left promiscuous mode [ 317.815149][T11717] dummy0: left allmulticast mode [ 317.836197][T11717] team0: Failed to send options change via netlink (err -105) [ 317.854840][T11717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 317.866211][T11717] team0: Port device dummy0 removed [ 317.884016][T11717] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 318.094170][T11737] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 318.134117][T11737] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1474'. [ 318.166999][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1473'. [ 318.187843][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 318.209875][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 318.219493][T11737] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 318.250920][T11739] syzkaller0: entered promiscuous mode [ 318.267358][T11739] syzkaller0: entered allmulticast mode [ 318.306454][T11741] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 319.162123][T11774] netlink: 'syz.4.1485': attribute type 4 has an invalid length. [ 319.443087][T11780] netlink: 'syz.3.1488': attribute type 7 has an invalid length. [ 319.565585][T11789] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 319.663968][T11800] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 319.782452][T11789] bond9: entered promiscuous mode [ 319.812320][T11789] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.000383][T11804] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.028970][T11804] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 320.050993][T11804] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 320.119215][T11804] bond9: (slave ip6gre3): making interface the new active one [ 320.135476][T11804] ip6gre3: entered promiscuous mode [ 320.150941][T11804] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 320.742190][T11848] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 320.770468][T11849] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 320.941111][T11848] __nla_validate_parse: 3 callbacks suppressed [ 320.941133][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 321.102986][T11849] veth11: entered allmulticast mode [ 321.162254][T11849] bond14: (slave veth11): Enslaving as a backup interface with a down link [ 321.252646][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 321.337973][T11872] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 321.591082][T11883] Cannot find add_set index 0 as target [ 321.741341][T11887] netlink: 'syz.0.1517': attribute type 11 has an invalid length. [ 321.771977][T11887] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 321.799447][T11887] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.1517'. [ 322.026895][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 322.071074][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 322.115633][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 322.400227][T11927] xt_hashlimit: size too large, truncated to 1048576 [ 322.440383][ T30] audit: type=1800 audit(1777613638.514:9): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1525" name="r" dev="tmpfs" ino=1580 res=0 errno=0 [ 322.473537][T11929] syzkaller0: entered promiscuous mode [ 322.482074][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 322.502209][T11929] syzkaller0: entered allmulticast mode [ 323.194763][T11953] lo speed is unknown, defaulting to 1000 [ 323.205317][T11960] syzkaller0: entered promiscuous mode [ 323.215702][T11960] syzkaller0: entered allmulticast mode [ 323.822844][T11980] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1538'. [ 323.907338][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 324.006796][T11982] tipc: Disabling bearer [ 324.041902][T11982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.049467][T11982] IPv6: NLM_F_CREATE should be set when creating new route [ 324.056780][T11982] IPv6: NLM_F_CREATE should be set when creating new route [ 324.143767][T11976] bond8: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 324.204481][T11976] bond8 (unregistering): Released all slaves [ 324.373608][T11952] lo speed is unknown, defaulting to 1000 [ 325.111904][T12017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1544'. [ 325.350471][ T8680] dummy0: left promiscuous mode [ 326.383392][T12071] netlink: 'syz.4.1550': attribute type 11 has an invalid length. [ 326.416696][T12074] __nla_validate_parse: 3 callbacks suppressed [ 326.416718][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1549'. [ 326.437855][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.716983][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1553'. [ 326.884472][T12089] syzkaller0: entered promiscuous mode [ 326.905663][T12089] syzkaller0: entered allmulticast mode [ 327.353299][T12107] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1559'. [ 327.379158][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 328.063138][T12131] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1566'. [ 328.075439][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 328.085460][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1566'. [ 328.124587][T12136] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 328.233459][T12136] bond8: (slave geneve3): making interface the new active one [ 328.249057][T12136] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 328.261169][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 328.263522][ T48] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.282534][ T48] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.298143][T12138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.306778][ T48] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.307511][T12139] netlink: 'syz.0.1567': attribute type 4 has an invalid length. [ 328.323971][ T48] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 328.342888][T12139] netlink: 'syz.0.1567': attribute type 4 has an invalid length. [ 328.348964][T12136] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1565'. [ 328.614012][T12151] netlink: 'syz.4.1571': attribute type 89 has an invalid length. [ 328.769978][T12157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.105220][T12145] netlink: 'syz.3.1569': attribute type 4 has an invalid length. [ 329.138033][T12145] netlink: 'syz.3.1569': attribute type 4 has an invalid length. [ 329.179660][T12181] SET target dimension over the limit! [ 329.505649][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 329.551998][T12195] bond9: option updelay: invalid value (18446744073709493611) [ 329.560663][T12195] bond9: option updelay: allowed values 0 - 2147483647 [ 329.575876][T12195] bond9 (unregistering): Released all slaves [ 329.681066][T12192] team0: Port device team_slave_0 removed [ 329.770711][T12199] bond9: option updelay: invalid value (18446744073709493611) [ 329.793087][T12199] bond9: option updelay: allowed values 0 - 2147483647 [ 329.823227][T12199] bond9 (unregistering): Released all slaves [ 330.204885][T12204] netlink: 'syz.3.1583': attribute type 29 has an invalid length. [ 330.243015][T12206] netlink: 'syz.3.1583': attribute type 29 has an invalid length. [ 330.521757][T12229] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 330.534027][T12229] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 330.564824][T12232] sctp: [Deprecated]: syz.2.1591 (pid 12232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.564824][T12232] Use struct sctp_sack_info instead [ 330.589303][T12232] sctp: [Deprecated]: syz.2.1591 (pid 12232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.589303][T12232] Use struct sctp_sack_info instead [ 330.763289][T12239] : renamed from bond0 (while UP) [ 330.777093][T12236] hsr_slave_0: left promiscuous mode [ 330.792220][T12236] hsr_slave_1: left promiscuous mode [ 330.803400][T12243] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.824906][T12243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.832265][T12243] IPv6: NLM_F_CREATE should be set when creating new route [ 330.839653][T12243] IPv6: NLM_F_CREATE should be set when creating new route [ 330.847126][T12243] IPv6: NLM_F_CREATE should be set when creating new route [ 331.030419][T12250] bond4: (slave gretap1): making interface the new active one [ 331.056666][T12250] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 331.165060][T12256] lo speed is unknown, defaulting to 1000 [ 331.234988][T12260] nicvf0: tun_chr_ioctl cmd 1074812117 [ 331.243608][T12259] nicvf0: tun_chr_ioctl cmd 1074812117 [ 331.552550][T12269] __nla_validate_parse: 5 callbacks suppressed [ 331.552570][T12269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1601'. [ 331.766107][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 332.002357][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1605'. [ 332.208166][T12271] lo speed is unknown, defaulting to 1000 [ 332.834625][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 333.289780][T12308] validate_nla: 3 callbacks suppressed [ 333.289802][T12308] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 333.811085][T12319] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 333.866038][T12320] gretap1: entered allmulticast mode [ 334.239283][T12339] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 334.397013][T12348] bond5: entered promiscuous mode [ 334.446394][T12348] bond5: entered allmulticast mode [ 334.453975][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 334.473039][T12348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.617860][T12339] veth5: entered promiscuous mode [ 334.634658][T12339] veth5: entered allmulticast mode [ 334.646854][T12339] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 334.692966][T12352] bond10: entered promiscuous mode [ 334.699048][T12352] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.706484][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 334.902247][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'. [ 334.933319][T12376] lo speed is unknown, defaulting to 1000 [ 335.247102][T12395] netlink: 'syz.3.1632': attribute type 4 has an invalid length. [ 335.458771][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 335.489825][T12406] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 335.592814][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 335.627885][T12419] netlink: 'syz.1.1638': attribute type 303 has an invalid length. [ 335.735470][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 335.771545][T12425] netlink: 'syz.2.1640': attribute type 15 has an invalid length. [ 336.836987][T12470] __nla_validate_parse: 3 callbacks suppressed [ 336.837009][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 337.056788][T12479] netlink: 'syz.1.1653': attribute type 28 has an invalid length. [ 337.632183][T12486] lo speed is unknown, defaulting to 1000 [ 337.733004][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 338.053720][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1657'. [ 338.418686][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 338.449550][T12496] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1658'. [ 338.489559][T12496] netlink: 'syz.0.1658': attribute type 2 has an invalid length. [ 338.522895][T12496] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 338.550300][T12496] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1658'. [ 338.704722][T12504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1660'. [ 339.118808][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 339.625287][T12538] tc_dump_action: action bad kind [ 339.669441][T12540] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°ó”õËí [ 339.669441][T12540] 3ìU ‚<ç¶9¡œ˜yÞ [ 340.215803][T12555] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 340.321538][T12548] lo speed is unknown, defaulting to 1000 [ 340.626585][T12558] syzkaller0: mtu less than device minimum [ 340.655297][T12558] syzkaller0: entered promiscuous mode [ 340.668151][T12558] syzkaller0: entered allmulticast mode [ 340.705038][T12558] syzkaller1: entered promiscuous mode [ 340.712138][T12558] syzkaller1: entered allmulticast mode [ 341.221071][T12589] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 341.286263][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 342.567062][T12627] syzkaller0: entered promiscuous mode [ 342.599710][T12627] syzkaller0: entered allmulticast mode [ 346.812120][T12717] tipc: Enabling of bearer rejected, failed to enable media [ 347.231367][T12741] lo speed is unknown, defaulting to 1000 [ 347.275663][T12745] Bluetooth: MGMT ver 1.23 [ 347.302137][T12745] syz_tun: left allmulticast mode [ 347.331532][T12745] netlink: 'syz.0.1719': attribute type 4 has an invalid length. [ 347.384976][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1718'. [ 347.411854][T12744] syzkaller0: entered promiscuous mode [ 347.431051][T12744] syzkaller0: entered allmulticast mode [ 347.553614][T12757] x_tables: duplicate underflow at hook 4 [ 348.516025][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 348.671018][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 348.694136][T12792] macsec0: entered allmulticast mode [ 348.701831][T12793] veth1_macvtap: entered allmulticast mode [ 348.707900][T12776] netlink: 'syz.4.1727': attribute type 8 has an invalid length. [ 348.710093][T12793] macsec0: left allmulticast mode [ 348.721561][T12793] veth1_macvtap: left allmulticast mode [ 348.722053][T12776] netlink: 478 bytes leftover after parsing attributes in process `syz.4.1727'. [ 349.251040][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1736'. [ 349.271757][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1736'. [ 349.503706][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 349.545613][T12815] team_slave_0 (unregistering): left promiscuous mode [ 349.589649][T12815] team0: Failed to send options change via netlink (err -105) [ 349.615641][T12815] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 349.659857][T12815] team0: Port device team_slave_0 removed [ 349.766534][T12823] openvswitch: netlink: Message has 4 unknown bytes. [ 349.791985][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1741'. [ 350.368326][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 350.804971][T12873] can: request_module (can-proto-5) failed. [ 350.942682][T12882] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 351.061215][T12882] bond11: entered promiscuous mode [ 351.089184][T12882] 8021q: adding VLAN 0 to HW filter on device bond11 [ 351.223296][T12884] bond11: (slave bridge12): making interface the new active one [ 351.252386][T12884] bridge12: entered promiscuous mode [ 351.283765][T12884] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 351.423755][T12892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.552379][T12898] netlink: 550 bytes leftover after parsing attributes in process `syz.0.1759'. [ 351.983441][T12916] dummy0: entered promiscuous mode [ 352.003979][T12916] dummy0: entered allmulticast mode [ 352.206559][T12929] netlink: 'syz.4.1770': attribute type 13 has an invalid length. [ 352.215689][T12929] netlink: 'syz.4.1770': attribute type 17 has an invalid length. [ 352.481922][T12929] bridge0: entered promiscuous mode [ 352.492555][T12929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.501602][T12929] team0: left promiscuous mode [ 352.506566][T12929] žÿ: left promiscuous mode [ 352.514246][T12929] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.526812][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.568500][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.579921][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.595662][T12929] : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.606415][T12929] : Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.623975][T12929] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 352.656460][T12931] vlan4: entered allmulticast mode [ 352.680699][T12932] geneve3: entered promiscuous mode [ 352.698497][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.705804][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.731327][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.738661][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.901262][T12939] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 352.967428][T12949] veth0: entered promiscuous mode [ 353.053364][T12951] veth0: left promiscuous mode [ 353.453213][T12968] lo speed is unknown, defaulting to 1000 [ 353.622720][T12992] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 353.915855][T12992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.125983][T13015] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.149516][T13015] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.201180][T13015] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 354.440298][T13015] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.455878][T13021] x_tables: duplicate underflow at hook 2 [ 354.477963][T13015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.507713][T13015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 354.650512][T13015] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.676549][T13015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.692742][T13015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 354.871034][T13015] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.896794][T13015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.910288][T13015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 355.080546][T13036] ip6gre4: entered promiscuous mode [ 355.085886][T13036] ip6gre4: entered allmulticast mode [ 355.193194][ T138] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.208192][ T138] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.218620][ T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 355.236970][T13047] tipc: Enabled bearer , priority 0 [ 355.264808][T13048] syzkaller0: entered promiscuous mode [ 355.275445][T13048] syzkaller0: entered allmulticast mode [ 355.387490][T13052] __nla_validate_parse: 5 callbacks suppressed [ 355.421264][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 355.484360][ T62] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.496925][ T62] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.505784][ T62] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.537889][ T62] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.546463][ T62] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.556827][ T62] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.616625][T13052] ip6gre4: entered promiscuous mode [ 355.622474][T13052] ip6gre4: entered allmulticast mode [ 355.637494][T13058] tipc: Resetting bearer [ 355.709635][T13044] tipc: Resetting bearer [ 355.760906][T13044] tipc: Disabling bearer [ 355.783698][T13063] xt_hashlimit: max too large, truncated to 1048576 [ 355.791354][T13062] xt_hashlimit: max too large, truncated to 1048576 [ 355.799710][ T138] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.815215][ T138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.835905][ T138] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.906849][ T138] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.916254][ T138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 355.932508][ T138] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 355.960940][ T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 356.101420][T13075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1808'. [ 356.145642][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 356.202528][ T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 356.461857][T13079] netem: unknown loss type 0 [ 356.477859][T13079] netem: change failed [ 356.489735][T13089] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1809'. [ 356.621107][T13094] lo speed is unknown, defaulting to 1000 [ 356.940900][T13108] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 357.232906][T13115] netlink: 'syz.4.1814': attribute type 4 has an invalid length. [ 357.232919][T13108] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1812'. [ 357.259884][T13108] macvlan2: entered promiscuous mode [ 357.265477][T13108] macvlan2: entered allmulticast mode [ 357.320894][T13096] lo speed is unknown, defaulting to 1000 [ 357.589161][T13119] vti0: entered promiscuous mode [ 357.902368][T13130] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 358.001049][T13134] netlink: 'syz.4.1820': attribute type 30 has an invalid length. [ 358.036047][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 358.046972][T13130] bond7: entered promiscuous mode [ 358.053009][T13130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.061153][T13134] bond0: option arp_missed_max: invalid value (0) [ 358.069135][T13134] bond0: option arp_missed_max: allowed values 1 - 255 [ 358.220293][T13140] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 358.423936][T13136] bond7: (slave veth13): making interface the new active one [ 358.432120][T13136] veth13: entered promiscuous mode [ 358.442628][T13136] bond7: (slave veth13): Enslaving as an active interface with an up link [ 358.639190][T13140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.763881][T13141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.771667][T13141] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 358.788588][T13141] bond7: (slave vcan1): Error -95 calling set_mac_address [ 358.913243][T13147] lo speed is unknown, defaulting to 1000 [ 359.016346][T13154] netlink: 'syz.3.1825': attribute type 4 has an invalid length. [ 359.151157][ T9] IPVS: starting estimator thread 0... [ 359.268445][T13159] IPVS: using max 29 ests per chain, 69600 per kthread [ 359.637806][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 359.673379][T13182] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 359.711767][T13186] bond13: (slave dummy0): Releasing active interface [ 359.825815][T13186] bridge_slave_0: left allmulticast mode [ 359.831857][T13186] bridge_slave_0: left promiscuous mode [ 359.838460][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.853559][T13186] bridge_slave_1: left allmulticast mode [ 359.859524][T13186] bridge_slave_1: left promiscuous mode [ 359.865648][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.884771][T13186] bond0: (slave bond_slave_0): Releasing backup interface [ 359.914453][T13186] bond0: (slave bond_slave_1): Releasing backup interface [ 359.926006][T13186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.936448][T13186] bond3: (slave geneve4): Releasing active interface [ 359.947179][T13186] bond5: (slave gretap1): Releasing active interface [ 359.971543][T13186] bond7: (slave veth3): Releasing active interface [ 359.991892][T13186] bond8: (slave veth5): Releasing backup interface [ 359.998649][T13186] veth5: left promiscuous mode [ 360.008148][T13186] bond12: (slave bridge2): Releasing active interface [ 360.026642][T13186] bond12: (slave ip6gretap1): Releasing active interface [ 360.051045][T13186] bond13: (slave veth9): Releasing active interface [ 360.065655][T13186] bond14: (slave veth11): Releasing backup interface [ 360.091851][T13158] lo speed is unknown, defaulting to 1000 [ 360.403299][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 360.417984][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 360.644120][T13207] netlink: 'syz.1.1837': attribute type 4 has an invalid length. [ 360.701125][ T9] lo speed is unknown, defaulting to 1000 [ 360.722603][ T9] sqz0: Port: 1 Link DOWN [ 360.738126][ T9] lo speed is unknown, defaulting to 1000 [ 360.970881][T13215] openvswitch: netlink: EtherType 0 is less than min 600 [ 361.083923][T13217] tipc: Enabled bearer , priority 0 [ 361.246079][T13219] syzkaller0: entered promiscuous mode [ 361.251866][T13219] syzkaller0: entered allmulticast mode [ 361.261950][T13219] tipc: Resetting bearer [ 361.301679][T13211] tipc: Resetting bearer [ 361.314799][T13224] x_tables: ip_tables: ah match: only valid for protocol 51 [ 361.391519][ T5632] block nbd2: Receive control failed (result -32) [ 361.555692][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1843'. [ 362.513923][T13235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.583813][T13211] tipc: Disabling bearer [ 364.615519][ T24] tipc: Node number set to 673902737 [ 364.735381][T13256] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 364.749015][T13256] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 364.836599][T13259] netlink: 'syz.1.1851': attribute type 21 has an invalid length. [ 364.847831][T13259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1851'. [ 365.801797][T13311] Bluetooth: MGMT ver 1.23 [ 365.817280][T13311] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 365.876611][T13315] mac80211_hwsim hwsim25 wlan1: default FDB implementation only supports local addresses [ 366.210590][T13336] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 366.226909][T13336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 366.244702][T13338] netlink: 'syz.0.1874': attribute type 4 has an invalid length. [ 366.262690][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'. [ 366.266624][T13338] netlink: 'syz.0.1874': attribute type 4 has an invalid length. [ 366.282411][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'. [ 366.640601][T13352] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1878'. [ 366.656004][T13343] lo speed is unknown, defaulting to 1000 [ 367.344216][T13354] lo speed is unknown, defaulting to 1000 [ 367.708919][T13387] ip6erspan0: entered allmulticast mode [ 367.917207][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 368.015110][T13393] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 368.069445][T13394] netlink: 'syz.2.1887': attribute type 4 has an invalid length. [ 368.185366][T13398] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1889'. [ 368.206521][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 368.337428][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1891'. [ 368.642757][T13411] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 368.678389][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 368.816596][T13411] 8021q: adding VLAN 0 to HW filter on device bond16 [ 368.962495][T13412] vlan0: entered allmulticast mode [ 368.982495][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1895'. [ 369.000615][T13412] bond16: entered allmulticast mode [ 369.051809][T13413] bond16: (slave geneve6): making interface the new active one [ 369.064322][T13413] geneve6: entered allmulticast mode [ 369.072283][T13413] bond16: (slave geneve6): Enslaving as an active interface with an up link [ 369.100006][ T8680] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.114486][ T8680] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.129797][T13420] xt_TCPMSS: Only works on TCP SYN packets [ 369.136340][ T8680] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.174922][ T8680] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.222657][T10392] IPVS: starting estimator thread 0... [ 369.320186][T13423] IPVS: using max 25 ests per chain, 60000 per kthread [ 369.454030][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 369.806141][T13440] tipc: Enabling of bearer rejected, failed to enable media [ 370.193514][T13453] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 370.235518][T13453] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 370.409259][T13460] syzkaller0: entered promiscuous mode [ 370.415000][T13460] syzkaller0: entered allmulticast mode [ 371.256915][T13484] __nla_validate_parse: 7 callbacks suppressed [ 371.256936][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 373.579421][T13463] lo speed is unknown, defaulting to 1000 [ 373.687255][T13497] syzkaller1: entered promiscuous mode [ 373.705563][T13497] syzkaller1: entered allmulticast mode [ 373.797875][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.821360][T13504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.233925][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 374.856258][T13546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1928'. [ 375.407985][T13578] batman_adv: batadv0: Adding interface: gretap1 [ 375.428139][T13578] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.454858][T13585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1934'. [ 375.480033][T13585] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 375.498273][T13578] batman_adv: batadv0: Interface activated: gretap1 [ 375.753034][T13591] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 376.028344][T13603] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1939'. [ 376.068438][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 376.570735][T13624] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 377.119631][T13649] xt_nfacct: accounting object `syz0' does not exist [ 377.692554][T13679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'. [ 377.744391][T13664] lo speed is unknown, defaulting to 1000 [ 377.931432][T13685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1957'. [ 378.230435][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'. [ 378.385428][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1960'. [ 378.424186][T13690] bond17: option broadcast_neighbor: invalid value (30) [ 378.448685][T13690] bond17 (unregistering): Released all slaves [ 378.661998][T13701] IPv6: sit1: Disabled Multicast RS [ 378.779345][T13706] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1964'. [ 379.144840][T13718] ip6erspan1: entered allmulticast mode [ 379.408163][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 379.462032][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 379.550698][T13735] pim6reg: entered allmulticast mode [ 379.685559][T13745] geneve4: entered promiscuous mode [ 380.463133][T13779] lo speed is unknown, defaulting to 1000 [ 380.480726][T13777] Cannot find map_set index 2 as target [ 380.587437][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1985'. [ 381.184253][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 381.208637][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 381.227660][T13816] netlink: 'syz.1.1991': attribute type 18 has an invalid length. [ 381.640653][T13837] lo speed is unknown, defaulting to 1000 [ 382.505896][T13867] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 382.645794][T13869] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 382.669428][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.051374][T13885] __nla_validate_parse: 4 callbacks suppressed [ 383.051395][T13885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2009'. [ 383.085357][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 383.917112][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2015'. [ 383.967329][T13905] syzkaller0: entered promiscuous mode [ 384.000380][T13905] syzkaller0: entered allmulticast mode [ 384.067064][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2015'. [ 384.135718][T13925] nbd: device at index 64 is going down [ 384.226900][ T7557] udevd[7557]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.621154][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 385.322652][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 387.644213][T13946] bond0: entered promiscuous mode [ 387.652824][T13946] bond_slave_0: entered promiscuous mode [ 387.659790][T13946] bond_slave_1: entered promiscuous mode [ 387.665839][T13946] dummy0: entered promiscuous mode [ 387.682439][T13946] batadv0: entered promiscuous mode [ 387.692109][T13946] debugfs: 'hsr0' already exists in 'hsr' [ 387.720982][T13946] Cannot create hsr debugfs directory [ 388.179722][T13962] lo speed is unknown, defaulting to 1000 [ 388.607044][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 388.644502][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 388.766294][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 389.107223][T14011] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 389.446116][T14026] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 389.459411][T14029] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2043'. [ 389.470224][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 390.075602][T14051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.390407][T14064] syzkaller0: entered promiscuous mode [ 390.398634][T14064] syzkaller0: entered allmulticast mode [ 390.995011][ T4944] block nbd3: Receive control failed (result -32) [ 390.995805][ T5632] block nbd3: Receive control failed (result -32) [ 391.504590][T14086] netlink: 'syz.3.2063': attribute type 39 has an invalid length. [ 391.520292][T14083] syzkaller0: entered promiscuous mode [ 391.535481][T14083] syzkaller0: entered allmulticast mode [ 391.583908][T14092] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 391.592061][T14092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2067'. [ 391.840080][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2070'. [ 392.495879][ T8669] bond0: (slave bond_slave_0): interface is now down [ 392.507953][T14135] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 392.528573][ T8669] bond0: (slave bond_slave_1): interface is now down [ 392.558078][ T8669] bond0: (slave dummy0): interface is now down [ 392.600853][T14135] syz_tun: entered promiscuous mode [ 392.631089][ T8680] bond0: (slave bond_slave_0): interface is now down [ 392.657425][ T8680] bond0: (slave bond_slave_1): interface is now down [ 392.685744][ T8680] bond0: (slave dummy0): interface is now down [ 392.699031][ T8680] bond0: (slave syz_tun): interface is now down [ 392.699079][T14135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 392.728585][ T8680] bond0: (slave bond_slave_0): interface is now down [ 392.746223][ T8680] bond0: (slave bond_slave_1): interface is now down [ 392.756610][ T8680] bond0: (slave dummy0): interface is now down [ 392.766208][ T8680] bond0: (slave syz_tun): interface is now down [ 392.784957][T14146] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 392.829448][T14149] netlink: 'syz.1.2091': attribute type 12 has an invalid length. [ 392.837505][ T8669] bond0: (slave bond_slave_0): interface is now down [ 392.860690][ T8669] bond0: (slave bond_slave_1): interface is now down [ 392.867836][ T8669] bond0: (slave dummy0): interface is now down [ 392.878018][ T8669] bond0: (slave syz_tun): interface is now down [ 392.943859][ T8669] bond0: now running without any active interface! [ 393.014639][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 393.100059][T14156] bond0: (slave dummy0): Releasing backup interface [ 393.128632][T14163] openvswitch: netlink: Tunnel attr 74 out of range max 16 [ 393.149724][T14156] dummy0: left promiscuous mode [ 393.233671][T14156] batman_adv: batadv0: Adding interface: dummy0 [ 393.265100][T14156] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 393.462432][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 393.534485][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 393.611198][ T4944] block nbd4: Receive control failed (result -32) [ 393.612552][T14177] __nla_validate_parse: 1 callbacks suppressed [ 393.612601][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 393.648926][T14188] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.663928][T14188] IPv6: addrconf: prefix option has invalid lifetime [ 393.676493][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 393.684694][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 393.694026][T14188] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 393.708997][T14188] IPv6: addrconf: prefix option has invalid lifetime [ 393.717355][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 393.725095][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 393.773684][T14177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 394.725180][T14228] netlink: 'syz.1.2121': attribute type 3 has an invalid length. [ 394.759051][T14228] netlink: 'syz.1.2121': attribute type 3 has an invalid length. [ 395.182012][T14250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2128'. [ 395.664669][T14034] udevd[14034]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 395.810530][T14267] pim6reg1: entered promiscuous mode [ 395.846887][T14267] pim6reg1: entered allmulticast mode [ 396.166498][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.195811][T14285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.218047][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.233831][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.243208][T14285] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 396.252854][T14285] batman_adv: batadv0: Removing interface: ip6gretap2 [ 396.265281][T14285] batman_adv: batadv0: Removing interface: dummy0 [ 396.305311][T14285] batadv0 (unregistering): left promiscuous mode [ 396.564521][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 396.578202][T14300] syzkaller0: entered promiscuous mode [ 396.593771][T14300] syzkaller0: entered allmulticast mode [ 396.641960][T14307] bond19: entered promiscuous mode [ 396.648658][T14307] 8021q: adding VLAN 0 to HW filter on device bond19 [ 396.662282][T14307] bond19 (unregistering): Released all slaves [ 396.741867][T14314] geneve1: entered promiscuous mode [ 397.508763][T14357] netlink: 'syz.4.2153': attribute type 12 has an invalid length. [ 397.611338][T14365] syzkaller0: entered promiscuous mode [ 397.644786][T14365] syzkaller0: entered allmulticast mode [ 397.706830][T14365] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 397.724969][T14368] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2155'. [ 397.748489][T14370] tipc: Enabled bearer , priority 0 [ 397.763790][T14372] xfrm1: entered allmulticast mode [ 397.828370][T14370] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 397.847907][T14370] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 397.870888][T14370] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 397.927116][T14370] bond19: entered promiscuous mode [ 397.932976][T14370] 8021q: adding VLAN 0 to HW filter on device bond19 [ 397.993154][T14370] bond19: (slave bridge4): making interface the new active one [ 398.001138][T14370] bridge4: entered promiscuous mode [ 398.043034][T14370] bridge4: left promiscuous mode [ 398.186029][T14392] tipc: Resetting bearer [ 398.203460][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2162'. [ 398.459985][T14410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2167'. [ 398.469881][T14409] netlink: 'syz.4.2168': attribute type 10 has an invalid length. [ 398.490334][T14409] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2168'. [ 398.845666][T14429] net_ratelimit: 1 callbacks suppressed [ 398.845686][T14429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.868240][T14427] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 398.880957][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 398.967017][T14436] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 398.996346][T14436] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 399.016903][T14429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.092608][T14437] ip6tnl4: entered allmulticast mode [ 399.123735][T14427] bond9: (slave gretap2): making interface the new active one [ 399.135550][T14427] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 399.150415][ T873] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 399.166861][T14442] tipc: Enabling of bearer rejected, already enabled [ 399.300881][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2179'. [ 399.397974][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.424717][T14458] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 399.442960][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 399.451376][T14458] erspan1: entered allmulticast mode [ 399.489653][T14467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2181'. [ 399.585103][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 399.594548][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 399.614222][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 399.614245][ T873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.623746][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 399.650775][ T873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.662255][ T873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.675437][ T873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.694262][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 399.773285][ T4944] block nbd5: Receive control failed (result -1) [ 400.037289][T14483] bridge4: entered allmulticast mode [ 400.108581][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 400.123544][T14486] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 400.204534][T14490] netlink: 'syz.4.2190': attribute type 3 has an invalid length. [ 400.214817][T14491] netlink: 'syz.4.2190': attribute type 3 has an invalid length. [ 400.283789][T14493] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 400.295216][T14493] bond9 (unregistering): Released all slaves [ 400.783528][T14501] batman_adv: batadv0: Interface deactivated: gretap1 [ 400.858480][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.889045][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.957137][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.019532][ T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.640553][T14562] netlink: 'syz.4.2210': attribute type 11 has an invalid length. [ 402.707266][T14613] lo speed is unknown, defaulting to 1000 [ 402.863366][T14625] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.643610][T14645] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 403.922849][T14659] xt_hashlimit: size too large, truncated to 1048576 [ 404.162901][T14670] __nla_validate_parse: 9 callbacks suppressed [ 404.162926][T14670] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2239'. [ 404.192690][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2240'. [ 404.219563][T14672] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2240'. [ 404.439383][T14686] netlink: 'syz.4.2243': attribute type 13 has an invalid length. [ 404.671663][T14696] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 404.703334][T14696] bond12 (unregistering): Released all slaves [ 404.965452][T14711] openvswitch: netlink: Flow key attr not present in new flow. [ 404.991892][T14711] netlink: 'syz.2.2250': attribute type 10 has an invalid length. [ 405.000600][T14711] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2250'. [ 405.104026][T14719] tap0: tun_chr_ioctl cmd 1074025676 [ 405.110080][T14719] tap0: owner set to 0 [ 405.130221][T14717] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2252'. [ 405.216936][T14723] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2255'. [ 405.230662][T14723] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2255'. [ 405.283299][T14728] netlink: 'syz.4.2256': attribute type 11 has an invalid length. [ 405.498953][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 405.711945][T14756] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2266'. [ 405.740924][T14759] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2268'. [ 407.181274][T14809] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 407.200349][T14807] vlan0: left promiscuous mode [ 407.211029][T14807] bond5: left promiscuous mode [ 407.216004][T14807] bond5: left allmulticast mode [ 407.222090][T14807] erspan2: left allmulticast mode [ 407.228314][T14807] bond6: left promiscuous mode [ 407.233373][T14807] wireguard0: left promiscuous mode [ 407.239814][T14807] ip6gre2: left promiscuous mode [ 407.246214][T14807] ip6gre2: left allmulticast mode [ 407.252649][T14807] bond7: left allmulticast mode [ 407.258306][T14807] xfrm1: left allmulticast mode [ 407.266465][T14807] geneve2: left promiscuous mode [ 407.272814][T14807] bond9: left promiscuous mode [ 407.278304][T14807] ip6gre3: left promiscuous mode [ 407.284107][T14807] bond10: left promiscuous mode [ 407.290179][T14807] bond11: left promiscuous mode [ 407.295233][T14807] bridge12: left promiscuous mode [ 407.302157][T14807] ip6gre4: left promiscuous mode [ 407.307337][T14807] ip6gre4: left allmulticast mode [ 407.313860][T14807] ip6tnl4: left allmulticast mode [ 407.577130][T14823] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 407.941097][T14841] netlink: 'syz.4.2295': attribute type 13 has an invalid length. [ 407.970238][T14841] netlink: 'syz.4.2295': attribute type 17 has an invalid length. [ 408.183184][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.190764][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.372453][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.389397][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.398944][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.409251][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.417293][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.515989][T14843] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.593029][T14841] bridge0: left promiscuous mode [ 408.607126][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.624560][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.669584][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.676957][T14841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.688596][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.695786][T14841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.727840][T14841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 408.748704][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.790088][ T35] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.809277][ T35] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.890794][ T35] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.920564][ T35] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.993037][T14864] syzkaller1: entered promiscuous mode [ 409.012483][T14864] syzkaller1: entered allmulticast mode [ 409.287331][T14879] __nla_validate_parse: 4 callbacks suppressed [ 409.287352][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 409.335431][T14879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2306'. [ 409.359805][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 409.378380][T14879] netlink: 'syz.3.2306': attribute type 5 has an invalid length. [ 409.470818][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 409.567928][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 409.579828][T14897] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2308'. [ 409.608300][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2308'. [ 409.625826][T14897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2308'. [ 409.691485][T14897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.756658][T14897] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 409.781858][T10392] lo speed is unknown, defaulting to 1000 [ 409.797189][T14850] lo speed is unknown, defaulting to 1000 [ 409.807788][T10392] sqz0: Port: 1 Link ACTIVE [ 409.822349][T10392] lo speed is unknown, defaulting to 1000 [ 410.011053][T14916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2316'. [ 410.232970][T14925] netlink: 'syz.4.2318': attribute type 58 has an invalid length. [ 410.241061][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2318'. [ 410.521985][ T4944] Bluetooth: hci5: command tx timeout [ 411.602025][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.634760][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.660361][T14850] bridge_slave_0: entered allmulticast mode [ 411.685697][T14850] bridge_slave_0: entered promiscuous mode [ 411.722732][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.743318][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.759736][T14850] bridge_slave_1: entered allmulticast mode [ 411.776608][T14850] bridge_slave_1: entered promiscuous mode [ 411.839722][T14997] xt_bpf: check failed: parse error [ 411.908400][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.941250][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.000752][T14850] team0: Port device team_slave_0 added [ 412.011119][T14850] team0: Port device team_slave_1 added [ 412.059914][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.067079][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.099626][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.124023][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.133578][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.178115][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.201972][T15007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.266876][T14850] hsr_slave_0: entered promiscuous mode [ 412.273939][T14850] hsr_slave_1: entered promiscuous mode [ 412.281226][T14850] debugfs: 'hsr0' already exists in 'hsr' [ 412.287889][T14850] Cannot create hsr debugfs directory [ 412.598130][ T4944] Bluetooth: hci5: command tx timeout [ 412.630218][T14850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.656357][T14850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.672095][T14850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.702648][T14850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.711041][T14850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.728688][T14850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.736834][T14850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.752182][T14850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.989311][T15036] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 413.088816][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.154983][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.197424][ T873] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.204960][ T873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.260865][ T873] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.268300][ T873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.480071][T15098] bond10: Removing last arp target with arp_interval on [ 414.575015][T15100] lo speed is unknown, defaulting to 1000 [ 414.591214][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.678033][ T4944] Bluetooth: hci5: command tx timeout [ 415.133719][T15118] xt_l2tp: missing protocol rule (udp|l2tpip) [ 415.412841][ T5751] IPVS: starting estimator thread 0... [ 415.437010][T15130] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 415.508160][T15131] IPVS: using max 28 ests per chain, 67200 per kthread [ 415.585726][T14850] veth0_vlan: entered promiscuous mode [ 415.642324][T14850] veth1_vlan: entered promiscuous mode [ 415.863959][T14850] veth0_macvtap: entered promiscuous mode [ 415.898826][T15148] __nla_validate_parse: 4 callbacks suppressed [ 415.898847][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2369'. [ 415.921585][T14850] veth1_macvtap: entered promiscuous mode [ 416.011072][T15148] 8021q: adding VLAN 0 to HW filter on device bond12 [ 416.043481][T15150] bond12: (slave veth17): Enslaving as an active interface with an up link [ 416.087046][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.107188][T15157] netlink: 'syz.4.2370': attribute type 9 has an invalid length. [ 416.116789][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.153751][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.244744][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.254381][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.288448][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.650509][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.669415][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.758320][ T4944] Bluetooth: hci5: command tx timeout [ 416.766027][ T873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.797729][ T873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.871846][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 416.906720][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 416.931020][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 417.075839][T15211] sctp: [Deprecated]: syz.4.2382 (pid 15211) Use of int in max_burst socket option. [ 417.075839][T15211] Use struct sctp_assoc_value instead [ 417.256592][T15215] can: request_module (can-proto-0) failed. [ 417.601549][T15232] sctp: [Deprecated]: syz.5.2386 (pid 15232) Use of int in maxseg socket option. [ 417.601549][T15232] Use struct sctp_assoc_value instead [ 417.905120][T15237] lo speed is unknown, defaulting to 1000 [ 417.941058][T15246] ip6t_srh: unknown srh match flags 4000 [ 417.997147][T15246] macsec2: entered promiscuous mode [ 418.014435][T15246] macsec2: entered allmulticast mode [ 418.044595][ T5751] IPVS: starting estimator thread 0... [ 418.069289][T15245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2390'. [ 418.101217][T15248] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2390'. [ 418.148282][T15250] IPVS: using max 28 ests per chain, 67200 per kthread [ 418.416817][T15256] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 418.423823][T15266] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2396'. [ 418.445541][T15256] bond13 (unregistering): Released all slaves [ 418.529782][T15261] netlink: 'syz.4.2396': attribute type 12 has an invalid length. [ 418.540778][T15261] netlink: 'syz.4.2396': attribute type 29 has an invalid length. [ 418.573473][T15261] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2396'. [ 418.584110][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 418.608747][T15261] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2396'. [ 418.637347][ T5733] hsr0: entered promiscuous mode [ 419.650380][T15315] openvswitch: netlink: Flow key attr not present in new flow. [ 419.964266][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 419.964266][T15331] Use struct sctp_assoc_value instead [ 420.029851][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.029851][T15331] Use struct sctp_assoc_value instead [ 420.066819][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.066819][T15331] Use struct sctp_assoc_value instead [ 420.091671][T15337] netlink: 'syz.3.2415': attribute type 1 has an invalid length. [ 420.099950][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.099950][T15331] Use struct sctp_assoc_value instead [ 420.116160][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.116160][T15331] Use struct sctp_assoc_value instead [ 420.147911][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.147911][T15331] Use struct sctp_assoc_value instead [ 420.169261][T15337] bond20: entered promiscuous mode [ 420.175277][T15337] 8021q: adding VLAN 0 to HW filter on device bond20 [ 420.178566][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.178566][T15331] Use struct sctp_assoc_value instead [ 420.200903][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.200903][T15331] Use struct sctp_assoc_value instead [ 420.222476][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.222476][T15331] Use struct sctp_assoc_value instead [ 420.238004][T15331] sctp: [Deprecated]: syz.4.2413 (pid 15331) Use of int in maxseg socket option. [ 420.238004][T15331] Use struct sctp_assoc_value instead [ 420.313413][T15339] bond20: (slave veth15): making interface the new active one [ 420.328481][T15339] veth15: entered promiscuous mode [ 420.340652][T15339] bond20: (slave veth15): Enslaving as an active interface with an up link [ 420.634770][T15363] openvswitch: netlink: Flow key attr not present in new flow. [ 420.688259][T15369] netlink: 'syz.3.2422': attribute type 21 has an invalid length. [ 420.844341][T15377] netlink: 'syz.4.2425': attribute type 1 has an invalid length. [ 420.996084][T15380] lo speed is unknown, defaulting to 1000 [ 423.628591][T15418] __nla_validate_parse: 6 callbacks suppressed [ 423.628611][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 423.666747][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 423.716671][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 423.934123][T15436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2434'. [ 424.003497][T15434] dvmrp6: entered allmulticast mode [ 424.227250][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.259672][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.301043][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.328290][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.447347][T15449] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 424.530015][T15455] netlink: 'syz.2.2444': attribute type 3 has an invalid length. [ 424.544344][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 424.546488][T15453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2443'. [ 424.585650][T15458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2442'. [ 424.612414][T15449] bond21 (unregistering): Released all slaves [ 424.634155][T15462] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2443'. [ 424.852983][T15472] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2448'. [ 425.104289][T15479] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 425.121765][T15479] bond1 (unregistering): Released all slaves [ 425.150355][T15475] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 425.314817][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 425.340517][T15505] macsec2: entered promiscuous mode [ 425.347270][T15505] bridge0: entered promiscuous mode [ 425.384035][T15508] xt_bpf: check failed: parse error [ 426.399490][T15542] netlink: 'syz.3.2467': attribute type 7 has an invalid length. [ 426.418386][T15542] netlink: 'syz.3.2467': attribute type 8 has an invalid length. [ 426.477465][T15542] erspan0: entered promiscuous mode [ 426.499924][T15542] erspan0: left promiscuous mode [ 427.092235][T15579] xt_cgroup: xt_cgroup: no path or classid specified [ 427.131312][T15572] hmac(sha224: entered promiscuous mode [ 427.300417][T15592] FAULT_INJECTION: forcing a failure. [ 427.300417][T15592] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 427.359634][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.3.2484 Not tainted syzkaller #0 PREEMPT(full) [ 427.359677][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.359699][T15592] Call Trace: [ 427.359711][T15592] [ 427.359720][T15592] dump_stack_lvl+0xe8/0x150 [ 427.359753][T15592] should_fail_ex+0x412/0x560 [ 427.359794][T15592] _copy_from_user+0x2d/0xb0 [ 427.359828][T15592] ___sys_sendmsg+0x1c6/0x360 [ 427.359856][T15592] ? __lock_acquire+0x6b5/0x2cf0 [ 427.359886][T15592] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.359954][T15592] ? __fget_files+0x2a/0x420 [ 427.359980][T15592] ? __fget_files+0x3a0/0x420 [ 427.360017][T15592] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.360049][T15592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.360088][T15592] ? __pfx_ksys_write+0x10/0x10 [ 427.360129][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.360153][T15592] do_syscall_64+0x15f/0xf80 [ 427.360178][T15592] ? trace_irq_disable+0x3b/0x140 [ 427.360209][T15592] ? clear_bhb_loop+0x40/0x90 [ 427.360236][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.360258][T15592] RIP: 0033:0x7f85fd59cdd9 [ 427.360279][T15592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.360298][T15592] RSP: 002b:00007f85fe3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.360329][T15592] RAX: ffffffffffffffda RBX: 00007f85fd815fa0 RCX: 00007f85fd59cdd9 [ 427.360345][T15592] RDX: 0000000020048440 RSI: 0000200000000080 RDI: 0000000000000003 [ 427.360359][T15592] RBP: 00007f85fe3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 427.360373][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.360386][T15592] R13: 00007f85fd816038 R14: 00007f85fd815fa0 R15: 00007ffed54e16c8 [ 427.360421][T15592] [ 427.365311][T15596] openvswitch: netlink: Message has 8 unknown bytes. [ 427.566681][T15588] bond1: option lacp_active: invalid value (8) [ 427.609161][T15588] bond1 (unregistering): Released all slaves [ 427.698803][T15597] macsec1: entered promiscuous mode [ 427.969313][ T30] audit: type=1804 audit(1777613744.044:10): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2491" name="/newroot/531/memory.events" dev="tmpfs" ino=2718 res=1 errno=0 [ 427.996830][ T30] audit: type=1800 audit(1777613744.044:11): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2491" name="memory.events" dev="tmpfs" ino=2718 res=0 errno=0 [ 428.132650][T15618] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 428.145463][T15618] bond13 (unregistering): Released all slaves [ 428.659675][T15658] __nla_validate_parse: 11 callbacks suppressed [ 428.659707][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 428.702863][T15658] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2504'. [ 428.962053][T15679] dvmrp0: entered allmulticast mode [ 429.033177][T15682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2511'. [ 429.052988][T15682] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 429.065618][T15682] syzkaller1: Refused to change device type [ 429.388806][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 430.110621][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 430.136435][T15737] lo speed is unknown, defaulting to 1000 [ 430.315537][ T4944] block nbd6: Receive control failed (result -1) [ 430.403192][T15749] syzkaller0: entered promiscuous mode [ 430.433995][T15749] TC_ACT_REPEAT abuse ? [ 430.453771][T15749] tipc: Enabled bearer , priority 0 [ 430.462529][T15749] syzkaller0: entered allmulticast mode [ 430.474552][T15748] tipc: Resetting bearer [ 430.516758][T15748] tipc: Disabling bearer [ 430.891672][T15766] dvmrp6: entered allmulticast mode [ 431.029058][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2533'. [ 431.139267][T15773] vlan2: entered allmulticast mode [ 431.146392][T15773] bond0: entered allmulticast mode [ 431.153150][T15773] bond_slave_0: entered allmulticast mode [ 431.161052][T15773] bond_slave_1: entered allmulticast mode [ 431.172760][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 431.188051][T15779] netlink: 'syz.1.2537': attribute type 9 has an invalid length. [ 431.216726][T15779] netlink: 'syz.1.2537': attribute type 6 has an invalid length. [ 431.232008][T15776] veth1_macvtap: left promiscuous mode [ 431.245464][T15776] veth0_macvtap: left promiscuous mode [ 431.253478][T15776] veth0_macvtap: entered promiscuous mode [ 431.264623][T15776] veth1_macvtap: entered promiscuous mode [ 431.295055][T15776] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 431.321674][ T9] bridge0: entered promiscuous mode [ 431.339315][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.346571][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.419929][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.428605][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.468838][ T5751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 431.501672][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.520869][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.531550][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.540996][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.553432][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.566396][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.572490][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 431.684553][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 431.700069][T15792] lo speed is unknown, defaulting to 1000 [ 432.027850][ T5751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 432.094816][T15808] netlink: 'syz.3.2548': attribute type 1 has an invalid length. [ 432.173674][T15810] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2549'. [ 432.269920][T15810] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 432.290806][T15810] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 432.308247][T15810] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 432.327773][T15810] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 432.353483][T15810] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 432.778987][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 432.812934][T15826] Cannot find del_set index 0 as target [ 434.084576][T15849] tipc: Resetting bearer [ 434.203040][T15859] netlink: 'syz.4.2564': attribute type 1 has an invalid length. [ 434.272206][T15859] 8021q: adding VLAN 0 to HW filter on device bond10 [ 434.329936][T15871] netlink: 'syz.1.2568': attribute type 1 has an invalid length. [ 434.342910][T15859] __nla_validate_parse: 1 callbacks suppressed [ 434.342927][T15859] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2564'. [ 434.362084][T15864] vlan0: entered promiscuous mode [ 434.367225][T15864] bond10: entered promiscuous mode [ 434.374281][T15864] vlan0: entered allmulticast mode [ 434.379977][T15864] bond10: entered allmulticast mode [ 434.398397][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.409123][T15859] bond10: (slave batadv0): making interface the new active one [ 434.416804][T15859] batadv0: entered promiscuous mode [ 434.422441][T15859] batadv0: entered allmulticast mode [ 434.429477][T15859] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 434.443933][T15871] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 434.616248][T15171] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.209448][T15919] netlink: 'syz.1.2576': attribute type 13 has an invalid length. [ 435.247692][T15919] netlink: 'syz.1.2576': attribute type 17 has an invalid length. [ 437.402602][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 438.079299][T15911] bridge0: port 3(syz_tun) entered disabled state [ 438.092119][T15911] bridge0: port 4(team0) entered disabled state [ 438.099301][T15911] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.106853][T15911] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.368958][T15911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.384667][T15911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.608768][T15941] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2582'. [ 438.624066][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 438.640974][T15919] bridge0: port 3(syz_tun) entered blocking state [ 438.647651][T15919] bridge0: port 3(syz_tun) entered forwarding state [ 438.670621][T15919] 8021q: adding VLAN 0 to HW filter on device  [ 438.681204][T15919] bridge0: port 4(team0) entered blocking state [ 438.687776][T15919] bridge0: port 4(team0) entered forwarding state [ 438.695586][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.716569][T15919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.806585][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.813921][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.852136][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.859502][T15919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.954429][T15919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.969856][T15919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.027906][T15919] veth1_vlan: left promiscuous mode [ 439.035071][T15919] veth0_vlan: left promiscuous mode [ 439.041885][T15919] veth0_vlan: entered promiscuous mode [ 439.052233][T15919] veth1_vlan: entered promiscuous mode [ 439.064154][T15919] veth1_macvtap: left promiscuous mode [ 439.071367][T15919] veth0_macvtap: left promiscuous mode [ 439.076894][T15919] veth0_macvtap: left allmulticast mode [ 439.085506][T15919] veth0_macvtap: entered promiscuous mode [ 439.108989][T15919] veth1_macvtap: entered promiscuous mode [ 439.118751][T15919] geneve1: left promiscuous mode [ 439.126463][T15919] 8021q: adding VLAN 0 to HW filter on device team1 [ 439.135357][T15919] 8021q: adding VLAN 0 to HW filter on device team2 [ 439.147882][T15919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.156268][T15919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.168790][T15919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.178894][T15919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.187167][T15919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.200067][T15919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.211431][T15919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.223321][T15919] gtp1: left promiscuous mode [ 439.228305][T15919] gtp1: left allmulticast mode [ 439.234227][T15919] gtp2: left promiscuous mode [ 439.240268][T15919] gtp2: left allmulticast mode [ 439.248087][T15919] xfrm1: left allmulticast mode [ 439.258491][T15919] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 439.276426][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.334711][ T5733] lo speed is unknown, defaulting to 1000 [ 439.341918][ T5751] lo speed is unknown, defaulting to 1000 [ 439.363006][ T1158] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.404592][ T5733] lo speed is unknown, defaulting to 1000 [ 439.412092][ T1158] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.484511][ T1158] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.513590][ T1158] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 439.576747][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2585'. [ 439.929686][T15959] lo speed is unknown, defaulting to 1000 [ 439.985913][T15979] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 440.018488][T15979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2592'. [ 440.123046][T15984] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 440.305732][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2596'. [ 440.686076][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 440.735609][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2602'. [ 440.775548][T16014] netlink: 'syz.5.2602': attribute type 10 has an invalid length. [ 440.796869][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 440.844299][T16014] team0: Port device vlan0 added [ 440.898320][T16018] macsec3: entered promiscuous mode [ 441.292012][T16024] syzkaller1: entered promiscuous mode [ 441.316764][T16024] syzkaller1: entered allmulticast mode [ 441.522810][T16043] sctp: [Deprecated]: syz.5.2611 (pid 16043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.522810][T16043] Use struct sctp_sack_info instead [ 441.645448][T16043] netlink: 'syz.5.2611': attribute type 8 has an invalid length. [ 441.695361][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2611'. [ 441.718750][T16052] tipc: Enabled bearer , priority 0 [ 441.735514][T16051] syzkaller0: entered promiscuous mode [ 441.743088][T16051] syzkaller0: entered allmulticast mode [ 441.887390][T16050] tipc: Resetting bearer [ 441.944863][T16062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 441.969316][T16050] tipc: Disabling bearer [ 441.992726][T16060] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2617'. [ 442.139252][T16071] macsec3: entered promiscuous mode [ 442.367831][T16083] ipvlan2: entered promiscuous mode [ 442.392591][T16083] bridge0: port 3(ipvlan2) entered blocking state [ 442.423358][T16083] bridge0: port 3(ipvlan2) entered disabled state [ 442.463658][T16083] ipvlan2: entered allmulticast mode [ 442.483203][T16083] bridge0: entered allmulticast mode [ 442.492801][T16083] ipvlan2: left allmulticast mode [ 442.498676][T16083] bridge0: left allmulticast mode [ 442.613643][T16096] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2629'. [ 442.624075][T16096] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 442.760322][T16098] netlink: 'syz.3.2630': attribute type 1 has an invalid length. [ 442.790709][T16098] netlink: 'syz.3.2630': attribute type 2 has an invalid length. [ 442.841015][T16103] lo speed is unknown, defaulting to 1000 [ 442.940816][T16111] macsec1: entered promiscuous mode [ 442.958197][T16111] bridge0: entered promiscuous mode [ 443.702626][T16124] netlink: 'syz.5.2638': attribute type 49 has an invalid length. [ 444.010141][T16139] macsec4: entered promiscuous mode [ 444.022083][T16139] erspan0: entered promiscuous mode [ 444.059377][T16139] erspan0: left promiscuous mode [ 444.390989][T16144] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 444.451609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.458929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.935525][T16168] __nla_validate_parse: 5 callbacks suppressed [ 444.935548][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 445.101051][T16174] macsec2: entered promiscuous mode [ 445.175322][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 445.244136][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2655'. [ 445.407143][T16187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2656'. [ 445.439477][T16187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2656'. [ 445.478742][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 445.519633][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2655'. [ 446.029420][T16211] bond13: entered allmulticast mode [ 446.136279][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2663'. [ 446.235783][T16221] lo speed is unknown, defaulting to 1000 [ 446.286280][T16225] syzkaller0: entered promiscuous mode [ 446.298938][T16225] syzkaller0: entered allmulticast mode [ 447.191350][T16251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2672'. [ 447.247581][T16260] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 447.845601][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 448.078021][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'. [ 448.256706][T16292] geneve7: entered promiscuous mode [ 448.267427][ T1002] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.285498][ T1002] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.339657][ T1002] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.366754][ T1002] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.614982][T16312] bond0: Device is already in use. [ 449.684781][T16351] ‡: renamed from bond0 [ 450.009812][T16372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2708'. [ 450.165492][T16385] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 450.178199][T16385] IPv6: addrconf: prefix option has invalid lifetime [ 450.185703][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 450.193082][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 451.108003][T16285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.269328][T16394] netlink: 'syz.2.2714': attribute type 58 has an invalid length. [ 451.277932][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2714'. [ 451.350212][T16397] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2715'. [ 451.646299][T16411] FAULT_INJECTION: forcing a failure. [ 451.646299][T16411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.668025][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.4.2718 Not tainted syzkaller #0 PREEMPT(full) [ 451.668055][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.668069][T16411] Call Trace: [ 451.668078][T16411] [ 451.668087][T16411] dump_stack_lvl+0xe8/0x150 [ 451.668118][T16411] should_fail_ex+0x412/0x560 [ 451.668151][T16411] _copy_from_user+0x2d/0xb0 [ 451.668183][T16411] ___sys_sendmsg+0x1c6/0x360 [ 451.668211][T16411] ? __lock_acquire+0x6b5/0x2cf0 [ 451.668239][T16411] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.668304][T16411] ? __fget_files+0x2a/0x420 [ 451.668330][T16411] ? __fget_files+0x3a0/0x420 [ 451.668366][T16411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.668397][T16411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.668442][T16411] ? __pfx_ksys_write+0x10/0x10 [ 451.668487][T16411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.668511][T16411] do_syscall_64+0x15f/0xf80 [ 451.668536][T16411] ? trace_irq_disable+0x3b/0x140 [ 451.668568][T16411] ? clear_bhb_loop+0x40/0x90 [ 451.668594][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.668616][T16411] RIP: 0033:0x7fc0ba79cdd9 [ 451.668636][T16411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.668656][T16411] RSP: 002b:00007fc0bb66b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.668678][T16411] RAX: ffffffffffffffda RBX: 00007fc0baa15fa0 RCX: 00007fc0ba79cdd9 [ 451.668698][T16411] RDX: 000000000000c004 RSI: 0000200000000440 RDI: 0000000000000004 [ 451.668712][T16411] RBP: 00007fc0bb66b090 R08: 0000000000000000 R09: 0000000000000000 [ 451.668731][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.668743][T16411] R13: 00007fc0baa16038 R14: 00007fc0baa15fa0 R15: 00007ffd2b3638e8 [ 451.668777][T16411] [ 452.081597][T16432] macsec1: left promiscuous mode [ 452.109119][T16432] bond13: left allmulticast mode [ 452.125960][ T1002] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.136946][ T1002] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.155086][ T1002] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.178127][ T1002] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.243832][T16400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.569854][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'. [ 452.624941][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 452.782479][T16462] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2729'. [ 452.839276][T16460] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2728'. [ 452.870284][T16464] netlink: 'syz.5.2730': attribute type 12 has an invalid length. [ 452.897662][T16464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2730'. [ 452.949844][T16464] netlink: 'syz.5.2730': attribute type 39 has an invalid length. [ 453.152877][T16485] FAULT_INJECTION: forcing a failure. [ 453.152877][T16485] name failslab, interval 1, probability 0, space 0, times 0 [ 453.208150][T16485] CPU: 1 UID: 0 PID: 16485 Comm: syz.3.2735 Not tainted syzkaller #0 PREEMPT(full) [ 453.208182][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.208197][T16485] Call Trace: [ 453.208206][T16485] [ 453.208215][T16485] dump_stack_lvl+0xe8/0x150 [ 453.208247][T16485] should_fail_ex+0x412/0x560 [ 453.208280][T16485] should_failslab+0xa8/0x100 [ 453.208317][T16485] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 453.208347][T16485] ? __alloc_skb+0x186/0x7d0 [ 453.208371][T16485] ? __alloc_skb+0x1d0/0x7d0 [ 453.208392][T16485] ? __local_bh_enable_ip+0xd0/0x130 [ 453.208421][T16485] __alloc_skb+0x1d0/0x7d0 [ 453.208451][T16485] netlink_sendmsg+0x5d4/0xb40 [ 453.208488][T16485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.208519][T16485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.208549][T16485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.208583][T16485] ____sys_sendmsg+0x972/0x9f0 [ 453.208621][T16485] ? __might_fault+0xaf/0x130 [ 453.208657][T16485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.208695][T16485] ? import_iovec+0x73/0xa0 [ 453.208730][T16485] ___sys_sendmsg+0x2a5/0x360 [ 453.208756][T16485] ? __lock_acquire+0x6b5/0x2cf0 [ 453.208786][T16485] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.208851][T16485] ? __fget_files+0x2a/0x420 [ 453.208877][T16485] ? __fget_files+0x3a0/0x420 [ 453.208915][T16485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.208946][T16485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.208985][T16485] ? __pfx_ksys_write+0x10/0x10 [ 453.209030][T16485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.209054][T16485] do_syscall_64+0x15f/0xf80 [ 453.209079][T16485] ? trace_irq_disable+0x3b/0x140 [ 453.209111][T16485] ? clear_bhb_loop+0x40/0x90 [ 453.209138][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.209160][T16485] RIP: 0033:0x7f85fd59cdd9 [ 453.209180][T16485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.209206][T16485] RSP: 002b:00007f85fe383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.209230][T16485] RAX: ffffffffffffffda RBX: 00007f85fd816090 RCX: 00007f85fd59cdd9 [ 453.209246][T16485] RDX: 000000000000c004 RSI: 0000200000000440 RDI: 0000000000000004 [ 453.209260][T16485] RBP: 00007f85fe383090 R08: 0000000000000000 R09: 0000000000000000 [ 453.209274][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.209286][T16485] R13: 00007f85fd816128 R14: 00007f85fd816090 R15: 00007ffed54e16c8 [ 453.209322][T16485] [ 453.735759][T16496] netlink: 'syz.2.2738': attribute type 1 has an invalid length. [ 453.776007][T16500] tipc: Enabling of bearer rejected, failed to enable media [ 454.083883][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2741'. [ 454.214173][T16523] 8021q: adding VLAN 0 to HW filter on device bond21 [ 454.286531][T16516] bond21: (slave batadv1): Opening slave failed [ 454.567534][T16539] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2743'. [ 454.586029][T16537] macsec1: entered promiscuous mode [ 454.597038][T16537] bridge0: entered promiscuous mode [ 454.626931][ T30] audit: type=1804 audit(1777613770.694:12): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2743" name="/newroot/76/memory.events" dev="tmpfs" ino=404 res=1 errno=0 [ 454.711399][ T30] audit: type=1800 audit(1777613770.694:13): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2743" name="memory.events" dev="tmpfs" ino=404 res=0 errno=0 [ 454.764425][ T30] audit: type=1804 audit(1777613770.724:14): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2743" name="/newroot/76/memory.events" dev="tmpfs" ino=404 res=1 errno=0 [ 455.236820][T16557] syzkaller0: entered promiscuous mode [ 455.254915][T16557] syzkaller0: entered allmulticast mode [ 455.317310][T16557] pimreg: entered allmulticast mode [ 455.405161][T16563] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2751'. [ 455.444045][T16570] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2753'. [ 455.686527][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'. [ 455.759479][T16584] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 456.014482][T16598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2762'. [ 456.050661][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 456.407568][T16612] IPv6: Can't replace route, no match found [ 456.809979][T16626] macsec4: entered promiscuous mode [ 456.835124][T16630] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2771'. [ 456.904584][T16630] netlink: 'syz.2.2771': attribute type 30 has an invalid length. [ 460.197793][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 488.357796][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 547.878328][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 549.158216][ T31] INFO: task syz.0.2098:14175 blocked for more than 143 seconds. [ 549.167705][ T31] Not tainted syzkaller #0 [ 549.172743][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.181593][ T31] task:syz.0.2098 state:D stack:27600 pid:14175 tgid:14169 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 549.194522][ T31] Call Trace: [ 549.198059][ T31] [ 549.201094][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 549.205744][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 549.211434][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 549.219196][ T31] ? __pfx___schedule+0x10/0x10 [ 549.224205][ T31] ? schedule+0x90/0x360 [ 549.229083][ T31] schedule+0x164/0x360 [ 549.233573][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.240855][ T31] __mutex_lock+0x7f7/0x1550 [ 549.246000][ T31] ? __mutex_lock+0x608/0x1550 [ 549.251236][ T31] ? nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 549.257127][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.262882][ T31] ? net_generic+0x1e/0x240 [ 549.267968][ T31] ? net_generic+0x1e/0x240 [ 549.272599][ T31] nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 549.279020][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 549.284832][ T31] ? __asan_memcpy+0x40/0x70 [ 549.290023][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 549.297304][ T31] ? bpf_lsm_capable+0x9/0x20 [ 549.320751][ T31] ? security_capable+0x7e/0x2c0 [ 549.346193][ T31] genl_rcv_msg+0x61c/0x7a0 [ 549.389479][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.412792][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 549.442345][ T31] netlink_rcv_skb+0x232/0x4b0 [ 549.471012][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.491289][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.517732][ T31] ? down_read+0x270/0x2e0 [ 549.528742][ T31] ? genl_rcv+0xd/0x40 [ 549.537542][ T31] genl_rcv+0x28/0x40 [ 549.543556][ T31] netlink_unicast+0x75c/0x8e0 [ 549.558150][ T31] netlink_sendmsg+0x813/0xb40 [ 549.564510][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.587641][ T31] ? __se_sys_ioctl+0x47/0x170 [ 549.593229][ T31] ? do_syscall_64+0x15f/0xf80 [ 549.601367][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 549.618326][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.623861][ T31] ____sys_sendmsg+0x972/0x9f0 [ 549.647771][ T31] ? __might_fault+0xaf/0x130 [ 549.657234][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.673869][ T31] ? import_iovec+0x73/0xa0 [ 549.690285][ T31] ___sys_sendmsg+0x2a5/0x360 [ 549.708689][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 549.724585][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.742118][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 549.759951][ T31] ? __fget_files+0x2a/0x420 [ 549.788106][ T31] ? __fget_files+0x3a0/0x420 [ 549.794737][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 549.812512][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.830688][ T31] ? rcu_is_watching+0x15/0xb0 [ 549.844881][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 549.861965][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.880105][ T31] do_syscall_64+0x15f/0xf80 [ 549.895119][ T31] ? trace_irq_disable+0x3b/0x140 [ 549.927556][ T31] ? clear_bhb_loop+0x40/0x90 [ 549.932371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.947214][ T31] RIP: 0033:0x7fda58f9cdd9 [ 549.962154][ T31] RSP: 002b:00007fda59e59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.997614][ T31] RAX: ffffffffffffffda RBX: 00007fda59216090 RCX: 00007fda58f9cdd9 [ 550.019284][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 550.047314][ T31] RBP: 00007fda59032d69 R08: 0000000000000000 R09: 0000000000000000 [ 550.077780][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.096535][ T31] R13: 00007fda59216128 R14: 00007fda59216090 R15: 00007ffeaf905168 [ 550.114529][ T31] [ 550.124208][ T31] [ 550.124208][ T31] Showing all locks held in the system: [ 550.132501][ T31] 3 locks held by kworker/0:0/9: [ 550.157914][ T31] 1 lock held by khungtaskd/31: [ 550.170686][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 550.192561][ T31] 2 locks held by getty/5382: [ 550.197327][ T31] #0: ffff888035f2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 550.210078][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 550.221734][ T31] 1 lock held by syz-executor/5624: [ 550.227019][ T31] 1 lock held by syz-executor/5625: [ 550.239452][ T31] 1 lock held by syz-executor/5628: [ 550.244777][ T31] #0: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 550.256063][ T31] 3 locks held by kworker/1:6/5749: [ 550.261490][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 550.273044][ T31] #1: ffffc90004387c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 550.283821][ T31] #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 550.295053][ T31] 2 locks held by syz.0.2098/14171: [ 550.300782][ T31] #0: ffffffff8fe3dc48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 550.309194][ T31] #1: ffffffff8ec8aae0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 550.319570][ T31] 2 locks held by syz.0.2098/14175: [ 550.324795][ T31] #0: ffffffff8fe3dc48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 550.333587][ T31] #1: ffffffff8ec8aae0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0 [ 550.344464][ T31] 4 locks held by syz-executor/14850: [ 550.350038][ T31] #0: ffff88807db48ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 550.360384][ T31] #1: ffff88807db480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 550.370251][ T31] #2: ffffffff8ff51640 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 550.380720][ T31] #3: ffff88802ad3aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 550.390813][ T31] [ 550.404264][ T31] ============================================= [ 550.404264][ T31] [ 550.461578][ T31] NMI backtrace for cpu 0 [ 550.461602][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.461643][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.461656][ T31] Call Trace: [ 550.461664][ T31] [ 550.461674][ T31] dump_stack_lvl+0xe8/0x150 [ 550.461705][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 550.461737][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.461763][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 550.461798][ T31] sys_info+0x135/0x170 [ 550.461825][ T31] watchdog+0xfd3/0x1030 [ 550.461865][ T31] ? watchdog+0x1c9/0x1030 [ 550.461903][ T31] kthread+0x388/0x470 [ 550.461932][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.461960][ T31] ? __pfx_kthread+0x10/0x10 [ 550.461989][ T31] ret_from_fork+0x514/0xb70 [ 550.462016][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.462040][ T31] ? __switch_to+0xc79/0x1410 [ 550.462074][ T31] ? __pfx_kthread+0x10/0x10 [ 550.462109][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.462151][ T31] [ 550.462170][ T31] Sending NMI from CPU 0 to CPUs 1: [ 550.576012][ C1] NMI backtrace for cpu 1 [ 550.576032][ C1] CPU: 1 UID: 0 PID: 5637 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 550.576052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.576063][ C1] RIP: 0010:kasan_check_range+0x8a/0x2c0 [ 550.576098][ C1] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 [ 550.576114][ C1] RSP: 0018:ffffc90003f676e0 EFLAGS: 00000202 [ 550.576131][ C1] RAX: 1ffff920007ecf01 RBX: dffffc0000000001 RCX: ffffffff8176f0e3 [ 550.576145][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003f678b8 [ 550.576157][ C1] RBP: 0000000000000000 R08: ffffc90003f678c7 R09: 1ffff920007ecf18 [ 550.576169][ C1] R10: dffffc0000000000 R11: fffff520007ecf17 R12: 0000000000000002 [ 550.576182][ C1] R13: 1ffff920007ecf0f R14: fffff520007ecf19 R15: 1ffff920007ecf17 [ 550.576196][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 550.576210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.576222][ C1] CR2: 00007ffd9510fff0 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 550.576239][ C1] Call Trace: [ 550.576245][ C1] [ 550.576255][ C1] __asan_memset+0x22/0x50 [ 550.576278][ C1] unwind_next_frame+0xf33/0x2550 [ 550.576304][ C1] ? unwind_next_frame+0xa6/0x2550 [ 550.576326][ C1] ? arch_stack_walk+0xe3/0x150 [ 550.576351][ C1] __unwind_start+0x5b8/0x760 [ 550.576375][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 550.576403][ C1] arch_stack_walk+0xe3/0x150 [ 550.576427][ C1] ? stack_trace_save+0xa9/0x100 [ 550.576456][ C1] stack_trace_save+0xa9/0x100 [ 550.576483][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 550.576515][ C1] save_stack+0x122/0x230 [ 550.576540][ C1] ? __pfx_save_stack+0x10/0x10 [ 550.576576][ C1] __reset_page_owner+0x71/0x1f0 [ 550.576602][ C1] __free_frozen_pages+0xbc7/0xd30 [ 550.576628][ C1] ? ___free_pages+0x9a/0x1b0 [ 550.576657][ C1] vfree+0x1d1/0x2f0 [ 550.576680][ C1] ? __pfx_kcov_close+0x10/0x10 [ 550.576706][ C1] kcov_close+0x28/0x50 [ 550.576735][ C1] __fput+0x44f/0xa60 [ 550.576762][ C1] task_work_run+0x1d9/0x270 [ 550.576788][ C1] ? __pfx_task_work_run+0x10/0x10 [ 550.576812][ C1] ? do_exit+0x70a/0x22c0 [ 550.576834][ C1] ? kmem_cache_free+0x182/0x650 [ 550.576858][ C1] ? put_net+0x191/0x260 [ 550.576879][ C1] do_exit+0x70f/0x22c0 [ 550.576907][ C1] ? __pfx_do_exit+0x10/0x10 [ 550.576928][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.576959][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.576980][ C1] do_group_exit+0x21b/0x2d0 [ 550.577004][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.577024][ C1] __x64_sys_exit_group+0x3f/0x40 [ 550.577053][ C1] x64_sys_call+0x221a/0x2240 [ 550.577076][ C1] do_syscall_64+0x15f/0xf80 [ 550.577095][ C1] ? trace_irq_disable+0x3b/0x140 [ 550.577122][ C1] ? clear_bhb_loop+0x40/0x90 [ 550.577143][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.577160][ C1] RIP: 0033:0x7fbbcc59cdd9 [ 550.577176][ C1] Code: Unable to access opcode bytes at 0x7fbbcc59cdaf. [ 550.577185][ C1] RSP: 002b:00007ffd7ab08998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 550.577202][ C1] RAX: ffffffffffffffda RBX: 00007fbbcc633cb1 RCX: 00007fbbcc59cdd9 [ 550.577215][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 550.577226][ C1] RBP: 00007fbbcc633cc3 R08: 0000000000000000 R09: 00000000000927c0 [ 550.577238][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 550.577248][ C1] R13: 00000000000927c0 R14: 000000000006f9d6 R15: 00007ffd7ab08b40 [ 550.577271][ C1] [ 550.960870][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 550.967833][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.977078][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.987362][ T31] Call Trace: [ 550.990682][ T31] [ 550.993665][ T31] vpanic+0x56c/0xa60 [ 550.997706][ T31] ? __pfx___schedule+0x10/0x10 [ 551.002595][ T31] ? __pfx_vpanic+0x10/0x10 [ 551.007139][ T31] panic+0xc5/0xd0 [ 551.010904][ T31] ? __pfx_panic+0x10/0x10 [ 551.015369][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 551.020787][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 551.027204][ T31] watchdog+0x102c/0x1030 [ 551.031700][ T31] ? watchdog+0x1c9/0x1030 [ 551.036309][ T31] kthread+0x388/0x470 [ 551.040441][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.045193][ T31] ? __pfx_kthread+0x10/0x10 [ 551.049845][ T31] ret_from_fork+0x514/0xb70 [ 551.054502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.059733][ T31] ? __switch_to+0xc79/0x1410 [ 551.064468][ T31] ? __pfx_kthread+0x10/0x10 [ 551.069116][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.073952][ T31] [ 551.077883][ T31] Kernel Offset: disabled [ 551.082297][ T31] Rebooting in 86400 seconds..