last executing test programs: 3.185870631s ago: executing program 4 (id=2284): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c00000000007b640000f10000007b0a00fe00000000850000000c00000079a000fe000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="3f00000092080000140012800b000100627269646765000004000280"], 0x34}}, 0x62) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002100)=""/212, 0xd4}], 0x1}, 0x5}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x17a, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x34, 0x4, 0x0, 0x0, 0x16c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@lsrr={0x83, 0x27, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @timestamp_addr={0x44, 0x44, 0x1b, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3}, {@private=0xa010101, 0x9}, {@empty, 0x5}, {@broadcast, 0x5}, {@rand_addr=0x64010102, 0xc}, {@loopback, 0x8}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x1f, 0x14, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @generic={0x44, 0x4, "f6fa"}, @lsrr={0x83, 0xf, 0xe8, [@multicast2, @remote, @multicast2]}, @timestamp={0x44, 0x1c, 0xbe, 0x0, 0x5, [0x5, 0x7, 0x6, 0x5, 0x2, 0x0]}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "663fcbb200a57df65d544af6da001000"}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000200)=0x2c) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0x36) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000120000f8876b440fe1e9484334bf6c00000000035fae53495800041a35a7ba9e81f30cfd6cc490c88064ad61b99249787256ae2f0ee6c0eb8f67fddc4585e10c343fb183ba70cc034503fe98984df8a0815d08b9a76d0c5b1ae836ca932c164eba9f8a0593e81a7f5626c7954b6b09c1616f7fbb88ac9ee8"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.43053632s ago: executing program 2 (id=2294): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x1c, r3, 0x5, 0x0, 0x40000, {0x22}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b5082dbd7040fbdbdf251e0000000800010003200000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4844) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r7, 0x6}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff84e0}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 2.349307355s ago: executing program 0 (id=2295): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0xfc00}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}], 0x50}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) syz_genetlink_get_family_id$SEG6(&(0x7f0000001140), 0xffffffffffffffff) 2.287489219s ago: executing program 0 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x17c8}, @TCA_TBF_PARMS={0x28, 0x1, {{0xef, 0x0, 0x79, 0x1, 0x2, 0xffff8001}, {0xb, 0x2, 0x0, 0x8, 0x4, 0x7f}, 0x9, 0x10001, 0xf44}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd457dc44c41be09a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0xad, 0x5, {{0x22, 0x4, 0x3, 0x1c, 0x88, 0x64, 0x0, 0xa, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x1, 0x7, "301c0a2ed1"}, @lsrr={0x83, 0x1f, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @local, @remote, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_prespec={0x44, 0x4c, 0x78, 0x3, 0x8, [{@loopback, 0x3ee}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xe}, {@multicast2, 0x9547}, {@multicast1, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@broadcast, 0x5}, {@multicast1, 0x2}, {@local, 0x3}]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="b40000000000000079ee470000000000630a04ff0000000095000000000000003eb9422a7607ebc16d9c7193788b0f629ffe3f453ba98f0c17c7eb4b123ff58902b2c03d2a7e46034c0bf37a231f2d6ec5c0a1e46c23e9ce26bd9d0702e9c52ac62686f8be2800100a6e9fccb9ebc7871d005d9e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0xfffffffffffffea5, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x78, 0x10, 0x503, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2200}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x2}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @local}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x78}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 2.012151183s ago: executing program 4 (id=2298): accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @rose, @remote, @netrom, @default, @remote, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x0) (async) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @rose, @remote, @netrom, @default, @remote, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x0) getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @null, @netrom, @netrom, @bcast, @null, @bcast, @bcast]}, &(0x7f0000000140)=0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000240)={0xfc00, 0x57, 0x4, 0xe, 0x3, 0x1f, 0x1f, "6e35f6919e147412102a0625f99fa211b7cc82f1", "8a68df38481e23dcecdec211aa56e945d5fb43b8"}) (async) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000240)={0xfc00, 0x57, 0x4, 0xe, 0x3, 0x1f, 0x1f, "6e35f6919e147412102a0625f99fa211b7cc82f1", "8a68df38481e23dcecdec211aa56e945d5fb43b8"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x3, 'veth1_virt_wifi\x00', {0x2db6}, 0x9}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x3, 'veth1_virt_wifi\x00', {0x2db6}, 0x9}) r4 = accept4(r2, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000380)=0x80, 0xc00) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000480)) (async) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000480)) connect$can_bcm(r7, &(0x7f00000004c0)={0x1d, r1}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x16c}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x1d, r1}, 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x2, 0x300, 0x0, {0x0, 0xea60}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x1c, 0x3, 0x0, 0x0, "c4801d3349b69680e4758cf6dccf62fa492b17517b1ab0b29ad01189ae3b308cb418caafc17e09d06746c806beaba7bd6ceba3e30811c9904e8f0a34b558fef9"}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r7) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x9c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x9c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000a40)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000ac0)={@remote, @mcast2, @mcast2, 0xfffff244, 0x401, 0x8, 0x400, 0x6, 0x800004, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000ac0)={@remote, @mcast2, @mcast2, 0xfffff244, 0x401, 0x8, 0x400, 0x6, 0x800004, r3}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000b40)=[@in6={0xa, 0x4e21, 0x3, @local, 0xfffffff1}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x2c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r7) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r7) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c00)={0x2e8, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7e9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e5c208e9c973d7a3a0c3e2aa453dd9fe10d6d0b1"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xecfc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbe8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x295d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x67}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2f3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x85a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd6d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x27c3, @mcast1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x4e44}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x2e8}}, 0x8810) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000001080)={r7, &(0x7f0000000f80)='osf\x00', 0x149400, &(0x7f0000000fc0)={@align=0xfffffffffffffffb, {0x2, 0x3, 0xfffffffa, 0xfff}}, 0x6, &(0x7f0000001000), &(0x7f0000001040)=0xfffffff6}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r12, 0x84, 0x15, &(0x7f00000010c0)={0x3}, 0x1) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000001100)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001580)={{r5, &(0x7f0000001140)='%(.\x00', 0x303040, &(0x7f0000001180)={@align=0x8, {0xf, 0x7f, 0x1, 0x72}}, 0xfffffff5, &(0x7f00000011c0), &(0x7f0000001200)=0x3}, 0x3, &(0x7f0000001500)=[{0x2, 0x8, &(0x7f0000001240)='syz1\x00', &(0x7f0000001280)="7ba0680a3491e38d9b5fd959616dae24182f22f0971d3c99235a9ef141715085ab4ac42b1dfb14e97365e4a9a9cfc01eaa291f5d52eab10b2ee220264f7126866bd214281745fa93c5ce41cfa74a2fc6e7a8d80ca2944c0206266bac4173e7b946ea8c83a5438ed2e4130a5c1908327e0030760bd7504e82a44c09d1e017aa223720b0289301afa5751928da56facf91ca65f353488ae579b933a3", 0x9b, 0x12}, {0x3, 0x1ff, &(0x7f0000001340)='udp:syz2\x00', &(0x7f0000001380)="f6995fc089f25871f4b055fdf2a125c6d2fd1412e0dba787fd5bd0b4ac375de39822165855413da12057c7aeea7d36f9b789faafb9b4fe44118a13165a0765ed5f13edb149da133cd36c3c136c63c88f7cd252a6a5cbc76173daa1521cdac3aeb68373699ce86a9e4b19966e108fc9fc44f4d14c961bc79c0554cd069cab17eda6911cffa1ef2dc29100c23a98b51f8697952b463360db0e0fcf8e577d5f96ce40f94251", 0xa4, 0x20}, {0x1, 0x120, &(0x7f0000001440)='}\'/.[\x91\\.\x00', &(0x7f0000001480)="9a76bd09cfb89986d1cd8c03645d27e38dee0d0f0fc3538a36b68aa347aa79abd69071cdec8f4b0f9dfb10f44dae27f6c2a2795e9605b885f581b4100bfa97b8011e83ff08fd2cab4586f5dba9ba6d94960983c997f579decc6b4a800599b0c7b42ad641b51b6dec9f0f2b978a86af1a457434e81aa5dd777da73341e1", 0x7d, 0x10}]}) ioctl$TUNSETOFFLOAD(r13, 0x400454d0, 0x7) sendto$packet(r12, &(0x7f0000001600)="c5174dd39fbf5b08809df6dca981c04466c0da3fa05f5cb0fe0b95bce505f4ae736ef5642260b04708139f3d39682c527f585262f2f800fed8758a25df7f25eb5058b39aea58e3f66561299a5e4e84070a43c65a9e4a6493307bfc7798843475a3740379115170aaf4cf8527c937b2d8bfd543f4126e377250fbd2e8a0d4de05233281e5518aef82864d6adc73d412faf75111e2ca3a373bab9c06304b42aa0f159efeb432113c71a290516c06a35507fe8b5d301712c96a952898b9283fb11e5434c63bdb4a6b8d040f3e0f4ffbe9be0b4b22506dbfed72c2d5fb0be58fa5dafe8de4e6f37b86b6e5f3f33324", 0xed, 0x8810, &(0x7f0000001700)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @random="3850d5b81292"}, 0x14) 2.01046289s ago: executing program 0 (id=2299): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000580)={0x0, @l2={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40c7}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, @l2tp={0x2, 0x0, @broadcast}, 0x401, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80, 0x100, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x15, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x7c, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x11) 2.010059521s ago: executing program 4 (id=2300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xff90, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0x37}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2d, &(0x7f0000000000)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x29}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.975878149s ago: executing program 3 (id=2301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018042750100", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0xa, 0x1, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018042750100", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) (async) 1.78593685s ago: executing program 3 (id=2302): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000980), 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 1.785332837s ago: executing program 1 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 1.782988245s ago: executing program 2 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f0000001480)=[{{&(0x7f0000000480)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/215, 0xd7}, {&(0x7f0000000a00)=""/144, 0x90}], 0x3, &(0x7f0000000ac0)=""/191, 0xbf}, 0x8}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f0000000b80)=""/204, 0xcc}], 0x2, &(0x7f0000000c80)=""/207, 0xcf}, 0xe}, {{&(0x7f0000000d80)=@vsock, 0x80, &(0x7f0000000940)=[{&(0x7f0000000e00)=""/222, 0xde}, {&(0x7f0000000f00)=""/165, 0xa5}], 0x2}, 0xa}, {{&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/142, 0x8e}, {&(0x7f0000001100)=""/174, 0xae}, {&(0x7f00000011c0)=""/88, 0x58}], 0x3, &(0x7f0000001380)=""/246, 0xf6}, 0x800100}], 0x4, 0x10002, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000980)=[{r5, 0x1}, {0xffffffffffffffff, 0x502}, {r2, 0x4}], 0x3, 0x0, 0x0, 0x0) (async, rerun: 32) epoll_wait(r5, 0x0, 0x0, 0xffffffff) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 64) accept(r1, 0x0, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) (async) close(r9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r10, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0) (async) shutdown(r1, 0x2) 1.687570485s ago: executing program 4 (id=2305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'ip6erspan0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x729340, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000000)=""/13, 0xd}], 0x4, &(0x7f0000000480)=""/76, 0x4c}}, {{&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000001980)=[{&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000001600)=""/208, 0xd0}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/179, 0xb3}, {&(0x7f00000018c0)=""/158, 0x9e}], 0x7, &(0x7f0000001a00)=""/22, 0x16}, 0x1}, {{0xfffffffffffffffd, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a40)=""/11, 0xb}, {&(0x7f0000001a80)=""/191, 0xbf}, {&(0x7f0000001b40)=""/78, 0x4e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/173, 0xad}, {&(0x7f0000001c80)=""/243, 0xf3}, {&(0x7f0000001d80)=""/246, 0xf6}, {&(0x7f0000001e80)=""/115, 0x73}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/76, 0x4c}], 0xa, &(0x7f00000032c0)=""/4096, 0x1000}}, {{&(0x7f0000002140)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005840)=[{&(0x7f00000021c0)=""/132, 0x84}, {&(0x7f00000042c0)=""/82, 0x52}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/190, 0xbe}, {&(0x7f0000005400)=""/253, 0xfd}, {&(0x7f0000005500)=""/183, 0xb7}, {&(0x7f00000055c0)=""/160, 0xa0}, {&(0x7f0000005680)=""/187, 0xbb}, {&(0x7f0000005740)=""/212, 0xd4}], 0x9, &(0x7f0000005900)=""/199, 0xc7}, 0x100}], 0x4, 0x160, &(0x7f0000005b00)={0x77359400}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 832.786172ms ago: executing program 2 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}}, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x4000080) 831.654658ms ago: executing program 1 (id=2307): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001300310327bd7000cbd593460000000023e2db7db20a76ba4bb0b8f671c132c65fcde0b4428b1582238c6563fbbd4ec2dc0c2565751731f6fd8d84b287e12d8903097690058a4178acac6e4f9b212bd10800af8e4613d30ae8971632a428a0dd66e0571dfe1023945f73e9ff937ca07569a8e0b4b16b8b25de99fee15a714252241042093b676cebd0288c8cff8aa22cefa582709cc46ac9941955f9d9bfb56da844965465a05b007f9ca9285e7d69ae0beb7f36b708f3a365ad0ab9bcdc742fa33d696fab9a9fdcb3d85453080f4a3260c2c58009c99912c5853164f8c13b6d894223f05f88bfdf7dc21cd9e07f3dd3dc1c", @ANYRES32=0x0, @ANYBLOB="180000008170040014000300626f6e645f736c6176655f310000000054001a80520002804c00018008001f000300000008001400000000c0080003000300000008001a0005000000080014009008000008001f000004000008001d000200000008000100c200000008000b00d31e0000"], 0x88}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000020301010000000000000002027300020800054000000019090002000000000302000000080005400000000208000440000000060800044000000002088372e8a434d9960004400000000608"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000180)={0x0, 0x7fffffffffffffff, 0x1, [0x2, 0x3, 0x9, 0x9, 0xde], [0x9, 0xb329, 0x1040, 0x7, 0x5, 0xa, 0x4, 0xe970, 0x771, 0x9f, 0xcdc0, 0x9, 0x1, 0x10001, 0xefcf, 0xb13, 0x54, 0x3, 0xffff, 0x7fff, 0x9673, 0x6, 0xffffffffffffa59b, 0x7, 0x3, 0x8, 0x0, 0xd6f9, 0x4, 0x100000000, 0x0, 0x6, 0xbe40, 0x501, 0x7fffffffffffffff, 0x0, 0x5, 0x38, 0xe, 0xfe8, 0x101, 0x0, 0x6, 0xcbad, 0x0, 0x4, 0xe4e0, 0x2, 0x60000000, 0x2, 0x100000000, 0x98a, 0x6, 0x1, 0x7, 0xffff, 0x1, 0x8001, 0x200, 0xa71, 0xe, 0x3, 0x100000000, 0xffff, 0x6, 0x5, 0x6, 0x4, 0x83, 0x0, 0x9, 0x29, 0x4, 0x8000000000000001, 0x0, 0x80000001, 0x8, 0x200, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x3, 0x8, 0x8fc0, 0x9, 0xffffffffffffffff, 0x0, 0x7f, 0x8, 0x53, 0x1, 0x8000000000000001, 0xfffffffffffffffc, 0x4, 0xfffffffffffffff9, 0x8c, 0x6, 0x3, 0xfffffffffffffffb, 0x2, 0x9, 0x7ff, 0xffffffff, 0x1, 0x8000000000000001, 0xfffffffffffffffd, 0x1, 0x5, 0x1, 0xe, 0x3, 0x5, 0x2, 0x6, 0x5, 0x1, 0x6, 0x28f201bf, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f00000005c0)={r6, "b03e193f3dab751ae8f1cc1420db2291"}) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x2, 0x0, @local}, &(0x7f0000001600)=0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000001780)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xff0, 0xa, 0x80, 0x80, 0x11, r8, r9}, {0x8001, 0x962, 0x101, 0x7, 0x9, 0x100081, 0x5, 0x7}, {0x1, 0x800, 0xfffffffffffffff8, 0xfffffffffffffffd}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3505, 0x0, 0x3, 0x1, 0x76f, 0x8001}}, 0xe8) connect$netlink(r5, &(0x7f00000018c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001ac0)={{r7, &(0x7f0000001900)='team0\x00', 0x411441, &(0x7f0000001940)={@_ha_fsid={[0x1, 0x2]}, {0x1, 0x1, 0x7b, 0x2d}}, 0xc, &(0x7f0000001980), &(0x7f00000019c0)=0x8}, 0x1, &(0x7f0000001a80)=[{0x3, 0x8, &(0x7f0000001a00)='\x00', 0x0, 0x0, 0x22}]}) sendmsg$NFT_BATCH(r5, &(0x7f0000002240)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0xc011}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c00000002030300000000fdffff1c01020000000800034000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c8106671122bc8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000002600)={"8a4c7cec014305a2af7475ce7e339d40", 0x0, 0x0, {0x1000, 0x2}, {0x4, 0x4}, 0x105, [0x8000000000000000, 0x6, 0xa, 0x140, 0x4, 0x1, 0x4, 0x9851, 0xa8e, 0x4209, 0xffff, 0xea, 0x8, 0x9, 0x7, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000002700)={"ea2f987fa0e718a9218f6144705e1b4a", r11, r12, {0x4, 0xf}, {0x70d7, 0x80000001}, 0x78117147, [0xffffffffffffffff, 0x10, 0x80, 0x8, 0x0, 0x5, 0x3, 0x5, 0x7, 0x10001, 0x7fffffffffffffff, 0x4cfb, 0xffffffffffffff63, 0x39d, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000005c0)={"68dfdbfd3d75b8b6a84f123d80b82e4d", 0x0, 0x0, {0x1b9a, 0x10001}, {0x10, 0xe8}, 0x4, [0x2, 0x40, 0x30000000, 0x2, 0x7, 0x5, 0x49a1, 0x5, 0x3, 0x0, 0x8000000000000001, 0x6, 0x7, 0x0, 0xf, 0x1000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000006c0)={"3acd2d7b249a148058ed5959fcc5dfb1", r11, r13, {0x37, 0x2}, {0x9, 0x9}, 0x9, [0x2, 0x7, 0x6, 0x10001, 0x6, 0x8, 0x40, 0x8, 0xe, 0x7, 0x80, 0x1, 0x5, 0x8, 0x6, 0x8]}) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r1, &(0x7f00000001c0), 0x20000000}, 0x20) 829.269967ms ago: executing program 0 (id=2308): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @null, 0x40005, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x6, 0x80, 0x1, 0x4e, 0x9, 0x61, 0xff, 0x5, 0x7, 0x8, 0x7, 0x1, 0x9}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000100)=0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f5, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x4c03) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000a00)={'bridge0\x00', 0x7fff}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x6, 0x83, 0xfc, 0x2}, {0x24, 0x7, 0xff, 0x40000}, {0x100, 0xe, 0x2, 0xffffffff}]}, 0x10) close(r8) socket$nl_route(0x10, 0x3, 0x0) 829.01166ms ago: executing program 2 (id=2309): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'syzkaller0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e26, 0x1, 'lblc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0xffffffffffffffde, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000), 0x4) 826.971152ms ago: executing program 4 (id=2310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000540)=""/260, 0x104}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x10000000000001a8, 0x0, 0x0, 0x40}, 0x0) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRESOCT=r2, @ANYRESDEC=r4], &(0x7f0000000080)='GPL\x00', 0xde, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) 825.235637ms ago: executing program 3 (id=2311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a808000000000000005001b0011000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000fd2089bed71e1c9c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000852d682aaf719496275d7692000000a5e4fa140017deff5cc1d071eeea39584f3df152008cac4651fc6aa79e32801880d78b490c9c27d7b6d30972cadd2a3806c6196772d47ad8228fe32b2dd7fdf12295bc7ad8c6a3144c3b2737683d917526705dcb8fb059c72c67739dbe3794dfb38699e306813bc37e08e11ceba4624cec2fe18feb96c1caa8474dfae21d75d3af0210e1f04ce975b236168ddc8999453fbed300f4ba7f8f99896f8dbb659cf28c1517"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7, 0x36}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000600)=0x800000, 0x4) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRESOCT=r9, @ANYRESOCT=r6], 0x30}}, 0x200c0800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r10, 0x25, 0x4}, 0x14) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r5, @ANYBLOB="7fc2803aa8ebd3412de1e17fb171cb35ed7be3db8e09b36c0a82c0cef5389a4ebfab3040d6573434f19f523db3e4b586d44c8a336865269f7d874925ea0c9700ca3e21a93e1c1f9db4e113154382c9412640ad8b4527f4f3e24e167cb342781cd3784f7ac95a36ebfaf0db6176437b7a46cb14a1f22079b7cf6f623866e897e9", @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) unshare(0x6020400) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r11}, 0x8) 820.475925ms ago: executing program 0 (id=2312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0xc008090) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 820.220534ms ago: executing program 1 (id=2313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="637b24c4bad98cb1f4ec33c9e900", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 817.99548ms ago: executing program 3 (id=2314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000001780)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x38}}, 0x48000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)={0x20000014}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0x1001, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x0, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) unshare(0x2a020400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, 0x0) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 816.72043ms ago: executing program 0 (id=2315): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x40, 0x4}}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000006c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x40044}}], 0x1, 0x4014) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r13, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000014000000000000000100000001000000c26fd055479dd8a2bada6f4e4328c39aa38d663941256ef86b8d60fc157e1f6529f09b2144ac3fff0949e66fce06fbbd00f75206ddd8ac97b7ea0591bf1ce5fc41f0ccbd583eeaa615fb48d6b79462", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40044}}], 0x1, 0x4014) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = getuid() sendmsg$nl_route(r18, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x18, 0x0, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x10, 0xd1, 0xfe, 0x2, 0x0, 0x5}, [@RTA_UID={0x8, 0x19, r19}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r20, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r21, 0xee00, r22}}}, @cred={{0x1c, 0x1, 0x2, {r21}}}], 0x40, 0x4}}], 0x1, 0x0) r23 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000001800)={0x6d4, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="b582af24501c6e3c5b01819ee95bc281940a0f1e09357d1161a58a04d01af27307208a117c8de06f142ac1e286752c98500c625dc0faf7470c3dc44679f9d5d5813efb1d8365a6e7ec4ba91960692695fe2f1f5a5401d11ad65f9cd7f2d503fc5a326d4de810b711eb7e775bb1d8acf47192fc10e461a184523b10a18d383748dd91d6e8e117ddfc8d8ea9c19204db4ae5449e659ae78190bc9e891cc422ff1a09023a36e7830a53fbbdb1b63abd64fa7aeb35b54c9efd035c0932b5ba006fe7692056660109701a61d7220ddc6a940a1f9947d21d6008e8409e", @generic="bb741e8baa529f1f0eea5cc2dcb385638d5e6ac57c604723d0728024927dc7d8ab2f7d55d95b51d81a8d1bb0219154d29f394e37cee7859d92e6ddca84423e2aa69fa78e7bc0e20066332732864001fc4f04b3c78a9f02ee6245c94ca4ea5105983c094c61b2ebaec35e40263832050a12b52ad58d592cb3abc9f0cc3fb76f1fc5f00e935a8ac971be0bca96152eca7503fa449dde605dd7b402adcde81ce9e0be38eda8876300f7f867497cc9a0f749b22ffd6e1bf9281126", @generic="5475926f1e9e5d98c189c6d43e3ac42d9debcbc74448fcf592e8c736b62d30b225484240f9f4ea93522fcdf07e485062338bd0b9cb1c0ba6cec01f82ba1939a4258a6b70b8d16c6fe05a4ec71ee58f486af5ede98f57ae2678bd9250eec5ebe3fa85ff903d966774b2c30e3019fff86bb61550a256ec0c20810a63ff27d7193f63b5e5261c4a824eed3ebc84ba6f60f00832a2fd2d1d7d9de555e93c0b1d", @generic='Q', @nested={0xe1, 0xd7, 0x0, 0x1, [@typed={0x8, 0x157, 0x0, 0x0, @uid}, @typed={0x9, 0xaa, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @generic="27425b71793d427a10820214ea6259bb8a2081345ed40e40b38a24b789d2ab1cc0e6dffd3d69d87b88e34a1873fe44190af4920a33d451e3b0b3511b216786160738822e8a21dc4e848224704bf57068a3551a2136c7a37b2260bd5b179455320f87dacd84d0b599b7e5649e623b6320d29bdf0b88854efb8ef0900a534c15745898a573ecba78729ed076ad18eaaa0a132594f748cc3839292da172c3a9c0b06fb6e3f532bb95296717d7abbe32b6e2da85f9b41c6d1ecffeee0b5a5a7e57547154b8072a", @nested={0x4, 0x3e}]}, @generic="85ca592c7d643a4720967059148561c6bc8f2fddbaea9801e55e8821a850029ec50ba34af429bc58479a0b4e1235518cb103b8a1ca90d3e40b2b9aab04649d3bc910cae41be5cc83d183bd2c9771ae1619b791b7dcab5ea50228e96ffded93211de890b210dd63e1fecac7dffe", @generic="7786a423eebba170bf371473e81fd548a0f77553eed2421c162637e42a21ac05ca5f3fe946acf050e4f6bff9c99bdf53fd7a55304c20223360468874330f232339a2e09ae8f2c8412392062a85bd7e80bfc668150b2030867fedd7aa3ea066a7993cb46ac6ec5bb2c7bb1b6f5c0697fe849f8abb0b483ea02c91132af8d28c4aeb6d78b469b5aab9a053d76e766b108488ae6276b0a5449c13b6328ea46c1de0dab77e464e6256ce937f7b78afdc873b0fdf82293f7701f2648b614e5e2352caa1e20750b95300a46487e9701f5716f7ee5d0fe19a2f45c9378e69cb350c", @nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0x3}]}, @nested={0x210, 0xe4, 0x0, 0x1, [@generic="aea39591f68d223c45350b", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="e5caa20b60b6488ecd3c975b95b938615f8fef16c8bcf2c8b136c3f3fc62a11768364893c82e913a2c27f250bc4984f3d4d78abe02026f09d079a6c1914b610b0203e436b40b7b88d3db9a0e0e72e11b88085797ccfe1b1f6a39a188a04011a04ee3e93eedf66f69113b0c9d9baf47ce1a3b7c78cb007e29025245c6c429efddae54fe5c7a615aaf58c2a7ae7b5adda6460d7b2a41ef0e13c685", @generic="334405ee53e68a405cf659db775e3f7dbb7cf250b9ad3c61cf11a872f81c8e1431e772725546c7fd079a5e717ed5bed8f92879fb0d1bfe1293daeac382b8fe85d9cb349b67514580d2e7008992f5a4d3777a95566576a900d860eed89099714e7a879766daed44aed03b468bf44cc7aef24e6763f59587264582cb6050fac3f307684e7b1720a7f2741a98cad91f33f1eaf6c33451c6faa3a6927238f6efd24eb938636a5b7baeacbda3dfc908", @generic="b020a9acf9783825874d979ff9137f392f1ee6e6e74741dd78ef6b0361f99a513c20649ec939198b0e19a2c958c381d0abd36b08bd1c1660bec9bf4d9558704c81a76f9d74bc14679a91e12f459a51ec1bc0854082c2e5f02e4bc0da82a1e6d0b4cb438a8edea196899a96866d8a88385047c7debe3161a5167aca49c5d08b057f416bfa21b8bd78a34c377128b1636344160853b38b614c75eaa97e42fd30ae616007437aea7b85f7d3", @typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @generic="33566da5889a93efd717882a412bbcdf0afb1a69488c0c2cc3cbde46a344c78dcd28bac57d9bd4b6d0b5993fd69913cbe33bc24b4ab2e90d52177749a73ab9dbd4840b9fa748d1b798"]}, 0x6d4}, {&(0x7f0000001f00)={0x10, 0x39, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000000100)={0x1c, 0x26, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0xa, 0x38, 0x0, 0x0, @str='[[@([\x00'}]}, 0x1c}], 0x3, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r3, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r22}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r23, r3]}}], 0x120, 0x80}, 0x4000000) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 816.074042ms ago: executing program 1 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8a}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 812.017365ms ago: executing program 2 (id=2317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080) (async) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x188, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0xe2, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4e, 0x14, {{'hmac(sha256)\x00'}, 0x10, 0x80, "aef3"}}]}, 0x188}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x0, 0x9]}}) 811.193067ms ago: executing program 3 (id=2318): r0 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 754.395501ms ago: executing program 1 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r8, @ANYBLOB="e274cc24e130ab92677de20fa809fb8d59bd1b04379238571563cbe2b974073fc55a571a95aed69c10dea4f280c70f2781f19066bdff02332e8a4eea7b56793e234d1b9170cfa006f6d1066abd9b474c473f6f7cc0192f60ad7736dd921dda2ec956e1f196f3beb7121b279fb807fa836af030510f74e0e255f21ca93bda3622ccfb93344c8f556eb2eec2717aef60abd4ee5af99ba55a825c919dd7b87587ce5555011027e77095b218d82fb17aae218a0980906ba8167db8bf30e121ae4954d722417b36e65dcbd152ae643fc7077e7757d6553504d7d64cc5f24d8c4f63", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES8=r4], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB='/\x00'], 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1}], 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800002938da000000", @ANYRES32=0x0, @ANYBLOB="d3ddd1de000001001800128008000100767469000c000280080005007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800002938da000000", @ANYRES32=0x0, @ANYBLOB="d3ddd1de000001001800128008000100767469000c000280080005007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r13, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r13, 0x0) pwritev(r13, &(0x7f0000000580)=[{&(0x7f00000000c0)="5734aa", 0x3}, {&(0x7f0000002e80)="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", 0x181}], 0x2, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) 719.888374ms ago: executing program 3 (id=2320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0x0, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}], 0x1, 0x45) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x800) getpeername$unix(r6, &(0x7f0000000180), &(0x7f0000000200)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@alu={0x4, 0x0, 0x9, 0x7, 0x0, 0x1, 0x1}]}, &(0x7f0000000480)='GPL\x00', 0x8, 0x1008, &(0x7f0000002a80)=""/4104, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r7, 0x4}, 0x38) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x60) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000002c0)={0x3, @bcast, r8}) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbba8aaaaaaaa004500002c00000000001190780000000400000000000000200018907804000000040000007503000000000000"], 0x0) 440.513132ms ago: executing program 1 (id=2321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd70009c2d00000600000029060300", @ANYRES32=r4, @ANYBLOB="08000500060000000a00e8000802110000010000"], 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8011) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200012225bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f7769666900080004", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x310, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r8, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2e0, 0x2, [@TCA_FLOW_EMATCHES={0x2dc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_META={0xe8, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="1821e3", @TCF_META_TYPE_VAR='[', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a4d644e462cd9ebbbb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x47, 0x2}, {0x8, 0x4, 0x1}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x20, 0x1}, {0x8000, 0x5b, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7f, 0x2}, {0x532, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x10}, {0x3, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1a6dd65b"]}, @TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_VAR="85baeef04fc110743bed", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="daf1c48d69851eb33b", @TCF_META_TYPE_VAR="14a35ff5", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="7f4248", @TCF_META_TYPE_VAR='bKr', @TCF_META_TYPE_VAR='g!-a', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="adbe5d85", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ad411ded7c38a0"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x8, 0x5}, {0x1, 0x1, 0x52414e4c50aa5067}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x401, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="4f616e52bf4185db", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9b35b8c0b1633d95e7", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4, 0x1}, {0x6d2, 0x0, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0xa59}, {0x1, 0xa, 0x6dd358a5, 0x10001}}}, @TCF_EM_META={0xc4, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="840e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="6bcd", @TCF_META_TYPE_VAR="60737fd7c3ea25a390ce"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5a14}, {0x7, 0x4}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="b0a651a561c4d963", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="f5b7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="220d17b290", @TCF_META_TYPE_VAR="8a1ba36d33", @TCF_META_TYPE_VAR="a3b7422b707675"]}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_VAR="532799275a352a5560", @TCF_META_TYPE_VAR='G', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5123d2", @TCF_META_TYPE_VAR="a1", @TCF_META_TYPE_VAR="dd17fa8813b8", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f2c1ba"]}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d4bd08c76a09", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e8d197", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8960b555", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x974f}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='u']}, @TCA_EM_META_HDR={0x0, 0x1, {{0x6, 0x6, 0x1}, {0x8, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="92fb7930cb4a"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="89c459fd6f8f7033", @TCF_META_TYPE_VAR="63e936aa2394a4819f", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x87, 0x44, 0x2}, {0xff80, 0xc, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR='af', @TCF_META_TYPE_VAR="aa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xa, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}]}}]}]}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf250500000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYRESHEX=r12, @ANYRES16=r9, @ANYRES64=0x0, @ANYRESOCT=r11, @ANYRES16=r10, @ANYRES8=0x0], 0x0) 147.158834ms ago: executing program 2 (id=2322): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000480)=""/205, 0xcd}], 0x5, &(0x7f0000000680)=""/35, 0x23}, 0xd}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 0s ago: executing program 4 (id=2323): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41010040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4040880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) unshare(0x400) unshare(0x12000000) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000440)=@null) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f0000000480)="63bbf8db158cf56d41f6bb738ae634d8c11edfda46e0e5f4d5721dc2b0f030ee2e2151b0544f9109712cc5916a9ae201278516c194f705bff2981a528990a0ca6aa3a5c82cf4111c81f8bd71a30beed921b671840484fde243e0b815246378894cc4a82fea83e6dee6a9f891b717f7c5ef0d830dde199fca4a46092c982f232c2a2d3e98083a6301a67b", &(0x7f0000000540)=""/138, &(0x7f0000000600)="d9fe71b6b0acac09cb5e91ded38e545406c4c9bfc6624634b00147da75eb15c9933ccc123f04dd1b4dfae75ac46a56e53ceb5090b0d20dca4a7ef2849ee73fa332036503798d046b46fdfee13c13c66257e4e41071b2d3f8985620b3b3589b9cac2414f96e076d5d2613727c63903acb3ce4ec50f72ce3638e3666ed0b46ade4adfa2c0dd9fac941afe884d482d35ec27c2c54a5f963598466248ea2d7a2f75a42ca9aae83cfc7f65b1db50789978eb48aaf1a4b3fab21136e2249d996485534656d70708cdb30d24ea427671dcadf0e457924739caa626476eee74697e69e17ac143c31d74a23f0c68f47bb7af39ac096ae135833b9263b", &(0x7f0000000700)="0b80aef2d48cc33a19bcc8e95293e4f848f77d41b37efffa36cd2ca6c2e90319911df25952f3dcec27b2f755a1fdf166552c53256a4e347cfee4b69738066c43e3b2d94cff997cb92ccfb69c00a9b23b3a9ad17d000d9e577cbd656fad9dab42495950a175961f2443ff5db428fd4812ed1ace806a2e6b04d509726b34738a27ac533c3b0a132ffb381cbc1de645e3c0536f49e83535aa780f1ecd56adedd4ca74d6f676c2004fd50442487d19a5c5c795e82a15", 0xfffffffc, r7}, 0x38) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000900)=0x1c, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000940)={@local, 0x2, 0x1, 0x1, 0x2, 0x8}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r7, 0xe84d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff425a, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffe0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000000a40)=""/125, 0x41000, 0x6a, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0x10, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000cc0)=[r7, r7, r10, r7, r11, r7], &(0x7f0000000d00)=[{0x5, 0x1, 0xd, 0xb}, {0x1, 0x3, 0x5, 0xc}, {0x5, 0x5, 0x0, 0x2}, {0x1, 0x5, 0x9cf, 0x2}, {0x2, 0x1, 0x10, 0x7}, {0x3, 0x2, 0x9, 0xc}], 0x10, 0xf3}, 0x94) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000e40)={0x0, 0x8, 0x7, 0x7, @vifc_lcl_ifindex=r9, @multicast2}, 0x10) sendto$inet6(r8, &(0x7f0000000e80)="9a2a7538d8f870ed43b8d0fa5861b63d85d8173491fc332ab9383183d8ae0772f41312b8887e11e57c52", 0x2a, 0x804, &(0x7f0000000ec0)={0xa, 0x4e23, 0x200, @mcast2, 0x3}, 0x1c) r12 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r12, &(0x7f0000000f00)="4062d3ef991c22aece4875977549d81dcaad28741e9c812b4a51eaca15f9cfea3c23d6623772", 0x26, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000f40)={'wpan3\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r13) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x800) kernel console output (not intermixed with test programs): nput: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 139.004873][ T7588] netlink: 27 bytes leftover after parsing attributes in process `syz.4.423'. [ 139.380757][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 139.402684][ T7610] netlink: 'syz.2.432': attribute type 3 has an invalid length. [ 139.456731][ T7610] nbd: must specify a size in bytes for the device [ 139.507858][ T7613] netlink: 'syz.3.434': attribute type 27 has an invalid length. [ 139.522736][ T7610] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.691707][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.699360][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.901312][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.917793][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.020278][ T7638] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 140.029957][ T7638] netlink: 224 bytes leftover after parsing attributes in process `syz.4.438'. [ 140.227752][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.296642][ T7615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.405863][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.436622][ T7649] netlink: 348 bytes leftover after parsing attributes in process `syz.0.442'. [ 140.448826][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.500443][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.541259][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.834068][ T7666] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 140.919764][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.943601][ T7669] tipc: Enabling of bearer rejected, failed to enable media [ 140.966542][ T7672] vlan2: entered promiscuous mode [ 140.971926][ T7672] bond1: entered promiscuous mode [ 140.977423][ T7672] vlan2: entered allmulticast mode [ 140.984090][ T7672] bond1: entered allmulticast mode [ 140.988702][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 141.048867][ T7667] virt_wifi0 speed is unknown, defaulting to 1000 [ 141.516029][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 141.632633][ T7690] batadv_slave_0: entered promiscuous mode [ 141.685708][ T7697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.815077][ T7689] batadv_slave_0: left promiscuous mode [ 142.122692][ T7716] vlan2: left promiscuous mode [ 142.160046][ T7716] bond1: left promiscuous mode [ 142.171902][ T7716] vlan2: left allmulticast mode [ 142.185976][ T7716] bond1: left allmulticast mode [ 142.412458][ T7728] netlink: 'syz.1.463': attribute type 3 has an invalid length. [ 142.454955][ T7728] netlink: 116 bytes leftover after parsing attributes in process `syz.1.463'. [ 142.496094][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 142.541726][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 142.548144][ T7730] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 142.567714][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.576083][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.205754][ T7764] __nla_validate_parse: 2 callbacks suppressed [ 143.205774][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 143.456530][ T7767] Bluetooth: MGMT ver 1.23 [ 143.481115][ T7771] xt_bpf: check failed: parse error [ 143.625669][ T7780] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.638595][ T7769] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 143.646519][ T7769] netlink: 'syz.1.476': attribute type 2 has an invalid length. [ 143.654203][ T7769] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 143.663203][ T7769] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 143.671663][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 143.717694][ T7780] bond2: (slave lo): Enslaving as an active interface with an up link [ 143.731814][ T7780] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 143.757381][ T7769] syzkaller0: entered promiscuous mode [ 143.775594][ T7769] syzkaller0: entered allmulticast mode [ 144.194313][ T7811] syzkaller0: entered promiscuous mode [ 144.204553][ T7811] syzkaller0: entered allmulticast mode [ 144.260809][ T7819] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 144.359026][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 144.494127][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 144.538751][ T7828] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 144.592547][ T7829] erspan1: entered allmulticast mode [ 144.622195][ T7834] netlink: 'syz.2.494': attribute type 8 has an invalid length. [ 144.683145][ T7841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.715688][ T7828] bond1: entered promiscuous mode [ 144.758618][ T7828] bond1: entered allmulticast mode [ 144.782008][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.848851][ T7850] netlink: 'syz.1.497': attribute type 3 has an invalid length. [ 145.177429][ T7856] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 145.349367][ T7877] syzkaller0: entered promiscuous mode [ 145.354920][ T7877] syzkaller0: entered allmulticast mode [ 145.738943][ T7894] virt_wifi0 speed is unknown, defaulting to 1000 [ 145.981902][ T7904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.512'. [ 146.189808][ T7914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.308788][ T7921] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 146.409232][ T7925] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 146.578143][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 146.592709][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.523'. [ 146.602828][ T7931] syzkaller0: entered promiscuous mode [ 146.608667][ T7931] syzkaller0: entered allmulticast mode [ 146.938587][ T7935] macsec1: entered promiscuous mode [ 146.944232][ T7935] macsec1: entered allmulticast mode [ 147.158936][ T7961] bridge0: port 3(gretap0) entered blocking state [ 147.182638][ T7961] bridge0: port 3(gretap0) entered disabled state [ 147.222706][ T7961] gretap0: entered allmulticast mode [ 147.261925][ T7961] gretap0: entered promiscuous mode [ 147.286229][ T7961] bridge0: port 3(gretap0) entered blocking state [ 147.292861][ T7961] bridge0: port 3(gretap0) entered forwarding state [ 147.372253][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 147.397640][ T7958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.448394][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 147.565277][ T7977] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.710147][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 147.720558][ T7984] validate_nla: 1 callbacks suppressed [ 147.720579][ T7984] netlink: 'syz.1.537': attribute type 7 has an invalid length. [ 147.758210][ T7984] netlink: 'syz.1.537': attribute type 8 has an invalid length. [ 148.199597][ T8013] syz_tun: entered promiscuous mode [ 148.249038][ T8013] tipc: Can't bind to reserved service type 0 [ 148.357924][ T8020] __nla_validate_parse: 2 callbacks suppressed [ 148.357946][ T8020] netlink: 44 bytes leftover after parsing attributes in process `syz.4.548'. [ 148.954971][ T8043] netlink: 'syz.0.553': attribute type 21 has an invalid length. [ 148.963372][ T8043] netlink: 156 bytes leftover after parsing attributes in process `syz.0.553'. [ 149.416498][ T8063] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 149.424408][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 149.615551][ T8073] syzkaller0: entered promiscuous mode [ 149.621095][ T8073] syzkaller0: entered allmulticast mode [ 149.688802][ T8083] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.565'. [ 149.706894][ T8079] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 149.748009][ T8079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.780117][ T8084] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 149.814053][ T8084] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 150.339586][ T8111] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.372099][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 151.157549][ T8151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.460534][ T8166] virt_wifi0 speed is unknown, defaulting to 1000 [ 151.814862][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'. [ 151.968442][ T8177] virt_wifi0 speed is unknown, defaulting to 1000 [ 152.107528][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 152.208305][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 152.270297][ T1143] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.282434][ T1143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.317299][ T196] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.383173][ T196] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.485223][ T8221] ÿ: renamed from bond_slave_0 [ 153.169896][ T8243] netlink: 124 bytes leftover after parsing attributes in process `syz.0.602'. [ 153.954664][ T8224] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.586638][ T8274] netlink: 'syz.1.611': attribute type 19 has an invalid length. [ 154.615368][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'. [ 154.630185][ T8274] netlink: 76 bytes leftover after parsing attributes in process `syz.1.611'. [ 154.722579][ T8277] netlink: 296 bytes leftover after parsing attributes in process `syz.3.613'. [ 154.961289][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 155.071768][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 155.195717][ T8296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.221805][ T8294] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.353074][ T7636] IPVS: starting estimator thread 0... [ 155.363828][ T8296] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.410207][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 155.472825][ T8300] IPVS: using max 24 ests per chain, 57600 per kthread [ 156.072625][ T8338] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.627'. [ 156.106602][ T8338] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.274316][ T8344] netlink: 200 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.286668][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 156.449520][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'. [ 156.691078][ T8368] netlink: 'syz.4.636': attribute type 12 has an invalid length. [ 156.701355][ T8369] netlink: 'syz.4.636': attribute type 12 has an invalid length. [ 156.761668][ T8364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.035321][ T8400] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 157.044140][ T8400] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 157.052415][ T8400] netlink: 'syz.1.643': attribute type 3 has an invalid length. [ 157.068653][ T8364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.161409][ T8402] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 157.239464][ T8364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.314618][ T8402] bond2: entered promiscuous mode [ 157.322138][ T8402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.396450][ T8364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.642044][ T1091] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.664456][ T1091] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.677348][ T8424] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.697553][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.727306][ T1091] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.937485][ T8433] batman_adv: batadv0: Adding interface: macvtap1 [ 158.005985][ T8433] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.126704][ T8433] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 158.342467][ T8416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.005003][ T8460] block nbd0: not configured, cannot reconfigure [ 159.101913][ T8462] IPv6: Can't replace route, no match found [ 159.138869][ T8462] IPv6: Can't replace route, no match found [ 159.492621][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.510257][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.554903][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.583709][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.676042][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.711741][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.738922][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.750159][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.761463][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.772357][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.783753][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.794681][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.897006][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.917218][ T8491] __nla_validate_parse: 8 callbacks suppressed [ 159.917238][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 159.966352][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.996290][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.032174][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.048198][ T8498] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 160.057566][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.085891][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.097596][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.118321][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.149512][ T8498] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.151446][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.169749][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.195792][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.228842][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.239698][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.251077][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.262274][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.273945][ T8479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.449410][ T8514] bridge0: port 3(gretap0) entered disabled state [ 160.489783][ T8521] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 160.508248][ T8521] netlink: 228 bytes leftover after parsing attributes in process `syz.4.674'. [ 160.518022][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 160.529271][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.537043][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.675412][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.690010][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.780519][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 160.813957][ T7636] syz0: Port: 1 Link DOWN [ 160.824027][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 160.835291][ T8526] Bluetooth: MGMT ver 1.23 [ 160.846890][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 160.866291][ T1091] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.881483][ T1091] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.890741][ T1091] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.901742][ T8534] netlink: 388 bytes leftover after parsing attributes in process `syz.2.678'. [ 160.937532][ T1091] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.980408][ T8540] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 161.082331][ T8544] netlink: 'syz.2.681': attribute type 11 has an invalid length. [ 162.285879][ T8581] syzkaller0: entered promiscuous mode [ 162.301663][ T8581] syzkaller0: entered allmulticast mode [ 162.333451][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 162.749770][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 162.766356][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.695'. [ 162.863665][ T8604] siw: device registration error -23 [ 162.894539][ T8605] virt_wifi0 speed is unknown, defaulting to 1000 [ 162.966811][ T8606] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 163.241577][ T8616] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.882905][ T7636] IPVS: starting estimator thread 0... [ 163.893153][ T8633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.930398][ T8629] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.975675][ T8635] IPVS: using max 26 ests per chain, 62400 per kthread [ 164.304589][ T8660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.370364][ T8658] tipc: Started in network mode [ 164.375744][ T8658] tipc: Node identity ac14140f, cluster identity 4711 [ 164.383067][ T8658] tipc: New replicast peer: 255.255.255.255 [ 164.391545][ T8658] tipc: Enabled bearer , priority 10 [ 164.564647][ T8668] dvmrp0: entered allmulticast mode [ 164.574853][ T8665] dvmrp0: left allmulticast mode [ 164.944675][ T8687] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 164.995803][ T8688] __nla_validate_parse: 7 callbacks suppressed [ 164.995824][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 165.091729][ T8687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.184785][ T8688] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 165.221364][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.722'. [ 165.433563][ T8717] bond4: option lacp_rate: invalid value (128) [ 165.471392][ T8717] bond4 (unregistering): Released all slaves [ 165.554640][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 165.570289][ T796] tipc: Node number set to 2886997007 [ 165.861690][ T8738] Cannot find add_set index 1 as target [ 166.235679][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 166.293898][ T8759] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.764923][ T8783] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 166.786527][ T8783] netlink: 96 bytes leftover after parsing attributes in process `syz.3.745'. [ 166.797404][ T8783] netlink: 658 bytes leftover after parsing attributes in process `syz.3.745'. [ 166.813893][ T8783] netlink: 1 bytes leftover after parsing attributes in process `syz.3.745'. [ 166.878774][ T8783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.745'. [ 167.336132][ T8813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.467944][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 167.488592][ T8810] virt_wifi0 speed is unknown, defaulting to 1000 [ 167.519100][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 167.831572][ T8814] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.590786][ T8846] netlink: 'syz.1.759': attribute type 5 has an invalid length. [ 168.622364][ T8848] ip6gretap1: entered promiscuous mode [ 168.632987][ T8848] ip6gretap1: entered allmulticast mode [ 168.687291][ T8846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.750575][ T8850] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.761640][ T8852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.769001][ T8852] IPv6: NLM_F_CREATE should be set when creating new route [ 168.981638][ T8862] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 169.046044][ T8862] bond3 (unregistering): Released all slaves [ 169.095576][ T8861] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.112133][ T8864] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 169.378558][ T8884] sctp: [Deprecated]: syz.1.768 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.378558][ T8884] Use struct sctp_sack_info instead [ 169.748454][ T8891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.767330][ T8894] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 169.986398][ T8901] virt_wifi0 speed is unknown, defaulting to 1000 [ 170.523635][ T8933] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.517561][ T8992] netlink: 'syz.4.795': attribute type 2 has an invalid length. [ 171.582165][ T8992] !©9: entered promiscuous mode [ 171.601959][ T8995] netlink: 'syz.4.795': attribute type 2 has an invalid length. [ 171.612469][ T8995] !©9: left promiscuous mode [ 171.823209][ T9001] erspan1: entered promiscuous mode [ 171.828796][ T9001] erspan1: entered allmulticast mode [ 172.117085][ T9006] sch_tbf: burst 545 is lower than device lo mtu (11337746) ! [ 172.752327][ T9017] __nla_validate_parse: 2 callbacks suppressed [ 172.752346][ T9017] netlink: 156 bytes leftover after parsing attributes in process `syz.3.802'. [ 173.200154][ T9025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.256287][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 173.265676][ T9025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.502388][ T9064] netlink: 'syz.0.811': attribute type 9 has an invalid length. [ 173.815613][ T9067] netlink: 144 bytes leftover after parsing attributes in process `syz.4.812'. [ 173.979650][ T9076] Bluetooth: MGMT ver 1.23 [ 174.088508][ T9053] syzkaller0: entered promiscuous mode [ 174.094147][ T9053] syzkaller0: entered allmulticast mode [ 174.119179][ T1091] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.145277][ T1091] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.173301][ T1091] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.194390][ T1091] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.216159][ T1091] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.234185][ T1091] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.339348][ T9090] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 175.403829][ T1091] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.413274][ T1091] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.463136][ T9090] bond4: entered promiscuous mode [ 175.468988][ T9090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.493689][ T9091] vlan3: entered allmulticast mode [ 175.499450][ T9091] bond4: entered allmulticast mode [ 175.630885][ T9096] sch_tbf: burst 2 is lower than device tunl0 mtu (1280) ! [ 175.670649][ T9100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.819'. [ 175.740593][ T9103] netlink: 88 bytes leftover after parsing attributes in process `syz.0.820'. [ 175.768598][ T9099] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.838796][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 175.872474][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.822'. [ 175.930312][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 175.960290][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.822'. [ 176.029339][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.039193][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.048100][ T9115] netlink: 'syz.2.824': attribute type 8 has an invalid length. [ 176.056416][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 176.084478][ T9115] bond0: entered promiscuous mode [ 176.094429][ T9115] bond_slave_0: entered promiscuous mode [ 176.108237][ T9115] bond_slave_1: entered promiscuous mode [ 176.242338][ T9115] bond0: left promiscuous mode [ 176.248928][ T9115] bond_slave_0: left promiscuous mode [ 176.254887][ T9115] bond_slave_1: left promiscuous mode [ 176.811419][ T5923] IPVS: starting estimator thread 0... [ 176.868122][ T9147] IPVS: sed: FWM 3 0x00000003 - no destination available [ 176.915608][ T9150] IPVS: using max 26 ests per chain, 62400 per kthread [ 177.161838][ T9171] syzkaller0: entered promiscuous mode [ 177.185629][ T9171] syzkaller0: entered allmulticast mode [ 177.853454][ T9205] __nla_validate_parse: 8 callbacks suppressed [ 177.853475][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 178.085270][ T9209] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.847'. [ 178.094692][ T9209] ksmbd: Unknown IPC event: 1, ignore. [ 178.271393][ T9220] netlink: 192 bytes leftover after parsing attributes in process `syz.1.850'. [ 178.459311][ T9236] netlink: 'syz.4.851': attribute type 5 has an invalid length. [ 178.950716][ T9248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.856'. [ 179.080732][ T9252] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 179.112526][ T9252] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.857'. [ 179.390655][ T9268] netlink: 'syz.0.862': attribute type 3 has an invalid length. [ 179.413278][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.862'. [ 179.587579][ T9274] block nbd0: not configured, cannot reconfigure [ 180.175949][ T9290] tap0: tun_chr_ioctl cmd 2148553947 [ 180.583698][ T9312] virt_wifi0 speed is unknown, defaulting to 1000 [ 180.960270][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 181.064957][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 181.074338][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.096021][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.280539][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.313850][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.333515][ T9345] tun0: tun_chr_ioctl cmd 2147767507 [ 181.355915][ T9347] netlink: 210692 bytes leftover after parsing attributes in process `syz.4.880'. [ 181.587469][ T9354] bridge0: left allmulticast mode [ 181.657879][ T9354] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 181.708010][ T9354] ip6gre1: left promiscuous mode [ 181.713047][ T9354] ip6gre1: left allmulticast mode [ 181.895722][ T9368] netlink: 332 bytes leftover after parsing attributes in process `syz.4.885'. [ 181.923968][ T9368] netlink: 'syz.4.885': attribute type 9 has an invalid length. [ 181.952190][ T9366] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.997767][ T9357] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.292436][ T1143] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.306063][ T1143] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.334762][ T1143] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.397578][ T1143] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.246787][ T9400] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 183.257861][ T9405] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 184.127184][ T9438] virt_wifi0 speed is unknown, defaulting to 1000 [ 184.386400][ T9455] __nla_validate_parse: 2 callbacks suppressed [ 184.386420][ T9455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.905'. [ 184.467311][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 184.659611][ T9477] netlink: 'syz.4.909': attribute type 21 has an invalid length. [ 184.725989][ T9477] netlink: 128 bytes leftover after parsing attributes in process `syz.4.909'. [ 184.765148][ T9477] netlink: 3 bytes leftover after parsing attributes in process `syz.4.909'. [ 184.797211][ T9478] virt_wifi0 speed is unknown, defaulting to 1000 [ 184.976546][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 185.047621][ T9493] openvswitch: netlink: IPv4 tunnel dst address is zero [ 187.478946][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.491301][ T9475] netlink: 428 bytes leftover after parsing attributes in process `syz.4.909'. [ 187.678318][ T9499] netlink: 'syz.4.916': attribute type 9 has an invalid length. [ 187.743428][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 187.816469][ T9505] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 187.880581][ T9505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.978578][ T9520] netlink: 'syz.0.917': attribute type 298 has an invalid length. [ 187.990837][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 188.037269][ T9505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.919'. [ 188.049381][ T9507] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.530108][ T9545] bridge0: entered allmulticast mode [ 188.736638][ T9549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 188.749618][ T9549] netlink: 'syz.4.926': attribute type 11 has an invalid length. [ 188.758562][ T9552] IPVS: sed: FWM 3 0x00000003 - no destination available [ 188.769852][ T9552] x_tables: duplicate underflow at hook 1 [ 188.795805][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 188.876625][ T9556] tipc: Trying to set illegal importance in message [ 188.894415][ T9556] syzkaller1: entered promiscuous mode [ 188.904204][ T9556] syzkaller1: entered allmulticast mode [ 189.249717][ T9572] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 189.298193][ T9576] bond5: option miimon: invalid value (18446744073709551607) [ 189.306178][ T9576] bond5: option miimon: allowed values 0 - 2147483647 [ 189.315026][ T9576] bond5 (unregistering): Released all slaves [ 189.411223][ T9584] __nla_validate_parse: 2 callbacks suppressed [ 189.411247][ T9584] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.937'. [ 189.430362][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 189.973485][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.942'. [ 190.059186][ T9608] vlan4: entered allmulticast mode [ 190.085987][ T9608] bridge0: port 4(vlan4) entered blocking state [ 190.105302][ T9608] bridge0: port 4(vlan4) entered disabled state [ 190.143744][ T9608] vlan4: entered promiscuous mode [ 190.505124][ T9625] virt_wifi0 speed is unknown, defaulting to 1000 [ 190.557692][ T9634] vxcan3: entered promiscuous mode [ 191.023095][ T9654] netlink: zone id is out of range [ 191.054571][ T9654] netlink: zone id is out of range [ 191.071046][ T9654] netlink: zone id is out of range [ 191.096065][ T9654] netlink: zone id is out of range [ 191.125626][ T9654] netlink: zone id is out of range [ 191.162588][ T9654] netlink: zone id is out of range [ 191.191304][ T9654] netlink: zone id is out of range [ 191.218188][ T9654] netlink: zone id is out of range [ 191.235751][ T9654] netlink: zone id is out of range [ 191.246435][ T9654] netlink: zone id is out of range [ 191.782540][ T9668] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 191.947502][ T9668] bond5 (unregistering): Released all slaves [ 192.116837][ T9679] FAULT_INJECTION: forcing a failure. [ 192.116837][ T9679] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.176544][ T9679] CPU: 1 UID: 0 PID: 9679 Comm: syz.2.955 Not tainted syzkaller #0 PREEMPT(full) [ 192.176574][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.176596][ T9679] Call Trace: [ 192.176604][ T9679] [ 192.176614][ T9679] dump_stack_lvl+0xe8/0x150 [ 192.176659][ T9679] should_fail_ex+0x412/0x560 [ 192.176697][ T9679] _copy_from_iter+0x1d3/0x1670 [ 192.176732][ T9679] ? rep_movs_alternative+0x4a/0x90 [ 192.176770][ T9679] ? __pfx__copy_from_iter+0x10/0x10 [ 192.176800][ T9679] ? sock_alloc_send_pskb+0x896/0x990 [ 192.176842][ T9679] ? __pfx__copy_from_iter+0x10/0x10 [ 192.176877][ T9679] ? page_copy_sane+0x4e/0x270 [ 192.176911][ T9679] copy_page_from_iter+0xdd/0x170 [ 192.176936][ T9679] skb_copy_datagram_from_iter+0x306/0x710 [ 192.176977][ T9679] packet_sendmsg+0x37e4/0x50f0 [ 192.177023][ T9679] ? __lock_acquire+0x6b5/0x2cf0 [ 192.177062][ T9679] ? __lock_acquire+0x6b5/0x2cf0 [ 192.177106][ T9679] ? aa_sk_perm+0x6d5/0x900 [ 192.177134][ T9679] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.177173][ T9679] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 192.177213][ T9679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.177246][ T9679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.177270][ T9679] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.177302][ T9679] __sys_sendto+0x672/0x710 [ 192.177346][ T9679] ? __pfx___sys_sendto+0x10/0x10 [ 192.177367][ T9679] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 192.177405][ T9679] ? __fget_files+0x3a0/0x420 [ 192.177447][ T9679] ? ksys_write+0x242/0x270 [ 192.177472][ T9679] ? __pfx_ksys_write+0x10/0x10 [ 192.177500][ T9679] __x64_sys_sendto+0xde/0x100 [ 192.177529][ T9679] do_syscall_64+0x14d/0xf80 [ 192.177557][ T9679] ? trace_irq_disable+0x3b/0x150 [ 192.177587][ T9679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.177609][ T9679] ? clear_bhb_loop+0x40/0x90 [ 192.177636][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.177657][ T9679] RIP: 0033:0x7f936319c799 [ 192.177685][ T9679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.177703][ T9679] RSP: 002b:00007f93613d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 192.177725][ T9679] RAX: ffffffffffffffda RBX: 00007f9363416180 RCX: 00007f936319c799 [ 192.177740][ T9679] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000008 [ 192.177759][ T9679] RBP: 00007f93613d5090 R08: 0000200000000140 R09: 0000000000000014 [ 192.177773][ T9679] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 192.177785][ T9679] R13: 00007f9363416218 R14: 00007f9363416180 R15: 00007fff2793c318 [ 192.177843][ T9679] [ 192.464198][ T9675] syzkaller0: entered promiscuous mode [ 192.469885][ T9675] syzkaller0: entered allmulticast mode [ 192.649815][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.959'. [ 192.661572][ T9698] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 193.188014][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'. [ 193.487953][ T9729] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 194.213476][ T9698] veth0_vlan: left promiscuous mode [ 194.220180][ T9698] veth0_vlan: entered promiscuous mode [ 194.227924][ T9698] team0: Device veth0_vlan failed to register rx_handler [ 194.301428][ T9726] erspan1: entered allmulticast mode [ 194.361966][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370021][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.438346][ T9733] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.719319][ T9755] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.969'. [ 194.931607][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 195.011156][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 195.346874][ T9794] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.975'. [ 195.387395][ T9795] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.975'. [ 195.535176][ T9801] syzkaller0: entered promiscuous mode [ 195.547981][ T9801] syzkaller0: entered allmulticast mode [ 195.558153][ T9804] netlink: 'syz.0.978': attribute type 21 has an invalid length. [ 195.580421][ T9804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.978'. [ 195.695956][ T9812] netlink: 88 bytes leftover after parsing attributes in process `syz.1.979'. [ 195.718045][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'. [ 195.745587][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.982'. [ 195.754830][ T9814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.982'. [ 196.068362][ T9809] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.461067][ T9840] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 196.486686][ T9845] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 196.551220][ T9840] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 196.684294][ T9838] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.773285][ T9848] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.324067][ T9859] syzkaller0: entered promiscuous mode [ 197.365387][ T9859] syzkaller0: entered allmulticast mode [ 198.274856][ T9892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.282289][ T9892] IPv6: NLM_F_CREATE should be set when creating new route [ 198.289648][ T9892] IPv6: NLM_F_CREATE should be set when creating new route [ 198.296934][ T9892] IPv6: NLM_F_CREATE should be set when creating new route [ 199.298043][ T9876] virt_wifi0 speed is unknown, defaulting to 1000 [ 199.689721][ T9918] bond5: entered promiscuous mode [ 199.733284][ T9918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.794280][ T9932] __nla_validate_parse: 10 callbacks suppressed [ 199.794304][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 199.815879][ T9936] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1014'. [ 199.860399][ T9928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.870807][ T9928] bond6: entered promiscuous mode [ 199.877389][ T9928] bond5: (slave bond6): Enslaving as an active interface with an up link [ 199.887330][ T9935] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1008'. [ 199.900056][ T9935] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1008'. [ 199.909953][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 199.938793][ T9932] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 199.991680][ T9932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'. [ 200.077600][ T9932] team0: entered promiscuous mode [ 200.134765][ T9932] team_slave_0: entered promiscuous mode [ 200.157108][ T9932] team_slave_1: entered promiscuous mode [ 200.193133][ T9961] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 200.203976][ T9932] team0: entered allmulticast mode [ 200.227565][ T9932] team_slave_0: entered allmulticast mode [ 200.233597][ T9932] team_slave_1: entered allmulticast mode [ 200.247097][ T9932] bridge0: port 3(team0) entered blocking state [ 200.261000][ T9932] bridge0: port 3(team0) entered disabled state [ 200.374488][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 200.471671][ T9969] erspan0: entered promiscuous mode [ 200.502074][ T9965] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.537165][ T9967] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.569578][ T9974] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 200.682461][ T9979] syz.4.1022 uses old SIOCAX25GETINFO [ 200.715887][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 200.780565][ T9988] bond0: entered promiscuous mode [ 200.786166][ T9988] bond_slave_0: entered promiscuous mode [ 200.792042][ T9988] bond_slave_1: entered promiscuous mode [ 200.804169][ T9984] 8021q: VLANs not supported on gre0 [ 200.942870][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 201.299525][T10011] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 201.754825][T10024] bridge_slave_0 (unregistering): left allmulticast mode [ 201.797768][T10024] bridge_slave_0 (unregistering): left promiscuous mode [ 201.808474][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.924104][T10038] tc_dump_action: action bad kind [ 202.057731][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1040'. [ 202.261731][T10057] gretap1: entered promiscuous mode [ 202.268041][T10057] batman_adv: batadv0: Adding interface: gretap1 [ 202.274427][T10057] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 202.317436][T10057] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 202.717240][T10076] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.738783][T10081] bond7: (slave ip6gretap1): making interface the new active one [ 202.753240][T10083] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 202.768172][T10081] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.885127][T10076] bond8 (unregistering): Released all slaves [ 202.973794][T10088] netlink: 'syz.3.1052': attribute type 2 has an invalid length. [ 203.009585][T10089] bond5: (slave bridge2): making interface the new active one [ 203.026812][T10089] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 203.088430][T10083] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 203.112791][T10098] macvlan3: entered promiscuous mode [ 203.133859][T10098] macvlan3: entered allmulticast mode [ 203.183131][T10088] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.366069][T10114] syzkaller1: entered promiscuous mode [ 203.373947][T10114] syzkaller1: entered allmulticast mode [ 203.384447][T10124] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 203.422189][T10127] xt_hashlimit: size too large, truncated to 1048576 [ 203.537778][T10133] netlink: 'syz.3.1062': attribute type 13 has an invalid length. [ 203.584364][T10128] bond6: (slave bridge4): making interface the new active one [ 203.604102][T10128] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 203.708650][T10144] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 203.767498][T10124] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 204.003297][T10152] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.038354][T10154] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 204.154407][T10156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.184706][T10162] bond5: (slave batadv1): Opening slave failed [ 204.448169][T10172] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 204.457374][T10174] net_ratelimit: 45 callbacks suppressed [ 204.457394][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.609402][T10175] bond6: entered promiscuous mode [ 204.614611][T10175] bond6: entered allmulticast mode [ 204.636286][T10175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.676501][T10187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.061859][T10196] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 205.084805][T10196] bond7 (unregistering): Released all slaves [ 205.953738][T10232] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.966476][T10225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.019878][T10232] syzkaller0: entered promiscuous mode [ 206.025911][T10232] syzkaller0: entered allmulticast mode [ 206.036224][T10232] tipc: Started in network mode [ 206.041160][T10232] tipc: Node identity caae6c40d201, cluster identity 4711 [ 206.051645][T10232] tipc: Enabled bearer , priority 0 [ 206.070397][T10231] tipc: Resetting bearer [ 206.114719][T10231] tipc: Disabling bearer [ 206.141341][T10236] __nla_validate_parse: 9 callbacks suppressed [ 206.141361][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 206.385052][T10244] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1089'. [ 207.048818][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1096'. [ 207.095677][T10280] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 207.113990][T10280] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 207.172206][T10280] virt_wifi0 speed is unknown, defaulting to 1000 [ 207.804509][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 208.066914][T10306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1104'. [ 208.079050][T10303] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.102039][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.440866][T10315] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.667560][T10336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.722976][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 208.856821][T10344] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 208.997058][T10348] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1114'. [ 209.017954][T10348] openvswitch: netlink: Missing key (keys=40, expected=100) [ 209.033751][T10346] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.047540][T10346] bond7: (slave bond8): making interface the new active one [ 209.056031][T10346] bond7: (slave bond8): Enslaving as an active interface with an up link [ 209.090138][T10344] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 209.260752][T10354] netlink: 'syz.2.1115': attribute type 2 has an invalid length. [ 209.289902][T10354] netlink: 'syz.2.1115': attribute type 2 has an invalid length. [ 209.746428][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 209.798508][T10382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.967371][ T7052] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.080887][T10400] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1126'. [ 210.600680][T10425] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 210.826621][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 210.864546][T10433] syzkaller0: entered promiscuous mode [ 210.875890][T10433] syzkaller0: entered allmulticast mode [ 211.073299][T10449] xt_connbytes: Forcing CT accounting to be enabled [ 211.191484][T10454] __nla_validate_parse: 36 callbacks suppressed [ 211.191518][T10454] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1141'. [ 211.312134][T10454] syzkaller1: entered promiscuous mode [ 211.318967][T10454] syzkaller1: entered allmulticast mode [ 211.341128][T10454] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1141'. [ 211.627923][T10481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1149'. [ 211.804802][T10383] Bluetooth: hci1: command 0x0406 tx timeout [ 211.804913][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 211.811632][T10383] Bluetooth: hci3: command 0x0406 tx timeout [ 211.837926][T10489] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 211.938578][T10489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 212.234876][T10509] tipc: Started in network mode [ 212.243185][T10509] tipc: Node identity 9221dbd22728, cluster identity 4711 [ 212.272594][T10509] tipc: Enabled bearer , priority 0 [ 212.293031][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1160'. [ 212.307626][T10520] syzkaller0: entered promiscuous mode [ 212.313161][T10520] syzkaller0: entered allmulticast mode [ 212.468330][T10529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.477791][T10528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.117056][T10536] tipc: Resetting bearer [ 213.141790][T10538] team0: entered promiscuous mode [ 213.184138][T10538] team_slave_0: entered promiscuous mode [ 213.226779][T10538] team_slave_1: entered promiscuous mode [ 213.243195][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.266598][T10508] tipc: Resetting bearer [ 213.319221][T10548] netlink: 'syz.0.1164': attribute type 21 has an invalid length. [ 213.329741][T10508] tipc: Disabling bearer [ 213.379388][T10548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1164'. [ 213.423717][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 213.636955][T10558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.658214][T10558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.774938][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'. [ 213.927894][ T30] audit: type=1804 audit(1774239906.191:4): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1173" name="/newroot/232/cgroup.controllers" dev="tmpfs" ino=1206 res=1 errno=0 [ 214.026508][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 214.063309][ T30] audit: type=1800 audit(1774239906.191:5): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1173" name="cgroup.controllers" dev="tmpfs" ino=1206 res=0 errno=0 [ 214.282675][T10613] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1179'. [ 214.369870][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 214.740658][T10637] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.828053][T10698] netlink: 'syz.4.1203': attribute type 30 has an invalid length. [ 215.905091][T10704] virt_wifi0 speed is unknown, defaulting to 1000 [ 216.215648][T10719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.664631][T10739] virt_wifi0 speed is unknown, defaulting to 1000 [ 216.941599][T10757] __nla_validate_parse: 7 callbacks suppressed [ 216.941619][T10757] netlink: 1336 bytes leftover after parsing attributes in process `syz.4.1219'. [ 217.046070][T10757] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 217.060336][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 217.070350][T10757] block nbd0: not configured, cannot reconfigure [ 217.080335][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 217.090630][T10758] block nbd0: not configured, cannot reconfigure [ 217.278096][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1222'. [ 217.311205][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 217.357047][T10775] syzkaller0: entered promiscuous mode [ 217.367225][T10775] syzkaller0: entered allmulticast mode [ 217.415995][T10778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.562901][T10785] hsr0: entered promiscuous mode [ 217.591694][T10785] hsr0: left promiscuous mode [ 217.772763][T10792] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 217.881886][T10802] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 218.210221][T10819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1236'. [ 218.446497][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 218.610036][T10824] virt_wifi0 speed is unknown, defaulting to 1000 [ 218.717979][T10834] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 218.827416][T10834] bond10: entered promiscuous mode [ 218.833359][T10834] bond10: entered allmulticast mode [ 218.841485][T10834] 8021q: adding VLAN 0 to HW filter on device bond10 [ 218.856925][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 218.893548][T10837] macvlan4: entered promiscuous mode [ 218.899318][T10837] macvlan4: entered allmulticast mode [ 218.919394][T10837] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 219.171816][T10846] netlink: 'syz.1.1244': attribute type 3 has an invalid length. [ 219.175163][T10847] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 219.209121][T10848] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 219.422182][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 219.540312][T10848] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.606603][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1246'. [ 219.616798][T10850] bond7: (slave geneve2): making interface the new active one [ 219.633926][T10850] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 219.653214][ T9773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.683735][ T9773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.710026][ T9773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.742238][ T9773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.996264][T10868] vlan0: entered allmulticast mode [ 220.001471][T10868] veth0_vlan: entered allmulticast mode [ 220.420321][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.431088][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.445497][T10884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.499558][ T1091] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 220.518303][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.536295][ T1091] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 220.567975][ T1091] bond0: now running without any active interface! [ 220.726867][T10894] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 220.778097][T10894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.817906][T10894] veth3: entered promiscuous mode [ 220.837890][T10894] bond5: (slave veth3): Enslaving as an active interface with an up link [ 221.129302][T10909] netlink: 'syz.1.1258': attribute type 12 has an invalid length. [ 221.238391][ T5923] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 221.476242][ T9773] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 221.655252][T10925] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 221.890910][T10935] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 222.397138][T10971] __nla_validate_parse: 3 callbacks suppressed [ 222.397158][T10971] netlink: 49 bytes leftover after parsing attributes in process `syz.1.1268'. [ 222.507364][T10971] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1268'. [ 222.517313][ T9769] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.565877][ T9769] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.612240][T10971] netlink: 49 bytes leftover after parsing attributes in process `syz.1.1268'. [ 222.657112][T10975] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 222.880185][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 222.950257][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 223.036007][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.284595][T10997] netlink: 'syz.2.1274': attribute type 13 has an invalid length. [ 223.332578][T10997] syz_tun: left promiscuous mode [ 223.366485][T10997] bridge0: port 3(gretap0) entered blocking state [ 223.373145][T10997] bridge0: port 3(gretap0) entered forwarding state [ 223.386676][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.399844][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.469050][T10997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.866114][T11011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.994787][T11023] virt_wifi0 speed is unknown, defaulting to 1000 [ 224.030484][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 224.120574][T11027] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 224.204028][T11025] vlan3: entered promiscuous mode [ 224.210446][T11025] syz_tun: entered promiscuous mode [ 224.256558][T11031] gretap0: entered promiscuous mode [ 224.262661][T11031] vlan3: entered promiscuous mode [ 224.316840][T11031] vlan3: entered promiscuous mode [ 224.358666][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 224.375864][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 224.451693][T11031] vlan3: entered promiscuous mode [ 224.612716][T11031] vlan3: entered promiscuous mode [ 224.638686][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 224.663284][T11042] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 224.670822][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 224.768139][T11031] vlan3: entered promiscuous mode [ 224.922559][T11031] vlan3: entered promiscuous mode [ 225.009327][T11031] vlan3: entered promiscuous mode [ 225.398193][T11071] netlink: 'syz.1.1292': attribute type 4 has an invalid length. [ 225.423923][T11071] .`: renamed from bond0 (while UP) [ 225.680430][T11085] nftables ruleset with unbound chain [ 225.869797][T11092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.881021][T11100] netlink: 'syz.1.1300': attribute type 2 has an invalid length. [ 226.095063][T11114] netlink: 'syz.2.1303': attribute type 13 has an invalid length. [ 226.131973][ T7052] IPVS: starting estimator thread 0... [ 226.240648][T11119] IPVS: using max 26 ests per chain, 62400 per kthread [ 226.418656][T11134] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 226.499540][T11138] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 226.521898][T11134] !©9: entered promiscuous mode [ 226.561004][T11138] !©9: left promiscuous mode [ 226.595690][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.075155][T11163] pim6reg1: entered promiscuous mode [ 227.089628][T11163] pim6reg1: entered allmulticast mode [ 227.112841][T11157] can: request_module (can-proto-0) failed. [ 227.159959][T11154] syzkaller1: entered promiscuous mode [ 227.165802][T11154] syzkaller1: entered allmulticast mode [ 227.271686][T11175] bridge0: port 3(gretap0) entered disabled state [ 227.312995][T11173] netlink: 'syz.0.1317': attribute type 11 has an invalid length. [ 227.560751][T11199] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.659206][T11193] virt_wifi0 speed is unknown, defaulting to 1000 [ 227.731194][T11199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.769877][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.780646][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.810471][ T30] audit: type=1800 audit(1774239920.081:6): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1324" name="memory.events" dev="tmpfs" ino=1374 res=0 errno=0 [ 227.852617][T11199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.932567][T11199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.005032][T11199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.113103][ T77] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.141875][ T77] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.162923][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.200203][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.365971][T11220] __nla_validate_parse: 11 callbacks suppressed [ 228.365993][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 228.577948][T11220] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 228.809637][T11241] netlink: 'syz.1.1335': attribute type 12 has an invalid length. [ 228.870725][T11241] netlink: 'syz.1.1335': attribute type 29 has an invalid length. [ 228.902612][T11241] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1335'. [ 228.936145][T11241] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1335'. [ 229.220504][T11262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1338'. [ 229.363786][T11275] IPv6: addrconf: prefix option has invalid lifetime [ 229.539167][T11284] tipc: Enabling of bearer rejected, failed to enable media [ 229.631392][T11294] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1346'. [ 229.659059][T11294] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1346'. [ 229.689449][T11290] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.705696][T11297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 229.801445][T11302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1350'. [ 229.841485][T11304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.104757][T11321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1356'. [ 230.140279][T11323] netlink: 'syz.4.1358': attribute type 4 has an invalid length. [ 230.160298][T11323] netlink: 'syz.4.1358': attribute type 4 has an invalid length. [ 230.331292][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 230.650863][T11339] syzkaller0: entered promiscuous mode [ 230.657730][T11339] syzkaller0: entered allmulticast mode [ 231.046833][T11360] macsec1: entered allmulticast mode [ 231.052231][T11360] macsec0: entered allmulticast mode [ 231.079863][T11360] macsec0: left allmulticast mode [ 231.205659][T11371] netlink: 'syz.3.1370': attribute type 4 has an invalid length. [ 231.230661][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.256401][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.678978][T11373] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 231.740881][T11397] netlink: 'syz.1.1376': attribute type 8 has an invalid length. [ 231.749839][T11397] sch_fq: defrate 0 ignored. [ 231.937874][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 231.956747][T11368] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 232.026982][T11415] rdma_rxe: rxe_newlink: failed to add bond0 [ 232.111124][T11415] bond0 (unregistering): left promiscuous mode [ 232.119043][T11415] bond_slave_0: left promiscuous mode [ 232.129833][T11415] bond_slave_1: left promiscuous mode [ 232.171607][T11415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.193205][T11415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.217492][T11415] bond0 (unregistering): Released all slaves [ 232.479106][T11421] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.573926][T11435] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.917634][T11460] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 232.925829][T11460] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 233.724031][T11492] __nla_validate_parse: 4 callbacks suppressed [ 233.724051][T11492] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1398'. [ 234.675650][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.717602][T11535] virt_wifi0 speed is unknown, defaulting to 1000 [ 234.867477][T11550] netlink: 'syz.2.1408': attribute type 4 has an invalid length. [ 234.898414][T11550] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1408'. [ 234.947448][T11550] .`: renamed from bond0 (while UP) [ 234.956025][T11555] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 235.039083][T11555] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1413'. [ 235.217442][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 235.722794][T11600] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 235.812211][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 235.839740][T11600] bond0: (slave bridge4): making interface the new active one [ 235.848725][T11600] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 235.863686][T11600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1423'. [ 235.957520][T11612] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.978803][T11612] bond0 (unregistering): Released all slaves [ 236.165863][T11615] virt_wifi0 speed is unknown, defaulting to 1000 [ 236.209561][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 236.331940][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1428'. [ 236.380061][T11623] ip6gre1: entered promiscuous mode [ 236.408227][T11623] ip6gre1: entered allmulticast mode [ 236.466087][T11634] netlink: 'syz.3.1431': attribute type 3 has an invalid length. [ 236.492685][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 236.505840][T11638] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1428'. [ 236.666625][T11644] tipc: Enabled bearer , priority 10 [ 236.678140][T11648] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 236.732084][T11649] bond6: entered promiscuous mode [ 236.785976][T11649] bond6: entered allmulticast mode [ 236.791920][T11649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.801864][T11654] bridge0: port 1(macsec0) entered blocking state [ 236.832401][T11654] bridge0: port 1(macsec0) entered disabled state [ 236.840340][T11657] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 236.852253][T11654] macsec0: entered allmulticast mode [ 236.858877][T11654] veth1_macvtap: entered allmulticast mode [ 236.868725][T11654] macsec0: entered promiscuous mode [ 237.926342][T11675] bond0: entered promiscuous mode [ 237.966097][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.080261][T11682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 238.089666][T11682] bond11: entered promiscuous mode [ 238.095957][T11682] bond0: (slave bond11): Enslaving as an active interface with an up link [ 238.110526][ T5923] tipc: Node number set to 3037322194 [ 238.182578][T11701] syzkaller0: entered promiscuous mode [ 238.190427][T11701] syzkaller0: entered allmulticast mode [ 238.941423][T11758] virt_wifi0 speed is unknown, defaulting to 1000 [ 239.007539][T11761] __nla_validate_parse: 4 callbacks suppressed [ 239.007564][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'. [ 239.201529][T11772] dvmrp12: entered allmulticast mode [ 239.231410][T11766] dvmrp12: left allmulticast mode [ 239.271209][T11774] erspan0: entered promiscuous mode [ 239.277175][T11776] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1464'. [ 239.302502][T11774] 8021q: adding VLAN 0 to HW filter on device .` [ 239.311932][T11774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.386891][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 239.512057][T11786] netlink: 'syz.0.1468': attribute type 12 has an invalid length. [ 239.560856][T11787] virt_wifi0 speed is unknown, defaulting to 1000 [ 239.601503][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1469'. [ 239.654063][T11792] xt_bpf: check failed: parse error [ 239.668478][T11792] tipc: New replicast peer: 255.255.255.255 [ 239.678246][T11792] tipc: Enabled bearer , priority 10 [ 239.841159][T11796] tipc: Enabling of bearer rejected, failed to enable media [ 240.149931][T11811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1475'. [ 240.170432][T11814] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1476'. [ 240.190056][T11814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.299928][T11811] bridge0: entered promiscuous mode [ 240.308070][T11811] macsec1: entered promiscuous mode [ 240.580837][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 240.710678][ T5923] tipc: Node number set to 414149696 [ 240.728415][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'. [ 240.980777][T11848] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1484'. [ 240.990413][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 241.041848][T11850] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.139430][T11850] syzkaller0: entered promiscuous mode [ 241.145033][T11850] syzkaller0: entered allmulticast mode [ 241.554930][T11861] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.004620][T11893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.227816][T11898] syzkaller0: entered promiscuous mode [ 242.234408][T11898] syzkaller0: entered allmulticast mode [ 242.309213][T11911] netlink: 'syz.3.1500': attribute type 10 has an invalid length. [ 243.924005][T11911] dummy0: entered promiscuous mode [ 243.930790][T11911] team0: Port device dummy0 added [ 243.944811][T11916] macsec2: entered allmulticast mode [ 243.952231][T11916] team0: entered allmulticast mode [ 243.960713][T11916] team_slave_0: entered allmulticast mode [ 243.967885][T11916] team_slave_1: entered allmulticast mode [ 243.995538][T11916] team0: left allmulticast mode [ 244.000755][T11916] team_slave_0: left allmulticast mode [ 244.010901][T11916] team_slave_1: left allmulticast mode [ 244.353698][T11946] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 244.465024][T11950] __nla_validate_parse: 12 callbacks suppressed [ 244.465050][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 244.592664][T11956] syzkaller0: entered promiscuous mode [ 244.600728][T11956] syzkaller0: entered allmulticast mode [ 244.985136][T11986] bridge0: port 3(gretap0) entered disabled state [ 245.231425][T11996] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.571009][T11958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.353520][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 248.494706][T12040] bond13: Unable to set up delay as MII monitoring is disabled [ 248.515297][T12040] bond13 (unregistering): Released all slaves [ 248.669480][T12054] syzkaller0: create flow: hash 842791218 index 1 [ 248.682514][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 248.713404][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'. [ 248.749221][T12050] ip6tnl2: entered promiscuous mode [ 248.754521][T12050] ip6tnl2: entered allmulticast mode [ 248.772713][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 248.857744][T12047] syzkaller0: delete flow: hash 842791218 index 1 [ 250.413465][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 250.436502][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 250.475530][T12075] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.616626][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 250.641084][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 250.652211][T12084] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 250.661081][T12095] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 250.671047][T12091] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 250.685959][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.698231][T12093] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 250.707249][T12089] macvlan2: entered allmulticast mode [ 250.721290][T12089] hsr0: entered allmulticast mode [ 250.726888][T12089] hsr_slave_0: entered allmulticast mode [ 250.732738][T12089] hsr_slave_1: entered allmulticast mode [ 250.740515][T12095] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 250.862455][T12084] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 250.901959][T12091] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 250.975879][T12085] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.004426][T12103] x_tables: duplicate underflow at hook 2 [ 251.022404][T12112] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.350312][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 251.432510][T12127] SET target dimension over the limit! [ 251.836373][T12157] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.857651][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 252.124071][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'. [ 252.149952][T12167] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1563'. [ 252.455016][T12179] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 252.507774][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1569'. [ 252.560391][T12179] 8021q: adding VLAN 0 to HW filter on device bond13 [ 252.617516][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 252.686715][T12192] macsec2: entered promiscuous mode [ 252.692019][T12192] macsec2: entered allmulticast mode [ 252.752013][T12191] bond13: (slave gretap3): making interface the new active one [ 252.777622][T12191] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 252.896391][T12186] bond13 (unregistering): (slave gretap3): Releasing active interface [ 252.927014][T12186] bond13 (unregistering): Released all slaves [ 253.302943][T12224] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 253.314342][T12224] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 253.324716][T12224] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 253.766647][T12249] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.778899][T12253] pim6reg1: entered promiscuous mode [ 253.787683][T12253] pim6reg1: entered allmulticast mode [ 254.268514][T12263] veth1_to_batadv: entered promiscuous mode [ 254.277364][T12263] veth1_to_batadv: entered allmulticast mode [ 254.831551][T12297] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 255.572335][T12333] netlink: 'syz.0.1610': attribute type 5 has an invalid length. [ 255.800348][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.812020][T12340] team0: left promiscuous mode [ 255.816825][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855613][T12340] team_slave_0: left promiscuous mode [ 255.870000][T12340] team_slave_1: left promiscuous mode [ 255.915629][T12340] dummy0: left promiscuous mode [ 256.074053][T12340] gretap1: left promiscuous mode [ 256.097453][T12340] bond6: left promiscuous mode [ 256.102453][T12340] bond6: left allmulticast mode [ 256.129586][T12346] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.214024][T12358] __nla_validate_parse: 8 callbacks suppressed [ 256.214047][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 256.330720][T12358] bond13: entered promiscuous mode [ 256.342844][T12358] 8021q: adding VLAN 0 to HW filter on device bond13 [ 256.379127][T12363] 8021q: adding VLAN 0 to HW filter on device bond14 [ 256.388280][T12363] bond14: entered promiscuous mode [ 256.394321][T12363] bond13: (slave bond14): Enslaving as an active interface with an up link [ 256.825992][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 256.866582][T12391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1627'. [ 257.533412][T12419] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.696555][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 258.841629][T12486] netlink: 2668 bytes leftover after parsing attributes in process `syz.4.1643'. [ 258.842760][T12487] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.871549][T12486] netlink: 'syz.4.1643': attribute type 11 has an invalid length. [ 259.190245][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1646'. [ 259.262808][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 259.395330][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1648'. [ 259.418980][T12504] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 259.453819][T12504] bond5: left promiscuous mode [ 259.476183][ T7052] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.501179][T12504] bond6: left promiscuous mode [ 259.526345][T12504] macsec1: left promiscuous mode [ 260.275680][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.490087][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 260.612615][T12543] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.707493][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 261.389966][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 261.670098][T12563] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.732421][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'. [ 261.761908][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 261.980016][T12565] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1665'. [ 262.166385][T12585] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1668'. [ 262.255038][T12585] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 262.280105][T12585] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1668'. [ 262.722986][T12605] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1672'. [ 263.110291][T12622] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.495228][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 263.926703][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 265.644487][T12607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.941003][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 266.427140][T12676] __nla_validate_parse: 1 callbacks suppressed [ 266.427158][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 266.988408][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 267.032247][T12690] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 267.047013][T12690] syzkaller0: entered promiscuous mode [ 267.052555][T12690] syzkaller0: entered allmulticast mode [ 267.067869][T12690] tipc: Enabled bearer , priority 0 [ 267.082415][T12689] tipc: Resetting bearer [ 267.127983][T12689] tipc: Disabling bearer [ 267.158229][T12692] veth1_to_team: Caught tx_queue_len zero misconfig [ 267.164925][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1697'. [ 267.512618][T12706] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 267.597530][T12706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.901094][T12727] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1708'. [ 267.919674][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 267.930065][T12727] netlink: 'syz.1.1708': attribute type 9 has an invalid length. [ 267.945631][T12727] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1708'. [ 267.966483][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1708'. [ 268.030770][T12727] ip6gre3: entered promiscuous mode [ 268.041952][T12727] ip6gre3: entered allmulticast mode [ 268.063587][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 268.107851][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 268.131414][T12727] delete_channel: no stack [ 268.140744][T12742] €Â: renamed from bond_slave_0 [ 268.151999][T12737] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.214276][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 268.366052][T12744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.702257][T12767] bond7: entered promiscuous mode [ 268.707728][T12767] bond7: entered allmulticast mode [ 268.713426][T12767] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.852608][T12775] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 269.641507][T12833] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 269.662655][T12833] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 269.711771][T12833] netlink: 'syz.2.1732': attribute type 8 has an invalid length. [ 270.450723][T12856] IPv6: sit1: Disabled Multicast RS [ 270.517187][T12856] x_tables: unsorted underflow at hook 4 [ 270.711228][T12869] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 270.742649][T12869] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 270.997766][T12880] netlink: 'syz.1.1745': attribute type 21 has an invalid length. [ 271.120746][T12891] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 271.329931][T12905] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 271.498665][T12909] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 271.511366][T12909] __nla_validate_parse: 8 callbacks suppressed [ 271.511390][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1754'. [ 271.582438][T12917] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 271.719355][T12917] netlink: 'syz.0.1756': attribute type 2 has an invalid length. [ 271.737746][T12916] vlan3: entered promiscuous mode [ 271.742893][T12916] dummy0: entered promiscuous mode [ 272.345341][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1759'. [ 272.563170][T12952] netlink: 'syz.2.1761': attribute type 10 has an invalid length. [ 272.629772][T12954] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1760'. [ 273.046279][T12970] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1765'. [ 273.110938][T12970] team0: Port device dummy0 removed [ 273.324153][ T5829] Bluetooth: hci4: link tx timeout [ 273.333760][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.002699][T13008] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.548561][T13032] openvswitch: netlink: Missing valid actions attribute. [ 274.556615][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.569893][T13033] openvswitch: netlink: Missing valid actions attribute. [ 274.580521][T13033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.666678][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 274.991959][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 275.082048][T13054] tipc: Enabled bearer , priority 0 [ 275.106308][T13055] syzkaller0: entered promiscuous mode [ 275.111853][T13055] syzkaller0: entered allmulticast mode [ 275.222729][T13054] tipc: Resetting bearer [ 275.247016][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'. [ 275.256647][ T5923] hid-generic 0005:4C4A:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 275.297975][T13053] tipc: Resetting bearer [ 275.310292][T13076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1795'. [ 275.366317][T13053] tipc: Disabling bearer [ 275.396843][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 275.483027][T13085] netlink: 'syz.4.1798': attribute type 2 has an invalid length. [ 275.491881][T13081] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 275.517430][T13086] tc_dump_action: action bad kind [ 275.703633][T13099] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 275.783531][T13099] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 275.890308][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 275.909477][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1807'. [ 276.374504][T13146] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 276.667553][T13163] __nla_validate_parse: 2 callbacks suppressed [ 276.667575][T13163] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1820'. [ 276.752830][T13163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'. [ 276.860731][T13172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.878865][T13176] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 276.887021][T13177] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 276.919683][T13176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.934379][T13176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1823'. [ 276.957276][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1824'. [ 276.993653][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 277.009603][T13183] tipc: Enabled bearer , priority 0 [ 277.065657][T13187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1827'. [ 277.115611][T13187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1827'. [ 277.246988][T13192] tipc: Disabling bearer [ 277.305059][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1831'. [ 277.438355][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 277.448999][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 277.570878][T13213] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 277.582385][ T5829] block nbd1: Receive control failed (result -1) [ 277.604122][T13213] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 277.663721][T13215] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 277.673465][T13215] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 277.682761][T13219] virt_wifi0 speed is unknown, defaulting to 1000 [ 278.202632][T13231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.232120][T13231] netlink: 'syz.4.1838': attribute type 2 has an invalid length. [ 278.281379][T13234] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 278.475049][T13240] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.680870][T13219] IPVS: You probably need to specify IP address on multicast interface. [ 278.723422][T13219] IPVS: Error connecting to the multicast addr [ 279.171495][T13269] 8021q: adding VLAN 0 to HW filter on device bond16 [ 279.236501][T13272] macvtap1: entered promiscuous mode [ 279.242242][T13272] bond16: entered promiscuous mode [ 279.304354][T13272] macvtap1: entered allmulticast mode [ 279.313556][T13272] bond16: entered allmulticast mode [ 279.323501][T13272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.333465][T13272] bond16: left allmulticast mode [ 279.341811][T13272] bond16: left promiscuous mode [ 279.462519][T13272] macvtap1: entered promiscuous mode [ 279.486497][T13272] bond16: entered promiscuous mode [ 279.491978][T13272] macvtap1: entered allmulticast mode [ 279.525262][T13272] bond16: entered allmulticast mode [ 279.546274][T13272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.557589][T13272] bond16: left allmulticast mode [ 279.562611][T13272] bond16: left promiscuous mode [ 279.642537][T13272] macvtap1: entered promiscuous mode [ 279.649279][T13272] bond16: entered promiscuous mode [ 279.654940][T13272] macvtap1: entered allmulticast mode [ 279.660793][T13272] bond16: entered allmulticast mode [ 279.670283][T13272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.680011][T13272] bond16: left allmulticast mode [ 279.685252][T13272] bond16: left promiscuous mode [ 279.767051][T13272] macvtap1: entered promiscuous mode [ 279.784826][T13272] bond16: entered promiscuous mode [ 279.790971][T13272] macvtap1: entered allmulticast mode [ 279.800931][T13272] bond16: entered allmulticast mode [ 279.807636][T13272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.819157][T13272] bond16: left allmulticast mode [ 279.824148][T13272] bond16: left promiscuous mode [ 279.853022][T13284] xfrm0: entered promiscuous mode [ 279.858862][T13284] xfrm0: entered allmulticast mode [ 279.905851][T13272] macvtap1: entered promiscuous mode [ 279.911494][T13272] bond16: entered promiscuous mode [ 279.925871][T13272] macvtap1: entered allmulticast mode [ 279.939649][T13272] bond16: entered allmulticast mode [ 279.953660][T13272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.968753][T13302] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 279.982356][T13272] bond16: left allmulticast mode [ 279.999716][T13272] bond16: left promiscuous mode [ 280.032480][T13302] team0: entered promiscuous mode [ 280.038073][T13302] team_slave_0: entered promiscuous mode [ 280.044247][T13302] team_slave_1: entered promiscuous mode [ 280.051876][T13302] team0: entered allmulticast mode [ 280.075789][T13302] team_slave_0: entered allmulticast mode [ 280.093134][T13302] team_slave_1: entered allmulticast mode [ 280.102506][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.111106][T13302] bridge0: port 5(team0) entered blocking state [ 280.123808][T13302] bridge0: port 5(team0) entered disabled state [ 280.249634][T13313] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 280.394234][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.410351][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.492640][T13306] veth1_macvtap: left allmulticast mode [ 280.626209][T13313] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 280.665574][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.730222][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.757278][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.778720][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.797980][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.835931][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.878453][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.896717][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.957302][T13345] netlink: 'syz.0.1870': attribute type 13 has an invalid length. [ 281.417383][T13371] netlink: 'syz.4.1876': attribute type 6 has an invalid length. [ 281.435180][T13371] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.442557][T13373] syzkaller0: entered promiscuous mode [ 281.456078][T13373] syzkaller0: entered allmulticast mode [ 281.473723][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.518048][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.525419][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.532448][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.539305][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.546224][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.553041][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.559968][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.566801][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.573642][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.580511][T13373] tc action pedit offset must be on 32 bit boundaries [ 281.587366][T13373] 0: reclassify loop, rule prio 0, protocol 800 [ 281.921224][T13398] xt_hashlimit: size too large, truncated to 1048576 [ 281.928849][T13398] xt_hashlimit: invalid interval [ 281.957541][T13398] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 282.045327][T13403] __nla_validate_parse: 16 callbacks suppressed [ 282.045351][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 282.064532][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 282.180072][T13411] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.882535][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1895'. [ 282.963778][T13443] lo: entered allmulticast mode [ 282.971034][T13443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.284715][T13460] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1901'. [ 283.315604][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.524618][T13470] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1903'. [ 283.686120][T13472] netlink: 'syz.4.1904': attribute type 3 has an invalid length. [ 283.693972][T13472] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 283.713244][T13472] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1904'. [ 283.773465][T13472] NCSI netlink: No device for ifindex 808464432 [ 283.978636][T13491] netlink: 'syz.3.1911': attribute type 153 has an invalid length. [ 284.042852][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 284.062345][T13502] bond0: Unable to set up delay as MII monitoring is disabled [ 284.164548][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 284.202205][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.226191][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.244114][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.336340][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.364881][T13507] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.400694][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.449586][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.494078][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.540700][T13513] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 284.598698][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 284.916656][T13551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1922'. [ 285.291947][T13586] team0 (unregistering): Port device team_slave_0 removed [ 285.308664][T13586] team0 (unregistering): Port device team_slave_1 removed [ 286.982280][T13669] team0: Port device veth7 added [ 287.224824][T13688] __nla_validate_parse: 6 callbacks suppressed [ 287.224848][T13688] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1964'. [ 287.725184][T13715] sctp: [Deprecated]: syz.4.1970 (pid 13715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.725184][T13715] Use struct sctp_sack_info instead [ 288.010245][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 288.122071][T13735] netlink: 'syz.1.1976': attribute type 55 has an invalid length. [ 288.201881][T13744] nbd: couldn't find a device at index 0 [ 288.207954][T13746] nbd: couldn't find a device at index 0 [ 288.243502][T13747] SET target dimension over the limit! [ 288.268323][T13747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1979'. [ 288.441912][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'. [ 288.457796][T13755] net_ratelimit: 28 callbacks suppressed [ 288.457818][T13755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.514506][T13755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1982'. [ 288.534497][T13755] syzkaller0: entered promiscuous mode [ 288.540671][T13755] syzkaller0: entered allmulticast mode [ 288.563035][T13755] tipc: Enabled bearer , priority 0 [ 288.572496][T13753] tipc: Resetting bearer [ 288.634625][T13753] tipc: Disabling bearer [ 288.900797][T13769] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1986'. [ 289.163165][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 289.234263][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 289.618483][T13797] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.709394][T13803] Bluetooth: MGMT ver 1.23 [ 289.727390][T13805] netlink: 'syz.2.1998': attribute type 19 has an invalid length. [ 289.736691][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1997'. [ 289.756222][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 289.827587][T13805] netlink: 'syz.2.1998': attribute type 19 has an invalid length. [ 289.829105][ T1148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.844178][ T1148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.857382][ T1148] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.876079][ T1148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.455109][T13831] syzkaller0: entered promiscuous mode [ 290.478163][T13831] syzkaller0: entered allmulticast mode [ 291.265304][T13848] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 291.301678][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.347411][T13848] bond8: entered promiscuous mode [ 291.353149][T13848] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.423589][T13856] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 291.460563][T13859] pimreg: entered allmulticast mode [ 291.582644][T13870] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 291.593899][T13870] netlink: 'syz.4.2016': attribute type 4 has an invalid length. [ 291.630712][T13870] team_slave_0: entered promiscuous mode [ 291.644644][T13870] team_slave_0: entered allmulticast mode [ 291.715714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.790061][T13876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.636457][T13934] syzkaller0: entered promiscuous mode [ 292.642270][T13934] syzkaller0: entered allmulticast mode [ 293.631499][T13989] netlink: 'syz.1.2041': attribute type 13 has an invalid length. [ 293.654261][T13988] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 293.690212][T13988] netlink: 'syz.0.2040': attribute type 2 has an invalid length. [ 293.806471][ T5944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.886979][T14008] ip6tnl0: Caught tx_queue_len zero misconfig [ 294.105019][ T5944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.288018][T14028] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 294.343542][T14028] __nla_validate_parse: 7 callbacks suppressed [ 294.343561][T14028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2048'. [ 294.343845][T14033] lo: Caught tx_queue_len zero misconfig [ 294.398571][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 294.466033][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 294.573873][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 294.851711][T14049] 8021q: adding VLAN 0 to HW filter on device bond9 [ 294.896482][T14053] bond9: (slave geneve2): making interface the new active one [ 294.906416][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.934112][T14053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.953165][T14053] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 294.986004][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 295.005268][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.025963][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.034248][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.108304][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.135939][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.167330][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.354685][T14070] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2057'. [ 295.404834][T14070] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 295.602898][T14083] syzkaller1: entered promiscuous mode [ 295.609354][T14083] syzkaller1: entered allmulticast mode [ 295.780377][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2063'. [ 295.889227][T14086] veth9: entered promiscuous mode [ 295.912599][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.925707][T14089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 295.986168][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.116486][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.148544][T14105] syzkaller0: entered promiscuous mode [ 296.154101][T14105] syzkaller0: entered allmulticast mode [ 296.244206][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 296.336076][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 296.482349][T14112] team_slave_0 (unregistering): left promiscuous mode [ 296.503861][T14112] team_slave_0 (unregistering): left allmulticast mode [ 296.514039][T14112] team0: Port device team_slave_0 removed [ 296.549997][T14117] validate_nla: 1 callbacks suppressed [ 296.550019][T14117] netlink: 'syz.4.2069': attribute type 16 has an invalid length. [ 296.564320][T14117] netlink: 'syz.4.2069': attribute type 17 has an invalid length. [ 296.717536][T14117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.927711][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.937739][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.007048][T14129] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.196340][T14141] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 297.821095][T14164] syzkaller0: entered promiscuous mode [ 297.845854][T14164] syzkaller0: entered allmulticast mode [ 298.707436][T14176] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 298.717071][T14176] netlink: 'syz.1.2084': attribute type 2 has an invalid length. [ 299.176410][T14190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.186714][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.909531][T14197] __nla_validate_parse: 1 callbacks suppressed [ 299.909553][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2090'. [ 299.933956][T14198] netlink: 'syz.3.2091': attribute type 32 has an invalid length. [ 299.943031][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 299.969734][T14199] pimreg: entered allmulticast mode [ 300.029317][T14198] bond7: option coupled_control: invalid value (84) [ 300.039986][T14198] bond7 (unregistering): Released all slaves [ 300.068640][T14197] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 300.140991][T14208] veth7: entered promiscuous mode [ 300.414280][T14241] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 300.440141][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 300.444458][T14241] netlink: 728 bytes leftover after parsing attributes in process `syz.0.2100'. [ 300.460414][ T9767] net_ratelimit: 5 callbacks suppressed [ 300.460434][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.484815][ T30] audit: type=1800 audit(1774239992.751:7): pid=14244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2101" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2244 res=0 errno=0 [ 300.515727][T14242] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2100'. [ 300.541890][T14245] netlink: 'syz.2.2099': attribute type 3 has an invalid length. [ 300.675750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.701390][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 300.799681][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'. [ 300.855839][T14265] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.149211][T14278] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.190858][T14282] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 301.220363][T14282] bridge3: entered allmulticast mode [ 301.291712][T14286] geneve3: entered promiscuous mode [ 301.322314][T14286] netlink: 'syz.3.2112': attribute type 4 has an invalid length. [ 301.356114][T14286] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2112'. [ 301.398712][T14290] netlink: zone id is out of range [ 301.404006][ T9767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.421704][ T9767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.432132][T14293] netlink: 'syz.2.2115': attribute type 21 has an invalid length. [ 301.501496][T14297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.531344][ T9767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.562045][ T9767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.575947][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.910563][T14312] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.600577][T14327] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.686475][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.829067][T14345] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 302.912620][T14345] bond17: entered promiscuous mode [ 302.935956][T14345] 8021q: adding VLAN 0 to HW filter on device bond17 [ 303.018663][T14324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2123'. [ 303.037611][T14350] bond17: (slave bridge9): making interface the new active one [ 303.055713][T14350] bridge9: entered promiscuous mode [ 303.069871][T14350] bridge9: left promiscuous mode [ 303.120123][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 303.350066][T14366] netlink: 'syz.0.2131': attribute type 13 has an invalid length. [ 303.396026][T14366] netlink: 'syz.0.2131': attribute type 17 has an invalid length. [ 303.483684][T14366] erspan0: left promiscuous mode [ 303.536062][T14366] bridge0: left allmulticast mode [ 303.547694][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.575671][T14366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.664709][T14374] x_tables: unsorted underflow at hook 2 [ 303.679990][T14374] x_tables: unsorted underflow at hook 2 [ 303.836123][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.854671][T14383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.905009][T14386] batadv0: entered promiscuous mode [ 303.911283][T14386] batadv0: entered allmulticast mode [ 304.048261][T14392] netlink: 'syz.1.2139': attribute type 142 has an invalid length. [ 304.057365][T14393] netlink: 'syz.1.2139': attribute type 142 has an invalid length. [ 304.149966][T14395] netlink: 'syz.1.2140': attribute type 14 has an invalid length. [ 304.165694][T14395] netlink: 'syz.1.2140': attribute type 11 has an invalid length. [ 304.265801][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.508386][T14412] ip6tnl0: Caught tx_queue_len zero misconfig [ 304.726605][T14417] bond10 (unregistering): Released all slaves [ 304.820193][T14418] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.871299][T14431] tipc: Enabled bearer , priority 0 [ 304.879999][T14431] syzkaller0: entered promiscuous mode [ 304.886584][T14431] syzkaller0: entered allmulticast mode [ 304.971078][T14431] tipc: Resetting bearer [ 305.002422][T14430] tipc: Resetting bearer [ 305.079295][T14430] tipc: Disabling bearer [ 305.123925][T14443] netlink: 'syz.3.2155': attribute type 3 has an invalid length. [ 305.243888][T14452] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 305.280534][T14452] __nla_validate_parse: 7 callbacks suppressed [ 305.280557][T14452] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2154'. [ 305.494384][T14467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2158'. [ 305.576303][T14476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2160'. [ 305.657585][T14480] erspan0: entered promiscuous mode [ 306.066098][ T1111] net_ratelimit: 1 callbacks suppressed [ 306.066119][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.099451][T14499] netlink: 'syz.1.2164': attribute type 32 has an invalid length. [ 306.138440][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 306.213935][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 306.224275][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 306.412901][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 306.466092][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2170'. [ 306.678427][T14533] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 306.705950][T14533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2175'. [ 306.733094][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 307.436676][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.628194][T14558] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 307.730113][T14558] bond9 (unregistering): Released all slaves [ 307.859771][T14574] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.136808][T14586] validate_nla: 1 callbacks suppressed [ 308.136831][T14586] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 308.156593][T14586] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 308.285905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.536143][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.661606][T14609] xt_recent: Unsupported userspace flags (000000b1) [ 308.786055][T14617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.811613][T14614] tipc: Enabled bearer , priority 0 [ 308.962641][T14614] syzkaller0: entered promiscuous mode [ 308.971714][T14614] syzkaller0: entered allmulticast mode [ 308.980088][T14614] tipc: Resetting bearer [ 309.016031][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.103129][T14631] 8021q: adding VLAN 0 to HW filter on device bond9 [ 309.124446][T14613] tipc: Resetting bearer [ 309.137514][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.650044][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.205665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.775817][ T9770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.119273][T14613] tipc: Disabling bearer [ 311.144562][T14642] tipc: Enabling of bearer rejected, failed to enable media [ 311.159085][ T30] audit: type=1800 audit(1774240003.431:8): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2198" name="memory.events" dev="tmpfs" ino=2166 res=0 errno=0 [ 311.187123][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.514655][T14687] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 311.561491][T14687] erspan1: entered allmulticast mode [ 311.674268][T14697] __nla_validate_parse: 10 callbacks suppressed [ 311.674290][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2204'. [ 311.876201][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.038256][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.080702][T14697] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 312.479445][T14752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 312.683465][T14754] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.810123][T14749] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.823710][T14769] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 312.883290][T14769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 312.895476][T14771] syzkaller1: entered promiscuous mode [ 312.901166][T14771] syzkaller1: entered allmulticast mode [ 313.005769][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.099256][T14771] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 313.114674][T14771] bond10 (unregistering): Released all slaves [ 313.128667][T14785] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 313.273473][T14785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.297583][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2218'. [ 313.356934][T14786] bond7: (slave geneve4): making interface the new active one [ 313.378542][T14786] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 313.598613][ T9770] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.619039][ T9770] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.649919][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2221'. [ 313.685138][ T9770] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.707407][ T9770] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.835919][T14800] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.989438][T14805] xt_hashlimit: size too large, truncated to 1048576 [ 314.116893][ T9770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.148327][T14826] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2225'. [ 314.186020][T14826] netlink: 'syz.4.2225': attribute type 9 has an invalid length. [ 314.194027][T14826] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2225'. [ 314.203469][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2225'. [ 314.879635][T14868] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 314.907213][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2233'. [ 314.926516][T14869] netlink: 'syz.4.2234': attribute type 3 has an invalid length. [ 315.184992][T14874] : entered promiscuous mode [ 315.225784][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.551422][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2242'. [ 315.720843][T14912] netlink: 'syz.1.2247': attribute type 28 has an invalid length. [ 315.740085][T14912] netlink: 'syz.1.2247': attribute type 3 has an invalid length. [ 315.765471][T14912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2247'. [ 315.975973][T14928] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 316.122432][T14935] netlink: 'syz.3.2254': attribute type 62 has an invalid length. [ 316.153153][T14935] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 316.298319][T14939] bond8: (slave bridge6): making interface the new active one [ 316.307531][T14939] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 316.327835][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.339886][T14942] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 316.464726][T14942] 8021q: adding VLAN 0 to HW filter on device bond9 [ 316.480886][T14951] netlink: 'syz.0.2256': attribute type 15 has an invalid length. [ 316.584517][ T1111] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 316.605911][ T1111] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 316.648579][ T1111] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 316.696457][ T1111] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 317.242388][ T1304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.436091][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.792138][T15027] __nla_validate_parse: 5 callbacks suppressed [ 317.792162][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2276'. [ 317.812824][T15025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2277'. [ 317.916641][T15028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 317.927919][T15028] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.201727][T15044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.429907][T15053] bond0: entered promiscuous mode [ 318.443984][T15053] bond0: Caught tx_queue_len zero misconfig [ 318.454670][T15052] bond0: left promiscuous mode [ 318.513434][T15055] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 318.523180][T15055] netlink: 'syz.1.2287': attribute type 11 has an invalid length. [ 318.566070][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.664255][T15059] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 318.905878][T15070] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 319.129882][T15075] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.167357][T15081] bond10: (slave veth11): Enslaving as an active interface with a down link [ 319.187973][T15084] tipc: Enabled bearer , priority 0 [ 319.194738][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2297'. [ 319.214647][T15084] syzkaller0: entered promiscuous mode [ 319.221628][T15084] syzkaller0: entered allmulticast mode [ 319.263424][T15084] tipc: Resetting bearer [ 319.288738][T15083] tipc: Resetting bearer [ 319.321877][T15083] tipc: Disabling bearer [ 319.355287][T15075] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 319.375939][T15075] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 319.432508][T15094] validate_nla: 3 callbacks suppressed [ 319.432524][T15094] netlink: 'syz.0.2299': attribute type 4 has an invalid length. [ 319.484061][T15094] netlink: 'syz.0.2299': attribute type 4 has an invalid length. [ 319.496633][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 319.506246][T15098] nbd: must specify a size in bytes for the device [ 319.525226][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 319.536075][T15098] nbd: must specify a size in bytes for the device [ 319.705920][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.940616][T15121] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2307'. [ 320.004766][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2307'. [ 320.080784][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 320.815867][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.447110][ C0] ------------[ cut here ]------------ [ 321.452960][ C0] sk->sk_forward_alloc [ 321.452997][ C0] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#0: syz.4.2323/15177 [ 321.467658][ C0] Modules linked in: [ 321.471864][ C0] CPU: 0 UID: 0 PID: 15177 Comm: syz.4.2323 Not tainted syzkaller #0 PREEMPT(full) [ 321.481327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.491541][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 321.497452][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 30 69 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 22 69 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 14 69 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 321.517250][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 321.523386][ C0] RAX: ffffffff8a2637ec RBX: dffffc0000000000 RCX: ffff888034cc3d00 [ 321.531459][ C0] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 321.539624][ C0] RBP: 0000000000000090 R08: ffff88807ccc93a7 R09: 1ffff1100f999274 [ 321.542908][T15180] netlink: 'syz.0.2324': attribute type 58 has an invalid length. [ 321.547699][ C0] R10: dffffc0000000000 R11: ffffed100f999275 R12: ffff88807ccc9100 [ 321.547728][ C0] R13: dffffc0000000000 R14: ffff88807ccc938c R15: ffffffff8fca5540 [ 321.547747][ C0] FS: 000055556af7d500(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 321.547768][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.547785][ C0] CR2: 0000200000000040 CR3: 0000000050e9c000 CR4: 00000000003526f0 [ 321.547807][ C0] Call Trace: [ 321.547816][ C0] [ 321.547829][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 321.564347][T15180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2324'. [ 321.571864][ C0] __sk_destruct+0x85/0x880 [ 321.620917][ C0] ? rcu_core+0x751/0x1070 [ 321.625490][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 321.630657][ C0] rcu_core+0x7cd/0x1070 [ 321.634985][ C0] ? __pfx_rcu_core+0x10/0x10 [ 321.639864][ C0] ? sched_balance_domains+0x13a/0x950 [ 321.645538][ C0] handle_softirqs+0x22a/0x870 [ 321.650496][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 321.655422][ C0] __irq_exit_rcu+0x5f/0x150 [ 321.660075][ C0] irq_exit_rcu+0x9/0x30 [ 321.664381][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 321.670268][ C0] [ 321.673238][ C0] [ 321.676265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.682425][ C0] RIP: 0010:unmapped_area_topdown+0x18b/0x5b0 [ 321.688632][ C0] Code: ff e8 f9 a5 0f 00 4d 03 2f 4c 89 ef 4c 89 f6 e8 1b 66 a5 ff 4d 39 f5 73 0a e8 b1 63 a5 ff e9 9d 00 00 00 49 89 df 4c 8d 73 10 <4c> 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf a5 0f 00 [ 321.708573][ C0] RSP: 0018:ffffc90005fcf920 EFLAGS: 00000246 [ 321.715029][ C0] RAX: ffffffff82203d45 RBX: ffffc90005fcfb40 RCX: ffff888034cc3d00 [ 321.723194][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000021000 [ 321.731282][ C0] RBP: ffffc90005fcfa78 R08: ffffc90005fcf9f7 R09: 0000000000000000 [ 321.739476][ C0] R10: ffffc90005fcf9a8 R11: fffff52000bf9f3f R12: dffffc0000000000 [ 321.747542][ C0] R13: 0000000000021000 R14: ffffc90005fcfb50 R15: ffffc90005fcfb40 [ 321.755615][ C0] ? unmapped_area_topdown+0x175/0x5b0 [ 321.761267][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 321.766350][ C0] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 321.772255][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 321.777314][ C0] vm_unmapped_area+0x69/0x260 [ 321.782187][ C0] arch_get_unmapped_area_topdown+0x923/0xb60 [ 321.788437][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 321.795170][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 321.800234][ C0] ? futex_hash+0x40/0x2d0 [ 321.804747][ C0] ? futex_hash+0x2ad/0x2d0 [ 321.809342][ C0] ? futex_hash_put+0x4b/0x60 [ 321.814161][ C0] __get_unmapped_area+0x2a7/0x450 [ 321.819445][ C0] do_mmap+0x4aa/0x10c0 [ 321.823692][ C0] ? __pfx_do_mmap+0x10/0x10 [ 321.828423][ C0] ? down_write_killable+0x180/0x240 [ 321.833850][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 321.839599][ C0] ? apparmor_mmap_file+0x197/0x3e0 [ 321.845020][ C0] ? security_mmap_file+0x4df/0xa20 [ 321.850409][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 321.855165][ C0] ? __se_sys_futex+0x3a8/0x450 [ 321.860126][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 321.865433][ C0] ? exc_page_fault+0x6a/0xc0 [ 321.870156][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 321.875498][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 321.880413][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 321.885207][ C0] do_syscall_64+0x14d/0xf80 [ 321.889962][ C0] ? trace_irq_disable+0x3b/0x150 [ 321.895057][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.901213][ C0] ? clear_bhb_loop+0x40/0x90 [ 321.906054][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.912059][ C0] RIP: 0033:0x7f724219c502 [ 321.916559][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 321.936394][ C0] RSP: 002b:00007ffda52a8aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 321.944924][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f724219c502 [ 321.953040][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 321.961112][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 321.969223][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffda52a8c10 [ 321.977475][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 321.985563][ C0] [ 321.988712][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.996010][ C0] CPU: 0 UID: 0 PID: 15177 Comm: syz.4.2323 Not tainted syzkaller #0 PREEMPT(full) [ 322.005407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.015517][ C0] Call Trace: [ 322.018820][ C0] [ 322.021692][ C0] vpanic+0x56c/0xa60 [ 322.025982][ C0] ? __pfx__printk+0x10/0x10 [ 322.030595][ C0] ? __pfx_vpanic+0x10/0x10 [ 322.035124][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 322.040956][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 322.046214][ C0] panic+0xc5/0xd0 [ 322.049992][ C0] ? __pfx_panic+0x10/0x10 [ 322.054494][ C0] __warn+0x315/0x4f0 [ 322.058525][ C0] ? inet_sock_destruct+0x62d/0x740 [ 322.063940][ C0] ? inet_sock_destruct+0x62d/0x740 [ 322.069181][ C0] __report_bug+0x29a/0x540 [ 322.074089][ C0] ? kasan_save_track+0x3e/0x80 [ 322.078993][ C0] ? kasan_save_free_info+0x46/0x50 [ 322.084226][ C0] ? __kasan_slab_free+0x5c/0x80 [ 322.089196][ C0] ? inet_sock_destruct+0x62d/0x740 [ 322.094426][ C0] ? __pfx___report_bug+0x10/0x10 [ 322.099487][ C0] ? __get_unmapped_area+0x2a7/0x450 [ 322.104851][ C0] ? do_mmap+0x4aa/0x10c0 [ 322.109238][ C0] ? vm_mmap_pgoff+0x2c9/0x4f0 [ 322.114193][ C0] ? do_syscall_64+0x14d/0xf80 [ 322.118983][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.125170][ C0] ? inet_sock_destruct+0x62d/0x740 [ 322.130407][ C0] report_bug+0x16a/0x220 [ 322.134875][ C0] ? inet_sock_destruct+0x62d/0x740 [ 322.140115][ C0] ? inet_sock_destruct+0x62f/0x740 [ 322.145329][ C0] handle_bug+0x9c/0x200 [ 322.149631][ C0] exc_invalid_op+0x1a/0x50 [ 322.154176][ C0] asm_exc_invalid_op+0x1a/0x20 [ 322.159134][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 322.164982][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 30 69 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 22 69 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 14 69 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 322.184628][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 322.190836][ C0] RAX: ffffffff8a2637ec RBX: dffffc0000000000 RCX: ffff888034cc3d00 [ 322.198861][ C0] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 322.206877][ C0] RBP: 0000000000000090 R08: ffff88807ccc93a7 R09: 1ffff1100f999274 [ 322.214891][ C0] R10: dffffc0000000000 R11: ffffed100f999275 R12: ffff88807ccc9100 [ 322.222898][ C0] R13: dffffc0000000000 R14: ffff88807ccc938c R15: ffffffff8fca5540 [ 322.230919][ C0] ? inet_sock_destruct+0x62c/0x740 [ 322.236273][ C0] ? inet_sock_destruct+0x62c/0x740 [ 322.241532][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 322.247070][ C0] __sk_destruct+0x85/0x880 [ 322.251633][ C0] ? rcu_core+0x751/0x1070 [ 322.256096][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 322.261228][ C0] rcu_core+0x7cd/0x1070 [ 322.265543][ C0] ? __pfx_rcu_core+0x10/0x10 [ 322.270325][ C0] ? sched_balance_domains+0x13a/0x950 [ 322.275804][ C0] handle_softirqs+0x22a/0x870 [ 322.280591][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 322.285393][ C0] __irq_exit_rcu+0x5f/0x150 [ 322.290019][ C0] irq_exit_rcu+0x9/0x30 [ 322.294275][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.299928][ C0] [ 322.302874][ C0] [ 322.305819][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.311847][ C0] RIP: 0010:unmapped_area_topdown+0x18b/0x5b0 [ 322.317943][ C0] Code: ff e8 f9 a5 0f 00 4d 03 2f 4c 89 ef 4c 89 f6 e8 1b 66 a5 ff 4d 39 f5 73 0a e8 b1 63 a5 ff e9 9d 00 00 00 49 89 df 4c 8d 73 10 <4c> 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf a5 0f 00 [ 322.337569][ C0] RSP: 0018:ffffc90005fcf920 EFLAGS: 00000246 [ 322.343654][ C0] RAX: ffffffff82203d45 RBX: ffffc90005fcfb40 RCX: ffff888034cc3d00 [ 322.351639][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000021000 [ 322.359713][ C0] RBP: ffffc90005fcfa78 R08: ffffc90005fcf9f7 R09: 0000000000000000 [ 322.367721][ C0] R10: ffffc90005fcf9a8 R11: fffff52000bf9f3f R12: dffffc0000000000 [ 322.375710][ C0] R13: 0000000000021000 R14: ffffc90005fcfb50 R15: ffffc90005fcfb40 [ 322.383728][ C0] ? unmapped_area_topdown+0x175/0x5b0 [ 322.389219][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 322.394188][ C0] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 322.400039][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 322.405096][ C0] vm_unmapped_area+0x69/0x260 [ 322.409890][ C0] arch_get_unmapped_area_topdown+0x923/0xb60 [ 322.415989][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 322.422600][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 322.427748][ C0] ? futex_hash+0x40/0x2d0 [ 322.432182][ C0] ? futex_hash+0x2ad/0x2d0 [ 322.436712][ C0] ? futex_hash_put+0x4b/0x60 [ 322.441443][ C0] __get_unmapped_area+0x2a7/0x450 [ 322.446594][ C0] do_mmap+0x4aa/0x10c0 [ 322.450810][ C0] ? __pfx_do_mmap+0x10/0x10 [ 322.455443][ C0] ? down_write_killable+0x180/0x240 [ 322.460796][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 322.466451][ C0] ? apparmor_mmap_file+0x197/0x3e0 [ 322.471697][ C0] ? security_mmap_file+0x4df/0xa20 [ 322.476944][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 322.481653][ C0] ? __se_sys_futex+0x3a8/0x450 [ 322.486555][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 322.491690][ C0] ? exc_page_fault+0x6a/0xc0 [ 322.496403][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 322.501673][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 322.506575][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 322.511367][ C0] do_syscall_64+0x14d/0xf80 [ 322.516011][ C0] ? trace_irq_disable+0x3b/0x150 [ 322.521061][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.527147][ C0] ? clear_bhb_loop+0x40/0x90 [ 322.531866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.537775][ C0] RIP: 0033:0x7f724219c502 [ 322.542210][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 322.562262][ C0] RSP: 002b:00007ffda52a8aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 322.570810][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f724219c502 [ 322.578806][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 322.586880][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 322.595057][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffda52a8c10 [ 322.603065][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 322.611070][ C0] [ 322.614298][ C0] Kernel Offset: disabled [ 322.618630][ C0] Rebooting in 86400 seconds..