last executing test programs: 39.342446171s ago: executing program 2 (id=2357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004000000000412"], 0x30}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) 39.001366417s ago: executing program 4 (id=2362): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3ff, 0x5, {{0x36, 0x4, 0x1, 0x3f, 0xd8, 0x67, 0x0, 0xf, 0x868c1ab12eb57982, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffdea}, {@multicast2, 0x5}, {@broadcast}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x11, "f5540d3a988ebe9b1a59231f338299"}, {0x1, 0xd, "ac43165e12a6559883a10d"}, {0x2, 0xd, "7b4660f043711deb33880d"}, {0x6, 0x3, "e2"}]}, @timestamp_prespec={0x44, 0x24, 0xee, 0x3, 0x8, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1ff}, {@multicast1, 0x4}, {@private=0xa010102, 0xee0}]}, @timestamp_prespec={0x44, 0x3c, 0x84, 0x3, 0x5, [{@multicast2, 0x800}, {@multicast1, 0x3}, {@broadcast, 0x4}, {@broadcast, 0x5}, {@multicast1, 0x81}, {@local, 0x55cd65ab}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x4}]}, @ssrr={0x89, 0xb, 0x21, [@multicast2, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r3, &(0x7f0000000080), 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0000ea0fefea544cb9c5249b5d6b00000000aaaaaaaaaaaa86dd607f000000002b01fe8000000000000000db8200000000000012000000007bccb94200"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRESOCT=r2, @ANYBLOB="b3d137c1eba7d1979fe4a15068fc0666b27416034f43f43a64591f94c31b8e591f016981602d95910558662546a4cd4e991ce67c7444d3987ade6138a3dcf00beeea883386578bedbef19072c72f476269552da146e666773f269a4876bd3c42c3db599f7d820e31c137d8fb4403bc35f3610d884a66d5b3cf3a8acd076681e5ffb49b54349383a20cfb1d9eda5be4a0652e574ec52c8752773923ce4559", @ANYRES8=r2], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x24008044) (async, rerun: 64) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="6876d01f349eb06fd9cb7c01b4fa913f4647", 0x12}], 0x1) 38.334428319s ago: executing program 0 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x9c}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9, 0x0, 0x0, 0x20}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) 38.328334965s ago: executing program 2 (id=2368): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xc8, 0xf1, &(0x7f0000000180)="ea7ef5f80e22c6d9dc18de11388f5d22a84cf2660f0b45de85a89792692d650ce6f9b976c9dbf306ae073eb616f2789f8e8cf3ac63ba6da9dc262c3673d2161aa0e6d23695ea6763247bfbff98478b03e8256712c40c7dadb0be90a5e286379345b3a308727cf4cc6ef89ec2d2b433c4b186981f9244223170ae0006b45fb9405c33060244998ac64d66924b06fc04989753ac5b4729796a2e3d1e70f833d1b9d190b906599a51d45461ff2e15d6c17a2e6b5db116665d722d851ff37a1fa9c0fd65f36b8a104136", &(0x7f0000000280)=""/241, 0x9, 0x0, 0x26, 0x86, &(0x7f0000000380)="e2eb00e4ca9d85c3e8a15b38887d86239e7c98bde49db8a0bf8771eb2fb969195462553f5fb1", &(0x7f00000004c0)="d64e87da49727b444e1327680f21786224b49865c6c899ed03ce5fa6a4ba1f011af5a464cf2d3bb2a18f1874c01179ce1139cd980f78eb59dbd5b291662d92d26ff0d4ffe5b849ba169b23a447289fefa0eabe9f68dff089044e5d6feeafdee9795ae9decd630c17461b2bd9bc4e1119b28f65aa6cc200bb69d395bd1aa3e3fd91fc09dfc0aa", 0x4, 0x0, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000bc0)={r0, &(0x7f0000000ac0)='^', 0x400000, &(0x7f0000000b00)={@_ha_fsid={[0xd8, 0x7]}, {0x6, 0xfe8f, 0x18, 0x800}}, 0x3, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0x4d}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x20, &(0x7f0000000e00)={&(0x7f0000000d00)=""/1, 0x1, 0x0, &(0x7f0000000d40)=""/132, 0x84}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x10, 0x2d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfa}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x800, 0xe3, &(0x7f0000000940)=""/227, 0x41000, 0x40, '\x00', r7, @sk_msg=0x7, r8, 0x8, &(0x7f0000000c00)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, r2, 0x0, &(0x7f0000000e80)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf", 0x3a, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x100000000, 0x6}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 38.040929729s ago: executing program 0 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x1) (async) ppoll(&(0x7f0000000400)=[{r6}], 0x1, &(0x7f00000006c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x3, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 37.666427365s ago: executing program 0 (id=2372): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x80) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) 37.311629884s ago: executing program 0 (id=2374): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000180001002cbd7000fcdbdf250a800000ff00ff000004000008000400", @ANYRES32=r2, @ANYBLOB="0600150003000000100016800c"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r3, 0x0, 0x1000, 0x74, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/116, 0x4b254824, 0x0, 0x2f, 0x70, &(0x7f0000001340)="0052658eea0b5be02f7aa6a998e19f6876c3174fbaf8af5aa9f8468f0fc3cb4a31e674a16d7b88aecf71d41620606a", &(0x7f0000001380)="ee98772e1267395f854609a30fb3baba66dcb5e7cf2836a364e83164a49ca17a44bdc1e2a48a49a59915e6795978946fc16d23d03a8be9f38934a5ff453b6f3e8b38adbc873996884b01da042d0832e0217fc3be7165f4d9ba89ae8a72332e0478e916e64815d110e20ba56cda1f3320", 0x7}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000180001002cbd7000fcdbdf250a800000ff00ff000004000008000400", @ANYRES32=r2, @ANYBLOB="0600150003000000100016800c"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r3, 0x0, 0x1000, 0x74, &(0x7f00000002c0)="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", &(0x7f00000012c0)=""/116, 0x4b254824, 0x0, 0x2f, 0x70, &(0x7f0000001340)="0052658eea0b5be02f7aa6a998e19f6876c3174fbaf8af5aa9f8468f0fc3cb4a31e674a16d7b88aecf71d41620606a", &(0x7f0000001380)="ee98772e1267395f854609a30fb3baba66dcb5e7cf2836a364e83164a49ca17a44bdc1e2a48a49a59915e6795978946fc16d23d03a8be9f38934a5ff453b6f3e8b38adbc873996884b01da042d0832e0217fc3be7165f4d9ba89ae8a72332e0478e916e64815d110e20ba56cda1f3320", 0x7}, 0x50) (async) 36.842855503s ago: executing program 0 (id=2376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c0000001801000062b3399900000000002020207b3bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003800000850000000600000095", @ANYRESDEC], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xfff6, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x60, 0x2, {{'cbc(camellia)\x00'}, 0xc0, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c99"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r12}, 0x18) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000340)={0x1, 0x29, 0xc000000000000, 0x7, 0x800000800, 0x9, 0xff, 0x40}, &(0x7f0000000480)={0xffffffffffffffff, 0x9, 0xfffffffffffffff1, 0xc, 0x4, 0x7, 0x2, 0x8000000000000000}, &(0x7f00000004c0)={0x5, 0x1, 0x1, 0x6, 0xe, 0x86, 0x8000000000000001, 0xda}, &(0x7f00000005c0), &(0x7f0000000640)={&(0x7f0000000600)={[0x7]}, 0x8}) (async) r13 = socket(0x8, 0x4, 0x3) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, 0x0, &(0x7f00000008c0)) (async) close(0x3) 36.478929588s ago: executing program 4 (id=2379): socketpair(0x1f, 0xa, 0xff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)=']-\\*\\\xab^\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r7, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=r6, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f4b09f58f8a2ff53ac8e195b095cc3a0"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) 36.478222018s ago: executing program 1 (id=2380): r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000040)}, 0xffffffffffffffac) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x0, 0x20000000) (async) sendmmsg(r5, &(0x7f0000002dc0), 0x0, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000010100000000000003000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000003ecc02984e231fcb56e1199fc1990007010000f8ffffffb702000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg(r8, &(0x7f0000000040), 0x0, 0x340) (async) sendmmsg(r8, &(0x7f0000000040), 0x0, 0x340) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r8, &(0x7f000000a740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/219, 0xdb}, 0xbc}], 0x1, 0x45833af92e4b39ff, 0x0) (async) recvmmsg(r8, &(0x7f000000a740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/219, 0xdb}, 0xbc}], 0x1, 0x45833af92e4b39ff, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x3328}, {r7, 0x4236}], 0x2, 0x0, 0x0, 0x0) 36.041053529s ago: executing program 1 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x5}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x7ffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="d7", 0x1}], 0xab}}], 0x2, 0x20044040) (async) sendmmsg$inet6(r4, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x5}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x7ffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="d7", 0x1}], 0xab}}], 0x2, 0x20044040) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x30004000}, 0x0) accept(r8, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x80) (async) accept(r8, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r10}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xa0}, @jmp={0x5, 0x1, 0xb, 0x0, 0x9, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000041000701fefeffff00000000017c0000040042801800018006000600800a00fb0b001500faffffffffffffff040002"], 0x34}, 0x1, 0x0, 0x0, 0x404c095}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000041000701fefeffff00000000017c0000040042801800018006000600800a00fb0b001500faffffffffffffff040002"], 0x34}, 0x1, 0x0, 0x0, 0x404c095}, 0xc010) 35.843128594s ago: executing program 4 (id=2383): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000480)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) epoll_create1(0x80000) 35.568987452s ago: executing program 1 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe"], 0x24}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x28, r4, 0x7, 0x70bd2b, 0x25dfdc01, {{0x8}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x101}, &(0x7f0000000180)=0x8) 35.474201786s ago: executing program 4 (id=2386): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private=0xa010100, @local}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff7, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r4, 0x4000, r3}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x2000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f00000001c0)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 35.416752639s ago: executing program 1 (id=2387): socket(0x2, 0x3, 0x66) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@fallback, 0xffffffffffffffff, 0x7, 0x1}, 0x20) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x7, @mcast1, 0x6}}, 0x0, 0x0, 0x0, 0x0, "abf1df964b38b7f959000210000000000021e0b9dccd97477da74a510c0f61951406a0e3f6a699d14967c3bb07085a6c0d3bf00d2e8c9c5fa92a8839ce262db0fdc84425bd81204809c9bf14178d6745"}, 0xd8) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) 35.40796654s ago: executing program 0 (id=2388): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 35.202502354s ago: executing program 2 (id=2389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000003dc0), 0x8) sendmmsg$inet6(r3, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b873375e38bd", 0x34000}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000580)="d1", 0x1}], 0x1}}], 0x2, 0x40) r4 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r4) (async) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r4) 35.202299949s ago: executing program 3 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000040)=0x5f5e0f6, 0x4) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdd2507000074", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d007f400000"], 0x28}}, 0x0) 35.087374647s ago: executing program 1 (id=2391): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x2c, "749d181ea3e07a98ef157613a488dbe359361659711fe3b848846c577e127d3a50056e97a99f6d43791a8280"}, &(0x7f0000000140)=0x34) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0xd4, "36f6763d71589ceeb976c1a4ec433490aa54ee5d006a838f1052801ef3c05ff0279f3085de23341ddb32f69f303bcaaad6d2a2d9ee91b2c8ab6664be13a1a0a4724a32b69384a76ee992626eeafda5792abb977059b6e093602024914d47f66718d50aa04203aed24fd8722e9894b79b415363e16f0f26bdfc8d20861a9d01310cd43a204c5b78745f510971fd0ec8213fd8e068f03128271b63bd556e7d460a57f0fa0eb7d31120e4c5e718c60511d3b3850daaffbfdeaf4a65268b186ceca886f1db2f858c2350015230baeb6cb4f8dc51017b"}, &(0x7f0000000280)=0xdc) recvfrom(r0, &(0x7f00000002c0)=""/165, 0xa5, 0x40000100, &(0x7f0000000380)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x3ef0, 0x3}, 0x8) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000440)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x88c5}, 0xc054) r5 = socket$inet(0x2, 0x800, 0xa) r6 = accept4(r4, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80, 0x80000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000640)={r5}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r10, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000800)={0x2, 'veth0_to_bridge\x00', 0x2}, 0x18) getsockopt$MRT(r8, 0x0, 0xd0, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$NFT_BATCH(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4) connect$vsock_stream(r7, &(0x7f0000000a00)={0x28, 0x0, 0x2710, @host}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r9) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xc0, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc080) setsockopt(r0, 0x2c, 0x6, &(0x7f0000000c00)="ccd7dfca", 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000c40)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x5, @private0, 0x7}, @in6={0xa, 0x4e20, 0x94, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}, @in6={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x81, @mcast1, 0xcdd}], 0xbc) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4890}, 0x20000844) 34.913021514s ago: executing program 3 (id=2392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x5, 0xffffffffffff9649}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x8ec6, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r4, 0x4) sendto$inet(r1, &(0x7f0000000100)='ping', 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 34.822944143s ago: executing program 4 (id=2393): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x18410}, 0x20000804) 34.739496837s ago: executing program 3 (id=2394): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) (async) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}]}, 0x24}}, 0x0) 34.686245412s ago: executing program 2 (id=2395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x4c, 0x12, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x18, 0xdb, 0xe, {0x4e20, 0x4e21, [0x2, 0x7, 0x8, 0x10], [0x1c00, 0xf3b8, 0x8, 0xe77], 0x0, [0x7, 0x81]}, 0x0, 0x9836}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 34.299062397s ago: executing program 4 (id=2396): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r1}, &(0x7f0000001a00)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) unshare(0x22020400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a40)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @fwd={0x9}, @func={0x10, 0x0, 0x0, 0xc, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x30, 0x5f, 0x0, 0x30, 0x0, 0x61]}}, &(0x7f0000001a40)=""/4096, 0x5d, 0x1000, 0x0, 0x101}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @sk_msg, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\f\x00\x00', @ANYRES16=r5, @ANYBLOB="080027bd7000fddbdf250b0000000c009900080000002300000009000700a99c7877bc0000002c005080050009000200000005000200050000000400060011000100014316318f59de513b4cb564b100000018006e800400020004000100040001000400010004000100"], 0x70}, 0x1, 0x0, 0x0, 0x4840}, 0x24000000) 34.234988564s ago: executing program 3 (id=2397): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) unshare(0x2a060400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc000000e}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffff7}, 0x21, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xf0001000, 0x4, 0x2, 0x418, r3, 0x5c, '\x00', r6, r2, 0x2, 0x4, 0x4, 0x7}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r7, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) r9 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[], 0x8) 34.12407477s ago: executing program 1 (id=2398): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0xd, 0x7fffffff, 0x3}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000500", 0x2c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x0, 0x80000, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r6) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x7f, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x58}}, 0x0) (async) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r10, 0x400448cc, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000060a0304e5510000000000000a0000010900010073797a310000000018000480140015800c000100636f756e74657200040002800900020073797a3200000000140000001100010000000000000000000a00000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) close(0x3) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f8cecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000003000000ff", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 34.076568045s ago: executing program 3 (id=2399): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006000f0018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 34.073932808s ago: executing program 2 (id=2400): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @isdn={0x22, 0x4, 0x8, 0x3}, @hci={0x1f, 0x2, 0x2}, @xdp={0x2c, 0xd, 0x0, 0x2f}, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0xebf}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x27a, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x20, &(0x7f0000000200)={&(0x7f0000000180)=""/18, 0x12, 0x0, &(0x7f00000001c0)=""/3, 0x3}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0x1, 0xe, 0x4, 0x400}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xfffffff0, 0x0, 0x0, 0x41100, 0x54, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x7, 0xfffeffff, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x4, 0x2, 0x9, 0x5}], 0x10, 0x5}, 0x94) (async) r6 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0x7, 0x0, @val=@uprobe_multi={&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=[0x4, 0x8], &(0x7f00000005c0)=[0x4, 0x2, 0x2, 0xfffffffffffffcfa, 0x5], 0x4, 0x2, 0x1, r6}}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x1, '\x00', 0x0, r4, 0x1, 0x1, 0x5}, 0x50) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000740)=@nfc={0x27, r9, 0x1, 0x5}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)="9e9d7b5eb40e861c7d615a28d0bcaec02c23a3da2e8116803a87d3dcbcebb010f9ca99b270c9b40a025449cfc4a0ae8d57672446533a84", 0x37}, {&(0x7f0000000800)="15a6ab4d3bea10ba11a7cc5d07c1db1b1d5175fe49d936c0e91ffd7dc08f77798ad30ed36768cae78d581f1f7cac68f295aa9d5e4cdf5cd8be042ea81af037623ac41ce1eaeb6f5bf5db06f7809fbb0ddb889faf4b9d61a55605a029771b1d595b6ddec7dfbe6b572036ae6098cc76ef1adf2381dcc4145158a161a4d824d0335c48a1ebb0fcb888e57e2a03ff3ccd8696385c6a69308c72b39e85c6dbe5a0d9cd63ef87b01c445fa5b7cb6d056a4b9d3077cdeaca0663200a5ed7a69b5afe3f8f5c566556b28e86200853a9652b3a723ba08f", 0xd3}, {&(0x7f0000000900)="deef80056dc518c94073da45163b8d1d9240872a9a6c891b0b09d78aee7aef76567852d0b130cdc6fff73c643a4014448c36481943a9e0caccb283f844cf88977846c5cb806653b1ee8b4a534db8541723700a43d0", 0x55}, {&(0x7f0000000980)="8ec185a1eb72166943de6059ccdad1b53c68c1b9fbae78b36dad1d98e4f35042180c028c3c", 0x25}, {&(0x7f00000009c0)="a44b1291a84271f5412ea1827f3a9f9ba87d90ed412c50c280ce3f5e6a295081cec420930520f299312f144b12165246f8af97fe51e4687755ec0873e513252ba7ba9e80674759f9c84fabfba3081b878feb5ea631d9ade8681ff57d1878208526dbbe95741d3860c430b2ab816ef10b4c70812f51a927bd5bc70c7125fc73", 0x7f}, {&(0x7f0000000a40)="c6db311f6bf02d49d2a5203ea90837ddf42e32e1bcf98070ec6a4b5593f3d9f76bf85e2e72032ef3fa3fc408b3a47b6089debe7be4612612313695a492e0", 0x3e}], 0x6, &(0x7f0000000b00)=[{0xe0, 0x107, 0x6, "8d062634f4a47ada0682d01348b31b0ffb78803bc74b39c4e79532ac619d428c9c831033dd90d12380e5d40986378659a93bd01b91f470d368d438152db3add97886bc3ab6f3deeeb0044d115f7f1681c814d65c919d8e6a02bbc83c0aa14e31d1911a695c1c3fb381cd5a8cc6dab1a95ff6ae1fb6b4c6a66cd5a0da8fb02455cffe94869d95a477e7e61406a3d74baaefa57c2de5f1ffcfa9f4cb42c48cd445f7378cdc47116cf60deaaf50de0fd52d5e32055ca511e3d429cef8f1b70fae5dd5f82c7c5abcf1df315c3876c3822f"}, {0xe8, 0x6, 0xa, "dbf2fc72d7527fae36666499bda15e6ac7298e0e17c585bf60845ad5e3a0b66e879ceb562166e444e94d6d6070be1574833c4ce2e516b4f91240f3d0c244ed8eca579d190ac1c3f1e6a64d03a03c84ec8bbd7c12da8886ae4201f047e4cb46ea71c66eedc80663aa381ab333a1eb9825f77c610fff02008273444161f2d95cb2ccced6e0374666d46da362284a89c1ab8dc1483bd5f9cab6e91a853709c24d80d5602212645c3c4f98b9f6aeedacdc1bedc0014fa3e0992e3de7e9dd2842a72657854a8a4dfabdd2332c206b74998223f6fd96"}, {0xc8, 0x18d, 0xc3, "f3a363c83ca123e4f92bf5c182019fe61bda2338382a248822bf25372a11fd21d991ad53a3f7307bc8cbec53128199b2111523549fc55dee530aec361a995b8847b5100aac1730aaad2893830fdfcb5f2dbf7508b85e8dba91bb94c1e5541ac20ae32cf3fcec51333058da20ea91f2012dbc50141851319436c3b09371218d3a11656cbee6516ef7fc7c7f15594eb1049c07b36c50ff0d75debaf585838844f3a77a5c79c712743b8d77c2c846561bfe92a0995538"}, {0x80, 0x103, 0x3, "b2899bd96aff594190fad4d97f9cf32df550ad23018e2fc41b608af56646bd895ad3771ceeeb36ef87c2bea8209920e6de974c3d35e8e8a77f3ad055c88fb0e3616d3c8e985a4333e2b916d381e22ec4e269b94ad09ddd7bb3951d80c4c017883c7bc0510b1f4c31c85f6d6914dca7"}, {0x60, 0xea, 0x7, "6820f6009a2a8a3ad8a508e8b95b85697c3b5c251b1e9ea765f1d5513cc0cb1e2f1ace053d85d83bbb58c09f060c4bd692c2e471b06322b5add6f390fffeed3fa188e613fa72eac694c9f2"}], 0x370}, 0x44000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xbc, r11, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff12}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x53}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x50000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x10, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r10) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r14, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001) (async) gettid() (async) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000002640)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f0000001440)={0x11c0, r14, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_TESTDATA={0xb4, 0x45, "7da2fd1788421814c357df8d32beb2dc4291582e16fd3f6ac694877a03ddf129f7dac223347bec12c7148087dd533f0bade3848a2831ffbaa2a94c1a2150c5e9c2dc19d9cda0871e5d3459cc387e784dbb1a089fcc80330d1f5307308953e285a5b7f365d237f0ccccd661807045f972b4593b1361e4cceaa65fe1dc73e3bfad903bae47b025482f0b72aafbf41b55e4430e7feb0ec81d279042ce74c5a6cb4de3876c4b4f0c763297fffe936d3c6f0f"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x9a, 0x45, "7da6028c49f1cf8945b8e0223fd5f552c149da4f19b21c12d78784e17eb586eef35118edcf3a9e8d40f348917cfc938fdb9dc7bb13fc93e17b3a642332ed9f3b40ce37974fd1306673bda698258a8a223b9c7c2a74d3a63f1ebf065564d642a90727db3b42e7586baa6ca73c4d697779400a421e404b2bc3b81cc0b0d909b39dbd040294d8c4c2abf5ea58b5279b387cd28f4fce2cd9"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "1a60f6c5f5fd49ff3a79513db9b880b63330118e6b587007b1d6afb50e3a1539dcf3407097fa982b9c8518e80fb689a624a7095fb98696206432d559de00c1"}]}, 0x11c0}}, 0x48894) syz_genetlink_get_family_id$gtp(&(0x7f0000002680), r10) (async) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000026c0)) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002740)=0x14) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000002980)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xe0, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xc972103a731ec182}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44041}, 0x14000004) 33.915034346s ago: executing program 3 (id=2401): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x3b, 0x0, "8eb40f4f6a4e6bdb841613a1d8b271e2709e7ac1b25cc85d7e1f93a1c6dc85c453d5260c511ebb00d8219c33bcf53b494c757e535f4bb5b68bf3ed10417f9adc75fe35dd63b92a5d8306efa1f3baa58a"}, 0xd8) sendmsg$can_raw(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=@canfd={{0x1, 0x0, 0x1}, 0x13, 0x0, 0x0, 0x0, "ac175460cfe5eac2114aa479d0fa30b59e90c7881db46cfbf829b763f2be13fb70f9688f1e77e44ec207b7fe5eedc690b25b7b6488e9a15d9f7f3cb5e7b85054"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x3b, 0x0, "8eb40f4f6a4e6bdb841613a1d8b271e2709e7ac1b25cc85d7e1f93a1c6dc85c453d5260c511ebb00d8219c33bcf53b494c757e535f4bb5b68bf3ed10417f9adc75fe35dd63b92a5d8306efa1f3baa58a"}, 0xd8) (async) sendmsg$can_raw(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=@canfd={{0x1, 0x0, 0x1}, 0x13, 0x0, 0x0, 0x0, "ac175460cfe5eac2114aa479d0fa30b59e90c7881db46cfbf829b763f2be13fb70f9688f1e77e44ec207b7fe5eedc690b25b7b6488e9a15d9f7f3cb5e7b85054"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x0) (async) 31.562164026s ago: executing program 2 (id=2402): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@align=0x10001, {0xa6, 0x8, 0x5, 0x80}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x9}, {[0x2, 0xecc, 0x3, 0x6]}, 0x93, 0xcc, &(0x7f0000000100)=""/204}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c6572420000000000000800050004"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x49}}}}, [@NL80211_ATTR_IE={0x9d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0xb, 0x31, 0x101}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x7c, {0x9, 0xe, 0x2, "68fd0fcd558fffbe38c2fa445b1705661a4e5961eb3facd4891200e353ace722ec028f9f27b1a4eaa6437c6008109802629f8759e97229b9809101549ed3ec6c5d6e8c0bd6061a3d927852e0fd092d8bfdf6a0ddbbc1b3ab062796ac22aa91f9b876b076a50bb0d6cde864f23f1dd30a2d0c7a8dff8f593c78"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0xb2, 0xb}}, @challenge={0x10, 0x1, 0x3b}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe41}, @NL80211_ATTR_IE={0xcd, 0x2a, [@cf={0x4, 0x6, {0x81, 0x6c, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x6, 0x2, 0x15, 0x7}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x21}}, @measure_req={0x26, 0xae, {0x9, 0x4, 0x0, "183b591e05b31ebb7342a3dc0541dcfa3642e9f6a1b0bb7b9e2ca8507205c86ad8cba2c6dc5214803ee9a2057fde20532f28e130d0a88d708eba6acfddceb35917deaba1faaa01b6301272741a25aacc00fd7fb4fae784ef80727be1962ff1548df04a4e536d8049b918bc96779454790c42a4b763f3fa5f060aaa21befe3aa2e6f654ff974fb002ae1cfb611d14cc72457d8107208ec83982478539b9c16cb1792c0478ff5cd0f517df19"}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100008500000000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x1}, 0x28) 0s ago: executing program 32 (id=2388): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 5.025498][T10165] ? __pfx_ksys_write+0x10/0x10 [ 225.025544][T10165] do_syscall_64+0x166/0x520 [ 225.025569][T10165] ? trace_irq_disable+0x3b/0x140 [ 225.025586][T10165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.025605][T10165] ? clear_bhb_loop+0x70/0xc0 [ 225.025628][T10165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.025647][T10165] RIP: 0033:0x7f000e15e98e [ 225.025665][T10165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.025680][T10165] RSP: 002b:00007f000c3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.025701][T10165] RAX: ffffffffffffffda RBX: 00007f000c3f66c0 RCX: 00007f000e15e98e [ 225.025714][T10165] RDX: 0000000000000001 RSI: 00007f000c3f60a0 RDI: 0000000000000005 [ 225.025726][T10165] RBP: 00007f000c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.025737][T10165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.025748][T10165] R13: 00007f000e426128 R14: 00007f000e426090 R15: 00007ffe9561d7c8 [ 225.025777][T10165] [ 225.261757][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 226.339925][T10158] syzkaller0: entered promiscuous mode [ 226.340914][T10158] syzkaller0: entered allmulticast mode [ 226.370399][T10159] tipc: Enabled bearer , priority 0 [ 226.385444][T10162] tipc: Resetting bearer [ 226.388448][T10153] tipc: Resetting bearer [ 226.435791][T10153] tipc: Disabling bearer [ 226.443667][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 226.497064][T10175] vlan5: entered promiscuous mode [ 226.497088][T10175] team0: entered promiscuous mode [ 226.497101][T10175] team_slave_1: entered promiscuous mode [ 226.548743][T10177] netlink: 'syz.0.1001': attribute type 8 has an invalid length. [ 226.549133][T10177] sch_fq: defrate 0 ignored. [ 226.573185][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 226.607454][T10178] dummy0 speed is unknown, defaulting to 1000 [ 226.608584][T10180] smc: net device vlan1 applied user defined pnetid SYZ2 [ 226.628405][T10178] dummy0 speed is unknown, defaulting to 1000 [ 226.637749][T10178] dummy0 speed is unknown, defaulting to 1000 [ 226.798591][T10192] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 226.923879][T10199] netlink: 'syz.1.1007': attribute type 6 has an invalid length. [ 227.554913][ T5803] dummy0 speed is unknown, defaulting to 1000 [ 227.557838][T10178] infiniband syz0: set down [ 227.557858][T10178] infiniband syz0: added dummy0 [ 227.617186][T10178] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 227.637008][T10178] infiniband syz0: Couldn't open port 1 [ 227.637246][T10178] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 227.637275][T10178] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 227.638495][T10178] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 227.786246][T10178] RDS/IB: syz0: added [ 227.786620][T10178] smc: adding ib device syz0 with port count 1 [ 227.786690][T10178] smc: ib device syz0 port 1 has no pnetid [ 227.792168][ T10] dummy0 speed is unknown, defaulting to 1000 [ 227.857297][T10178] dummy0 speed is unknown, defaulting to 1000 [ 228.436091][T10244] syzkaller1: entered promiscuous mode [ 228.436112][T10244] syzkaller1: entered allmulticast mode [ 228.458885][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 228.646904][T10178] dummy0 speed is unknown, defaulting to 1000 [ 228.680426][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 229.253400][T10292] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 229.299396][T10292] syzkaller0: entered promiscuous mode [ 229.299417][T10292] syzkaller0: entered allmulticast mode [ 229.437214][T10178] dummy0 speed is unknown, defaulting to 1000 [ 229.967751][T10321] tipc: Enabling of bearer rejected, already enabled [ 230.194834][T10178] dummy0 speed is unknown, defaulting to 1000 [ 230.196348][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1037'. [ 230.197467][T10329] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1036'. [ 230.233147][T10333] sit0: entered promiscuous mode [ 230.252789][T10333] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 230.252808][T10333] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1036'. [ 230.525587][T10350] netlink: 'syz.2.1041': attribute type 21 has an invalid length. [ 230.822937][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 230.983984][T10178] dummy0 speed is unknown, defaulting to 1000 [ 231.222314][T10381] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 231.223913][T10382] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20001 [ 231.720625][T10408] Bluetooth: hci0: unsupported parameter 5135 [ 231.720652][T10408] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 232.113350][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 232.156772][T10426] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 232.156792][T10426] sctp: [Deprecated]: syz.4.1057 (pid 10426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.156792][T10426] Use struct sctp_sack_info instead [ 232.222471][T10430] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 232.581442][T10451] sctp: [Deprecated]: syz.1.1065 (pid 10451) Use of int in max_burst socket option. [ 232.581442][T10451] Use struct sctp_assoc_value instead [ 233.021256][T10479] vlan2: entered promiscuous mode [ 233.021280][T10479] bridge0: entered promiscuous mode [ 233.475617][T10456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.810903][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 233.827464][T10506] Bluetooth: ISO socket layer initialized [ 234.382046][T10523] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1082'. [ 235.084641][T10544] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 235.094828][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094845][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094853][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094861][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094870][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094878][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094887][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094895][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094904][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094912][T10544] tc action pedit offset must be on 32 bit boundaries [ 235.094930][T10544] 0: reclassify loop, rule prio 0, protocol 800 [ 235.314398][T10548] netlink: 'syz.3.1089': attribute type 16 has an invalid length. [ 235.314418][T10548] netlink: 'syz.3.1089': attribute type 17 has an invalid length. [ 235.322624][T10548] sit0: left promiscuous mode [ 235.413540][T10553] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 235.579722][T10548] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 235.646284][T10559] bridge0: entered allmulticast mode [ 235.667645][ T8399] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 235.667904][ T8399] bond4: (slave veth0_to_bond): making interface the new active one [ 235.682970][ T8399] bond4: active interface up! [ 235.852943][T10559] netlink: 'syz.2.1092': attribute type 23 has an invalid length. [ 236.655278][T10607] xt_bpf: check failed: parse error [ 236.681073][T10607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.682880][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 236.683737][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.689117][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.689753][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.690257][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.698842][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.842081][T10627] geneve2: entered promiscuous mode [ 236.861644][T10621] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 236.861667][T10621] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 237.061821][T10627] 8021q: adding VLAN 0 to HW filter on device eth0 [ 237.064000][T10627] 8021q: adding VLAN 0 to HW filter on device eth1 [ 237.082011][T10627] 8021q: adding VLAN 0 to HW filter on device eth2 [ 237.091942][T10627] 8021q: adding VLAN 0 to HW filter on device eth3 [ 237.101470][T10627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.112577][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.112708][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.218113][T10637] netlink: ct family unspecified [ 237.218156][T10637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.462688][T10644] batman_adv: batadv0: Adding interface: gretap3 [ 237.462705][T10644] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.462732][T10644] batman_adv: batadv0: Interface activated: gretap3 [ 237.537632][T10646] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 237.537648][T10646] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1110'. [ 237.540271][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 237.591599][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'. [ 237.656286][T10651] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1111'. [ 237.843952][T10653] netlink: 'syz.2.1113': attribute type 4 has an invalid length. [ 237.843974][T10653] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1113'. [ 238.302207][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 238.302228][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 238.307611][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 238.307630][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 238.440729][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 238.811035][T10701] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.843534][T10710] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.992440][T10724] ovs-s: entered promiscuous mode [ 239.152981][T10730] sysfs: cannot create duplicate filename '/class/ieee80211/.�PÑè'óG!DEÒSˆ' [ 239.153004][T10730] CPU: 0 UID: 0 PID: 10730 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT(full) [ 239.153020][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.153029][T10730] Call Trace: [ 239.153034][T10730] [ 239.153041][T10730] dump_stack_lvl+0xe8/0x150 [ 239.153068][T10730] sysfs_warn_dup+0x8e/0xa0 [ 239.153094][T10730] sysfs_do_create_link_sd+0xc0/0x110 [ 239.153117][T10730] device_add_class_symlinks+0x1cf/0x240 [ 239.153148][T10730] device_add+0x467/0xb80 [ 239.153167][T10730] wiphy_register+0x1fc8/0x2ff0 [ 239.153200][T10730] ? __pfx_wiphy_register+0x10/0x10 [ 239.153216][T10730] ? __pfx_netdev_run_todo+0x10/0x10 [ 239.153241][T10730] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 239.153270][T10730] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 239.153292][T10730] ieee80211_register_hw+0x3dbb/0x4b00 [ 239.153324][T10730] ? ieee80211_register_hw+0x19c1/0x4b00 [ 239.153369][T10730] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 239.153388][T10730] ? __asan_memset+0x22/0x50 [ 239.153411][T10730] ? __hrtimer_setup+0x1b7/0x260 [ 239.153432][T10730] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 239.153455][T10730] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 239.153498][T10730] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 239.153516][T10730] ? kstrndup+0xbd/0x160 [ 239.153549][T10730] ? kstrndup+0xbd/0x160 [ 239.153569][T10730] hwsim_new_radio_nl+0xd8b/0xf90 [ 239.153602][T10730] genl_family_rcv_msg_doit+0x233/0x340 [ 239.153628][T10730] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 239.153662][T10730] ? bpf_lsm_capable+0x9/0x20 [ 239.153675][T10730] ? security_capable+0x7e/0x2c0 [ 239.153698][T10730] genl_rcv_msg+0x614/0x7a0 [ 239.153723][T10730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.153741][T10730] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 239.153760][T10730] ? __asan_memcpy+0x40/0x70 [ 239.153774][T10730] ? __skb_clone+0x5c/0x6c0 [ 239.153803][T10730] netlink_rcv_skb+0x226/0x4a0 [ 239.153829][T10730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.153850][T10730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.153888][T10730] ? down_read+0x2be/0x330 [ 239.153916][T10730] genl_rcv+0x28/0x40 [ 239.153931][T10730] netlink_unicast+0x7bd/0x940 [ 239.153961][T10730] netlink_sendmsg+0x813/0xb40 [ 239.153993][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.154023][T10730] ? apparmor_socket_sendmsg+0x98/0x360 [ 239.154045][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.154073][T10730] sock_sendmsg_nosec+0x13a/0x180 [ 239.154094][T10730] ____sys_sendmsg+0x54e/0x850 [ 239.154120][T10730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.154161][T10730] ? import_iovec+0x73/0xa0 [ 239.154185][T10730] ___sys_sendmsg+0x2a5/0x360 [ 239.154205][T10730] ? __lock_acquire+0x747/0x2de0 [ 239.154226][T10730] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.154287][T10730] ? __fget_files+0x2a/0x420 [ 239.154311][T10730] ? __fget_files+0x3a2/0x420 [ 239.154345][T10730] __x64_sys_sendmsg+0x1b1/0x290 [ 239.154369][T10730] ? _raw_spin_unlock_irq+0x2e/0x50 [ 239.154391][T10730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.154423][T10730] ? do_user_addr_fault+0xc4c/0x1340 [ 239.154454][T10730] do_syscall_64+0x166/0x520 [ 239.154475][T10730] ? trace_irq_disable+0x3b/0x140 [ 239.154494][T10730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.154513][T10730] ? clear_bhb_loop+0x70/0xc0 [ 239.154536][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.154555][T10730] RIP: 0033:0x7f2dba19e159 [ 239.154571][T10730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.154584][T10730] RSP: 002b:00007f2db83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.154604][T10730] RAX: ffffffffffffffda RBX: 00007f2dba426090 RCX: 00007f2dba19e159 [ 239.154617][T10730] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 239.154628][T10730] RBP: 00007f2dba23506b R08: 0000000000000000 R09: 0000000000000000 [ 239.154639][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.154650][T10730] R13: 00007f2dba426128 R14: 00007f2dba426090 R15: 00007ffea2b12f18 [ 239.154684][T10730] [ 239.577996][T10750] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 239.589251][T10745] wg2 speed is unknown, defaulting to 1000 [ 239.612930][T10745] dummy0 speed is unknown, defaulting to 1000 [ 239.929380][T10762] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 240.116365][T10775] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.123707][T10775] bond4 (unregistering): Released all slaves [ 240.297342][T10753] bond5: (slave geneve3): making interface the new active one [ 240.358737][T10753] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 240.524948][ T7026] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.525216][ T7026] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.525250][ T7026] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.525280][ T7026] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.774928][T10791] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 240.886993][T10807] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 240.887507][T10807] syzkaller1: entered promiscuous mode [ 240.887526][T10807] syzkaller1: entered allmulticast mode [ 241.159347][T10811] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 241.447749][T10823] bond6: (slave macvlan2): Enslaving as an active interface with a down link [ 241.485945][T10832] gretap1: entered promiscuous mode [ 241.881540][T10856] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 242.153239][T10840] syzkaller0: entered promiscuous mode [ 242.153265][T10840] syzkaller0: entered allmulticast mode [ 244.789277][T10899] __nla_validate_parse: 14 callbacks suppressed [ 244.789296][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 244.789491][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 244.789506][T10899] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 244.789688][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 244.899925][T10893] ip_tables: iptables: counters copy to user failed while replacing table [ 245.113613][T10913] ip_tables: iptables: counters copy to user failed while replacing table [ 245.125982][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1172'. [ 245.155321][T10915] openvswitch: netlink: Missing key (keys=40, expected=100) [ 245.158804][T10911] netlink: 'syz.4.1173': attribute type 6 has an invalid length. [ 245.468153][T10929] netlink: 968 bytes leftover after parsing attributes in process `syz.4.1178'. [ 245.472169][T10929] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 245.569228][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 245.622252][T10929] bond5: entered promiscuous mode [ 245.623631][T10929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.659931][T10931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.660882][T10931] bond5: (slave ipip1): The slave device specified does not support setting the MAC address [ 245.660903][T10931] bond5: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 245.698816][T10931] bond5: (slave ipip1): making interface the new active one [ 245.698841][T10931] ipip1: entered promiscuous mode [ 245.702192][T10931] bond5: (slave ipip1): Enslaving as an active interface with an up link [ 245.910100][T10954] netlink: 'syz.0.1184': attribute type 4 has an invalid length. [ 246.038217][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1187'. [ 246.048308][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 246.214530][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1190'. [ 246.221591][T10977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1190'. [ 246.281504][T10977] hsr_slave_1 (unregistering): left promiscuous mode [ 246.483347][T10992] Bluetooth: MGMT ver 1.23 [ 246.567939][T10998] netlink: 'syz.3.1196': attribute type 16 has an invalid length. [ 246.812133][T11009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.872296][T11012] x_tables: duplicate entry at hook 1 [ 246.933307][T11017] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 246.977191][T11017] netlink: 'syz.0.1201': attribute type 11 has an invalid length. [ 247.218861][T11041] netlink: 'syz.0.1208': attribute type 10 has an invalid length. [ 247.224057][T11035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.241284][T11035] bridge0: port 3(bond4) entered blocking state [ 247.241397][T11035] bridge0: port 3(bond4) entered disabled state [ 247.241535][T11035] bond4: entered allmulticast mode [ 247.262709][T11042] ip_tables: iptables: counters copy to user failed while replacing table [ 247.278422][T11035] bond4: entered promiscuous mode [ 247.296015][T11041] geneve2: entered promiscuous mode [ 247.296037][T11041] geneve2: entered allmulticast mode [ 247.321872][T11035] openvswitch: netlink: Flow key attr not present in new flow. [ 247.325595][ T8401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.326441][ T8401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.326474][ T8401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.326503][ T8401] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.670123][T11064] ipip0: entered promiscuous mode [ 247.809149][T11067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.949616][T11067] bond7: option lacp_active: invalid value (5) [ 247.963778][T11067] bond7 (unregistering): Released all slaves [ 248.247181][T11087] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 249.140854][T11123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.094717][T11142] __nla_validate_parse: 19 callbacks suppressed [ 250.094747][T11142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1231'. [ 250.349220][T11153] block nbd3: server does not support multiple connections per device. [ 250.352139][T11153] block nbd3: shutting down sockets [ 250.728212][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 250.790982][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 250.914860][T11179] openvswitch: netlink: Key type 288 is out of range max 32 [ 251.072943][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 251.291168][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 251.555941][T11194] macvlan2: entered promiscuous mode [ 251.555972][T11194] macvlan2: entered allmulticast mode [ 251.581248][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 251.707398][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'. [ 251.863004][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 251.895709][T11228] nftables ruleset with unbound chain [ 252.259926][T11246] openvswitch: netlink: Duplicate or invalid key (type 0). [ 252.290962][T11246] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 252.290990][T11246] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 252.356938][T11246] x_tables: duplicate entry at hook 3 [ 252.434342][T11253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1257'. [ 252.451822][T11253] ip6t_ah: unknown flags 4 [ 252.482905][T11253] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 252.597948][T11261] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1260'. [ 252.665987][T11262] xt_hashlimit: size too large, truncated to 1048576 [ 253.920519][T11317] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 253.940825][T11317] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 254.371269][T11341] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 254.373337][T11342] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 254.396036][T11341] tipc: Cannot configure node identity twice [ 254.584200][T11353] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 254.798459][T11352] bond3: option tlb_dynamic_lb: invalid value (71) [ 254.820441][T11352] bond3 (unregistering): Released all slaves [ 268.560471][T11365] syzkaller1: entered promiscuous mode [ 268.560492][T11365] syzkaller1: entered allmulticast mode [ 268.583297][T11364] __nla_validate_parse: 6 callbacks suppressed [ 268.583315][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 268.638486][T11372] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 268.638509][T11372] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1282'. [ 268.668429][T11364] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1280'. [ 268.968732][T11396] netlink: 'syz.0.1288': attribute type 8 has an invalid length. [ 268.968753][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 268.968783][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 269.040869][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 269.058829][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1289'. [ 269.130389][T11395] syzkaller0: entered promiscuous mode [ 269.130414][T11395] syzkaller0: entered allmulticast mode [ 269.156060][ T7026] tipc: Subscription rejected, illegal request [ 269.209922][T11410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1289'. [ 269.341678][T11416] netlink: 'syz.0.1291': attribute type 3 has an invalid length. [ 269.447717][T11421] ip_tables: iptables: counters copy to user failed while replacing table [ 271.596525][T11436] wg2 speed is unknown, defaulting to 1000 [ 271.598816][T11436] dummy0 speed is unknown, defaulting to 1000 [ 271.631167][T11432] syzkaller1: entered promiscuous mode [ 271.631188][T11432] syzkaller1: entered allmulticast mode [ 271.686241][T11441] netlink: 'syz.4.1299': attribute type 2 has an invalid length. [ 271.718138][T11441] : entered promiscuous mode [ 272.108870][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 272.484199][T11465] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 272.522434][T11465] bond7 (unregistering): Released all slaves [ 272.678365][T11437] netlink: 'syz.0.1297': attribute type 15 has an invalid length. [ 272.678386][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1297'. [ 272.792260][T11469] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 272.853611][T11469] bond7 (unregistering): Released all slaves [ 273.158888][T11501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.367849][T11513] netlink: 'syz.4.1314': attribute type 15 has an invalid length. [ 273.403992][T11512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.426661][T11521] sock: sock_set_timeout: `syz.2.1315' (pid 11521) tries to set negative timeout [ 273.448315][T11513] netlink: 'syz.4.1314': attribute type 15 has an invalid length. [ 273.478230][T11523] sock: sock_set_timeout: `syz.2.1315' (pid 11523) tries to set negative timeout [ 273.490440][T11520] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.491132][T11515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.516665][ T7029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 273.516699][ T7029] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 273.516732][ T7029] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 273.516753][ T7029] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 60387 - 0 [ 273.516783][ T7029] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 273.516803][ T7029] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 273.516832][ T7029] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 273.516853][ T7029] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 273.528335][T11513] x_tables: duplicate underflow at hook 1 [ 273.977453][T11542] netlink: 'syz.3.1318': attribute type 16 has an invalid length. [ 273.977473][T11542] __nla_validate_parse: 7 callbacks suppressed [ 273.977481][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 273.994926][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 274.007602][T11544] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.008475][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 274.159826][T11540] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1320'. [ 274.328425][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 274.630788][T11569] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 274.645672][T11572] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000 [ 274.654058][T11569] syz_tun: entered promiscuous mode [ 274.699472][T11569] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 274.773692][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 274.850682][T11588] syzkaller0: entered promiscuous mode [ 274.850704][T11588] syzkaller0: entered allmulticast mode [ 274.859071][T11580] tipc: Started in network mode [ 274.859098][T11580] tipc: Node identity 366754e34167, cluster identity 4711 [ 274.881594][T11580] tipc: Enabled bearer , priority 0 [ 275.167696][T11596] syzkaller1: entered promiscuous mode [ 275.167719][T11596] syzkaller1: entered allmulticast mode [ 275.232184][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 275.269719][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 275.849630][T11637] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.978171][ T30] tipc: Node number set to 1996510435 [ 276.038466][T11647] netlink: 'syz.1.1353': attribute type 25 has an invalid length. [ 276.051416][T11647] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.422212][T11666] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1358'. [ 276.540904][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 276.628346][T11681] xt_hashlimit: size too large, truncated to 1048576 [ 276.702673][T11674] wg2 speed is unknown, defaulting to 1000 [ 276.733197][T11674] dummy0 speed is unknown, defaulting to 1000 [ 276.947924][T11695] erspan1: entered allmulticast mode [ 278.100500][T11748] xt_nat: multiple ranges no longer supported [ 278.613084][T11768] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 278.712609][T11768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.749721][T11772] bond3: (slave dummy0): making interface the new active one [ 278.785142][T11772] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 278.805992][T11768] : renamed from dummy0 (while UP) [ 278.869284][ T5837]  speed is unknown, defaulting to 1000 [ 278.915256][ T5837] syz0: Port: 1 Link ACTIVE [ 278.994784][ T5803]  speed is unknown, defaulting to 1000 [ 279.067060][T11803] can: request_module (can-proto-0) failed. [ 279.296450][T11822] netlink: 'syz.3.1391': attribute type 40 has an invalid length. [ 279.428726][T11829] __nla_validate_parse: 6 callbacks suppressed [ 279.428740][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1394'. [ 279.599525][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 280.026151][T11872] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 280.350607][T11890] netlink: 'syz.0.1404': attribute type 2 has an invalid length. [ 280.350642][T11890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1404'. [ 280.487677][T11893] netlink: 'syz.4.1405': attribute type 13 has an invalid length. [ 280.553114][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1406'. [ 280.669976][T11907] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1409'. [ 280.670001][T11907] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1409'. [ 280.670015][T11907] netlink: 'syz.4.1409': attribute type 6 has an invalid length. [ 280.670027][T11907] netlink: 'syz.4.1409': attribute type 5 has an invalid length. [ 280.670036][T11907] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1409'. [ 280.671114][T11904] gtp1: entered promiscuous mode [ 280.671132][T11904] gtp1: entered allmulticast mode [ 280.840557][T11913] tipc: Enabling of bearer rejected, failed to enable media [ 280.853279][T11913] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1410'. [ 281.198704][T11940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1417'. [ 281.295274][T11945] dvmrp0: entered allmulticast mode [ 281.326505][T11945] dvmrp1: entered allmulticast mode [ 281.341604][T11945] dvmrp0: left allmulticast mode [ 281.341722][T11945] dvmrp1: left allmulticast mode [ 282.340087][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 282.434668][T11970] sysfs: cannot create duplicate filename '/class/ieee80211/.�PÑè'óG!DEÒSˆ' [ 282.434691][T11970] CPU: 1 UID: 0 PID: 11970 Comm: syz.1.1427 Not tainted syzkaller #0 PREEMPT(full) [ 282.434714][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.434729][T11970] Call Trace: [ 282.434738][T11970] [ 282.434746][T11970] dump_stack_lvl+0xe8/0x150 [ 282.434781][T11970] sysfs_warn_dup+0x8e/0xa0 [ 282.434811][T11970] sysfs_do_create_link_sd+0xc0/0x110 [ 282.434845][T11970] device_add_class_symlinks+0x1cf/0x240 [ 282.434871][T11970] device_add+0x467/0xb80 [ 282.434894][T11970] wiphy_register+0x1fc8/0x2ff0 [ 282.434932][T11970] ? __pfx_wiphy_register+0x10/0x10 [ 282.434951][T11970] ? __pfx_netdev_run_todo+0x10/0x10 [ 282.434979][T11970] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 282.435014][T11970] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 282.435042][T11970] ieee80211_register_hw+0x3dbb/0x4b00 [ 282.435080][T11970] ? ieee80211_register_hw+0x19c1/0x4b00 [ 282.435131][T11970] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 282.435156][T11970] ? __asan_memset+0x22/0x50 [ 282.435186][T11970] ? __hrtimer_setup+0x1b7/0x260 [ 282.435211][T11970] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 282.435239][T11970] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 282.435296][T11970] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 282.435317][T11970] ? kstrndup+0xbd/0x160 [ 282.435343][T11970] ? kstrndup+0xbd/0x160 [ 282.435365][T11970] hwsim_new_radio_nl+0xd8b/0xf90 [ 282.435412][T11970] genl_family_rcv_msg_doit+0x233/0x340 [ 282.435444][T11970] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.435482][T11970] ? bpf_lsm_capable+0x9/0x20 [ 282.435499][T11970] ? security_capable+0x7e/0x2c0 [ 282.435526][T11970] genl_rcv_msg+0x614/0x7a0 [ 282.435554][T11970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.435574][T11970] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.435611][T11970] netlink_rcv_skb+0x226/0x4a0 [ 282.435649][T11970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.435673][T11970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.435720][T11970] ? down_read+0x2be/0x330 [ 282.435749][T11970] genl_rcv+0x28/0x40 [ 282.435769][T11970] netlink_unicast+0x7bd/0x940 [ 282.435807][T11970] netlink_sendmsg+0x813/0xb40 [ 282.435846][T11970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.435883][T11970] ? apparmor_socket_sendmsg+0x98/0x360 [ 282.435907][T11970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.435934][T11970] sock_sendmsg_nosec+0x13a/0x180 [ 282.435957][T11970] ____sys_sendmsg+0x54e/0x850 [ 282.435988][T11970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.436023][T11970] ? import_iovec+0x73/0xa0 [ 282.436051][T11970] ___sys_sendmsg+0x2a5/0x360 [ 282.436075][T11970] ? __lock_acquire+0x747/0x2de0 [ 282.436099][T11970] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.436129][T11970] ? futex_wait+0x2a2/0x390 [ 282.436188][T11970] ? __fget_files+0x2a/0x420 [ 282.436213][T11970] ? __fget_files+0x3a2/0x420 [ 282.436251][T11970] __x64_sys_sendmsg+0x1b1/0x290 [ 282.436280][T11970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.436329][T11970] do_syscall_64+0x166/0x520 [ 282.436350][T11970] ? trace_irq_disable+0x3b/0x140 [ 282.436370][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.436389][T11970] ? clear_bhb_loop+0x70/0xc0 [ 282.436413][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.436433][T11970] RIP: 0033:0x7f2dba19e159 [ 282.436452][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.436467][T11970] RSP: 002b:00007f2dbaf8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.436488][T11970] RAX: ffffffffffffffda RBX: 00007f2dba425fa0 RCX: 00007f2dba19e159 [ 282.436502][T11970] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 282.436514][T11970] RBP: 00007f2dba23506b R08: 0000000000000000 R09: 0000000000000000 [ 282.436526][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.436537][T11970] R13: 00007f2dba426038 R14: 00007f2dba425fa0 R15: 00007ffea2b12f18 [ 282.436570][T11970] [ 282.966849][T11990] syzkaller0: left promiscuous mode [ 282.966870][T11990] syzkaller0: left allmulticast mode [ 283.008732][T11990] syzkaller0: mtu less than device minimum [ 283.009421][T11990] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 283.009709][T11990] veth1_vlan: mtu greater than device maximum [ 283.241935][T12009] IPVS: stopping master sync thread 12019 ... [ 283.243483][T12014] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 283.243500][T12014] nbd: error processing sock list [ 283.264489][T12014] block nbd3: shutting down sockets [ 283.862864][T12021] macvlan0: entered promiscuous mode [ 284.381539][T12061] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 284.407384][T12061] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 284.432457][T12061] geneve2: entered promiscuous mode [ 284.432479][T12061] geneve2: entered allmulticast mode [ 284.470613][T12061] __nla_validate_parse: 4 callbacks suppressed [ 284.470633][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 284.491583][T12064] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 284.616432][T12052] netlink: 'syz.3.1444': attribute type 83 has an invalid length. [ 284.633444][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 284.815357][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 284.993014][T12090] xt_NETMAP: bad rangesize 37. [ 285.002562][T12090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.109173][ T30] wg2 speed is unknown, defaulting to 1000 [ 285.222972][T12093] geneve3: entered promiscuous mode [ 285.463115][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'. [ 285.468366][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 285.759479][T12114] bond5: Unable to set up delay as MII monitoring is disabled [ 285.777309][T12114] bond5 (unregistering): Released all slaves [ 286.079092][T12137] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 286.081995][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 286.266242][T12141] block nbd3: server does not support multiple connections per device. [ 286.266664][T12141] block nbd3: shutting down sockets [ 286.279497][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1470'. [ 286.643324][T12161] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.672421][T12161] Bluetooth: hci0: unsupported parameter 5135 [ 286.672444][T12161] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 286.851070][T12172] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1478'. [ 287.006697][T12192] netlink: 'syz.4.1481': attribute type 23 has an invalid length. [ 287.333402][T12210] 0: reclassify loop, rule prio 0, protocol 800 [ 287.517137][T12224] raw_sendmsg: syz.1.1489 forgot to set AF_INET. Fix it! [ 287.558699][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1485'. [ 287.668802][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 287.693366][T12237] ip6gre1: entered promiscuous mode [ 287.693388][T12237] ip6gre1: entered allmulticast mode [ 287.729911][T12237] netlink: 'syz.1.1490': attribute type 6 has an invalid length. [ 287.844624][ T7028] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.844668][ T7028] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.844698][ T7028] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.844727][ T7028] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.572268][T12265] vlan2: entered promiscuous mode [ 288.572290][T12265] ip6gretap0: entered promiscuous mode [ 288.651691][T12268] vlan2: entered promiscuous mode [ 288.839875][T12285] syzkaller0: entered promiscuous mode [ 288.839896][T12285] syzkaller0: entered allmulticast mode [ 288.933637][T12289] xt_hashlimit: max too large, truncated to 1048576 [ 288.962741][T12289] No such timeout policy "syz1" [ 289.359386][T12307] ip6tnl4: entered promiscuous mode [ 289.359409][T12307] ip6tnl4: entered allmulticast mode [ 289.760952][T12337] gre2: entered promiscuous mode [ 289.976829][T12344] netlink: 'syz.2.1518': attribute type 30 has an invalid length. [ 290.146970][T12355] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 290.362527][T12365] __nla_validate_parse: 8 callbacks suppressed [ 290.363721][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 290.363749][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 290.550088][T12371] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1525'. [ 290.608675][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 290.648870][T12370] bond7 (unregistering): Released all slaves [ 290.669086][T12376] netlink: 'syz.0.1526': attribute type 30 has an invalid length. [ 290.718506][T12374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.741885][T12374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1526'. [ 290.746509][T12376] bond5: option arp_missed_max: invalid value (0) [ 290.746531][T12376] bond5: option arp_missed_max: allowed values 1 - 255 [ 290.773712][T12376] bond5 (unregistering): Released all slaves [ 290.962771][T12391] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 291.113634][ T7028] IPVS: starting estimator thread 0... [ 291.120681][T12403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1535'. [ 291.121419][T12403] IPVS: Error connecting to the multicast addr [ 291.132032][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 291.171626][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 291.207046][T12404] IPVS: using max 39 ests per chain, 93600 per kthread [ 291.461853][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 291.581962][T12410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.582901][T12410] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.585705][T12410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.639392][T12410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.641930][T12410] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.695982][T12420] bond8: entered promiscuous mode [ 291.696007][T12420] bond8: entered allmulticast mode [ 291.696493][T12420] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.966266][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 291.972291][T12435] netlink: 'syz.4.1541': attribute type 11 has an invalid length. [ 292.098260][T12445] syzkaller0: entered promiscuous mode [ 292.098283][T12445] syzkaller0: entered allmulticast mode [ 292.103776][T12445] tipc: Enabled bearer , priority 0 [ 292.110021][T12445] tipc: Resetting bearer [ 292.170062][T12445] tipc: Disabling bearer [ 292.250857][T12452] wg2 speed is unknown, defaulting to 1000 [ 292.262043][T12452]  speed is unknown, defaulting to 1000 [ 292.301604][T12455] netlink: 'syz.4.1547': attribute type 11 has an invalid length. [ 292.626282][T12462] TC_ACT_REPEAT abuse ? [ 292.718782][T12465] syzkaller0: entered promiscuous mode [ 292.718805][T12465] syzkaller0: entered allmulticast mode [ 293.393235][T12494] FAULT_INJECTION: forcing a failure. [ 293.393235][T12494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.393265][T12494] CPU: 1 UID: 0 PID: 12494 Comm: syz.4.1557 Not tainted syzkaller #0 PREEMPT(full) [ 293.393286][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.393297][T12494] Call Trace: [ 293.393304][T12494] [ 293.393312][T12494] dump_stack_lvl+0xe8/0x150 [ 293.393343][T12494] should_fail_ex+0x410/0x560 [ 293.393369][T12494] _copy_from_user+0x2d/0xb0 [ 293.393393][T12494] ___sys_sendmsg+0x1c6/0x360 [ 293.393432][T12494] ? __lock_acquire+0x747/0x2de0 [ 293.393456][T12494] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.393515][T12494] ? __fget_files+0x2a/0x420 [ 293.393538][T12494] ? __fget_files+0x3a2/0x420 [ 293.393572][T12494] __x64_sys_sendmsg+0x1b1/0x290 [ 293.393599][T12494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.393635][T12494] do_syscall_64+0x166/0x520 [ 293.393653][T12494] ? trace_irq_disable+0x3b/0x140 [ 293.393667][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.393682][T12494] ? clear_bhb_loop+0x70/0xc0 [ 293.393700][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.393714][T12494] RIP: 0033:0x7f73ab99e159 [ 293.393727][T12494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.393739][T12494] RSP: 002b:00007f73ac7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.393755][T12494] RAX: ffffffffffffffda RBX: 00007f73abc26180 RCX: 00007f73ab99e159 [ 293.393766][T12494] RDX: 0000000020040054 RSI: 0000200000000140 RDI: 0000000000000003 [ 293.393775][T12494] RBP: 00007f73ac7be090 R08: 0000000000000000 R09: 0000000000000000 [ 293.393784][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.393792][T12494] R13: 00007f73abc26218 R14: 00007f73abc26180 R15: 00007ffcfe5441a8 [ 293.393815][T12494] [ 293.776102][T12505] netlink: 'syz.1.1561': attribute type 30 has an invalid length. [ 294.516473][T11844] udevd[11844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 294.560507][T12535] bridge4: entered allmulticast mode [ 294.682795][T12539] bridge5: entered allmulticast mode [ 294.969591][T12557] FAULT_INJECTION: forcing a failure. [ 294.969591][T12557] name failslab, interval 1, probability 0, space 0, times 0 [ 294.969634][T12557] CPU: 1 UID: 0 PID: 12557 Comm: syz.1.1572 Not tainted syzkaller #0 PREEMPT(full) [ 294.969654][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.969665][T12557] Call Trace: [ 294.969673][T12557] [ 294.969681][T12557] dump_stack_lvl+0xe8/0x150 [ 294.969713][T12557] should_fail_ex+0x410/0x560 [ 294.969737][T12557] ? __alloc_skb+0x1db/0x7a0 [ 294.969758][T12557] should_failslab+0xa8/0x100 [ 294.969782][T12557] ? __alloc_skb+0x1db/0x7a0 [ 294.969800][T12557] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 294.969828][T12557] ? __alloc_skb+0x18d/0x7a0 [ 294.969849][T12557] ? __alloc_skb+0x1db/0x7a0 [ 294.969875][T12557] __alloc_skb+0x1db/0x7a0 [ 294.969900][T12557] netlink_sendmsg+0x5d4/0xb40 [ 294.969936][T12557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.969970][T12557] ? apparmor_socket_sendmsg+0x18b/0x360 [ 294.969993][T12557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.970019][T12557] sock_sendmsg_nosec+0x13a/0x180 [ 294.970041][T12557] ____sys_sendmsg+0x54e/0x850 [ 294.970070][T12557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.970101][T12557] ? import_iovec+0x73/0xa0 [ 294.970127][T12557] ___sys_sendmsg+0x2a5/0x360 [ 294.970149][T12557] ? __lock_acquire+0x747/0x2de0 [ 294.970173][T12557] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.970230][T12557] ? __fget_files+0x2a/0x420 [ 294.970253][T12557] ? __fget_files+0x3a2/0x420 [ 294.970288][T12557] __x64_sys_sendmsg+0x1b1/0x290 [ 294.970315][T12557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.970359][T12557] do_syscall_64+0x166/0x520 [ 294.970381][T12557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.970401][T12557] ? clear_bhb_loop+0x70/0xc0 [ 294.970424][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.970442][T12557] RIP: 0033:0x7f2dba19e159 [ 294.970459][T12557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.970473][T12557] RSP: 002b:00007f2dbaf8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.970492][T12557] RAX: ffffffffffffffda RBX: 00007f2dba425fa0 RCX: 00007f2dba19e159 [ 294.970504][T12557] RDX: 0000000020040054 RSI: 0000200000000140 RDI: 0000000000000003 [ 294.970516][T12557] RBP: 00007f2dbaf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.970526][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.970537][T12557] R13: 00007f2dba426038 R14: 00007f2dba425fa0 R15: 00007ffea2b12f18 [ 294.970564][T12557] [ 294.993771][T12560] netlink: 'syz.0.1574': attribute type 11 has an invalid length. [ 295.301387][T12561] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 295.414724][T12561] __nla_validate_parse: 11 callbacks suppressed [ 295.414743][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 295.491147][T12570] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 295.536721][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 295.811560][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.817192][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 295.869198][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.980475][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.169739][T12606] x_tables: duplicate underflow at hook 1 [ 296.282332][T12622] ipvlan2: entered promiscuous mode [ 296.292220][T12623] ipvlan3: entered promiscuous mode [ 296.301187][T12624] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1586'. [ 296.539364][T12614] wg2 speed is unknown, defaulting to 1000 [ 296.544020][T12614]  speed is unknown, defaulting to 1000 [ 296.834803][T12640] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 296.853926][T12640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.933620][T12646] ip_tables: iptables: counters copy to user failed while replacing table [ 297.231120][T12657] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:21 [ 297.609061][T12671] FAULT_INJECTION: forcing a failure. [ 297.609061][T12671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.609093][T12671] CPU: 0 UID: 0 PID: 12671 Comm: syz.0.1598 Not tainted syzkaller #0 PREEMPT(full) [ 297.609113][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.609123][T12671] Call Trace: [ 297.609129][T12671] [ 297.609136][T12671] dump_stack_lvl+0xe8/0x150 [ 297.609175][T12671] should_fail_ex+0x410/0x560 [ 297.609198][T12671] _copy_from_iter+0x1d3/0x1660 [ 297.609218][T12671] ? __alloc_skb+0x27a/0x7a0 [ 297.609239][T12671] ? __alloc_skb+0x27a/0x7a0 [ 297.609261][T12671] ? __alloc_skb+0x27a/0x7a0 [ 297.609281][T12671] ? __pfx__copy_from_iter+0x10/0x10 [ 297.609299][T12671] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 297.609326][T12671] ? __alloc_skb+0x27a/0x7a0 [ 297.609345][T12671] ? __alloc_skb+0x27a/0x7a0 [ 297.609371][T12671] ? netlink_sendmsg+0x650/0xb40 [ 297.609397][T12671] ? skb_put+0x112/0x210 [ 297.609422][T12671] netlink_sendmsg+0x6c0/0xb40 [ 297.609459][T12671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.609495][T12671] ? apparmor_socket_sendmsg+0x18b/0x360 [ 297.609518][T12671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.609544][T12671] sock_sendmsg_nosec+0x13a/0x180 [ 297.609566][T12671] ____sys_sendmsg+0x54e/0x850 [ 297.609597][T12671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.609631][T12671] ? import_iovec+0x73/0xa0 [ 297.609655][T12671] ___sys_sendmsg+0x2a5/0x360 [ 297.609678][T12671] ? __lock_acquire+0x747/0x2de0 [ 297.609700][T12671] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.609752][T12671] ? __fget_files+0x2a/0x420 [ 297.609773][T12671] ? __fget_files+0x3a2/0x420 [ 297.609805][T12671] __x64_sys_sendmsg+0x1b1/0x290 [ 297.609831][T12671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.609876][T12671] do_syscall_64+0x166/0x520 [ 297.609898][T12671] ? trace_irq_disable+0x3b/0x140 [ 297.609916][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.609935][T12671] ? clear_bhb_loop+0x70/0xc0 [ 297.609957][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.609976][T12671] RIP: 0033:0x7f0c2e59e159 [ 297.609993][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.610008][T12671] RSP: 002b:00007f0c2f48d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.610029][T12671] RAX: ffffffffffffffda RBX: 00007f0c2e826090 RCX: 00007f0c2e59e159 [ 297.610044][T12671] RDX: 0000000020040054 RSI: 0000200000000140 RDI: 0000000000000003 [ 297.610056][T12671] RBP: 00007f0c2f48d090 R08: 0000000000000000 R09: 0000000000000000 [ 297.610067][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.610078][T12671] R13: 00007f0c2e826128 R14: 00007f0c2e826090 R15: 00007ffddec53d28 [ 297.610109][T12671] [ 298.107167][T12677] syzkaller1: entered promiscuous mode [ 298.107192][T12677] syzkaller1: entered allmulticast mode [ 298.112957][T12679] siw: device registration error -23 [ 298.199704][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'. [ 298.284805][T12657] syzkaller0: entered promiscuous mode [ 298.284829][T12657] syzkaller0: entered allmulticast mode [ 298.687396][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 298.687422][T12706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'. [ 298.740113][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'. [ 301.884189][T12730] FAULT_INJECTION: forcing a failure. [ 301.884189][T12730] name failslab, interval 1, probability 0, space 0, times 0 [ 301.884222][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.1.1610 Not tainted syzkaller #0 PREEMPT(full) [ 301.884243][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.884271][T12730] Call Trace: [ 301.884277][T12730] [ 301.884284][T12730] dump_stack_lvl+0xe8/0x150 [ 301.884314][T12730] should_fail_ex+0x410/0x560 [ 301.884340][T12730] should_failslab+0xa8/0x100 [ 301.884363][T12730] ? skb_clone+0x212/0x3a0 [ 301.884378][T12730] kmem_cache_alloc_noprof+0xa1/0x600 [ 301.884394][T12730] ? skb_clone+0x212/0x3a0 [ 301.884410][T12730] skb_clone+0x212/0x3a0 [ 301.884425][T12730] __netlink_deliver_tap+0x413/0x860 [ 301.884446][T12730] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.884461][T12730] netlink_deliver_tap+0x19c/0x1b0 [ 301.884475][T12730] netlink_unicast+0x781/0x940 [ 301.884494][T12730] netlink_sendmsg+0x813/0xb40 [ 301.884513][T12730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.884531][T12730] ? apparmor_socket_sendmsg+0x18b/0x360 [ 301.884544][T12730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.884558][T12730] sock_sendmsg_nosec+0x13a/0x180 [ 301.884570][T12730] ____sys_sendmsg+0x54e/0x850 [ 301.884585][T12730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.884603][T12730] ? import_iovec+0x73/0xa0 [ 301.884617][T12730] ___sys_sendmsg+0x2a5/0x360 [ 301.884629][T12730] ? __lock_acquire+0x747/0x2de0 [ 301.884642][T12730] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.884672][T12730] ? __fget_files+0x2a/0x420 [ 301.884685][T12730] ? __fget_files+0x3a2/0x420 [ 301.884703][T12730] __x64_sys_sendmsg+0x1b1/0x290 [ 301.884717][T12730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.884741][T12730] do_syscall_64+0x166/0x520 [ 301.884753][T12730] ? trace_irq_disable+0x3b/0x140 [ 301.884764][T12730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.884774][T12730] ? clear_bhb_loop+0x70/0xc0 [ 301.884786][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.884796][T12730] RIP: 0033:0x7f2dba19e159 [ 301.884807][T12730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.884816][T12730] RSP: 002b:00007f2db83f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.884828][T12730] RAX: ffffffffffffffda RBX: 00007f2dba426090 RCX: 00007f2dba19e159 [ 301.884835][T12730] RDX: 0000000020040054 RSI: 0000200000000140 RDI: 0000000000000003 [ 301.884848][T12730] RBP: 00007f2db83f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.884854][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.884860][T12730] R13: 00007f2dba426128 R14: 00007f2dba426090 R15: 00007ffea2b12f18 [ 301.884876][T12730] [ 304.215486][T12751] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 304.215534][T12751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.216134][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 304.217160][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 304.352938][ T5620] block nbd3: Receive control failed (result -32) [ 304.352978][ T5619] block nbd3: Receive control failed (result -32) [ 304.620392][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1618'. [ 304.860329][T12777] trusted_key: syz.4.1623 sent an empty control message without MSG_MORE. [ 305.152055][T12789] netlink: 'syz.0.1626': attribute type 21 has an invalid length. [ 305.152077][T12789] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1626'. [ 305.152151][T12789] netlink: 'syz.0.1626': attribute type 4 has an invalid length. [ 305.152164][T12789] netlink: 'syz.0.1626': attribute type 5 has an invalid length. [ 305.152175][T12789] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1626'. [ 305.154803][T12789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1626'. [ 305.710649][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 305.761201][T12818] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 306.010764][T12826] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 306.044968][T12826] openvswitch: netlink: Invalid VLAN frame [ 306.279501][T12832] syzkaller0: entered promiscuous mode [ 306.279526][T12832] syzkaller0: entered allmulticast mode [ 306.522589][T12845] ip_tables: iptables: counters copy to user failed while replacing table [ 309.315456][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 309.355138][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1648'. [ 309.387502][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1648'. [ 309.648995][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.718065][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 309.731175][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.735236][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.735576][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.735765][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 309.735932][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 310.981452][T12929] tipc: Started in network mode [ 310.981484][T12929] tipc: Node identity 4ac3f3ebe637, cluster identity 4711 [ 310.981636][T12929] tipc: Enabled bearer , priority 0 [ 310.994518][T12929] syzkaller0: entered promiscuous mode [ 310.994539][T12929] syzkaller0: entered allmulticast mode [ 311.008094][T12929] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 311.134730][T12929] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 311.143015][T12929] tipc: Resetting bearer [ 311.157224][T12937] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 311.238771][T12928] tipc: Resetting bearer [ 311.405961][T12928] tipc: Disabling bearer [ 311.599854][T12964] xt_hashlimit: size too large, truncated to 1048576 [ 311.599873][T12964] xt_hashlimit: max too large, truncated to 1048576 [ 311.851764][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.854751][T12979] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 311.909372][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.909501][T12981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.909756][T12981] bridge0: port 1(ÿÿÿÿÿÿ) entered blocking state [ 311.909853][T12981] bridge0: port 1(ÿÿÿÿÿÿ) entered forwarding state [ 311.910337][T12981] bridge0: left promiscuous mode [ 311.946226][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.946406][T12981] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 312.050811][T12987] netlink: 'syz.3.1668': attribute type 16 has an invalid length. [ 312.050827][T12987] netlink: 'syz.3.1668': attribute type 17 has an invalid length. [ 312.291473][T12967] xt_hashlimit: size too large, truncated to 1048576 [ 312.291492][T12967] xt_hashlimit: max too large, truncated to 1048576 [ 313.062507][T13017] v: renamed from veth0_vlan [ 313.209359][T13024] netlink: 'syz.4.1680': attribute type 10 has an invalid length. [ 313.272019][T13024] wg2: entered promiscuous mode [ 313.275891][T13024] team0: Device wg2 is of different type [ 313.325316][ T5710] wg2 speed is unknown, defaulting to 1000 [ 313.325355][ T5710] syz2: Port: 1 Link DOWN [ 313.325406][ T5756] wg2 speed is unknown, defaulting to 1000 [ 313.327086][ T5718] wg2 speed is unknown, defaulting to 1000 [ 313.919991][T13052] dvmrp0: entered allmulticast mode [ 313.920336][T13053] dvmrp0: left allmulticast mode [ 316.416882][T13061] bridge0: port 1(vlan2) entered blocking state [ 316.417054][T13061] bridge0: port 1(vlan2) entered disabled state [ 316.417178][T13061] vlan2: entered allmulticast mode [ 316.417191][T13061] geneve0: entered allmulticast mode [ 316.419066][T13061] vlan2: entered promiscuous mode [ 316.419082][T13061] geneve0: entered promiscuous mode [ 316.549544][ T5276] v: left promiscuous mode [ 316.569428][ T5803] v: entered promiscuous mode [ 316.663094][T13098] netlink: 'syz.0.1692': attribute type 11 has an invalid length. [ 316.831202][T13099] __nla_validate_parse: 66 callbacks suppressed [ 316.831223][T13099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1691'. [ 317.113248][T13094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.141058][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 317.141091][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1694'. [ 317.141266][T13094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.243061][T13094] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 317.399239][T13128] veth1: entered promiscuous mode [ 317.412829][T13128] veth1: left promiscuous mode [ 317.485883][ T7022] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 317.485916][ T7022] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 317.485938][ T7022] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.486043][ T7022] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 317.486065][ T7022] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 317.486087][ T7022] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.486118][ T7022] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 317.486138][ T7022] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 317.486159][ T7022] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.486188][ T7022] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 317.486209][ T7022] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 317.486222][ T7022] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.779984][T13143] netlink: 'syz.2.1697': attribute type 1 has an invalid length. [ 318.015312][T13151] syzkaller0: entered promiscuous mode [ 318.015334][T13151] syzkaller0: entered allmulticast mode [ 318.238876][T13160] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 318.467439][ T7030] tipc: Subscription rejected, illegal request [ 318.531625][T13182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1704'. [ 318.542333][T13186] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1704'. [ 318.717641][T13194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.810452][T13199] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 319.198171][T13220] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 319.250308][T13220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.394375][T13231] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 319.423635][T13232] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 319.513267][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 319.552260][T13234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1717'. [ 319.818180][T13245] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 320.056505][T13254] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 320.056543][T13254] netlink: 'syz.4.1725': attribute type 2 has an invalid length. [ 320.057815][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 320.087086][T13258] syzkaller0: entered promiscuous mode [ 320.087107][T13258] syzkaller0: entered allmulticast mode [ 320.252980][T13271] sctp: [Deprecated]: syz.4.1727 (pid 13271) Use of int in maxseg socket option. [ 320.252980][T13271] Use struct sctp_assoc_value instead [ 321.808476][T13329] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.212654][T13337] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1742'. [ 322.259279][T13338] syzkaller1: entered promiscuous mode [ 322.259303][T13338] syzkaller1: entered allmulticast mode [ 322.446989][T13353] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 322.447100][T13353] syzkaller1: linktype set to 825 [ 322.505548][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'. [ 325.865363][T13374] bridge5: entered promiscuous mode [ 325.984368][ T7028] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.984418][ T7028] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.984448][ T7028] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.984478][ T7028] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.988031][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 325.988055][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 325.993846][T13391] netlink: 'syz.1.1758': attribute type 16 has an invalid length. [ 325.993865][T13391] netlink: 'syz.1.1758': attribute type 17 has an invalid length. [ 326.059869][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 326.070641][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 326.070890][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 326.112042][T13391] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 326.173970][T13396] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1761'. [ 326.459835][T13419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.926124][T13431] sit0: left promiscuous mode [ 327.002581][T13431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.017854][T13431] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.032331][T13431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.157280][T13431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.178442][T13431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.199313][T13431] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.199339][T13431] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.200660][T13431] veth1_vlan: left promiscuous mode [ 327.201787][T13431] veth0_vlan: left promiscuous mode [ 327.242742][T13431] veth0_vlan: entered promiscuous mode [ 327.253113][T13431] veth1_vlan: entered promiscuous mode [ 327.270170][T13431] veth0_macvtap: left promiscuous mode [ 327.275426][T13431] veth0_macvtap: entered promiscuous mode [ 327.309580][T13431] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.338484][ T59] bridge0: port 1(ÿÿÿÿÿÿ) entered blocking state [ 327.338543][ T59] bridge0: port 1(ÿÿÿÿÿÿ) entered forwarding state [ 327.342892][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.342994][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.569402][T13439] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1768'. [ 327.591788][ T5717] wg2 speed is unknown, defaulting to 1000 [ 327.591830][ T5717] syz2: Port: 1 Link ACTIVE [ 327.725480][ T7022] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.845724][T12350] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.884417][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.884876][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.011915][T13470] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 328.016960][T13470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 328.044861][T13474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 328.448327][T13479] IPv6: addrconf: prefix option has invalid lifetime [ 328.531514][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 328.531542][T13487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1774'. [ 328.653900][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.664726][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.665301][T13493] syz.1.1777: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.665557][T13493] CPU: 1 UID: 0 PID: 13493 Comm: syz.1.1777 Not tainted syzkaller #0 PREEMPT(full) [ 328.665573][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.665583][T13493] Call Trace: [ 328.665590][T13493] [ 328.665597][T13493] dump_stack_lvl+0xe8/0x150 [ 328.665629][T13493] warn_alloc+0x24d/0x270 [ 328.665648][T13493] ? kasan_save_track+0x4f/0x80 [ 328.665666][T13493] ? kasan_save_track+0x3e/0x80 [ 328.665687][T13493] ? __pfx_warn_alloc+0x10/0x10 [ 328.665700][T13493] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 328.665723][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.665758][T13493] __vmalloc_node_range_noprof+0x127/0x1540 [ 328.665804][T13493] ? rcu_is_watching+0x16/0xb0 [ 328.665830][T13493] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.665855][T13493] ? __kmalloc_cache_noprof+0x321/0x600 [ 328.665873][T13493] ? __kmalloc_cache_noprof+0x14d/0x600 [ 328.665890][T13493] ? xskq_create+0x56/0x220 [ 328.665914][T13493] xskq_create+0x148/0x220 [ 328.665933][T13493] ? xsk_init_queue+0x8a/0xe0 [ 328.665952][T13493] xsk_init_queue+0x8a/0xe0 [ 328.665972][T13493] xsk_setsockopt+0x5e0/0x960 [ 328.665992][T13493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.666010][T13493] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.666033][T13493] ? aa_sock_opt_perm+0x142/0x1e0 [ 328.666059][T13493] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 328.666081][T13493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.666100][T13493] do_sock_setsockopt+0x17c/0x1b0 [ 328.666127][T13493] __x64_sys_setsockopt+0x13d/0x1b0 [ 328.666154][T13493] do_syscall_64+0x166/0x520 [ 328.666174][T13493] ? trace_irq_disable+0x3b/0x140 [ 328.666192][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.666209][T13493] ? clear_bhb_loop+0x70/0xc0 [ 328.666231][T13493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.666248][T13493] RIP: 0033:0x7f2dba19e159 [ 328.666266][T13493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.666280][T13493] RSP: 002b:00007f2db83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.666297][T13493] RAX: ffffffffffffffda RBX: 00007f2dba426090 RCX: 00007f2dba19e159 [ 328.666309][T13493] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 328.666320][T13493] RBP: 00007f2dba23506b R08: 0000000000000004 R09: 0000000000000000 [ 328.666330][T13493] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.666341][T13493] R13: 00007f2dba426128 R14: 00007f2dba426090 R15: 00007ffea2b12f18 [ 328.666371][T13493] [ 328.666387][T13493] Mem-Info: [ 328.666396][T13493] active_anon:5972 inactive_anon:0 isolated_anon:0 [ 328.666396][T13493] active_file:0 inactive_file:43652 isolated_file:0 [ 328.666396][T13493] unevictable:0 dirty:169 writeback:0 [ 328.666396][T13493] slab_reclaimable:10961 slab_unreclaimable:106264 [ 328.666396][T13493] mapped:29664 shmem:895 pagetables:1196 [ 328.666396][T13493] sec_pagetables:0 bounce:0 [ 328.666396][T13493] kernel_misc_reclaimable:0 [ 328.666396][T13493] free:1317944 free_pcp:11917 free_cma:0 [ 328.666441][T13493] Node 0 active_anon:23888kB inactive_anon:0kB active_file:0kB inactive_file:174404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118656kB dirty:676kB writeback:0kB shmem:3580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13384kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.666496][T13493] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.666545][T13493] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.666594][T13493] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 328.684847][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.685253][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.685607][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.687852][T13493] Node 0 DMA32 free:1314588kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23188kB inactive_anon:0kB active_file:0kB inactive_file:174404kB unevictable:0kB writepending:676kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:47480kB local_pcp:29192kB free_cma:0kB [ 328.687909][T13493] lowmem_reserve[]: 0 0 0 0 0 [ 328.687941][T13493] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.687988][T13493] lowmem_reserve[]: 0 0 0 0 0 [ 328.688020][T13493] Node 1 Normal free:3942828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.688069][T13493] lowmem_reserve[]: 0 0 0 0 0 [ 328.688100][T13493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.688234][T13493] Node 0 DMA32: 712*4kB (UME) 563*8kB (UME) 229*16kB (UME) 678*32kB (UME) 376*64kB (UME) 89*128kB (UME) 17*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 300*4096kB (UM) = 1314632kB [ 328.688375][T13493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.688471][T13493] Node 1 Normal: 3*4kB (UM) 2*8kB (ME) 7*16kB (UME) 5*32kB (UME) 6*64kB (UME) 4*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 960*4096kB (UM) = 3942828kB [ 328.688610][T13493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.688624][T13493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.688653][T13493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.688667][T13493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.688681][T13493] 44343 total pagecache pages [ 328.688691][T13493] 0 pages in swap cache [ 328.688698][T13493] Free swap = 124996kB [ 328.688704][T13493] Total swap = 124996kB [ 328.688711][T13493] 2097051 pages RAM [ 328.688717][T13493] 0 pages HighMem/MovableOnly [ 328.688724][T13493] 428700 pages reserved [ 328.688730][T13493] 0 pages cma reserved [ 328.708848][T13496] syzkaller0: Caught tx_queue_len zero misconfig [ 329.279029][T13505] Bluetooth: hci0: unsupported parameter 5161 [ 329.279052][T13505] Bluetooth: hci0: unsupported parameter 8192 [ 329.279064][T13505] Bluetooth: hci0: unsupported parameter 5161 [ 329.279075][T13505] Bluetooth: hci0: unsupported parameter 8192 [ 329.308081][T13505] ±ÿ: renamed from lo (while UP) [ 329.598060][T13514] syzkaller1: entered promiscuous mode [ 329.598082][T13514] syzkaller1: entered allmulticast mode [ 329.609365][T13522] netlink: 'syz.2.1784': attribute type 12 has an invalid length. [ 329.614806][T13519] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.1783'. [ 329.659447][T13514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.909825][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1790'. [ 331.057921][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1794'. [ 331.296088][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 331.641962][T13616] net_ratelimit: 29 callbacks suppressed [ 331.641983][T13616] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 331.905700][T13630] syzkaller0: entered promiscuous mode [ 331.905723][T13630] syzkaller0: entered allmulticast mode [ 332.074514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.152692][T13633] syzkaller0: entered promiscuous mode [ 332.152715][T13633] syzkaller0: entered allmulticast mode [ 332.197165][T13642] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1808'. [ 332.226199][T13636] syzkaller1: entered promiscuous mode [ 332.226222][T13636] syzkaller1: entered allmulticast mode [ 333.273509][T13675] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 333.293309][T13679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1818'. [ 334.009229][T13697] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 334.346638][T13724] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.379380][T13724] ip_tables: iptables: counters copy to user failed while replacing table [ 334.762977][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 334.807289][T13741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1830'. [ 334.808555][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 335.242276][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 335.599310][T13773] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 335.669579][T13758] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 336.141283][T13797] macsec0: entered promiscuous mode [ 336.141306][T13797] bridge0: entered promiscuous mode [ 336.315943][T13807] syzkaller0: entered promiscuous mode [ 336.315966][T13807] syzkaller0: entered allmulticast mode [ 336.344018][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1847'. [ 336.360401][T13811] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 336.459309][T13814] nbd: must specify a size in bytes for the device [ 336.536629][T13816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 336.606836][T13820] macvlan0: entered promiscuous mode [ 336.607560][T13820] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 336.607576][T13820] netlink: 'syz.3.1852': attribute type 2 has an invalid length. [ 337.193949][T13832] wg2 speed is unknown, defaulting to 1000 [ 337.200289][T13832]  speed is unknown, defaulting to 1000 [ 337.226223][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 337.246455][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 337.394390][T13851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1859'. [ 337.412796][T13851] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 337.574257][T13851] xt_CT: No such helper "netbios-ns" [ 337.919521][T13870] netlink: 'syz.4.1864': attribute type 25 has an invalid length. [ 338.165158][T13879] netlink: 'syz.1.1867': attribute type 23 has an invalid length. [ 338.330258][T13888] Cannot find del_set index 4 as target [ 338.710355][T13898] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 338.727488][T13901] netlink: 'syz.2.1870': attribute type 4 has an invalid length. [ 338.785879][T13901] netlink: 'syz.2.1870': attribute type 4 has an invalid length. [ 338.788532][T13900] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 338.887697][T13900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.928330][T13904] bond9: (slave veth0_to_bond): making interface the new active one [ 338.945311][T13904] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 338.991698][T13900] bond9: entered promiscuous mode [ 338.991723][T13900] veth0_to_bond: entered promiscuous mode [ 338.991916][T13900] bond9: entered allmulticast mode [ 338.991929][T13900] veth0_to_bond: entered allmulticast mode [ 339.435710][T13921] __nla_validate_parse: 2 callbacks suppressed [ 339.435729][T13921] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1877'. [ 339.476072][T13922] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1877'. [ 339.719081][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 339.722400][T13943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1885'. [ 339.722429][T13943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1885'. [ 339.903952][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1888'. [ 340.034840][T13953] wg2 speed is unknown, defaulting to 1000 [ 340.041883][T13956] netlink: 'syz.3.1890': attribute type 16 has an invalid length. [ 340.041905][T13956] netlink: 'syz.3.1890': attribute type 17 has an invalid length. [ 340.110615][T13956] lo: entered promiscuous mode [ 340.110636][T13956] lo: entered allmulticast mode [ 340.111921][T13956] tunl0: entered promiscuous mode [ 340.111940][T13956] tunl0: entered allmulticast mode [ 340.119467][T13956] gre0: entered promiscuous mode [ 340.119485][T13956] gre0: entered allmulticast mode [ 340.138706][T13956] gretap0: entered promiscuous mode [ 340.138729][T13956] gretap0: entered allmulticast mode [ 340.141283][T13956] erspan0: entered promiscuous mode [ 340.141302][T13956] erspan0: entered allmulticast mode [ 340.147459][T13956] ip_vti0: entered promiscuous mode [ 340.147479][T13956] ip_vti0: entered allmulticast mode [ 340.148271][T13956] ip6_vti0: entered promiscuous mode [ 340.148285][T13956] ip6_vti0: entered allmulticast mode [ 340.153852][T13956] sit0: entered promiscuous mode [ 340.156035][T13956] sit0: entered allmulticast mode [ 340.168765][T13956] ip6tnl0: entered promiscuous mode [ 340.168787][T13956] ip6tnl0: entered allmulticast mode [ 340.169923][T13956] ip6gre0: entered promiscuous mode [ 340.169940][T13956] ip6gre0: entered allmulticast mode [ 340.175045][T13956] syz_tun: entered promiscuous mode [ 340.175064][T13956] syz_tun: entered allmulticast mode [ 340.184814][T13956] ip6gretap0: entered promiscuous mode [ 340.184836][T13956] ip6gretap0: entered allmulticast mode [ 340.188337][T13956] bridge0: entered allmulticast mode [ 340.191657][T13956] vcan0: entered promiscuous mode [ 340.191689][T13956] vcan0: entered allmulticast mode [ 340.197985][T13956] bond0: entered promiscuous mode [ 340.198015][T13956] bond0: entered allmulticast mode [ 340.198757][T13956] dummy0: entered promiscuous mode [ 340.198773][T13956] dummy0: entered allmulticast mode [ 340.208718][T13956] nlmon0: entered promiscuous mode [ 340.208739][T13956] nlmon0: entered allmulticast mode [ 340.223080][T13956] vxcan0: entered promiscuous mode [ 340.223101][T13956] vxcan0: entered allmulticast mode [ 340.225707][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 340.227187][T13956] vxcan1: entered promiscuous mode [ 340.227205][T13956] vxcan1: entered allmulticast mode [ 340.229986][T13956] veth0: entered promiscuous mode [ 340.230004][T13956] veth0: entered allmulticast mode [ 340.242659][T13956] veth1: entered promiscuous mode [ 340.242680][T13956] veth1: entered allmulticast mode [ 340.248465][T13956] wg0: entered promiscuous mode [ 340.248483][T13956] wg0: entered allmulticast mode [ 340.256718][T13956] wg1: entered promiscuous mode [ 340.256739][T13956] wg1: entered allmulticast mode [ 340.262947][T13956] wg2: entered promiscuous mode [ 340.262967][T13956] wg2: entered allmulticast mode [ 340.271964][T13956] veth1_to_bridge: entered promiscuous mode [ 340.271986][T13956] veth1_to_bridge: entered allmulticast mode [ 340.275548][T13956] bridge_slave_1: entered promiscuous mode [ 340.281545][T13956] bridge_slave_1: entered allmulticast mode [ 340.285519][T13956] veth0_to_bond: entered promiscuous mode [ 340.285538][T13956] veth0_to_bond: entered allmulticast mode [ 340.292575][T13956] bond_slave_0: entered promiscuous mode [ 340.292595][T13956] bond_slave_0: entered allmulticast mode [ 340.302489][T13956] veth1_to_bond: entered promiscuous mode [ 340.302509][T13956] veth1_to_bond: entered allmulticast mode [ 340.303989][T13956] bond_slave_1: entered promiscuous mode [ 340.304004][T13956] bond_slave_1: entered allmulticast mode [ 340.318756][T13956] veth0_to_team: entered promiscuous mode [ 340.318775][T13956] veth0_to_team: entered allmulticast mode [ 340.330202][T13956] team_slave_0: entered promiscuous mode [ 340.330222][T13956] team_slave_0: entered allmulticast mode [ 340.343317][T13956] veth1_to_team: entered promiscuous mode [ 340.343345][T13956] veth1_to_team: entered allmulticast mode [ 340.352308][T13956] team_slave_1: entered promiscuous mode [ 340.352327][T13956] team_slave_1: entered allmulticast mode [ 340.353219][T13956] veth0_to_batadv: entered promiscuous mode [ 340.353233][T13956] veth0_to_batadv: entered allmulticast mode [ 340.381824][T13956] batadv_slave_0: entered promiscuous mode [ 340.381843][T13956] batadv_slave_0: entered allmulticast mode [ 340.382672][T13956] veth1_to_batadv: entered promiscuous mode [ 340.382687][T13956] veth1_to_batadv: entered allmulticast mode [ 340.409954][T13956] batadv_slave_1: entered promiscuous mode [ 340.409975][T13956] batadv_slave_1: entered allmulticast mode [ 340.418219][T13956] veth0_to_hsr: entered promiscuous mode [ 340.418239][T13956] veth0_to_hsr: entered allmulticast mode [ 340.425319][T13956] hsr_slave_0: entered allmulticast mode [ 340.426271][T13956] veth1_to_hsr: entered promiscuous mode [ 340.426286][T13956] veth1_to_hsr: entered allmulticast mode [ 340.440433][T13956] hsr_slave_1: entered allmulticast mode [ 340.446044][T13956] hsr0: entered promiscuous mode [ 340.446064][T13956] hsr0: entered allmulticast mode [ 340.451562][T13956] veth1_virt_wifi: entered promiscuous mode [ 340.451583][T13956] veth1_virt_wifi: entered allmulticast mode [ 340.468634][T13956] veth0_virt_wifi: entered promiscuous mode [ 340.468654][T13956] veth0_virt_wifi: entered allmulticast mode [ 340.473061][T13956] virt_wifi0: entered promiscuous mode [ 340.473079][T13956] virt_wifi0: entered allmulticast mode [ 340.473092][T13956] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.518884][T13953]  speed is unknown, defaulting to 1000 [ 340.849569][T13958] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 340.997818][T13974] netlink: 'syz.3.1893': attribute type 11 has an invalid length. [ 340.997838][T13974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1893'. [ 341.414295][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 341.414318][T13995] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 341.478616][T13995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1897'. [ 341.552116][T14007] x_tables: duplicate underflow at hook 1 [ 342.621704][T14053] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 342.862670][T14069] batman_adv: batadv0: Adding interface: dummy0 [ 342.862689][T14069] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.862717][T14069] batman_adv: batadv0: Interface activated: dummy0 [ 343.054124][T14069] batadv0: mtu less than device minimum [ 343.057210][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.058648][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.060034][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.061433][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.062831][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.064323][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.065659][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.066964][T14069] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 343.133814][T14083] 8021q: VLANs not supported on syzkaller0 [ 343.181030][T14080] gretap0: entered allmulticast mode [ 343.292512][ T31] audit: type=1800 audit(1789949601.769:3): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1915" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1990 res=0 errno=0 [ 343.854451][T14117] nbd: must specify a device to reconfigure [ 344.412427][T14142] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 344.440631][T14146] 8021q: VLANs not supported on ip_vti0 [ 344.453257][T14142] netlink: 'syz.1.1927': attribute type 58 has an invalid length. [ 344.453276][T14142] __nla_validate_parse: 8 callbacks suppressed [ 344.453285][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1927'. [ 344.830799][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1930'. [ 344.868555][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 345.488939][T14183] tc_dump_action: action bad kind [ 345.491922][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 346.697564][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 346.807142][T14225] netlink: 'syz.4.1948': attribute type 178 has an invalid length. [ 346.810528][T14225] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 346.931138][T14231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1950'. [ 346.933509][T14231] IPVS: Unknown mcast interface: lo [ 347.132602][T14245] batman_adv: batadv0: Adding interface: syzkaller0 [ 347.132619][T14245] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.132648][T14245] batman_adv: batadv0: Interface activated: syzkaller0 [ 347.247491][T14245] bond12: entered promiscuous mode [ 347.277925][ T5742] net_ratelimit: 12 callbacks suppressed [ 347.277944][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.305942][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1954'. [ 347.308659][T14253] bridge0: port 4(wlan1) entered blocking state [ 347.308840][T14253] bridge0: port 4(wlan1) entered disabled state [ 347.309014][T14253] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 347.311003][T14253] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 347.507924][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 347.555740][T14268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 347.562518][T14268] netlink: 'syz.2.1957': attribute type 9 has an invalid length. [ 347.703847][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 347.731140][T14278] bridge6: port 1(erspan0) entered blocking state [ 347.731315][T14278] bridge6: port 1(erspan0) entered disabled state [ 347.731449][T14278] erspan0: entered allmulticast mode [ 347.733582][T14278] erspan0: entered promiscuous mode [ 347.762230][T14278] bridge6: port 1(erspan0) entered blocking state [ 347.762339][T14278] bridge6: port 1(erspan0) entered forwarding state [ 348.059411][T14285] wg2 speed is unknown, defaulting to 1000 [ 348.073668][T14293] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 348.073703][T14293] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 348.092136][T14285]  speed is unknown, defaulting to 1000 [ 348.314838][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.951687][T14325] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 348.951714][T14325] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 349.097161][T14336] ip_tables: iptables: counters copy to user failed while replacing table [ 349.142166][T14337] veth1_to_batadv: entered promiscuous mode [ 349.163662][T14339] netlink: 'syz.1.1979': attribute type 5 has an invalid length. [ 349.166806][T14339] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 349.168107][T14341] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 349.170151][T14337] veth1_to_batadv: left promiscuous mode [ 349.226104][T14324] wg2 speed is unknown, defaulting to 1000 [ 349.227902][T14324]  speed is unknown, defaulting to 1000 [ 349.358342][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.451560][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.523151][T14346] bond5: (slave bridge8): Enslaving as a backup interface with an up link [ 349.631155][T14347] bond5: (slave bridge9): Enslaving as a backup interface with a down link [ 349.680575][T14339] macvlan2: entered promiscuous mode [ 349.680596][T14339] macvlan2: entered allmulticast mode [ 349.696837][T14339] bond5: entered promiscuous mode [ 349.696857][T14339] bridge8: entered promiscuous mode [ 349.699527][T14339] bridge9: entered promiscuous mode [ 349.709781][T14339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.741665][T14339] bond5: left promiscuous mode [ 349.741684][T14339] bridge8: left promiscuous mode [ 349.741877][T14339] bridge9: left promiscuous mode [ 349.889162][T14341] macvlan2: entered promiscuous mode [ 349.889184][T14341] macvlan2: entered allmulticast mode [ 349.889800][T14341] bond5: entered promiscuous mode [ 349.889817][T14341] bridge8: entered promiscuous mode [ 349.890035][T14341] bridge9: entered promiscuous mode [ 349.927728][T14341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.948206][T14341] bond5: left promiscuous mode [ 349.948222][T14341] bridge8: left promiscuous mode [ 349.948372][T14341] bridge9: left promiscuous mode [ 350.008441][T14365] __nla_validate_parse: 6 callbacks suppressed [ 350.008489][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'. [ 350.008656][T14365] openvswitch: netlink: Message has 4 unknown bytes. [ 350.082657][T14360] lo: entered promiscuous mode [ 350.082680][T14360] lo: entered allmulticast mode [ 350.112145][T14360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1981'. [ 350.112168][T14360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.393939][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 350.403866][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.437105][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'. [ 350.437130][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'. [ 350.437145][T14379] netlink: 'syz.1.1984': attribute type 4 has an invalid length. [ 350.960284][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 351.053575][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 351.177897][T14408] siw: device registration error -23 [ 351.324534][T14402] bridge5: port 1(veth3) entered blocking state [ 351.324640][T14402] bridge5: port 1(veth3) entered disabled state [ 351.324798][T14402] veth3: entered allmulticast mode [ 351.330101][T14402] veth3: entered promiscuous mode [ 351.386335][T14400] bridge5: port 2(veth5) entered blocking state [ 351.386456][T14400] bridge5: port 2(veth5) entered disabled state [ 351.386611][T14400] veth5: entered allmulticast mode [ 351.394871][T14400] veth5: entered promiscuous mode [ 351.435611][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.463895][T14416] bridge5: port 3(veth7) entered blocking state [ 351.464015][T14416] bridge5: port 3(veth7) entered disabled state [ 351.467447][T14416] veth7: entered allmulticast mode [ 351.473253][T14416] veth7: entered promiscuous mode [ 351.494730][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.494755][T14424] batadv0: mtu less than device minimum [ 351.630436][T14424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.718327][T14425] bridge6: port 1(erspan0) entered disabled state [ 351.718717][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 352.201729][T14443] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2002'. [ 352.477700][ T1225] net_ratelimit: 19 callbacks suppressed [ 352.477803][ T1225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.478833][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.615127][T14456] IPVS: Scheduler module ip_vs_sip not found [ 352.887772][T14461] netlink: 'syz.2.2010': attribute type 3 has an invalid length. [ 353.217976][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 353.514824][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.967695][T14492] IPVS: set_ctl: invalid protocol: 139 224.0.0.2:20001 [ 355.112158][T14470] v: left promiscuous mode [ 355.164423][ T8401] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.164481][ T8401] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.164548][ T8401] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.164589][ T8401] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.164651][ T8401] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.164707][ T8401] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.164753][ T8401] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.164810][ T8401] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.635470][T14504] __nla_validate_parse: 2 callbacks suppressed [ 355.635489][T14504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2015'. [ 356.064741][T14533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 357.196713][T14535] syzkaller0: entered promiscuous mode [ 357.196736][T14535] syzkaller0: entered allmulticast mode [ 357.765759][T14566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 359.140117][T14575] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 361.886248][T14587] siw: device registration error -23 [ 362.000252][T14591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.066674][T14642] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2046'. [ 363.405122][T14640] tipc: Resetting bearer [ 363.447023][T14642] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2046'. [ 364.038225][T14677] tipc: Enabled bearer , priority 0 [ 364.039084][T14676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2055'. [ 364.125748][T14677] syzkaller0: entered promiscuous mode [ 364.125793][T14677] syzkaller0: entered allmulticast mode [ 364.128177][T14677] tipc: Resetting bearer [ 364.128343][T14671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2053'. [ 364.164473][T14674] tipc: Resetting bearer [ 364.399019][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2058'. [ 364.615782][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'. [ 364.750621][T14689] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 367.190104][T14674] tipc: Disabling bearer [ 367.385525][ T1225] tipc: Node number set to 1227167843 [ 367.429721][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 368.098139][T14740] openvswitch: netlink: VLAN attribute unexpected. [ 368.123096][T14742] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 368.212798][T14742] 8021q: adding VLAN 0 to HW filter on device bond13 [ 368.432644][T14742] bond13: (slave geneve3): making interface the new active one [ 368.454853][T14742] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 368.623769][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 368.682022][T14749] netlink: 'syz.1.2070': attribute type 22 has an invalid length. [ 368.682077][T14749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2070'. [ 368.683429][T14749] netlink: 'syz.1.2070': attribute type 22 has an invalid length. [ 368.683463][T14749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2070'. [ 368.796376][T14749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2070'. [ 368.816769][T14765] SET target dimension over the limit! [ 368.909759][T14759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.947063][T14769] xt_HMARK: proto mask must be zero with L3 mode [ 369.054164][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 369.333872][T14784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2074'. [ 369.333897][T14784] nbd: must specify at least one socket [ 369.420062][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 369.420088][T14787] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2077'. [ 369.676097][T14789] syzkaller0: entered promiscuous mode [ 369.676120][T14789] syzkaller0: entered allmulticast mode [ 370.264653][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'. [ 370.300025][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 372.197999][T14881] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 372.213067][T14881] netlink: 'syz.1.2102': attribute type 2 has an invalid length. [ 372.213104][T14881] netlink: 'syz.1.2102': attribute type 8 has an invalid length. [ 372.345727][T14887] netlink: Unknown NAT attribute (type=1137, max=9) [ 372.345771][T14887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.000796][T14903] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 373.172448][T14908] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 373.246998][T14908] IPVS: Scheduler module ip_vs_sip not found [ 373.884600][T14934] __nla_validate_parse: 8 callbacks suppressed [ 373.884620][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2118'. [ 374.442930][T11844] udevd[11844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 374.487895][T11844] udevd[11844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 374.578077][T14952] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 375.219359][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 375.237327][T14983] netlink: 'syz.0.2131': attribute type 23 has an invalid length. [ 375.605043][T14994] ip_tables: iptables: counters copy to user failed while replacing table [ 375.811011][T15006] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 375.894486][T15006] 8021q: adding VLAN 0 to HW filter on device bond14 [ 375.981060][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'. [ 375.995992][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 376.003005][T15016] netlink: 'syz.0.2140': attribute type 23 has an invalid length. [ 376.013360][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 376.830583][T15048] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 377.579162][T15074] netlink: 'syz.2.2157': attribute type 5 has an invalid length. [ 377.582896][T15072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.659443][T15076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.783517][T15084] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2159'. [ 378.043501][T15095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.114305][T15098] x_tables: duplicate underflow at hook 2 [ 378.225976][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 378.286741][T15101] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 379.081157][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 379.342167][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 379.374922][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 379.579290][T15162] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2178'. [ 380.171678][T15176] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 380.231668][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 380.274967][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2186'. [ 380.570539][T15193] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2189'. [ 380.570563][T15193] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 380.633090][T15200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2188'. [ 381.324411][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 381.409862][T15227] tipc: Enabling of bearer rejected, failed to enable media [ 381.902106][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.902706][T15245] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 382.013365][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.030145][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.102844][T15245] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 382.253555][T15252] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 382.253627][T15252] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 382.285811][ T5803] wg2 speed is unknown, defaulting to 1000 [ 382.285860][ T5803] syz2: Port: 1 Link DOWN [ 382.286589][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 382.336629][T14275] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.336688][T14275] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.337483][T14275] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.337538][T14275] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.337638][T14275] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.337677][T14275] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.338068][T14273] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.338125][T14273] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.703374][T15272] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 382.776648][T15272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.844964][T15281] IPVS: stopping backup sync thread 10750 ... [ 382.867975][T15282] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 382.873875][T15278] bond7: (slave veth7): Enslaving as an active interface with a down link [ 382.895825][T15272] dummy0: left promiscuous mode [ 382.895849][T15272] dummy0: left allmulticast mode [ 382.919000][T15272] bond7: (slave dummy0): making interface the new active one [ 382.941581][T15272] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 382.942280][T15282] dummy0: entered promiscuous mode [ 382.960776][T15282] bond7: (slave dummy0): Releasing active interface [ 383.323499][T15295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.461938][T15298] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 383.461983][T15298] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 384.306874][T15332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.706263][T15346] __nla_validate_parse: 6 callbacks suppressed [ 384.706283][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2237'. [ 387.526087][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 387.526156][T15373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2242'. [ 387.779019][T15403] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 387.783838][T15399] openvswitch: netlink: Unknown key attributes 2 [ 387.844635][T15403] bond6: entered promiscuous mode [ 387.845111][T15403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.977907][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 388.025997][T15413] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2252'. [ 388.028184][T15413] Bluetooth: MGMT ver 1.23 [ 388.231267][T15418] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 388.373719][T15418] gretap5: entered allmulticast mode [ 388.384282][T15418] bond7: (slave gretap5): making interface the new active one [ 388.385201][T15418] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 388.536353][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2255'. [ 388.627906][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 388.627928][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 388.747772][T15435] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2257'. [ 388.821280][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 388.821735][T15435] IPVS: Unknown mcast interface: macsec0 [ 389.317129][T15451] macsec1: entered promiscuous mode [ 389.317166][T15451] batadv0: entered promiscuous mode [ 389.319700][T15451] macsec1: entered allmulticast mode [ 389.319751][T15451] batadv0: entered allmulticast mode [ 389.356364][T15451] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 389.360751][T15454] siw: device registration error -23 [ 389.373002][T15451] batadv0: left allmulticast mode [ 389.373040][T15451] batadv0: left promiscuous mode [ 389.733551][T15470] __nla_validate_parse: 5 callbacks suppressed [ 389.733569][T15470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 390.212697][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 390.217303][T15492] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.458157][T15492] xt_CT: No such helper "netbios-ns" [ 391.025383][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 391.025423][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2276'. [ 391.025854][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 391.025903][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2276'. [ 391.117301][T15517] SET target dimension over the limit! [ 391.629324][T15528] syzkaller0: left promiscuous mode [ 391.629381][T15528] syzkaller0: left allmulticast mode [ 391.868445][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'. [ 391.891648][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2280'. [ 392.041250][T15541] batman_adv: batadv0: Adding interface: gretap2 [ 392.041285][T15541] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.041329][T15541] batman_adv: batadv0: Interface activated: gretap2 [ 392.062624][T15545] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 392.239864][T15545] bond8: entered promiscuous mode [ 392.242759][T15545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.392615][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.416411][T15558] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 392.428163][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.465683][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.465799][T15561] ip_tables: iptables: counters copy to user failed while replacing table [ 392.470485][T15560] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2286'. [ 392.602024][T15543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.639379][T15543] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.834491][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2286'. [ 392.913263][T15568] lo: left promiscuous mode [ 392.921828][T15568] tunl0: left promiscuous mode [ 392.923080][T15568] gre0: left promiscuous mode [ 392.929975][T15568] gretap0: left promiscuous mode [ 392.941813][T15568] erspan0: left promiscuous mode [ 392.943172][T15568] ip_vti0: left promiscuous mode [ 392.956215][T15568] ip6_vti0: left promiscuous mode [ 392.957846][T15568] sit0: left promiscuous mode [ 392.959068][T15568] ip6tnl0: left promiscuous mode [ 392.982135][T15568] ip6gre0: left promiscuous mode [ 392.982928][T15568] syz_tun: left promiscuous mode [ 392.996109][T15568] ip6gretap0: left promiscuous mode [ 392.998964][T15568] vcan0: left promiscuous mode [ 392.999676][T15568] bond0: left promiscuous mode [ 393.000563][T15568] dummy0: left promiscuous mode [ 393.027775][T15568] nlmon0: left promiscuous mode [ 393.028510][T15568] vxcan0: left promiscuous mode [ 393.029170][T15568] vxcan1: left promiscuous mode [ 393.029810][T15568] veth0: left promiscuous mode [ 393.030502][T15568] veth1: left promiscuous mode [ 393.031153][T15568] wg0: left promiscuous mode [ 393.031828][T15568] wg1: left promiscuous mode [ 393.032517][T15568] wg2: left promiscuous mode [ 393.033179][T15568] veth1_to_bridge: left promiscuous mode [ 393.083408][T15568] bridge_slave_1: left promiscuous mode [ 393.089121][T15568] veth0_to_bond: left promiscuous mode [ 393.093922][T15568] bond_slave_0: left promiscuous mode [ 393.100862][T15568] veth1_to_bond: left promiscuous mode [ 393.124785][T15568] bond_slave_1: left promiscuous mode [ 393.125423][T15568] veth0_to_team: left promiscuous mode [ 393.132337][T15568] team_slave_0: left promiscuous mode [ 393.133096][T15568] veth1_to_team: left promiscuous mode [ 393.133803][T15568] team_slave_1: left promiscuous mode [ 393.143872][T15568] veth0_to_batadv: left promiscuous mode [ 393.150192][T15568] batadv_slave_0: left promiscuous mode [ 393.158875][T15568] veth1_to_batadv: left promiscuous mode [ 393.160347][T15568] batadv_slave_1: left promiscuous mode [ 393.170316][T15568] veth0_to_hsr: left promiscuous mode [ 393.179324][T15568] veth1_to_hsr: left promiscuous mode [ 393.204491][T15568] hsr0: left promiscuous mode [ 393.205351][T15568] veth1_virt_wifi: left promiscuous mode [ 393.206136][T15568] veth0_virt_wifi: left promiscuous mode [ 393.206901][T15568] virt_wifi0: left promiscuous mode [ 393.206917][T15568] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.551195][T15616] x_tables: duplicate underflow at hook 3 [ 395.368619][T15649] : renamed from bond0 (while UP) [ 395.499466][T15651] __nla_validate_parse: 3 callbacks suppressed [ 395.499486][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 395.499511][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 395.589751][T15653] netlink: 'syz.0.2308': attribute type 4 has an invalid length. [ 395.654808][T15661] netlink: 'syz.0.2308': attribute type 4 has an invalid length. [ 395.771263][T15664] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2312'. [ 395.802737][T15664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2312'. [ 395.802775][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2312'. [ 396.119419][T15678] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.741278][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2321'. [ 397.227446][T15710] .`: (slave bond_slave_0): Releasing backup interface [ 397.291373][T15710] .`: (slave bond_slave_1): Releasing backup interface [ 397.525242][T15710] team0: Port device team_slave_0 removed [ 397.755453][T15710] team0: Port device team_slave_1 removed [ 397.757381][T15710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.757417][T15710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.824091][T15710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.911171][T15735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2329'. [ 397.942399][ T5710] syz1: Port: 1 Link DOWN [ 398.121278][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 398.137331][T15740] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 398.323047][T15740] bond15: entered promiscuous mode [ 398.323125][T15740] bond15: entered allmulticast mode [ 398.324671][T15740] 8021q: adding VLAN 0 to HW filter on device bond15 [ 398.350454][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 398.421717][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 398.527773][T15756] §: renamed from sit0 (while UP) [ 398.907400][T15766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.942370][T15766] netlink: 'syz.3.2337': attribute type 61 has an invalid length. [ 398.942406][T15766] netlink: 'syz.3.2337': attribute type 62 has an invalid length. [ 399.095694][T15777] sit0: entered promiscuous mode [ 399.849550][T15808] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 400.013283][T15813] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 400.031954][T15816] netlink: 'syz.2.2351': attribute type 9 has an invalid length. [ 400.268196][T15825] openvswitch: netlink: Flow actions attr not present in new flow. [ 400.720485][T15844] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 400.720544][T15844] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 401.808343][T15884] wg2 speed is unknown, defaulting to 1000 [ 401.818468][T15884]  speed is unknown, defaulting to 1000 [ 403.480779][T15951] __nla_validate_parse: 15 callbacks suppressed [ 403.480801][T15951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2379'. [ 403.506562][T15951] netlink: 'syz.4.2379': attribute type 8 has an invalid length. [ 403.645383][T15959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.760259][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 404.189273][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 404.279976][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 404.525082][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 404.846544][T15999] ip_tables: iptables: counters copy to user failed while replacing table [ 405.116673][T16009] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 405.493243][T16015] netlink: 'syz.3.2397': attribute type 4 has an invalid length. [ 409.454054][ C1] sched: DL replenish lagged too much [ 573.207822][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 158s! [ 573.208607][ C0] Showing busy workqueues and worker pools: [ 573.208617][ C0] workqueue events: flags=0x100 [ 573.209297][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 573.209345][ C0] pending: psi_avgs_work, vmstat_shepherd, 3*nsim_dev_hwstats_traffic_work, psi_avgs_work, 2*ovs_dp_masks_rebalance, psi_avgs_work, delayed_vfree_work, free_obj_work [ 573.209924][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 573.209971][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 3*psi_avgs_work, ovs_dp_masks_rebalance, delayed_vfree_work [ 573.210082][ C0] workqueue events_long: flags=0x100 [ 573.210093][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 573.210138][ C0] pending: 3*br_fdb_cleanup [ 573.210248][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 573.210292][ C0] pending: 3*br_fdb_cleanup [ 573.210342][ C0] workqueue events_unbound: flags=0x2 [ 573.210354][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=9 refcnt=10 [ 573.210392][ C0] in-flight: 84:nsim_dev_trap_report_work for 7s ,14272:fsnotify_mark_destroy_workfn for 155s ,1476:fsnotify_connector_destroy_workfn for 155s [ 573.210565][ C0] pending: nsim_dev_trap_report_work, toggle_allocation_gate, 3*nsim_dev_trap_report_work, flush_memcg_stats_dwork [ 573.210738][ C0] workqueue events_freezable: flags=0x104 [ 573.210750][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 573.210799][ C0] pending: update_balloon_stats_func [ 573.210901][ C0] workqueue events_power_efficient: flags=0x180 [ 573.210913][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=14 refcnt=15 [ 573.210956][ C0] in-flight: 5756:wg_ratelimiter_gc_entries for 158s [ 573.211085][ C0] pending: 4*neigh_managed_work, 3*neigh_periodic_work, hash_ipmark6_gc, neigh_periodic_work, gc_worker, reg_check_chans_work, 2*check_lifetime