last executing test programs: 5.000235553s ago: executing program 2 (id=2046): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001700010026bd7000ff0edf250b00000008000100378aa06a8e15a7e37164", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x20000015) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000240)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000300)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000480)=0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}}, 0x420) 2.843213622s ago: executing program 0 (id=2075): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050500000000000000000a000005300002802c00018014000300ff0100000000000116"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 2.685455843s ago: executing program 2 (id=2077): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000851}, 0x890) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000851}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61a91b8b}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) 2.626077142s ago: executing program 0 (id=2078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb) ppoll(&(0x7f0000000300)=[{r4, 0x1061}, {r3}], 0x2, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="ee", 0x1}], 0x1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)='l', 0x1}], 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) 2.329690857s ago: executing program 4 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000a0601040008000000000000070000030900020073797a3000000000050001ecd30e4bcd66c44680100007800a001a00ffffffffffff0000080068708fd60bd74d17094000000002bfbb8311c520949f141a0490cce6a9525d90b6acdeafabe97ea94033296e2fe04b4ff4ed1121dbaccae57fa6f493ec1a"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="114353012008ba00000037510800", 0x2a, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) 2.197266603s ago: executing program 0 (id=2081): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x52fe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0xffff, @mcast1, 0xfffffff9}, @in6={0xa, 0x4e23, 0xaf0b, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x2a9c, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}], 0xb4) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f00000002c0)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) bind$packet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.19648498s ago: executing program 4 (id=2082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0effffffffff"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r3, 0x0, 0x1, 'g'}, 0x9) 2.184802919s ago: executing program 2 (id=2083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0x2d75000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000002700)="7182159d05118b143e133b2e78e4d4c045ed85e3bf8266604cd6e63dff2ba768781b2a9aef2643cc37dcb20f067677ff34eb0768325725cbd27c73637073a6590f000c5a4a16f384e20a8aa898428b50611b5d6603eed9e6000000000000008c05c1e3445f3b93cb8c241951a0d6e588f3840ccc3011bffa0124c9e6e6fe24cd819d3e42f1d7b2a68cc5abc301cd88219a6353fb4ec0ad2ca6f72ca7ed6de945219ae17d3fd2b8299b5aa61a5bda580404b29ea384950fdf6a4f63071733a2b01d32a508d2d6fa0dc261e638bf1968ae2ad756740b5408f64ec288ae00"/231, 0xe7}, {&(0x7f0000000300)="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", 0xca3}], 0x5}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000002880)=""/4102, 0x1006}], 0x2}, 0x40012322) 1.816540436s ago: executing program 0 (id=2087): socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f00000009c0)=@raw=[@call={0x85, 0x0, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x4f}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x46cbd9e3, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.636748629s ago: executing program 1 (id=2089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0xfeffff, 0x113, 0xffffffffffffff63, &(0x7f0000000f80)="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", 0x0, 0xf0, 0x0, 0x0, 0xd9, &(0x7f00000010c0), &(0x7f0000000000)="49bc6636a2d66ddda9ebc41a6c9263dbcb0743e2b3b886572a152862b966b568d79e455ccbd692e51b2e5623d26d9a34ca151c49b0d239c21b3ca6df2b25d6f49e56721c6f7753a14423a613a0a962756ca759167690ff3a346886fc87fa46af2aaa710168135dbcaecfcf38b0dff710cf1a56a30a102d623aa6c5f33389cc2d4f42650f61bb27762b5a0c82713ecc0c3616c83480fe24c174c96580f29b6d809d505f0422162a06adf81461dd10028fa3b2c09441c9d585fb45b22449e1d1f5f033eca195fb28175c646a8f37257263c17d0fe5a25a592105"}, 0x50) 1.630580413s ago: executing program 0 (id=2090): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000740), 0xffffffc1) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01052cbd7000fedbdf251d00000008001d0004000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44050}, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000002c0)={0x0, @adiantum}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='\x00', 0x1}], 0x1, &(0x7f00000006c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0xffffff7f}}], 0x20, 0x4048800}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4000) write(0xca, &(0x7f00000005c0)="043c2d91fc055bfd30dc", 0xa) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000003c0)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, {&(0x7f0000000340)=""/64, 0x40}, &(0x7f0000000380), 0x1}, 0xa0) 1.584876318s ago: executing program 1 (id=2091): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYRES64=r3], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480200000d0a010300000000000000000a007aefe29437000428020380200200801c02018044000280080003400000000308000180fffffffd080003400000000108000340000000030900020073797a300000000008000180fffffffc0900020073797a3100000000380002800900020073797a320000000008000180fffffffc080003400000000108000180fffffffb08000180fffffffe08000180fffffffb5800028008000180fffffffd08000180ffffffff0900020073797a3000000000080003400000000408000340000000010800034000000003080003400000000408000180fffffffb08000340000000010800034000000004f3000100f52bb8dfccfa51293feafae3f8c30f8ceabfe81a45f256f742a0db8be11d381279f04bc9bc269895d6eb3faa2b04d16e0dfd8318d71913591a554461636fa5fba3e2627bf657d00430267af88fa43f6c8b91e79be5bc0df1fe194ff233d8884bc4fecd39951bdcae945b36b95690072a94a1d9120820431582ed9776e77f405ed6c7474917cf674a842df22b360a238d5813fd9b4139d641ba653010808d15be314ed596caf81e6349109d0618aa127a816de4e1e875075cc65d18a59300d9d6316bc16927e22082a082d0362da80214acebbeec1a9ac669fcc0e2670491e50caad420df290204efd1"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x20048804) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x7fe}, 0xfffffffffffffd42) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x2a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000805}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0xa0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0x3, 0x3, 0xfffffffd) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) 1.233319272s ago: executing program 2 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c805}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv6_delroute={0x0, 0x19, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x0, 0xd, 0xfe, 0x1, 0xfe, 0xa, 0x500}, [@RTA_ENCAP_TYPE={0x0, 0x15, 0x7}, @RTA_MULTIPATH={0x0, 0x9, {0x2, 0x8, 0x2, r5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4044) 1.213030527s ago: executing program 4 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d5063300800000"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r4, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc844}, 0x40c2010) 1.033537421s ago: executing program 2 (id=2095): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="88323d7b84db233de5b93039d213d6d32596f574c752c1bb14a8811cc5f2a0f217ac357ab380576706a9a7ee946b798d7a727edbb4b9c9de78cffb2e6effe45a0af6cdbe703e7ffecb1b12ef7eead6fc4ae5d1e1f0abe56bf2037c827b1710bfa5c72b3ea0085e60ff313294a07b1ff93a28478a9892716d1f52dce3a7ba4b01d4fcb8a4f9185e083eabd0ce0796c0de24fd08b663acac3840fe725badd00232c6a252ca9ac89c9bd6fe32f5fa31ae4c121520e80185b1e16abc", @ANYRES64=r0], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e1c, @empty}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000500)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000540)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2003, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="08000800070002000000122b000000457f003100660000020090780a010102ac1414164e201d907802ff000100080000b68ed34f131c03e57e518e4d08000000"], 0x3f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r9 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000440)={{0x0, 0x51305cbb, 0x9, 0x581e, 0x256, 0x2, 0x3, 0x4, 0xc, 0xce, 0x7ff, 0x22, 0xfa000000, 0x0, 0xa188}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001300)={r10, 0x5746}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40448d0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x4) connect$inet6(r12, &(0x7f00000005c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000600), 0x4) 997.902521ms ago: executing program 0 (id=2096): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000840000000100"], 0x18, 0x4855}, 0x24000052) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000003940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000003d80)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000003dc0)={0x2, 0x4e21, @local}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e00)={0x6, 0x3, &(0x7f0000003ec0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000003f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd43}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000003f40)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003f80)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000004000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet(r2, &(0x7f0000004040)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000004200), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000004240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0xc, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000003540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000003580)={'dummy0\x00', &(0x7f00000035c0)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003600)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000003680)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000004280)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000004300)=ANY=[@ANYBLOB="d70062e4", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000004340)='^', 0x34000, 0x0, &(0x7f0000004380)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendto$inet(r1, &(0x7f0000000540)="502fd6a4f4da0900255ee86923da7d34bfe13d1f03ca7dd680cd30a03b5033fcd2f30ad7302e3a32d085c79edffa2b2b84069ea5f1f7bfbf4ca4b48c8efa6226c2cc76326a3f0836e83a98e29d85aa8f18b1a0839f0e93a43513f1a0928c2bf2b4b81281e02ba03b9995c30727935078544d6e83a23ab99ed9a27e9cb6a16f0d5d0ad1b2d118c8f7a91a52a3ed531ef3967303d4f65d", 0x96, 0x4000, &(0x7f0000003400)={0x2, 0x4e24, @multicast2}, 0x10) listen(0xffffffffffffffff, 0xda90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3ff, 0xa87be27d8b709af6}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000000}, 0x810) 966.413904ms ago: executing program 4 (id=2097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3dfd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3dfd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000540)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000540)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000009c0)=0x4, 0x4b) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000001af8eaed497000000000000000000008301080000000000950000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ccb054a}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000008c0)=0x207, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000940)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000980)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r9, &(0x7f0000000940)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000980)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000006c0)="374990d724320057ca3f6e961b07354ad4bd88af7d0614c3c86c0902001e6bec8b59f7", 0x23}], 0x2) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000006c0)="374990d724320057ca3f6e961b07354ad4bd88af7d0614c3c86c0902001e6bec8b59f7", 0x23}], 0x2) 909.972031ms ago: executing program 3 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}]}}}]}, 0x3c}}, 0x0) (async) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000003c0)) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000400)=0xffff) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100001082abd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000800000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b0080000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x14b, 0xe91, 0x0, 0x2, 0x8000, 0x800, 0xda, 0x7, r1}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x8000, 0x6, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="420033004004020008021100000108021100000108021100000072ff000602020202020201002d1a00001d07000000000000000b000600190000000000f9ffffff0600000800cd000b04"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 618.339044ms ago: executing program 3 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r4, &(0x7f0000000000)="a71f5b", 0x3) bind$alg(r10, 0x0, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e22, @loopback}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0) 577.428455ms ago: executing program 1 (id=2100): socket$key(0xf, 0x3, 0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x60) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x210) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000100)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x208, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}}, 0x20}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r8}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040091) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x44014) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000180)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 542.953472ms ago: executing program 2 (id=2101): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xfffffffc}, 0x8) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000180)={0x2c, "d6d3d4a34b3ac9a4b4ecf7028a0a6592a58e555ffa898027024dfa77622d48cf2a57a10dba003cd330766940c8e5abdaaacb31cd3dd8a7a9119176ba76bde47eea7fa17ac81cc133b8615a41aa3a8eb2124a0a374376741d02246d4ebf265954d45554d42c20d85b59236cf8280904ad9783f05346511ec3daf3a1354c32c303"}) (async) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000840)="b6", 0x1}, {&(0x7f0000000dc0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000080}, 0x10) 498.065659ms ago: executing program 3 (id=2102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000240), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0xfda1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0xb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'syz_tun\x00'}) 362.370466ms ago: executing program 3 (id=2103): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000280)={0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000580)="8000e8bef79dbcf6", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[], 0x3}, 0x2400c800) (async) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000280)={0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x49}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000580)="8000e8bef79dbcf6", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[], 0x3}, 0x2400c800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000003c0)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x7}}, 0x9, 0x8, 0x8, 0x7, 0x80}, &(0x7f0000000240)=0x98) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x7}}, 0x9, 0x8, 0x8, 0x7, 0x80}, &(0x7f0000000240)=0x98) unshare(0x20020600) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000380)={0x2, 0x2, @broadcast}, 0x10) (async) bind$rds(r5, &(0x7f0000000380)={0x2, 0x2, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x100004}, 0x8) close(r1) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000540)={&(0x7f0000000040)=0x10001, 0x4, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000500)}) 301.448202ms ago: executing program 4 (id=2104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001600)=@newtfilter={0x6c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x0) 189.940148ms ago: executing program 3 (id=2105): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000340)=0x6, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000300)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000380)=0x800000, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x6c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x58, 0x1, [@m_ife={0x54, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0xb, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40040c0) (async) close(r0) 187.896333ms ago: executing program 4 (id=2106): unshare(0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000008c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4e22, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x489, &(0x7f0000000d40)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x9c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000ffd0000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x4, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000534cd22631e2059ab5893cac7c41ec1ea4dc2211cd9e932b1179f703b8bb565f8e9584a02b6a83ff822c66d69a97dba01bb9ba1a41ea2252fb3bd9feef69dadb203d9c3f3d82a0c63a6a282ce093989279ba64dd2fb9244ce38972e3221c0abe4ad579aaf6b0f736f1c2fccd7b7499fe3aa32b12fd596153c3429887ee90511a3daff243e76776438d20781d005ea22147b5a8b925234093d9cdb0a4dad550"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000cc0)=""/43, &(0x7f0000000dc0)=0x2b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r7, &(0x7f00000009c0), &(0x7f0000000a00)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000d00)={&(0x7f0000000500)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000e00)=""/167, 0xa7}, {&(0x7f0000000580)=""/1, 0x1}], 0x2, &(0x7f0000000cc0)}, 0x10003) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f00000002c0)=0xfffffff6, 0x4) 169.819119ms ago: executing program 1 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xf5, 0xa, 0x0, 0x4, @mcast2, @rand_addr=' \x01\x00', 0x3dfd5fae5b6a3d59, 0x700, 0x3, 0xd29}}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x30, 0x6a, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUPS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r4 = socket(0x2b, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) (async) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) (async) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x4076cbba9945d516, &(0x7f0000000940)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x58, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r9, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000c00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x104, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x4001) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000e00)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000e40)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='memory.events\x00', 0x275a, 0x0) 115.740802ms ago: executing program 3 (id=2108): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x2c, 0x0, 0x41000, 0x67, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r4, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000480)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) nanosleep(&(0x7f0000000500)={r7, r8+10000000}, &(0x7f0000000540)) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x14, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000580)=[{{&(0x7f0000000600)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="b1", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={0x0}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000800)={0x2, 0x201, 0xca25, 0x5, r12}, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x70, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2c, r14, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1, r0}, 0xc) 9.36332ms ago: executing program 1 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="300100001f00010000000000000000001d"], 0x130}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 0s ago: executing program 1 (id=2110): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x3, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r5}, 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2d}, 0x94) kernel console output (not intermixed with test programs): T2000] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.483234][ T2000] Buffer I/O error on dev nbd1, logical block 1, async page read [ 138.484806][ T2000] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.485076][ T2000] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.488990][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.490290][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.490460][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.490641][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 138.490830][ T5965] ldm_validate_partition_table(): Disk read failed. [ 138.491315][ T5965] Dev nbd1: unable to read RDB block 0 [ 138.493115][ T5965] nbd1: unable to read partition table [ 138.521484][ T5965] ldm_validate_partition_table(): Disk read failed. [ 138.522267][ T5965] Dev nbd1: unable to read RDB block 0 [ 138.523867][ T5965] nbd1: unable to read partition table [ 139.675042][ T8423] netlink: 'syz.0.575': attribute type 34 has an invalid length. [ 139.757679][ T8406] bridge0: port 3(vlan1) entered blocking state [ 139.758520][ T8406] bridge0: port 3(vlan1) entered disabled state [ 139.758661][ T8406] vlan1: entered allmulticast mode [ 139.758675][ T8406] geneve0: entered allmulticast mode [ 139.762426][ T8406] vlan1: entered promiscuous mode [ 139.762443][ T8406] geneve0: entered promiscuous mode [ 139.829834][ T8429] netlink: 'syz.0.575': attribute type 34 has an invalid length. [ 139.895274][ T8423] bond1: option lacp_strict: invalid value (255) [ 139.896303][ T8423] bond1 (unregistering): Released all slaves [ 139.926655][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 141.288908][ T8429] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.290862][ T8439] __nla_validate_parse: 76 callbacks suppressed [ 141.290879][ T8439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.575'. [ 141.404898][ T8453] netlink: 'syz.0.579': attribute type 23 has an invalid length. [ 141.404925][ T8453] netlink: 'syz.0.579': attribute type 9 has an invalid length. [ 141.439436][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.582'. [ 141.456024][ T8453] bridge3: entered promiscuous mode [ 141.567349][ T8466] syzkaller0: entered promiscuous mode [ 141.567370][ T8466] syzkaller0: entered allmulticast mode [ 141.723188][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.727205][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 141.840292][ T8471] bond1: Removing last arp target with arp_interval on [ 141.872650][ T8477] bond2: Removing last arp target with arp_interval on [ 141.894567][ T8471] syzkaller0: entered promiscuous mode [ 141.894590][ T8471] syzkaller0: entered allmulticast mode [ 142.260494][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 142.264442][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 142.264724][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 142.273877][ T8526] netlink: 88 bytes leftover after parsing attributes in process `syz.1.593'. [ 142.621782][ T8544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.697413][ T8565] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 143.719219][ T8565] bond3: entered promiscuous mode [ 143.719488][ T8565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.720426][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 143.723264][ T8565] bond3 (unregistering): Released all slaves [ 145.156000][ T8515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.319023][ T8601] netlink: 272 bytes leftover after parsing attributes in process `syz.2.605'. [ 145.442840][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.445497][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.445832][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.446132][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.477862][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.478286][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.479455][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.479779][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.481805][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.482519][ T8611] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 145.488574][ T8606] syzkaller0: entered promiscuous mode [ 145.488592][ T8606] syzkaller0: entered allmulticast mode [ 145.875769][ T8629] macvlan0: left promiscuous mode [ 145.908234][ T8629] ip6erspan0: left allmulticast mode [ 145.916754][ T8629] bridge3: left promiscuous mode [ 145.919428][ T8629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.945728][ T193] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 145.963262][ T8629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.995421][ T8634] vlan2: entered promiscuous mode [ 145.995442][ T8634] bridge0: entered promiscuous mode [ 146.075396][ T8643] ipvlan2: entered promiscuous mode [ 146.075569][ T8643] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.075586][ T8643] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.075701][ T8643] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 146.248165][ T193] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 146.312203][ T8660] bond2: entered promiscuous mode [ 146.312687][ T8660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.330756][ T8657] __nla_validate_parse: 3 callbacks suppressed [ 146.330771][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 146.394512][ T8666] netlink: 64 bytes leftover after parsing attributes in process `syz.3.620'. [ 146.490605][ T8667] macsec1: entered promiscuous mode [ 146.494406][ T8669] syzkaller1: entered promiscuous mode [ 146.494425][ T8669] syzkaller1: entered allmulticast mode [ 146.721865][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 146.799574][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 146.997891][ T8706] ip_tables: iptables: counters copy to user failed while replacing table [ 147.091961][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 147.100272][ T8710] sctp: [Deprecated]: syz.0.635 (pid 8710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.100272][ T8710] Use struct sctp_sack_info instead [ 147.491840][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 147.491862][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 147.541630][ T8736] netlink: 152 bytes leftover after parsing attributes in process `syz.3.641'. [ 147.543630][ T8738] netlink: 152 bytes leftover after parsing attributes in process `syz.3.641'. [ 147.791228][ T8733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.845139][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.855314][ T8734] bond3: (slave bond0): making interface the new active one [ 147.864306][ T8734] bond3: (slave bond0): Enslaving as an active interface with an up link [ 147.869566][ T8736] .`: renamed from bond0 (while UP) [ 148.086854][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 148.087105][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.192360][ T8750] batadv_slave_1: entered promiscuous mode [ 148.261259][ T8756] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 148.313727][ T8762] SET target dimension over the limit! [ 148.921779][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 148.930515][ T8796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.176223][ T8796] bond4: (slave veth7): Enslaving as an active interface with a down link [ 149.255637][ T8806] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 149.267986][ T8806] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 149.377969][ T8812] bond4: (slave veth9): Enslaving as an active interface with a down link [ 149.385766][ T8816] bond4: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 150.441912][ T8894] veth1: entered promiscuous mode [ 150.441934][ T8894] veth1: entered allmulticast mode [ 150.442673][ T8894] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 150.689903][ T8906] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 150.917350][ T8917] validate_nla: 36 callbacks suppressed [ 150.917370][ T8917] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 150.954182][ T8917] gretap0: entered promiscuous mode [ 150.973029][ T8919] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 151.604216][ T8964] xt_IDLETIMER: timeout value is too big [ 151.680855][ T8968] __nla_validate_parse: 6 callbacks suppressed [ 151.680874][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 151.872036][ T8987] openvswitch: netlink: Message has 8 unknown bytes. [ 152.254806][ T8978] gretap0: left promiscuous mode [ 152.299027][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.304411][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.373783][ T8978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.373807][ T8978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.395099][ T8978] veth1_vlan: left promiscuous mode [ 152.406287][ T8978] veth0_vlan: left promiscuous mode [ 152.409873][ T8978] veth0_vlan: entered promiscuous mode [ 152.413847][ T8978] veth1_vlan: entered promiscuous mode [ 152.425685][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 152.433900][ T8978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.436052][ T8978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.440301][ T8978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.447821][ T8978] bond1: left promiscuous mode [ 152.456164][ T8978] ip6gre1: left promiscuous mode [ 152.461413][ T8978] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 152.477617][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.494504][ T9001] tipc: Started in network mode [ 152.494530][ T9001] tipc: Node identity ac14140f, cluster identity 4711 [ 152.494784][ T9001] tipc: New replicast peer: 255.255.255.255 [ 152.495562][ T9001] tipc: Enabled bearer , priority 10 [ 152.508812][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 152.523747][ T6379] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 152.539921][ T8988] syzkaller0: entered promiscuous mode [ 152.539941][ T8988] syzkaller0: entered allmulticast mode [ 152.631042][ T1038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.631094][ T1038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.631125][ T1038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.647361][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.737848][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 152.884354][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 152.920940][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.937430][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.152460][ T9034] netlink: 'syz.3.696': attribute type 30 has an invalid length. [ 153.213509][ T9043] netlink: 'syz.3.696': attribute type 30 has an invalid length. [ 153.432351][ T9056] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 153.544014][ T9056] bond5: entered promiscuous mode [ 153.555260][ T5616] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 153.555304][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 153.555324][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.555342][ T5616] Call Trace: [ 153.555350][ T5616] [ 153.555364][ T5616] dump_stack_lvl+0xe8/0x150 [ 153.555395][ T5616] dump_header+0xd3/0x4b0 [ 153.555421][ T5616] oom_kill_process+0x3ab/0x9e0 [ 153.555451][ T5616] out_of_memory+0x1064/0x1480 [ 153.555474][ T5616] ? try_charge_memcg+0xc32/0x15e0 [ 153.555512][ T5616] ? __pfx_out_of_memory+0x10/0x10 [ 153.555533][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 153.555570][ T5616] try_charge_memcg+0xcdf/0x15e0 [ 153.555614][ T5616] ? __pfx_try_charge_memcg+0x10/0x10 [ 153.555657][ T5616] ? charge_memcg+0x47/0x310 [ 153.555682][ T5616] charge_memcg+0x1dd/0x310 [ 153.555705][ T5616] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 153.555727][ T5616] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 153.555753][ T5616] swap_cache_alloc_folio+0x4de/0x990 [ 153.555791][ T5616] swap_cache_read_folio+0x44/0x120 [ 153.555813][ T5616] swap_cluster_readahead+0x392/0x630 [ 153.555837][ T5616] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 153.555878][ T5616] swapin_readahead+0x1a3/0xc50 [ 153.555908][ T5616] ? __pfx_swapin_readahead+0x10/0x10 [ 153.555930][ T5616] ? swap_table_get+0x1e/0x260 [ 153.555956][ T5616] ? swap_table_get+0x1e/0x260 [ 153.555979][ T5616] ? swap_table_get+0x1e/0x260 [ 153.556005][ T5616] ? swap_table_get+0x216/0x260 [ 153.556029][ T5616] ? swap_cache_get_folio+0x2e7/0x2f0 [ 153.556067][ T9056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.556066][ T5616] do_swap_page+0x3fb/0x4c10 [ 153.556109][ T5616] ? __lock_acquire+0x747/0x2de0 [ 153.556128][ T5616] ? do_swap_page+0x126/0x4c10 [ 153.556153][ T5616] ? __pfx_do_swap_page+0x10/0x10 [ 153.556176][ T5616] ? __pte_offset_map+0x1ae/0x240 [ 153.556207][ T5616] ? pte_offset_map_rw_nolock+0xea/0x160 [ 153.556237][ T5616] handle_mm_fault+0x1398/0x3750 [ 153.556276][ T5616] ? handle_mm_fault+0xf1/0x3750 [ 153.556312][ T5616] ? __pfx_handle_mm_fault+0x10/0x10 [ 153.556336][ T5616] ? lock_vma_under_rcu+0x45a/0x500 [ 153.556382][ T5616] do_user_addr_fault+0xa4f/0x1340 [ 153.556413][ T5616] ? trace_page_fault_user+0x84/0x1e0 [ 153.556434][ T5616] exc_page_fault+0x6a/0xc0 [ 153.556457][ T5616] asm_exc_page_fault+0x26/0x30 [ 153.556474][ T5616] RIP: 0033:0x7f3f2415ea0e [ 153.556499][ T5616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.556513][ T5616] RSP: 002b:00007ffdda4dca98 EFLAGS: 00010246 [ 153.556532][ T5616] RAX: 0000000000000000 RBX: 0000555592be2500 RCX: 00007f3f2415ea0e [ 153.556544][ T5616] RDX: 00007ffdda4dcaf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.556556][ T5616] RBP: 00007ffdda4dcb5c R08: 0000000000000000 R09: 0000000000000000 [ 153.556566][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 153.556577][ T5616] R13: 00000000000927c0 R14: 000000000002549b R15: 00007ffdda4dcbb0 [ 153.556609][ T5616] [ 153.565721][ T5616] memory: usage 307200kB, limit 307200kB, failcnt 521 [ 153.565738][ T5616] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 153.565750][ T5616] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 153.565761][ T5616] Memory cgroup stats for /syz2: [ 153.574747][ T5616] cache 0 [ 153.574756][ T5616] rss 0 [ 153.574762][ T5616] rss_huge 0 [ 153.574768][ T5616] shmem 0 [ 153.574773][ T5616] mapped_file 0 [ 153.574779][ T5616] dirty 0 [ 153.574785][ T5616] writeback 0 [ 153.574791][ T5616] workingset_refault_anon 6 [ 153.574797][ T5616] workingset_refault_file 0 [ 153.574803][ T5616] swap 180224 [ 153.574809][ T5616] swapcached 221184 [ 153.574815][ T5616] pgpgin 9481 [ 153.574821][ T5616] pgpgout 9477 [ 153.574826][ T5616] pgfault 25261 [ 153.574832][ T5616] pgmajfault 4 [ 153.574838][ T5616] inactive_anon 4096 [ 153.574844][ T5616] active_anon 12288 [ 153.574850][ T5616] inactive_file 0 [ 153.574856][ T5616] active_file 0 [ 153.574862][ T5616] unevictable 0 [ 153.574868][ T5616] hierarchical_memory_limit 314572800 [ 153.574875][ T5616] hierarchical_memsw_limit 9223372036854771712 [ 153.574882][ T5616] total_cache 0 [ 153.574888][ T5616] total_rss 0 [ 153.574894][ T5616] total_rss_huge 0 [ 153.574900][ T5616] total_shmem 0 [ 153.574906][ T5616] total_mapped_file 0 [ 153.574912][ T5616] total_dirty 0 [ 153.574918][ T5616] total_writeback 0 [ 153.574924][ T5616] total_workingset_refault_anon 6 [ 153.574930][ T5616] total_workingset_refault_file 0 [ 153.574936][ T5616] total_swap 180224 [ 153.574942][ T5616] total_swapcached 221184 [ 153.574948][ T5616] total_pgpgin 9481 [ 153.574954][ T5616] total_pgpgout 9477 [ 153.574960][ T5616] total_pgfault 25261 [ 153.574966][ T5616] total_pgmajfault 4 [ 153.574972][ T5616] total_inactive_anon 4096 [ 153.574979][ T5616] total_active_anon 12288 [ 153.574985][ T5616] total_inactive_file 0 [ 153.574991][ T5616] total_active_file 0 [ 153.574997][ T5616] total_unevictable 0 [ 153.575003][ T5616] anon_cost 0 [ 153.575009][ T5616] file_cost 0 [ 153.575015][ T5616] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.692,pid=9020,uid=0 [ 153.575796][ T5616] Memory cgroup out of memory: Killed process 9020 (syz.2.692) total-vm:102320kB, anon-rss:1264kB, file-rss:22984kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 153.642778][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'. [ 153.650235][ T193] tipc: Node number set to 2886997007 [ 153.951460][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 154.392584][ T9082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.394752][ T9067] nbd: nbd0 already in use [ 154.395468][ T9067] block nbd0: NBD_DISCONNECT [ 154.395710][ T9067] block nbd0: Send disconnect failed -104 [ 154.395727][ T9067] block nbd0: shutting down sockets [ 154.451121][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.989305][ T9072] syz.2.704 (9072) used greatest stack depth: 17216 bytes left [ 155.125743][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 155.219309][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 155.498560][ T9116] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 155.936843][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 156.800803][ T9162] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 156.923502][ T9165] netlink: 'syz.1.724': attribute type 16 has an invalid length. [ 156.923524][ T9165] netlink: 'syz.1.724': attribute type 17 has an invalid length. [ 157.057801][ T9169] __nla_validate_parse: 4 callbacks suppressed [ 157.057821][ T9169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.726'. [ 157.094897][ T9165] veth1: left promiscuous mode [ 157.094918][ T9165] veth1: left allmulticast mode [ 157.168757][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.726'. [ 157.173963][ T9165] hsr0: left allmulticast mode [ 157.173982][ T9165] hsr_slave_0: left allmulticast mode [ 157.173995][ T9165] hsr_slave_1: left allmulticast mode [ 157.215348][ T9165] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 157.269553][ T9162] vlan3: entered promiscuous mode [ 157.269576][ T9162] bridge0: entered promiscuous mode [ 157.395178][ T9190] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 157.932944][ T9207] netlink: 'syz.1.734': attribute type 153 has an invalid length. [ 157.932964][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 158.048434][ T9215] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 158.055144][ T9215] bond3 (unregistering): Released all slaves [ 158.149011][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 159.177939][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 159.202509][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 159.203036][ T9274] Bluetooth: MGMT ver 1.23 [ 159.492437][ T9295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.536575][ T9296] bridge4: entered promiscuous mode [ 159.536597][ T9296] bridge4: entered allmulticast mode [ 159.540287][ T9296] team0: Port device bridge4 added [ 159.573052][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 159.700317][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.700341][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.828047][ T9295] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.873652][ T9299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.984534][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 160.008567][ T9301] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 160.122297][ T9324] tipc: Can't bind to reserved service type 0 [ 160.300217][ T9334] syzkaller0: entered promiscuous mode [ 160.300239][ T9334] syzkaller0: entered allmulticast mode [ 160.703114][ T9359] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 162.280694][ T9448] __nla_validate_parse: 2 callbacks suppressed [ 162.280714][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 162.458831][ T9458] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 162.609908][ T9460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.652963][ T9458] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.714641][ T9461] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 162.813797][ T9464] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 162.867269][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.978413][ T6379] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.025697][ T9485] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 163.194470][ T9488] netlink: 'syz.2.786': attribute type 2 has an invalid length. [ 163.516315][ T9500] IPv6: addrconf: prefix option has invalid lifetime [ 163.588040][ T9497] syzkaller1: entered promiscuous mode [ 163.588062][ T9497] syzkaller1: entered allmulticast mode [ 164.075032][ T9528] netlink: 2 bytes leftover after parsing attributes in process `syz.3.794'. [ 164.180047][ T9535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.181563][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.210327][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.210585][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.210826][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.211064][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.212904][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.213148][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 164.727129][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 164.750395][ T9558] pim6reg: entered allmulticast mode [ 164.811688][ T9558] pim6reg: left allmulticast mode [ 164.967348][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 165.273606][ T9570] raw_sendmsg: syz.4.802 forgot to set AF_INET. Fix it! [ 166.189581][ T9614] ip_tables: iptables: counters copy to user failed while replacing table [ 166.618786][ T9630] bond3: entered promiscuous mode [ 166.618826][ T9630] bond3: entered allmulticast mode [ 166.619199][ T9630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.744780][ T9636] netlink: 'syz.3.816': attribute type 11 has an invalid length. [ 166.912012][ T9641] xt_CT: No such helper "snmp_trap" [ 167.224768][ T9664] tc_dump_action: action bad kind [ 167.305245][ T9666] __nla_validate_parse: 65 callbacks suppressed [ 167.305267][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 167.625131][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 167.625153][ T9678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.829'. [ 168.053299][ T9701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 168.254256][ T9703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.623880][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.623918][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.683564][ T9721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.836'. [ 169.135921][ T9738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.151042][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 169.151974][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.842'. [ 169.181099][ T9742] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 169.183519][ T9742] syzkaller0: entered promiscuous mode [ 169.183536][ T9742] syzkaller0: entered allmulticast mode [ 169.488440][ T9750] bond7: entered allmulticast mode [ 169.903328][ T9765] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 170.342095][ T9785] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 170.421121][ T9798] veth0_to_bridge: entered promiscuous mode [ 170.421654][ T9798] macvtap0: entered allmulticast mode [ 170.421670][ T9798] veth0_to_bridge: entered allmulticast mode [ 170.465091][ T9798] veth0_to_bridge: left allmulticast mode [ 170.465118][ T9798] veth0_to_bridge: left promiscuous mode [ 170.573900][ T9808] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.773220][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 170.908494][ T9808] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.175631][ T9808] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.278704][ T9831] netlink: 'syz.4.865': attribute type 3 has an invalid length. [ 172.222598][ T31] audit: type=1804 audit(1791768341.050:3): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.877" name="/newroot/192/cgroup.controllers" dev="tmpfs" ino=1000 res=1 errno=0 [ 172.224972][ T31] audit: type=1800 audit(1791768341.090:4): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.243116][ T31] audit: type=1800 audit(1791768341.110:5): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.260387][ T31] audit: type=1800 audit(1791768341.120:6): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.269427][ T31] audit: type=1800 audit(1791768341.140:7): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.270038][ T31] audit: type=1800 audit(1791768341.140:8): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.285495][ T31] audit: type=1800 audit(1791768341.150:9): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.285539][ T31] audit: type=1800 audit(1791768341.150:10): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.303454][ T31] audit: type=1800 audit(1791768341.170:11): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.303499][ T31] audit: type=1800 audit(1791768341.170:12): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.877" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 172.840988][ T9899] __nla_validate_parse: 3 callbacks suppressed [ 172.841007][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 173.106182][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 173.612355][ T9933] tipc: New replicast peer: 255.255.255.255 [ 173.612979][ T9933] tipc: Enabled bearer , priority 10 [ 173.851475][ T9954] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 174.001051][ T9954] bond3: (slave .`): Releasing backup interface [ 174.033163][ T9954] 8021q: adding VLAN 0 to HW filter on device .` [ 174.058393][ T9954] team0: Port device .` added [ 174.064879][ T9945] syzkaller1: entered promiscuous mode [ 174.064898][ T9945] syzkaller1: entered allmulticast mode [ 175.405949][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 175.405975][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.907'. [ 175.406017][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.907'. [ 175.529922][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 175.562320][T10027] netlink: 658 bytes leftover after parsing attributes in process `syz.1.910'. [ 175.694049][T10033] syzkaller0: entered promiscuous mode [ 175.694069][T10033] syzkaller0: entered allmulticast mode [ 175.727297][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 175.744619][T10037] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 175.799420][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 175.826322][T10037] bond5: entered promiscuous mode [ 175.831979][T10037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.862821][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 176.068720][T10051] netlink: 'syz.3.915': attribute type 8 has an invalid length. [ 176.095067][T10050] geneve3: entered promiscuous mode [ 176.095088][T10050] geneve3: entered allmulticast mode [ 176.246751][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.338799][T10067] netlink: 'syz.2.923': attribute type 12 has an invalid length. [ 176.497764][T10078] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 176.561598][T10078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.642447][T10082] bond4: entered promiscuous mode [ 176.643837][T10082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.662005][T10078] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 176.725461][T10078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.762017][T10082] bond6: entered promiscuous mode [ 176.762445][T10082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.865451][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.865548][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.882894][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.882989][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883067][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883148][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883227][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883305][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883383][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883460][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883552][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883637][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883715][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.883946][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884028][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884108][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884186][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884261][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884334][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884409][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884483][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884558][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884633][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884706][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884828][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.884902][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885100][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885181][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885255][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885328][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885415][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885488][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.885561][T10095] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.905781][T10095] netlink: 'syz.0.927': attribute type 3 has an invalid length. [ 177.197678][T10102] openvswitch: netlink: Missing valid actions attribute. [ 177.197718][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.198149][T10102] openvswitch: netlink: Missing valid actions attribute. [ 177.198182][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.198592][T10102] openvswitch: netlink: Missing valid actions attribute. [ 177.198623][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.206762][T10102] openvswitch: netlink: Missing valid actions attribute. [ 177.206799][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.207217][T10102] openvswitch: netlink: Missing valid actions attribute. [ 177.207268][T10102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.705420][T10119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.706107][T10119] bridge0: port 4(bond4) entered blocking state [ 177.706212][T10119] bridge0: port 4(bond4) entered disabled state [ 177.706351][T10119] bond4: entered allmulticast mode [ 177.716122][T10119] bond4: entered promiscuous mode [ 177.729035][T10119] bridge0: port 4(bond4) entered blocking state [ 177.730072][T10119] bridge0: port 4(bond4) entered forwarding state [ 178.177581][ T151] bridge0: port 4(bond4) entered disabled state [ 178.788502][T10142] __nla_validate_parse: 10 callbacks suppressed [ 178.788522][T10142] netlink: 112 bytes leftover after parsing attributes in process `syz.3.937'. [ 179.545157][T10081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.789161][T10155] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 179.789211][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789238][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789260][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789281][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789303][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789325][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789346][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789368][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789389][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789411][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789433][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789454][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789476][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789498][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789519][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789540][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789571][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789593][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789614][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789636][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789657][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789679][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789706][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789728][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789749][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789771][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789797][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789818][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789839][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789861][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789882][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789904][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789925][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789946][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789968][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.789989][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790010][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790031][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790052][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790073][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790095][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 179.790115][T10150] IPVS: set_ctl: invalid protocol: 5292 172.20.20.58:20001 [ 180.035945][ T6379] IPVS: starting estimator thread 0... [ 180.127987][T10170] IPVS: using max 31 ests per chain, 74400 per kthread [ 180.257244][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.281361][T10159] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 180.343147][T10159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.445426][T10169] bond6: entered promiscuous mode [ 180.445450][T10169] bond6: entered allmulticast mode [ 180.609874][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 180.670608][ T43] IPVS: starting estimator thread 0... [ 180.708903][T10197] xt_policy: too many policy elements [ 180.756742][T10196] IPVS: using max 27 ests per chain, 64800 per kthread [ 180.786687][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.001210][T10208] veth14: entered allmulticast mode [ 181.024858][T10215] netlink: 112 bytes leftover after parsing attributes in process `syz.1.957'. [ 181.029897][T10188] netlink: 88 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.924503][T10222] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.957'. [ 182.194236][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.961'. [ 182.224291][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 182.262342][ T43] IPVS: stop unused estimator thread 0... [ 182.330560][T10248] netlink: 'syz.0.962': attribute type 11 has an invalid length. [ 182.348233][ T151] net_ratelimit: 25 callbacks suppressed [ 182.348250][ T151] bond5: (slave dummy0): failed to get link speed/duplex [ 182.457778][ T13] bond5: (slave dummy0): failed to get link speed/duplex [ 182.567166][ T13] bond5: (slave dummy0): failed to get link speed/duplex [ 182.678605][ T13] bond5: (slave dummy0): failed to get link speed/duplex [ 182.787416][ T6379] bond5: (slave dummy0): failed to get link speed/duplex [ 182.898187][ T6379] bond5: (slave dummy0): failed to get link speed/duplex [ 183.034921][ T43] bond5: (slave dummy0): failed to get link speed/duplex [ 183.140545][ T61] bond5: (slave dummy0): failed to get link speed/duplex [ 183.200800][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 183.200824][T10279] netlink: 'syz.3.968': attribute type 3 has an invalid length. [ 183.249881][ T13] bond5: (slave dummy0): failed to get link speed/duplex [ 183.330290][T10286] openvswitch: netlink: Key type 41 is out of range max 32 [ 183.374250][T10286] syzkaller1: entered promiscuous mode [ 183.374271][T10286] syzkaller1: entered allmulticast mode [ 183.552753][T10300] netlink: 140 bytes leftover after parsing attributes in process `syz.1.970'. [ 184.087361][ T4936] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.201090][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 184.375876][T10345] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 184.375897][T10345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.986'. [ 184.398780][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.986'. [ 184.428474][T10345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 184.484220][T10349] netlink: 64 bytes leftover after parsing attributes in process `syz.1.987'. [ 184.505960][T10355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.987'. [ 184.524138][ T13] IPVS: starting estimator thread 0... [ 184.524512][T10357] netlink: 84 bytes leftover after parsing attributes in process `syz.0.989'. [ 184.599622][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 184.610413][T10360] IPVS: using max 30 ests per chain, 72000 per kthread [ 184.645293][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 184.676721][T10366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.693332][T10370] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 184.720919][T10370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 184.734232][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 184.764036][T10367] syzkaller0: entered promiscuous mode [ 184.764057][T10367] syzkaller0: entered allmulticast mode [ 184.787972][T10370] bond7: (slave bridge5): making interface the new active one [ 184.789044][T10370] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 184.791658][T10370] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 184.793557][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 184.839140][T10375] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 184.865403][T10367] tap0: tun_chr_ioctl cmd 1074025677 [ 184.865505][T10367] tap0: linktype set to 6 [ 184.994511][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.127844][T10389] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 185.705551][T10410] block nbd0: shutting down sockets [ 186.079378][T10420] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 186.192235][T10420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.242259][T10422] bond6: (slave gretap2): making interface the new active one [ 186.244846][T10422] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 186.325945][T10424] xt_hashlimit: size too large, truncated to 1048576 [ 186.744129][T10459] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 186.801912][T10459] ip6gretap0: entered promiscuous mode [ 186.803798][T10459] batadv0: entered promiscuous mode [ 186.812532][T10470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.882785][T10470] Cannot find set identified by id 65534 to match [ 186.961093][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 186.961110][ T31] audit: type=1800 audit(1791768355.830:69): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1019" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1163 res=0 errno=0 [ 187.141067][T10507] xt_l2tp: missing protocol rule (udp|l2tpip) [ 187.458884][T10476] net_ratelimit: 37 callbacks suppressed [ 187.458903][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 187.566614][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 187.679042][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 187.791542][T10487] bond5: (slave dummy0): failed to get link speed/duplex [ 187.813740][T10540] bridge0: port 3(bond0) entered disabled state [ 187.814761][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.815329][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.864602][T10540] bridge0: port 3(bond0) entered blocking state [ 187.864725][T10540] bridge0: port 3(bond0) entered forwarding state [ 187.865044][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.866013][T10540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.866266][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.866394][T10540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.880239][T10540] bridge0: entered allmulticast mode [ 187.898462][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 188.007081][T10487] bond5: (slave dummy0): failed to get link speed/duplex [ 188.127860][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 188.238606][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 188.241987][T10558] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 188.335112][T10558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.367183][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 188.533382][T10563] hsr_slave_1 (unregistering): left promiscuous mode [ 188.649652][T10575] bond7: entered promiscuous mode [ 188.649692][T10575] bond7: entered allmulticast mode [ 188.650107][T10575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.651707][T10570] tipc: MTU too low for tipc bearer [ 188.657210][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 188.905520][T10589] netlink: 'syz.2.1052': attribute type 30 has an invalid length. [ 188.909834][T10590] netlink: 'syz.2.1052': attribute type 30 has an invalid length. [ 188.909965][T10591] netlink: 'syz.2.1052': attribute type 30 has an invalid length. [ 188.938188][T10589] vxlan0: entered promiscuous mode [ 188.938210][T10589] vxlan0: entered allmulticast mode [ 188.947876][T10586] nbd0: detected capacity change from 0 to 63 [ 188.988384][ T4936] block nbd0: Receive control failed (result -104) [ 189.003333][T10590] vxlan1: entered promiscuous mode [ 189.003355][T10590] vxlan1: entered allmulticast mode [ 189.059355][T10591] vxlan2: entered promiscuous mode [ 189.059377][T10591] vxlan2: entered allmulticast mode [ 189.077480][T10488] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.077542][T10488] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.077573][T10488] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.077602][T10488] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.284572][T10602] __nla_validate_parse: 22 callbacks suppressed [ 189.284590][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 189.366258][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 189.523232][T10611] IPVS: length: 155 != 8 [ 190.011098][T10620] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.186876][T10632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.186893][T10632] IPv6: NLM_F_CREATE should be set when creating new route [ 190.186949][T10632] IPv6: NLM_F_CREATE should be set when creating new route [ 190.186971][T10632] IPv6: NLM_F_CREATE should be set when creating new route [ 190.426214][T10634] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 190.426249][T10634] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 190.470956][T10634] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 190.609953][T10653] syzkaller0: entered promiscuous mode [ 190.609974][T10653] syzkaller0: entered allmulticast mode [ 191.246160][T10666] syzkaller0: entered promiscuous mode [ 191.246181][T10666] syzkaller0: entered allmulticast mode [ 191.535450][T10684] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 191.574419][T10684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.585114][T10684] team0: Port device netdevsim1 added [ 191.622442][T10684] netlink: 'syz.0.1078': attribute type 10 has an invalid length. [ 191.663691][T10684] team0: Port device netdevsim1 removed [ 191.675956][T10684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.690288][T10684] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 191.690896][T10684] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 191.693932][T10684] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 191.944254][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1082'. [ 191.944313][T10698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1082'. [ 192.477119][T10488] net_ratelimit: 31 callbacks suppressed [ 192.477141][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 192.586801][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 192.697100][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 192.806914][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 192.917391][T10485] bond5: (slave dummy0): failed to get link speed/duplex [ 193.005595][T10635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.021056][T10626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.021611][T10690] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 193.021628][T10690] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1080'. [ 193.037048][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 193.149366][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 193.259448][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 193.345611][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 193.382365][T10476] bond5: (slave dummy0): failed to get link speed/duplex [ 193.487505][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 193.581428][T10747] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1093'. [ 193.581634][T10748] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1093'. [ 194.187310][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.187367][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.190449][T10759] netlink: 'syz.3.1096': attribute type 11 has an invalid length. [ 195.065866][T10772] bond0: entered promiscuous mode [ 195.379195][T10783] netlink: 'syz.0.1104': attribute type 2 has an invalid length. [ 195.401261][T10783] : entered promiscuous mode [ 195.430651][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 195.430682][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1105'. [ 195.465301][ T2000] block nbd0: Connection timed out, retrying (0/1 alive) [ 195.466422][ T2000] block nbd0: Connection timed out, retrying (0/1 alive) [ 195.467958][ T2000] block nbd0: Dead connection, failed to find a fallback [ 195.467975][ T2000] block nbd0: shutting down sockets [ 195.467986][ T2000] blk_print_req_error: 52 callbacks suppressed [ 195.467997][ T2000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 195.468021][ T2000] buffer_io_error: 138 callbacks suppressed [ 195.468030][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.468052][ T2000] Buffer I/O error on dev nbd0, logical block 2, async page read [ 195.468065][ T2000] Buffer I/O error on dev nbd0, logical block 3, async page read [ 195.468104][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.468124][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.468880][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.468903][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.468917][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.468930][ T2000] Buffer I/O error on dev nbd0, logical block 2, async page read [ 195.468943][ T2000] Buffer I/O error on dev nbd0, logical block 3, async page read [ 195.469062][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469084][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 195.469170][ T2000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469201][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 195.469284][ T2000] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469376][ T2000] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469487][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469579][ T2000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.469669][ T2000] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.471120][T10087] ldm_validate_partition_table(): Disk read failed. [ 195.472348][T10087] Dev nbd0: unable to read RDB block 0 [ 195.473691][T10087] nbd0: unable to read partition table [ 195.510572][T10784] bridge3: entered promiscuous mode [ 195.510592][T10784] bridge3: entered allmulticast mode [ 195.745981][T10087] ldm_validate_partition_table(): Disk read failed. [ 195.749778][T10087] Dev nbd0: unable to read RDB block 0 [ 195.761002][T10087] nbd0: unable to read partition table [ 195.824497][T10799] netlink: 'syz.0.1109': attribute type 21 has an invalid length. [ 195.824519][T10799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1109'. [ 195.824589][T10799] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 195.824600][T10799] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1109'. [ 196.029529][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1115'. [ 196.086702][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 196.155465][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 196.173266][T10826] netlink: 'syz.0.1116': attribute type 1 has an invalid length. [ 196.257788][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 196.257826][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 196.257888][ T4936] Bluetooth: hci4: command 0x0406 tx timeout [ 196.352218][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 196.586111][T10840] batman_adv: batadv0: Adding interface: veth0 [ 196.586127][T10840] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.586153][T10840] batman_adv: batadv0: Interface activated: veth0 [ 196.658180][ T5617] Bluetooth: hci2: link tx timeout [ 196.658199][ T5617] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 196.705376][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 196.873080][T10850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.902978][T10852] netlink: 'syz.3.1127': attribute type 7 has an invalid length. [ 196.970554][T10850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.032085][T10858] geneve2: entered promiscuous mode [ 197.128923][T10850] bond0: (slave netdevsim1): Releasing backup interface [ 197.141461][T10850] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 197.141489][T10850] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 197.142130][T10850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.536107][T10850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.577892][T10885] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1137'. [ 197.629566][T10488] net_ratelimit: 32 callbacks suppressed [ 197.629587][T10488] bond5: (slave dummy0): failed to get link speed/duplex [ 197.737973][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 197.760598][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760617][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760626][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760635][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760644][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760653][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760661][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760671][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760679][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760688][T10887] tc action pedit 'at' offset 32767 out of bounds [ 197.760707][T10887] 0: reclassify loop, rule prio 0, protocol 800 [ 197.862892][T10488] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.870025][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 197.983271][T10901] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1142'. [ 198.027196][T10483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.039712][T10483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.039763][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 198.040484][T10483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.149665][T10474] bond5: (slave dummy0): failed to get link speed/duplex [ 198.257811][T10474] bond5: (slave dummy0): failed to get link speed/duplex [ 198.367475][T10483] bond5: (slave dummy0): failed to get link speed/duplex [ 198.419730][T10930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.424664][T10931] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 198.470875][T10931] 8021q: adding VLAN 0 to HW filter on device bond8 [ 198.483856][T10931] bond8: entered allmulticast mode [ 198.495920][T10931] IPv6: addrconf: prefix option has invalid lifetime [ 198.511288][T10930] ip6erspan0: entered allmulticast mode [ 198.530082][T10931] bond8: (slave ip6gretap1): making interface the new active one [ 198.530105][T10931] ip6gretap1: entered allmulticast mode [ 198.531057][T10931] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 198.608734][T10937] netlink: 'syz.2.1157': attribute type 26 has an invalid length. [ 198.609501][T10937] netlink: 'syz.2.1157': attribute type 26 has an invalid length. [ 198.609662][T10937] netlink: 'syz.2.1157': attribute type 26 has an invalid length. [ 198.647956][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 198.727859][ T5617] Bluetooth: hci2: command 0x0405 tx timeout [ 200.144875][T11013] block nbd1: server does not support multiple connections per device. [ 200.146342][T11013] block nbd1: shutting down sockets [ 200.280231][T11025] validate_nla: 53 callbacks suppressed [ 200.280250][T11025] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 200.318520][T11025] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 200.495411][T11020] __nla_validate_parse: 9 callbacks suppressed [ 200.495434][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1175'. [ 200.559400][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 200.853436][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 200.989937][T11018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.989962][T11018] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 202.083187][T11018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.083210][T11018] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 202.202222][T11018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.202245][T11018] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 202.224140][T11018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.224160][T11018] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 202.898405][T10487] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.898439][T10487] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.898476][T10487] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.898498][T10487] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.898530][T10487] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.898552][T10487] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.898584][T10487] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.898606][T10487] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.164122][T11139] Bluetooth: hci0: unsupported parameter 5135 [ 203.164144][T11139] Bluetooth: hci0: unsupported parameter 8192 [ 203.164156][T11139] Bluetooth: hci0: unsupported parameter 5135 [ 203.164166][T11139] Bluetooth: hci0: unsupported parameter 8192 [ 203.439490][T11153] netlink: 'syz.4.1194': attribute type 12 has an invalid length. [ 203.509000][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 203.509039][T11153] net_ratelimit: 879 callbacks suppressed [ 203.509050][T11153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.541965][T11156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.543200][T11153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1194'. [ 204.379005][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 205.195972][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1211'. [ 205.260031][T11250] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1211'. [ 205.683315][T11250] syz_tun: entered promiscuous mode [ 205.683442][T11250] macsec2: entered allmulticast mode [ 205.683455][T11250] syz_tun: entered allmulticast mode [ 205.692593][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1213'. [ 205.702724][T11250] syz_tun: left allmulticast mode [ 205.702750][T11250] syz_tun: left promiscuous mode [ 205.899375][T11263] gretap1: entered promiscuous mode [ 206.017927][T11285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1215'. [ 206.931627][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 207.073175][T11347] macvlan0: entered promiscuous mode [ 207.073951][T11347] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 207.074777][T11331] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 207.099525][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 207.100285][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 207.194469][T11331] bond7: option mode: invalid value (7) [ 207.205623][T11331] bond7 (unregistering): Released all slaves [ 207.305734][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 207.365434][T11354] bond7: entered promiscuous mode [ 207.376159][T11354] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.398676][T11362] bond5: (slave dummy0): Removing an active aggregator [ 207.411672][T11362] bond5: (slave dummy0): Releasing backup interface [ 207.476062][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 208.071418][T11414] batman_adv: batadv0: Adding interface: syzkaller0 [ 208.071443][T11414] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.071469][T11414] batman_adv: batadv0: Interface activated: syzkaller0 [ 208.283418][T11417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 208.787176][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 208.851026][T11407] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 208.953074][T11407] batman_adv: batadv0: Removing interface: syzkaller0 [ 209.394046][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 209.440611][T11471] Bluetooth: hci0: unsupported parameter 5135 [ 209.440632][T11471] Bluetooth: hci0: unsupported parameter 8192 [ 209.440643][T11471] Bluetooth: hci0: unsupported parameter 5135 [ 209.440654][T11471] Bluetooth: hci0: unsupported parameter 8192 [ 209.464499][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 209.515506][T11471] netlink: 'syz.4.1246': attribute type 12 has an invalid length. [ 210.205610][T11506] Bluetooth: hci0: unsupported parameter 5135 [ 210.205631][T11506] Bluetooth: hci0: unsupported parameter 8192 [ 210.205643][T11506] Bluetooth: hci0: unsupported parameter 5135 [ 210.205654][T11506] Bluetooth: hci0: unsupported parameter 8192 [ 210.940576][T11568] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 211.512772][T11597] __nla_validate_parse: 9 callbacks suppressed [ 211.512792][T11597] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1276'. [ 212.623888][T11638] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.141108][T11647] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 213.179809][T11649] IPVS: Scheduler module ip_vs_sip not found [ 213.220393][T11653] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 213.573470][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 213.830794][T11679] vlan4: entered promiscuous mode [ 213.830816][T11679] macvlan0: entered promiscuous mode [ 213.855104][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 213.855127][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 214.111092][T11693] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.254606][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 214.755832][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 214.771759][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 214.771789][T11720] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1302'. [ 214.791635][T11717] syzkaller0: entered promiscuous mode [ 214.791658][T11717] syzkaller0: entered allmulticast mode [ 214.852592][T11720] geneve3: entered promiscuous mode [ 214.852614][T11720] geneve3: entered allmulticast mode [ 214.910718][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1303'. [ 214.911590][T11717] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 216.004402][T11753] xt_HMARK: spi-set and port-set can't be combined [ 216.200712][T11765] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.350120][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1316'. [ 217.789611][T11789] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1318'. [ 217.946379][T11814] batadv_slave_0: entered promiscuous mode [ 217.963333][T11812] batadv_slave_0: left promiscuous mode [ 218.194948][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1324'. [ 218.387401][T11828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.421474][T11823] veth5: entered allmulticast mode [ 218.449749][T11829] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 218.450868][T11823] bond9: (slave veth5): Enslaving as an active interface with an up link [ 218.515822][T11826] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 218.660791][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 218.796658][T11842] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 218.847033][T11842] 8021q: adding VLAN 0 to HW filter on device bond10 [ 218.883128][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 218.883152][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 218.898800][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1330'. [ 219.047752][T11849] gretap2: entered promiscuous mode [ 219.076850][T11849] bond10: (slave gretap2): making interface the new active one [ 219.078049][T11849] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 219.594668][T11855] bond8 (unregistering): Released all slaves [ 219.840076][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 220.134714][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'. [ 220.140649][T11888] netlink: 129 bytes leftover after parsing attributes in process `syz.4.1340'. [ 220.242691][T11895] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 220.265544][T11897] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 220.303443][T11899] xt_hashlimit: overflow, try lower: 0/0 [ 220.425608][T11907] veth0: entered promiscuous mode [ 220.434807][T11907] syzkaller0: entered promiscuous mode [ 220.434820][T11907] syzkaller0: entered allmulticast mode [ 220.443628][T11907] tipc: Started in network mode [ 220.443642][T11907] tipc: Node identity , cluster identity 8 [ 220.443655][T11907] tipc: Failed to obtain node identity [ 220.443678][T11907] tipc: Enabling of bearer rejected, failed to enable media [ 220.454799][T11907] syzkaller0: mtu less than device minimum [ 220.560315][T11906] veth0: left promiscuous mode [ 220.864416][T11928] rdma_rxe: Failed to create IPv4 UDP tunnel [ 221.132598][T11921] syzkaller0: entered promiscuous mode [ 221.132621][T11921] syzkaller0: entered allmulticast mode [ 221.158170][T11941] ip_tables: iptables: counters copy to user failed while replacing table [ 221.217223][T11943] xt_socket: unknown flags 0x4c [ 221.220867][T11944] xt_socket: unknown flags 0x4c [ 221.478172][T11929] infiniband syz2: set active [ 221.478192][T11929] infiniband syz2: added bridge0 [ 221.555971][T11929] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 221.556008][T11929] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 221.556042][T11929] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 221.713360][T11929] RDS/IB: syz2: added [ 221.714198][T11929] smc: adding ib device syz2 with port count 1 [ 221.719337][T11929] smc: ib device syz2 port 1 has no pnetid [ 223.595988][T11975] __nla_validate_parse: 6 callbacks suppressed [ 223.596007][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1366'. [ 223.776027][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1369'. [ 223.805348][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 223.805371][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 223.805395][T11993] netlink: 'syz.2.1370': attribute type 15 has an invalid length. [ 223.880578][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 223.880601][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 223.880625][T11993] netlink: 'syz.2.1370': attribute type 15 has an invalid length. [ 223.924266][T10477] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 223.924297][T10477] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 223.927194][ T156] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 223.927220][ T156] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 223.927253][ T156] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 223.927274][ T156] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 223.927303][ T156] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 223.927323][ T156] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 224.182211][T12007] syzkaller1: entered promiscuous mode [ 224.182232][T12007] syzkaller1: entered allmulticast mode [ 224.197413][T12008] netlink: 'syz.2.1373': attribute type 10 has an invalid length. [ 224.197443][T12008] syz_tun: entered promiscuous mode [ 224.223586][T12008] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.430021][T12016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1374'. [ 224.561906][T12010] syzkaller0: entered promiscuous mode [ 224.561930][T12010] syzkaller0: entered allmulticast mode [ 226.767200][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1380'. [ 226.775508][T12047] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 226.892666][T12052] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.031730][T12056] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 227.147708][T12064] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 227.153150][T12057] bond8: (slave geneve4): making interface the new active one [ 227.154512][T12057] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 227.263516][T12064] 8021q: adding VLAN 0 to HW filter on device bond11 [ 227.277061][T10483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.277289][T10483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.277322][T10483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.277352][T10483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 227.280572][T12061] syzkaller0: entered promiscuous mode [ 227.280590][T12061] syzkaller0: entered allmulticast mode [ 227.349952][T12061] tipc: Enabled bearer , priority 0 [ 227.358342][T12073] netlink: 'syz.0.1391': attribute type 2 has an invalid length. [ 227.358360][T12073] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1391'. [ 227.431623][T12060] tipc: Resetting bearer [ 227.472435][T12060] tipc: Disabling bearer [ 227.532145][T12085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.598742][T12088] xt_l2tp: invalid flags combination: 8 [ 227.670744][T12095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.820819][T12094] syzkaller0: entered promiscuous mode [ 227.820849][T12094] syzkaller0: entered allmulticast mode [ 230.150231][T12130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1403'. [ 230.150552][T12131] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1403'. [ 230.243841][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1404'. [ 230.358643][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 230.488770][T12156] netlink: 'syz.2.1409': attribute type 3 has an invalid length. [ 230.488801][T12156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1409'. [ 230.629304][T12153] netlink: Conntrack attr has 8 unknown bytes [ 230.629338][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.629696][T12153] netlink: Conntrack attr has 8 unknown bytes [ 230.629721][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.630072][T12153] netlink: Conntrack attr has 8 unknown bytes [ 230.630096][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.630458][T12153] netlink: Conntrack attr has 8 unknown bytes [ 230.630483][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.689646][T12172] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1412'. [ 231.026260][T12194] netlink: 'syz.2.1418': attribute type 2 has an invalid length. [ 231.030909][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1417'. [ 231.067118][T12197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 231.068694][T12198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1419'. [ 231.124793][T12204] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1419'. [ 231.200658][T12207] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 231.200666][T12208] netlink: 'syz.2.1421': attribute type 10 has an invalid length. [ 231.200914][T12208] veth0_vlan: left promiscuous mode [ 231.203402][T12208] team0: Device veth0_vlan failed to register rx_handler [ 231.216077][T12207] team0: Device veth0_vlan failed to register rx_handler [ 231.501984][T12217] xt_hashlimit: size too large, truncated to 1048576 [ 231.855766][T12238] syz_tun: entered allmulticast mode [ 231.862820][T12238] syz_tun: left allmulticast mode [ 231.970373][T12244] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 232.000908][T12244] bond9: entered promiscuous mode [ 232.001318][T12244] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.004705][T12244] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 232.044742][T12244] bond9 (unregistering): Released all slaves [ 232.321338][T12269] tipc: Started in network mode [ 232.321369][T12269] tipc: Node identity baad2109a7c, cluster identity 4711 [ 232.323447][T12269] tipc: Enabled bearer , priority 0 [ 232.324839][T12269] syzkaller0: entered promiscuous mode [ 232.324857][T12269] syzkaller0: entered allmulticast mode [ 232.330928][T12269] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 232.401978][T12269] tipc: Resetting bearer [ 232.419220][T12268] tipc: Resetting bearer [ 232.451835][T12268] tipc: Disabling bearer [ 232.576682][ C0] net_ratelimit: 124 callbacks suppressed [ 232.576705][ C0] neighbour: arp_cache: neighbor table overflow! [ 232.641316][T12279] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 232.720441][T12275] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 232.752204][T12275] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.782334][T12275] bond9: (slave erspan1): making interface the new active one [ 232.783610][T12275] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 232.942596][T12293] x_tables: duplicate underflow at hook 3 [ 233.442152][ T151] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 233.442184][ T151] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 233.442208][ T151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 233.442760][ T151] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 233.442788][ T151] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 233.442812][ T151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 233.442960][ T151] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 233.442982][ T151] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 233.443003][ T151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 233.443813][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 233.443843][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 233.443867][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 233.644397][T12325] IPVS: Error connecting to the multicast addr [ 233.778933][T12337] netlink: 'syz.0.1454': attribute type 12 has an invalid length. [ 233.915105][T12345] xt_CONNSECMARK: invalid mode: 254 [ 233.953943][T12347] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 233.988856][T12352] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 234.214232][T12365] team0: Port device bond0 removed [ 234.225414][T12365] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 234.237498][T12365] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 234.240606][T12365] bond0 (unregistering): Released all slaves [ 234.577794][T12383] veth1_macvtap: left promiscuous mode [ 234.893336][T12403] syz_tun: entered allmulticast mode [ 234.904176][T12405] lo: entered allmulticast mode [ 234.915601][T12399] syz_tun: left allmulticast mode [ 234.980156][T12408] gretap1: entered promiscuous mode [ 234.984683][T12411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.063693][T12418] lo: left allmulticast mode [ 235.310378][T12440] __nla_validate_parse: 20 callbacks suppressed [ 235.310399][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 235.337347][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 235.337997][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 235.432918][T12445] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1484'. [ 235.554329][T12461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1484'. [ 235.925270][ T5280] veth1_macvtap: entered promiscuous mode [ 236.036812][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 236.036838][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 236.196174][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 236.403300][T12493] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1491'. [ 236.553409][T12500] syzkaller1: entered promiscuous mode [ 236.553430][T12500] syzkaller1: entered allmulticast mode [ 237.198642][ T5743] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 237.209911][T12527] netlink: 'syz.1.1496': attribute type 5 has an invalid length. [ 237.214892][T12525] veth0_vlan: entered allmulticast mode [ 237.289083][T12534] bridge0: port 4(macsec2) entered blocking state [ 237.289243][T12534] bridge0: port 4(macsec2) entered disabled state [ 237.289379][T12534] macsec2: entered allmulticast mode [ 237.289393][T12534] bridge0: entered allmulticast mode [ 237.297325][T12534] macsec2: left allmulticast mode [ 237.297344][T12534] bridge0: left allmulticast mode [ 237.484953][ T5849] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 237.551919][T12550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1501'. [ 239.126650][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 240.606622][T12662] __nla_validate_parse: 8 callbacks suppressed [ 240.606653][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1528'. [ 240.890863][T12679] IPv6: NLM_F_REPLACE set, but no existing node found! [ 240.955243][T12692] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.316096][T12698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.358306][T12704] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 241.358327][T12704] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 241.459115][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.459326][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.459531][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.460905][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.461103][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.461293][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.461488][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.465373][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.465581][T12707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'. [ 241.652316][T12704] syzkaller1: entered promiscuous mode [ 241.652338][T12704] syzkaller1: entered allmulticast mode [ 242.165535][T12721] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 242.165556][T12721] netlink: 'syz.0.1542': attribute type 2 has an invalid length. [ 242.330813][T12724] vlan2: entered promiscuous mode [ 242.330834][T12724] gretap0: entered promiscuous mode [ 242.577070][T12750] vlan2: entered allmulticast mode [ 242.577093][T12750] dummy0: entered allmulticast mode [ 243.631899][T12806] syzkaller0: entered promiscuous mode [ 243.631922][T12806] syzkaller0: entered allmulticast mode [ 243.702881][T12806] TC_ACT_REPEAT abuse ? [ 243.703439][T12818] netlink: 'syz.2.1563': attribute type 7 has an invalid length. [ 243.719655][T12818] x_tables: duplicate underflow at hook 4 [ 244.948095][T12892] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 244.981866][T12900] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 245.417817][T12920] bond12: entered promiscuous mode [ 245.418319][T12920] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.490936][T12922] bond13: entered promiscuous mode [ 245.491352][T12922] 8021q: adding VLAN 0 to HW filter on device bond13 [ 245.740116][T12932] bridge0: port 3(bond0) entered disabled state [ 245.742431][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.742963][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.803918][ T5619] block nbd1: Receive control failed (result -32) [ 245.977264][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.010097][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.174114][T12952] __nla_validate_parse: 39 callbacks suppressed [ 246.174135][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1591'. [ 246.211458][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'. [ 246.232373][T12932] gretap1: left promiscuous mode [ 246.324050][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1591'. [ 246.497254][ T5723] s`z1: Port: 1 Link DOWN [ 246.685627][T12975] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 246.715318][T12956] bond0: option fail_over_mac: invalid value (127) [ 246.731050][T12956] bond0 (unregistering): Released all slaves [ 246.839676][ T6379] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.839721][ T6379] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.839753][ T6379] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.839785][ T6379] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.960893][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.960948][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.983116][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.983307][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.983449][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.983588][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 246.983726][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 247.692061][T13020] netlink: NAT attribute has 8 unknown bytes [ 247.692094][T13020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.886080][T13028] x_tables: unsorted underflow at hook 2 [ 248.129293][T13044] netlink: 'syz.2.1608': attribute type 4 has an invalid length. [ 248.314266][T13050] syzkaller0: entered promiscuous mode [ 248.314290][T13050] syzkaller0: entered allmulticast mode [ 248.492983][T13056] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 248.561468][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.573325][T13056] team0: Port device netdevsim1 added [ 248.677024][T13056] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 248.838340][T13073] netlink: 'syz.3.1613': attribute type 8 has an invalid length. [ 249.066557][T13056] team0: Port device netdevsim1 removed [ 249.075211][T13056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.106732][T13056] : (slave netdevsim1): Enslaving as an active interface with an up link [ 249.520944][T13104] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 249.545805][T13102] ip_tables: iptables: counters copy to user failed while replacing table [ 249.609224][T13104] 8021q: adding VLAN 0 to HW filter on device bond15 [ 249.711061][T13104] bond15: (slave veth9): Enslaving as an active interface with a down link [ 249.711499][T13113] SET target dimension over the limit! [ 249.713817][T13104] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 249.960253][T13123] ip6t_hbh: Not strict - not implemented [ 250.557381][T13160] bridge7: port 1(dummy0) entered blocking state [ 250.557540][T13160] bridge7: port 1(dummy0) entered disabled state [ 250.557689][T13160] dummy0: entered allmulticast mode [ 250.559657][T13160] dummy0: entered promiscuous mode [ 250.563275][T13160] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 250.568120][T13160] bridge7: port 1(dummy0) entered blocking state [ 250.568279][T13160] bridge7: port 1(dummy0) entered forwarding state [ 250.582992][T13160] dummy0: left allmulticast mode [ 250.583225][T13160] bridge7: port 1(dummy0) entered disabled state [ 250.901579][T13183] 8021q: adding VLAN 0 to HW filter on device bond9 [ 253.690084][T13166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.701880][T13180] netlink: 'syz.4.1641': attribute type 11 has an invalid length. [ 253.701900][T13180] netlink: 'syz.4.1641': attribute type 11 has an invalid length. [ 253.701912][T13180] __nla_validate_parse: 79 callbacks suppressed [ 253.701923][T13180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1641'. [ 253.896057][T13225] syzkaller1: entered promiscuous mode [ 253.896081][T13225] syzkaller1: entered allmulticast mode [ 253.941121][T13234] xt_ipcomp: unknown flags 1D [ 254.051235][T13227] veth0_vlan: left promiscuous mode [ 254.317936][T13251] ip_tables: iptables: counters copy to user failed while replacing table [ 254.322341][T13251] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1655'. [ 255.042978][T13291] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 255.044519][T13291] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 255.065371][T13291] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 255.541056][T13328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1673'. [ 255.619957][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.256778][T13356] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 256.327900][T13356] team0 (unregistering): Port device team_slave_0 removed [ 256.381744][T13356] team0 (unregistering): Port device team_slave_1 removed [ 256.419591][T13356] team0 (unregistering): Port device .` removed [ 256.590411][T13364] openvswitch: netlink: IP tunnel dst address not specified [ 256.673865][T13371] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 256.730144][T13376] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.752869][T13376] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.752947][T13376] block nbd2: shutting down sockets [ 257.333141][T13398] syzkaller0: entered promiscuous mode [ 257.333162][T13398] syzkaller0: entered allmulticast mode [ 259.731428][T13376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.902392][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.902580][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.902750][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.902910][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.903069][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.903236][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.903426][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.905209][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.905427][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 259.905598][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 260.242175][T13424] openvswitch: netlink: Actions may not be safe on all matching packets [ 260.359237][T13422] syzkaller0: entered promiscuous mode [ 260.359262][T13422] syzkaller0: entered allmulticast mode [ 260.726775][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 263.289902][T13444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.308371][T13432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.681476][T13504] sit0: entered promiscuous mode [ 263.702014][T13504] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 263.776177][T13506] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001 [ 263.796000][T13504] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 264.021935][T13520] netlink: 'syz.2.1724': attribute type 4 has an invalid length. [ 264.069497][T13524] netlink: 'syz.1.1726': attribute type 6 has an invalid length. [ 264.102455][T13525] bond8: entered promiscuous mode [ 264.102523][T13525] bond8: entered allmulticast mode [ 264.102946][T13525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.588897][T13561] netlink: 'syz.0.1734': attribute type 2 has an invalid length. [ 264.641013][T13568] xt_hashlimit: size too large, truncated to 1048576 [ 264.641032][T13568] xt_hashlimit: overflow, try lower: 3/0 [ 264.855241][T13584] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 264.858877][T13586] block nbd0: reconnected socket [ 264.864865][ T5619] block nbd0: Receive control failed (result -107) [ 265.035094][T13598] netlink: 'syz.2.1743': attribute type 2 has an invalid length. [ 265.035113][T13598] __nla_validate_parse: 68 callbacks suppressed [ 265.035123][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1743'. [ 265.064272][T13596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.095462][T13599] bond0 (unregistering): Released all slaves [ 265.200607][T13614] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 265.200607][T13614] Please contact the netfilter-devel mailing list or update your nftables rules. [ 265.211524][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 265.266042][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 265.266302][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 265.389328][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 265.419848][T13632] bond8 (unregistering): Released all slaves [ 265.480278][T13629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1749'. [ 265.556206][T13641] syzkaller0: entered promiscuous mode [ 265.556225][T13641] syzkaller0: entered allmulticast mode [ 265.562901][T13641] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1750'. [ 265.842063][T13643] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 266.114288][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 266.186066][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 267.512915][T13643] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 267.678617][T13667] vlan0: entered allmulticast mode [ 267.848412][T13674] bond_slave_0: entered promiscuous mode [ 267.848435][T13674] bond_slave_0: entered allmulticast mode [ 268.061459][T13606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.390683][T13683] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 268.484870][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 268.515839][T13706] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 268.555261][T13706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.583076][T13706] bond3: (slave lo): making interface the new active one [ 268.585414][T13706] bond3: (slave lo): Enslaving as an active interface with an up link [ 268.620248][T13706] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 268.828328][T13720] bridge8: port 1(dummy0) entered blocking state [ 268.828431][T13720] bridge8: port 1(dummy0) entered disabled state [ 268.828568][T13720] dummy0: entered allmulticast mode [ 268.837403][T13720] dummy0: entered promiscuous mode [ 268.864682][T13720] netlink: 'syz.0.1767': attribute type 10 has an invalid length. [ 268.889997][T13720] dummy0: left allmulticast mode [ 268.890340][T13720] bridge8: port 1(dummy0) entered disabled state [ 269.097996][T13741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.140036][T13742] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 269.257213][ T5619] block nbd2: Receive control failed (result -1) [ 269.820915][T13773] sctp: [Deprecated]: syz.4.1783 (pid 13773) Use of int in maxseg socket option. [ 269.820915][T13773] Use struct sctp_assoc_value instead [ 270.315854][T13803] __nla_validate_parse: 17 callbacks suppressed [ 270.315935][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1792'. [ 270.373796][T13802] sctp: [Deprecated]: syz.2.1793 (pid 13802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.373796][T13802] Use struct sctp_sack_info instead [ 270.375249][T13801] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 270.572099][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'. [ 270.572119][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1798'. [ 270.579842][T13817] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1798'. [ 270.630512][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.694807][T13824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.921832][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 270.940190][T13836] ipvlan2: entered allmulticast mode [ 270.940211][T13836] macvlan1: entered allmulticast mode [ 271.095783][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 271.174822][T13852] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1809'. [ 271.348129][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'. [ 271.348151][T13866] tc_dump_action: action bad kind [ 271.760907][T10475] tipc: Subscription rejected, illegal request [ 272.211735][T13918] xt_CONNSECMARK: invalid mode: 254 [ 272.232061][T13918] ip_tables: iptables: counters copy to user failed while replacing table [ 272.509195][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.510658][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.543961][T13922] batman_adv: batadv0: Interface deactivated: veth0 [ 272.739763][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.772539][T13922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.026684][T10477] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.026727][T10477] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.026757][T10477] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.026788][T10477] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.917835][T13906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.343095][T13976] netlink: 'syz.2.1841': attribute type 39 has an invalid length. [ 275.354087][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040354800: rx timeout, send abort [ 275.675955][T13993] __nla_validate_parse: 111 callbacks suppressed [ 275.675976][T13993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1847'. [ 275.854139][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040354800: abort rx timeout. Force session deactivation [ 275.855623][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040354400: rx timeout, send abort [ 276.013954][T14009] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1852'. [ 276.027680][T14009] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1852'. [ 276.313095][T14016] Unsupported ieee802154 address type: 0 [ 276.337385][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 276.355682][ C1] vcan0: j1939_tp_rxtimer: 0xffff888040354400: abort rx timeout. Force session deactivation [ 276.449467][T14023] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1855'. [ 276.468494][T14018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.600753][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1859'. [ 276.713518][T14039] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 276.762377][T14039] bond9: entered promiscuous mode [ 276.762435][T14039] bond9: entered allmulticast mode [ 276.762909][T14039] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.824786][T14045] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 276.923215][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 276.928288][T14050] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1863'. [ 276.986335][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 277.059594][T14063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1868'. [ 277.093330][T14054] netlink: 'syz.0.1866': attribute type 12 has an invalid length. [ 277.202171][T14064] syzkaller0: entered promiscuous mode [ 277.202192][T14064] syzkaller0: entered allmulticast mode [ 277.250937][T14072] netlink: 'syz.2.1869': attribute type 16 has an invalid length. [ 277.250996][T14072] netlink: 'syz.2.1869': attribute type 17 has an invalid length. [ 277.253493][T14072] syz_tun: left promiscuous mode [ 277.255725][T14072] bond_slave_0: left promiscuous mode [ 277.255757][T14072] bond_slave_0: left allmulticast mode [ 277.262794][T14072] veth0_vlan: left allmulticast mode [ 277.269903][T14072] ip6gre1: left allmulticast mode [ 277.270211][T14072] bond3: left promiscuous mode [ 277.270225][T14072] bond3: left allmulticast mode [ 277.270340][T14072] vti0: left promiscuous mode [ 277.273610][T14072] geneve3: left promiscuous mode [ 277.273625][T14072] geneve3: left allmulticast mode [ 277.273757][T14072] veth14: left allmulticast mode [ 277.278289][T14072] vxlan0: left promiscuous mode [ 277.278305][T14072] vxlan0: left allmulticast mode [ 277.279327][T14072] vxlan1: left promiscuous mode [ 277.279343][T14072] vxlan1: left allmulticast mode [ 277.279456][T14072] vxlan2: left promiscuous mode [ 277.279468][T14072] vxlan2: left allmulticast mode [ 277.279796][T14072] ip6erspan0: left allmulticast mode [ 277.279928][T14072] gretap1: left promiscuous mode [ 277.280030][T14072] bond7: left promiscuous mode [ 277.281226][T14072] vlan2: left allmulticast mode [ 277.281243][T14072] dummy0: left allmulticast mode [ 277.390949][T14073] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.561982][T14084] syzkaller0: entered promiscuous mode [ 277.562004][T14084] syzkaller0: entered allmulticast mode [ 278.092192][T14115] bridge5: entered allmulticast mode [ 278.186868][T14124] syzkaller1: entered promiscuous mode [ 278.186891][T14124] syzkaller1: entered allmulticast mode [ 278.700883][T14156] bridge0: port 1(veth0) entered blocking state [ 278.702939][T14156] bridge0: port 1(veth0) entered disabled state [ 278.703108][T14156] veth0: entered allmulticast mode [ 278.729167][T14156] veth0: entered promiscuous mode [ 279.067280][T14182] netlink: 'syz.1.1900': attribute type 4 has an invalid length. [ 279.520130][T14198] macvlan0: entered promiscuous mode [ 279.520299][T14198] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 279.520313][T14198] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 279.792691][T14209] openvswitch: netlink: Duplicate or invalid key (type 0). [ 279.934345][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 280.355070][T14239] gretap2: entered promiscuous mode [ 280.371213][T14240] syzkaller1: entered promiscuous mode [ 280.371232][T14240] syzkaller1: entered allmulticast mode [ 280.495576][T14242] netlink: 'syz.2.1920': attribute type 12 has an invalid length. [ 280.721109][T14264] veth0_to_bridge: entered promiscuous mode [ 280.721131][T14264] veth0_to_bridge: entered allmulticast mode [ 280.738993][T14265] __nla_validate_parse: 18 callbacks suppressed [ 280.739013][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 280.823377][T14269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'. [ 280.829848][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 280.870580][T14269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1922'. [ 280.882853][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 281.165739][T14276] batadv_slave_1: entered allmulticast mode [ 281.202332][T14276] pimreg: entered allmulticast mode [ 281.206169][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 281.212750][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 281.661931][T14282] bridge0: port 3(bond0) entered blocking state [ 281.662048][T14282] bridge0: port 3(bond0) entered forwarding state [ 281.662421][T14282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.664262][T14282] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.664960][T14282] dummy0: left promiscuous mode [ 281.669637][T14282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.723590][T14282] veth0_to_bridge: left promiscuous mode [ 281.745944][T14282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.754344][T14282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.778117][T14282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.778139][T14282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.781305][T14282] veth1_vlan: left promiscuous mode [ 281.782581][T14282] veth0_vlan: left promiscuous mode [ 281.784347][T14282] veth0_vlan: entered promiscuous mode [ 281.826325][T14282] veth1_vlan: entered promiscuous mode [ 281.832412][T14282] macvlan0: left promiscuous mode [ 281.833890][T14282] veth1_vlan: entered allmulticast mode [ 281.860661][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.862223][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.863444][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.864565][T14282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.908104][T14282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.913203][T14282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.939655][T14282] vlan3: left promiscuous mode [ 281.943437][T14282] bond3: left promiscuous mode [ 281.943931][T14282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.944983][T14282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.974758][T14282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.983595][T14282] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.994943][T14282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.003157][T14282] bond7: left promiscuous mode [ 282.004025][T14282] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.011856][T14282] geneve2: left promiscuous mode [ 282.045643][T14282] geneve3: left promiscuous mode [ 282.103788][T14275] batadv_slave_1: left allmulticast mode [ 282.103927][T14275] pimreg: left allmulticast mode [ 282.181573][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.181690][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.186406][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.186582][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.305645][ T5730] s`z1: Port: 1 Link ACTIVE [ 282.311237][ T5743] gretap1: entered promiscuous mode [ 282.317373][T10477] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.317414][T10477] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.317445][T10477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.317478][T10477] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.317509][T10477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.317538][T10477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.317569][T10477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.317599][T10477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.443175][T10490] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.595445][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 282.615782][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 282.815470][T14332] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.842034][T14331] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 282.914161][T14337] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 282.971243][T14338] ip_tables: iptables: counters copy to user failed while replacing table [ 283.074584][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 284.055711][T14397] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 284.145536][T14374] syzkaller0: entered promiscuous mode [ 284.145559][T14374] syzkaller0: entered allmulticast mode [ 284.172301][T14405] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 284.287122][T14397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.433875][T14396] bond0: (slave veth17): Enslaving as an active interface with a down link [ 284.447848][T14398] bond0: (slave dummy0): making interface the new active one [ 284.449888][T14398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 284.483321][T14405] dummy0: entered promiscuous mode [ 284.485029][T14405] bond0: (slave dummy0): Releasing active interface [ 286.646753][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.985114][T14470] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 287.400103][T14494] __nla_validate_parse: 2 callbacks suppressed [ 287.400122][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1957'. [ 287.721926][T14507] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 287.721948][T14507] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.1961'. [ 288.214527][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 288.227078][T14517] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 288.545122][T14533] syzkaller0: entered promiscuous mode [ 288.545145][T14533] syzkaller0: entered allmulticast mode [ 288.686278][T14541] bridge0: port 3(bond0) entered disabled state [ 288.687178][T14541] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.687601][T14541] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.690146][T14541] bridge0: entered allmulticast mode [ 288.817205][T14542] bond4: left allmulticast mode [ 288.817403][T14542] bond4: left promiscuous mode [ 288.817646][T14542] bridge0: port 4(bond4) entered disabled state [ 288.844048][T14542] bond0: left allmulticast mode [ 288.844069][T14542] ÿÿÿ: left allmulticast mode [ 288.844085][T14542] bond_slave_1: left allmulticast mode [ 288.844153][T14542] bond0: left promiscuous mode [ 288.844165][T14542] ÿÿÿ: left promiscuous mode [ 288.844403][T14542] bond_slave_1: left promiscuous mode [ 288.846111][T14542] bridge0: port 3(bond0) entered disabled state [ 288.865400][T14542] bridge_slave_1: left allmulticast mode [ 288.865422][T14542] bridge_slave_1: left promiscuous mode [ 288.865588][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.881475][T14542] bridge_slave_0: left allmulticast mode [ 288.881495][T14542] bridge_slave_0: left promiscuous mode [ 288.881686][T14542] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.934582][T14555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1976'. [ 289.175041][T14562] syzkaller0: entered promiscuous mode [ 289.175065][T14562] syzkaller0: entered allmulticast mode [ 289.223672][T14564] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 289.391867][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 289.391895][T14558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 289.455754][T14575] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 289.764208][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'. [ 289.764244][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'. [ 291.385811][T14585] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 291.385852][T14585] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 291.385870][T14585] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 291.474002][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1985'. [ 291.715495][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1989'. [ 292.088665][T14630] 8021q: adding VLAN 0 to HW filter on device .` [ 292.202942][T14630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.217961][T14630] erspan0: entered promiscuous mode [ 292.224823][T14630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.249794][T14630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.274414][T14630] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.296692][T14630] 8021q: adding VLAN 0 to HW filter on device bond14 [ 292.327590][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.327650][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.327692][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.327722][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.350300][T10476] bond15: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 292.381870][T10476] bond15: (slave veth9): making interface the new active one [ 292.385977][T10476] bond15: active interface up! [ 295.286383][T14662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.390363][T14666] syzkaller1: entered promiscuous mode [ 295.390385][T14666] syzkaller1: entered allmulticast mode [ 295.632171][T14690] __nla_validate_parse: 32 callbacks suppressed [ 295.632192][T14690] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2009'. [ 295.915542][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 295.941536][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.957215][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 296.476400][T14726] syzkaller0: entered promiscuous mode [ 296.476420][T14726] syzkaller0: entered allmulticast mode [ 296.582539][T14736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.731884][T14744] netlink: 'syz.2.2022': attribute type 10 has an invalid length. [ 297.252141][T10477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.252162][T10477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.307450][ T119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.307471][ T119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.335892][T14786] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.364590][T14796] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 297.534958][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.573751][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 297.638746][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.657716][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.657917][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.658120][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.658313][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.658507][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.658695][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.658880][T14800] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 297.775028][T14801] bond16: (slave geneve2): making interface the new active one [ 297.786784][T14801] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 297.812743][T14816] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 297.812765][T14816] bridge6: entered allmulticast mode [ 297.814915][T14811] 8021q: adding VLAN 0 to HW filter on device bond16 [ 297.815638][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.815837][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.816014][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.816190][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.816354][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2040'. [ 297.857670][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 297.909176][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.909288][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.909391][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.909493][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.909591][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.909693][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.912592][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.912722][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.912847][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.912947][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.929721][T14822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.938181][T10476] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.942920][ T119] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.943037][ T119] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.943104][ T119] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.974367][T14832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.183661][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.370412][T14848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.306498][T14894] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 300.486189][T14962] geneve3: entered promiscuous mode [ 300.486215][T14962] geneve3: entered allmulticast mode [ 300.894168][T14987] __nla_validate_parse: 69 callbacks suppressed [ 300.894191][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 301.338449][T15008] bond0: (slave 17ÿÿÿ): Releasing backup interface [ 301.362734][T15008] bond0: (slave bond_slave_1): Releasing backup interface [ 301.394539][T15008] team0: Port device team_slave_0 removed [ 301.418458][T15008] team0: Port device team_slave_1 removed [ 301.420897][T15008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.420917][T15008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.424990][T15008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.425008][T15008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.466234][T15008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.667842][T15021] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2091'. [ 301.673156][T15021] .`: renamed from bond0 (while UP) [ 301.762337][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 301.770798][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'. [ 302.055749][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 302.273027][T15034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2095'. [ 302.302439][T15035] syzkaller1: entered promiscuous mode [ 302.302466][T15035] syzkaller1: entered allmulticast mode [ 302.442243][T15052] ip_tables: iptables: counters copy to user failed while replacing table [ 302.470731][T15044] bond17 (unregistering): Released all slaves [ 302.557727][T15040] syzkaller0: entered promiscuous mode [ 302.558092][T15040] syzkaller0: entered allmulticast mode [ 302.616167][T15041] syzkaller1: entered promiscuous mode [ 302.616188][T15041] syzkaller1: entered allmulticast mode [ 303.110506][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 303.199217][T15095] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2109'. [ 303.255522][T15098] ------------[ cut here ]------------ [ 303.255545][T15098] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 303.255568][T15098] WARNING: net/mac80211/rate.c:411 at __rate_control_send_low+0x652/0x900, CPU#1: syz.3.2108/15098 [ 303.282494][T15098] Modules linked in: [ 303.286417][T15098] CPU: 1 UID: 0 PID: 15098 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(full) [ 303.295893][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.306028][T15098] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 303.312337][T15098] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 303.332001][T15098] RSP: 0018:ffffc90006e46698 EFLAGS: 00010246 [ 303.338104][T15098] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 303.346080][T15098] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918bb5c0 [ 303.354131][T15098] RBP: ffff8880557332c0 R08: 0000000000000000 R09: 0000000000000000 [ 303.362144][T15098] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888055730fa0 [ 303.370150][T15098] R13: ffff888047f75a28 R14: ffffffff918bb5c0 R15: dffffc0000000000 [ 303.378170][T15098] FS: 00007fdfd36616c0(0000) GS:ffff888123bd0000(0000) knlGS:0000000000000000 [ 303.387167][T15098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.393772][T15098] CR2: 00007fdfd365ffa8 CR3: 00000000764d2000 CR4: 00000000003526f0 [ 303.401793][T15098] Call Trace: [ 303.405085][T15098] [ 303.408111][T15098] rate_control_send_low+0x1a7/0x7b0 [ 303.413433][T15098] rate_control_get_rate+0x20b/0x5d0 [ 303.418803][T15098] ieee80211_tx_h_rate_ctrl+0x8e0/0x1800 [ 303.424493][T15098] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 303.430648][T15098] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.436521][T15098] ? ieee80211_is_bufferable_mmpdu+0x170/0x1f0 [ 303.442714][T15098] invoke_tx_handlers_late+0xb5/0x1a10 [ 303.448248][T15098] ? invoke_tx_handlers_early+0x9ce/0x1ba0 [ 303.454106][T15098] ieee80211_tx+0x2d7/0x4b0 [ 303.458678][T15098] ? __lock_acquire+0x747/0x2de0 [ 303.463639][T15098] ? __pfx_ieee80211_tx+0x10/0x10 [ 303.468745][T15098] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 303.474228][T15098] ? ieee80211_mps_set_frame_flags+0x207/0x3b0 [ 303.480476][T15098] ? ieee80211_xmit+0x2e5/0x3c0 [ 303.485339][T15098] ? __ieee80211_tx_skb_tid_band+0x4b5/0x640 [ 303.491397][T15098] __ieee80211_tx_skb_tid_band+0x4fd/0x640 [ 303.497265][T15098] ? ieee80211_tx_skb_tid+0x37/0x490 [ 303.502575][T15098] ieee80211_tx_skb_tid+0x29d/0x490 [ 303.507849][T15098] ieee80211_send_action_csa+0x8a0/0xed0 [ 303.513516][T15098] ieee80211_set_csa_beacon+0x43f/0x9c0 [ 303.519158][T15098] ieee80211_channel_switch+0x8b3/0xcb0 [ 303.524732][T15098] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 303.530868][T15098] ? cfg80211_chandef_valid+0xa75/0xe60 [ 303.531748][T15104] validate_nla: 62 callbacks suppressed [ 303.531765][T15104] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 303.531778][T15104] nbd: illegal input index 393236 [ 303.554769][T15098] ? cfg80211_get_end_freq+0xff/0x1b0 [ 303.560241][T15098] ? cfg80211_get_end_freq+0xff/0x1b0 [ 303.565647][T15098] ? rcu_is_watching+0x16/0xb0 [ 303.570493][T15098] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 303.576726][T15098] rdev_channel_switch+0xfc/0x290 [ 303.581775][T15098] nl80211_channel_switch+0xb6b/0xf90 [ 303.587239][T15098] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 303.593215][T15098] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 303.599535][T15098] ? __nla_parse+0x40/0x60 [ 303.603992][T15098] ? nl80211_pre_doit+0x53d/0x890 [ 303.609113][T15098] genl_family_rcv_msg_doit+0x233/0x340 [ 303.614682][T15098] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 303.620843][T15098] ? bpf_lsm_capable+0x9/0x20 [ 303.625562][T15098] ? security_capable+0x7e/0x2c0 [ 303.630604][T15098] genl_rcv_msg+0x614/0x7a0 [ 303.635131][T15098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.640219][T15098] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 303.645607][T15098] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 303.651589][T15098] ? __pfx_nl80211_post_doit+0x10/0x10 [ 303.657121][T15098] netlink_rcv_skb+0x226/0x4a0 [ 303.661908][T15098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.666991][T15098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.672348][T15098] ? down_read+0x2be/0x330 [ 303.676837][T15098] genl_rcv+0x28/0x40 [ 303.680825][T15098] netlink_unicast+0x7bd/0x940 [ 303.685618][T15098] netlink_sendmsg+0x813/0xb40 [ 303.690467][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.695777][T15098] ? apparmor_socket_sendmsg+0x98/0x360 [ 303.701395][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.706736][T15098] sock_sendmsg_nosec+0x14e/0x190 [ 303.711787][T15098] ____sys_sendmsg+0x54e/0x850 [ 303.716620][T15098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.721932][T15098] ? import_iovec+0x73/0xa0 [ 303.726515][T15098] ___sys_sendmsg+0x2a5/0x360 [ 303.731266][T15098] ? __lock_acquire+0x747/0x2de0 [ 303.736222][T15098] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.741500][T15098] ? futex_wait+0x2a2/0x390 [ 303.746051][T15098] ? __fget_files+0x2a/0x420 [ 303.750799][T15098] ? __fget_files+0x3a2/0x420 [ 303.755507][T15098] __x64_sys_sendmsg+0x1b1/0x290 [ 303.760536][T15098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.766029][T15098] do_syscall_64+0x166/0x520 [ 303.770691][T15098] ? trace_irq_disable+0x3b/0x140 [ 303.775729][T15098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.781870][T15098] ? clear_bhb_loop+0x70/0xc0 [ 303.786608][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.792521][T15098] RIP: 0033:0x7fdfd279e1d9 [ 303.797011][T15098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.816678][T15098] RSP: 002b:00007fdfd3661028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.825123][T15098] RAX: ffffffffffffffda RBX: 00007fdfd2a26090 RCX: 00007fdfd279e1d9 [ 303.833229][T15098] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000b [ 303.841261][T15098] RBP: 00007fdfd2835888 R08: 0000000000000000 R09: 0000000000000000 [ 303.849302][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.857322][T15098] R13: 00007fdfd2a26128 R14: 00007fdfd2a26090 R15: 00007ffe28432ba8 [ 303.865427][T15098] [ 303.868546][T15098] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.875836][T15098] CPU: 1 UID: 0 PID: 15098 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(full) [ 303.885311][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.895381][T15098] Call Trace: [ 303.898670][T15098] [ 303.901609][T15098] vpanic+0x56d/0xa60 [ 303.905614][T15098] ? __pfx__printk+0x10/0x10 [ 303.910217][T15098] ? __pfx_vpanic+0x10/0x10 [ 303.914741][T15098] ? is_bpf_text_address+0x292/0x2b0 [ 303.920044][T15098] ? is_bpf_text_address+0x26/0x2b0 [ 303.925281][T15098] panic+0xc5/0xd0 [ 303.929021][T15098] ? __pfx_panic+0x10/0x10 [ 303.933455][T15098] __warn+0x315/0x4c0 [ 303.937437][T15098] ? __rate_control_send_low+0x652/0x900 [ 303.943070][T15098] ? __rate_control_send_low+0x652/0x900 [ 303.948700][T15098] __report_bug+0x276/0x570 [ 303.953216][T15098] ? __lock_acquire+0x747/0x2de0 [ 303.958172][T15098] ? __rate_control_send_low+0x652/0x900 [ 303.963853][T15098] ? __pfx___report_bug+0x10/0x10 [ 303.968897][T15098] ? __lock_acquire+0x747/0x2de0 [ 303.973853][T15098] report_bug_entry+0x19b/0x290 [ 303.978710][T15098] ? __rate_control_send_low+0x67c/0x900 [ 303.984342][T15098] ? __rate_control_send_low+0x681/0x900 [ 303.989983][T15098] handle_bug+0xce/0x200 [ 303.994247][T15098] exc_invalid_op+0x1a/0x50 [ 303.998754][T15098] asm_exc_invalid_op+0x1a/0x20 [ 304.003606][T15098] RIP: 0010:__rate_control_send_low+0x67c/0x900 [ 304.009861][T15098] Code: 48 8b 34 24 48 8b 44 24 20 42 0f b6 04 38 84 c0 0f 85 da 01 00 00 8b 0e 4c 89 f7 48 8b 74 24 10 44 8b 44 24 1c 44 8b 4c 24 0c <67> 48 0f b9 3a e9 36 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c [ 304.029465][T15098] RSP: 0018:ffffc90006e46698 EFLAGS: 00010246 [ 304.035543][T15098] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 304.043520][T15098] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff918bb5c0 [ 304.051498][T15098] RBP: ffff8880557332c0 R08: 0000000000000000 R09: 0000000000000000 [ 304.059468][T15098] R10: 0000000000000004 R11: 0000000000000002 R12: ffff888055730fa0 [ 304.067448][T15098] R13: ffff888047f75a28 R14: ffffffff918bb5c0 R15: dffffc0000000000 [ 304.075443][T15098] ? __rate_control_send_low+0x646/0x900 [ 304.081100][T15098] rate_control_send_low+0x1a7/0x7b0 [ 304.086403][T15098] rate_control_get_rate+0x20b/0x5d0 [ 304.091830][T15098] ieee80211_tx_h_rate_ctrl+0x8e0/0x1800 [ 304.097496][T15098] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 304.103562][T15098] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.109385][T15098] ? ieee80211_is_bufferable_mmpdu+0x170/0x1f0 [ 304.115558][T15098] invoke_tx_handlers_late+0xb5/0x1a10 [ 304.121036][T15098] ? invoke_tx_handlers_early+0x9ce/0x1ba0 [ 304.126868][T15098] ieee80211_tx+0x2d7/0x4b0 [ 304.131387][T15098] ? __lock_acquire+0x747/0x2de0 [ 304.136328][T15098] ? __pfx_ieee80211_tx+0x10/0x10 [ 304.141376][T15098] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 304.146853][T15098] ? ieee80211_mps_set_frame_flags+0x207/0x3b0 [ 304.153010][T15098] ? ieee80211_xmit+0x2e5/0x3c0 [ 304.157859][T15098] ? __ieee80211_tx_skb_tid_band+0x4b5/0x640 [ 304.163858][T15098] __ieee80211_tx_skb_tid_band+0x4fd/0x640 [ 304.169678][T15098] ? ieee80211_tx_skb_tid+0x37/0x490 [ 304.174978][T15098] ieee80211_tx_skb_tid+0x29d/0x490 [ 304.180200][T15098] ieee80211_send_action_csa+0x8a0/0xed0 [ 304.185855][T15098] ieee80211_set_csa_beacon+0x43f/0x9c0 [ 304.191416][T15098] ieee80211_channel_switch+0x8b3/0xcb0 [ 304.196974][T15098] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 304.203034][T15098] ? cfg80211_chandef_valid+0xa75/0xe60 [ 304.208585][T15098] ? cfg80211_get_end_freq+0xff/0x1b0 [ 304.213975][T15098] ? cfg80211_get_end_freq+0xff/0x1b0 [ 304.219376][T15098] ? rcu_is_watching+0x16/0xb0 [ 304.224144][T15098] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 304.230307][T15098] rdev_channel_switch+0xfc/0x290 [ 304.235345][T15098] nl80211_channel_switch+0xb6b/0xf90 [ 304.240750][T15098] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 304.246695][T15098] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 304.252943][T15098] ? __nla_parse+0x40/0x60 [ 304.257378][T15098] ? nl80211_pre_doit+0x53d/0x890 [ 304.262421][T15098] genl_family_rcv_msg_doit+0x233/0x340 [ 304.267971][T15098] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.274058][T15098] ? bpf_lsm_capable+0x9/0x20 [ 304.278724][T15098] ? security_capable+0x7e/0x2c0 [ 304.283662][T15098] genl_rcv_msg+0x614/0x7a0 [ 304.288165][T15098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.293183][T15098] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 304.298551][T15098] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 304.304442][T15098] ? __pfx_nl80211_post_doit+0x10/0x10 [ 304.309905][T15098] netlink_rcv_skb+0x226/0x4a0 [ 304.314664][T15098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.319683][T15098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.324976][T15098] ? down_read+0x2be/0x330 [ 304.329399][T15098] genl_rcv+0x28/0x40 [ 304.333377][T15098] netlink_unicast+0x7bd/0x940 [ 304.338142][T15098] netlink_sendmsg+0x813/0xb40 [ 304.342909][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.348193][T15098] ? apparmor_socket_sendmsg+0x98/0x360 [ 304.353731][T15098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.359102][T15098] sock_sendmsg_nosec+0x14e/0x190 [ 304.364135][T15098] ____sys_sendmsg+0x54e/0x850 [ 304.368897][T15098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.374184][T15098] ? import_iovec+0x73/0xa0 [ 304.378690][T15098] ___sys_sendmsg+0x2a5/0x360 [ 304.383365][T15098] ? __lock_acquire+0x747/0x2de0 [ 304.388302][T15098] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.393504][T15098] ? futex_wait+0x2a2/0x390 [ 304.398020][T15098] ? __fget_files+0x2a/0x420 [ 304.402607][T15098] ? __fget_files+0x3a2/0x420 [ 304.407291][T15098] __x64_sys_sendmsg+0x1b1/0x290 [ 304.412232][T15098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.417706][T15098] do_syscall_64+0x166/0x520 [ 304.422299][T15098] ? trace_irq_disable+0x3b/0x140 [ 304.427316][T15098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.433383][T15098] ? clear_bhb_loop+0x70/0xc0 [ 304.438051][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.443932][T15098] RIP: 0033:0x7fdfd279e1d9 [ 304.448387][T15098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.467979][T15098] RSP: 002b:00007fdfd3661028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.476383][T15098] RAX: ffffffffffffffda RBX: 00007fdfd2a26090 RCX: 00007fdfd279e1d9 [ 304.484344][T15098] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000b [ 304.492301][T15098] RBP: 00007fdfd2835888 R08: 0000000000000000 R09: 0000000000000000 [ 304.500262][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.508222][T15098] R13: 00007fdfd2a26128 R14: 00007fdfd2a26090 R15: 00007ffe28432ba8 [ 304.516198][T15098] [ 304.519367][T15098] Kernel Offset: disabled [ 304.523679][T15098] Rebooting in 86400 seconds..