last executing test programs: 1.841004532s ago: executing program 0 (id=4161): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x13c}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d85900", 0x21}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0", 0x77}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8891}, 0x4008801) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0xa1ff, &(0x7f0000003700)={0x77359400}) 1.745648265s ago: executing program 2 (id=4164): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r0, &(0x7f0000000040)=0xfffffffffffffffd, r0, 0x0, 0x6, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/65, 0x41}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}], 0x3, 0x2000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a", 0x56}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d7", 0xbb}, {&(0x7f0000000900)="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", 0xfe}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46589b216d", 0xeb}, {&(0x7f0000000140)="292a26692895c48e5670e19cc646f85a75772f22ae06b576502dcae8deef2c85890ba3a489d85a850088295e495a45179795ff4e4e8560da757145dd589c53242fb40dc5641fec08c566e437445c185643ce0a048a29e0694250424da6e4f97c9ad2b4ee41d1a2c517ee4e9dc1d4e7b26c9f564d034c87b312da6e991d4f9bef05a141ed34409a694e1bcc04b2580d45354f3157faab897c065c43249e483c4a102813b2fc1abdbb0c7dfffdc0a2f6ba2d18220e1a09c3e60c5e71bb05ab28c752f63998b3fa0e20bc0f29f0ff1af21e4949fe38b12465973af3ce6eefb2a90e", 0xe0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="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", 0x1b2}], 0x1}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="6bd33d9a6fb788cf00", 0x10) 1.620815045s ago: executing program 3 (id=4166): socket(0x1e, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000040}, 0x20020014) (async) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x4, 0x12) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0ed563bf987c0a9165fd5c3bcfe7e2a78ceb7de8aa17ec31", 0x18}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="44a7656758212875ff344537", 0xc}, {&(0x7f0000000140)="fd9a5458c7d08e3f133ae9c89cb47161ab4bbcbd824236b6ab9dc9f78ffddc0e1f431babcfb43bb401e40703c40c716571190542c3ca4dc1c475cf0958b2c9cabb93fadf057a78c08fe00d0753d6aef97795f792755a04882b7ceaedf4855ccfb616a481a0a0644808b15595f2bfa7feea1e8b9579b9fb2458eb8378f3b8af298badfbe06ce8a72a514687db48037960e0eb104570092eb22dc95cd7d1cb6c3ae940fb5baac1a3edfd80", 0xaa}, {&(0x7f0000000200)="6eab87c5416108113eeee2c56aad7c9d2c9bfe52c64605c0048c2b1578f7fc25270afa325bb5041d8a87f1cc5b2f2c93ffc865a454901d65dadc5ac796dc6a0a3c5a513be1cf1b41bf9976e3e2029fa96328bf358d1f732518e0e38e75308c1df57970c4f11e33a93ede11bfe46af1c1bb7b68651083f5dac2d2b689ce", 0x7d}], 0x5, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xf9, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x7}, {@broadcast, 0xffffff31}, {@multicast2, 0x6}, {@empty, 0x8}, {@remote, 0x1}]}, @generic={0x86, 0x7, "8d105dd424"}, @generic={0x82, 0xd, "0bb7f6090b9fedda715d17"}, @timestamp_addr={0x44, 0x4, 0xac, 0x1, 0xc}, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x6, [{@private=0xa010102, 0xfffffffa}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1ac5}]}, @ssrr={0x89, 0x7, 0xa0, [@dev={0xac, 0x14, 0x14, 0x42}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_retopts={{0x68, 0x0, 0x7, {[@end, @cipso={0x86, 0x27, 0x0, [{0x0, 0x7, "9af7f17654"}, {0x6, 0x4, '@s'}, {0x1, 0x11, "f50989aa3196fa5de1a452ab7d1e59"}, {0x6, 0x5, "0bdbfc"}]}, @rr={0x7, 0xb, 0x17, [@loopback, @broadcast]}, @ssrr={0x89, 0x23, 0x9b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, @loopback, @local, @broadcast, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x170}, 0x440c1) (async) getsockopt(r5, 0x1000115, 0x7, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x20050840) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18200000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1], 0x18, 0x2000ccd0}, 0x10) 1.620556747s ago: executing program 0 (id=4167): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.549701187s ago: executing program 3 (id=4168): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20004018) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x2000c840) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc71e16e819ce1f22}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x0, 0x0, {0x0, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x0, 0x5, 0x8}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}, @NL80211_ATTR_BSS_SELECT={0x20, 0xe3, 0x0, 0x1, {0x1c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000060}, 0x40800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000700000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) 1.487167387s ago: executing program 0 (id=4169): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9a}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e72b7b6382bb5e833f7e5c3cc7059277"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x94}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) 1.395804263s ago: executing program 3 (id=4170): r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000002c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c00)={&(0x7f0000000240)=@newtfilter={0x2994, 0x2c, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0x7}, {0x3, 0x1}}, [@f_tcindex={{0xc}, {0x1074, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffff7}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa, 0xfff1}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xbbf7}, @TCA_TCINDEX_POLICE={0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0x1}}, @TCA_TCINDEX_POLICE={0x104c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x10001, 0xa04, 0x200, 0x7, 0x7, 0x6, 0x0, 0x4, 0x10, 0x8, 0xfffffff7, 0x6, 0x59, 0x8, 0x0, 0x10000000, 0x1000, 0x1, 0xcf1, 0x186000, 0x8001, 0x8, 0x88fd, 0x90, 0x7f, 0x6, 0x9, 0xff, 0x8, 0xfce2, 0xffff307b, 0x1, 0x7, 0x3, 0xff, 0x8, 0x7fffffff, 0x526, 0x6, 0x2, 0x1, 0x40, 0xb3, 0x3, 0x7ff, 0x8, 0x5, 0x1, 0x5, 0x8, 0x2, 0x2, 0x7, 0x6, 0x0, 0x3881, 0x5, 0x2, 0x7, 0xb, 0x4, 0x0, 0xfffffff9, 0x2, 0x5, 0x4, 0x7fffffff, 0x9, 0x7, 0x7, 0xffffffc0, 0xfff, 0x34e, 0x10001, 0x9, 0x4, 0x1, 0x7fff, 0x8, 0xe, 0x2, 0x8, 0xa, 0x1, 0x1, 0x200, 0x9, 0xffffffff, 0x0, 0x80000001, 0xb, 0x8, 0x8, 0x1000, 0x54da, 0x3, 0x7fffffff, 0x2f, 0x400, 0x6, 0x7, 0x1, 0x7ff, 0xff, 0x5, 0xffff8a4d, 0x8, 0x4, 0x5, 0xb63, 0x9, 0x1, 0x6, 0x3ff, 0x5, 0x4, 0x4, 0x3, 0x80, 0x5, 0x8, 0x401, 0x9, 0xd6, 0x5, 0x8, 0x6, 0x0, 0x9, 0x4c8, 0x7, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0xfffffffc, 0xfff, 0x7, 0x9, 0xe1f, 0x7, 0xb3, 0x0, 0x89, 0x9, 0xa, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0xe176, 0x2, 0x2, 0x5, 0x7ff, 0x5, 0x2, 0x5, 0xb, 0x7, 0x2, 0x8, 0x3aee, 0x7, 0x2, 0x1, 0x401, 0x10001, 0xbf58, 0x401, 0xfc6b, 0x5, 0xd, 0xef, 0x5, 0x80, 0x2, 0x10, 0x3, 0x7, 0x1, 0xfffffff8, 0x3, 0xbdf7, 0x2, 0x80000000, 0x5, 0x9, 0x7, 0x8311, 0x7, 0x6, 0x1000, 0x8001, 0x400, 0xfffffff7, 0xd3, 0x2, 0x3ff, 0x10000, 0xb5, 0x0, 0x6, 0x6, 0x9, 0x7, 0xfffff801, 0x10000, 0xd248, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0xe9, 0x1, 0xb, 0xe, 0x0, 0xffffffff, 0x5, 0x4a, 0xbc, 0x8493, 0x7fffffff, 0xd, 0x3, 0x7, 0x5ea1, 0x5, 0x9, 0x5, 0x42d2, 0x7, 0x229, 0x2, 0x80000000, 0xf4e0, 0x0, 0xf, 0x1, 0x2, 0x1, 0x1, 0x80, 0x4, 0x80000001, 0x1000000, 0x1, 0x9, 0xffffaa67, 0x5fa, 0x38]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf5e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffc0}, @TCA_POLICE_RATE={0x404, 0x2, [0xfb, 0xed, 0x7, 0x6d1a, 0x1, 0x6, 0x2, 0xd7, 0xb1, 0x35b9, 0x5be, 0x3, 0x81, 0xfff, 0x308, 0x5c1b, 0x0, 0x800, 0xb845, 0x6, 0xd, 0x3, 0x68e, 0x0, 0xffffffff, 0x65000000, 0x55d1, 0x3, 0x4, 0x6, 0xfff, 0x9, 0x3, 0x9, 0x200, 0x60, 0xa, 0xfffff001, 0x9, 0x4, 0x1, 0x31, 0xffffffc0, 0x3, 0x1da, 0x0, 0x40, 0x7f, 0x674f, 0x0, 0x1, 0x0, 0x9, 0x8, 0x40, 0x1, 0xbc, 0x8, 0x3, 0x4, 0x3, 0x32, 0x5, 0x6, 0x2, 0x7, 0x10, 0x2, 0x7, 0x459, 0x7, 0x0, 0x9, 0xc, 0x2, 0x5, 0x2, 0x8, 0x7, 0x6, 0x7, 0x4, 0x6, 0xfffffff7, 0xcc5, 0x5, 0xffffffff, 0x3ff, 0x7, 0x5, 0x9a, 0x7, 0x1, 0x8, 0xfff, 0xf0e, 0x101, 0x80, 0x8, 0x2, 0xc, 0xc8, 0x29, 0xffff7fff, 0x4, 0x383, 0x540, 0x3, 0xf, 0xc, 0x9, 0x5, 0x0, 0x0, 0x7, 0x4, 0x0, 0x10001, 0x10001, 0x86f1, 0x100, 0x1000, 0x6b6b, 0x52, 0xfffffbff, 0x5, 0x5c, 0x260, 0x6, 0x9, 0x1000, 0x8001, 0x8000, 0x1, 0x4, 0x6, 0x1, 0x10, 0x4, 0x5, 0xd, 0x7, 0x4, 0x401, 0x9, 0x8, 0x4, 0x449565c2, 0x8, 0x5, 0xab7, 0x4, 0x59bf, 0x4, 0x0, 0x0, 0x80000000, 0x7, 0x6, 0x3, 0x4, 0x4, 0x7, 0x4, 0x8000, 0x0, 0x0, 0xf74f, 0x7fffffff, 0x4, 0x1, 0x74c4, 0x2, 0xad, 0x2, 0x6, 0x1, 0x1000, 0x9, 0x4, 0x1cb9, 0xe, 0x7ff, 0xb935, 0x1, 0xe7b0, 0x9, 0x8000, 0x8, 0x1c, 0x0, 0xfffffffa, 0x3, 0x40, 0x1, 0x6, 0x3, 0x6, 0x1b49, 0x3, 0x9, 0x2, 0x0, 0x6, 0x7, 0x401, 0xbd9, 0x10001, 0x9, 0x3, 0x1, 0xffffffff, 0xffffffd5, 0x7, 0x1, 0xffff0000, 0x0, 0x30d, 0x9, 0x4, 0x10001, 0xa325, 0x8c, 0x7, 0x9, 0xb, 0x6, 0x468, 0x1ba6631d, 0x8c6, 0x3, 0x1, 0xc0, 0x8, 0x3, 0xfffffffe, 0x5, 0xfff, 0x879, 0x5, 0x6, 0x6, 0x7, 0x0, 0x5, 0x8, 0x8, 0x4bcd, 0x7, 0x28000, 0x11c, 0x1, 0x4, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc7, 0x5, 0x8, 0x3, 0x4, 0x6c, 0x5, 0x8001, 0x9, 0x7fffffff, 0x7, 0x2000000, 0x2, 0x81, 0xffffffff, 0x2, 0x8, 0xfffffffa, 0x6, 0xa99, 0x4, 0x8, 0x8001, 0x87f9, 0x0, 0xc7, 0x8, 0x1000, 0xffffff00, 0x2, 0x9d, 0x6a6, 0x35a5, 0xfffffffd, 0x2, 0x64, 0x9, 0x7fff, 0xfffff5d6, 0x7, 0x0, 0x3ff, 0x5, 0x2, 0x6, 0x400, 0x93, 0x6, 0x0, 0x2, 0x3bc, 0xcd, 0x822, 0xb, 0x0, 0xa8, 0x4, 0x0, 0x3, 0xfffe0000, 0x100, 0x7, 0x0, 0x2, 0x0, 0x3, 0x80000001, 0x9, 0x9c, 0x8001, 0x6, 0xd, 0x6, 0x2, 0x1, 0x800, 0xffffffff, 0x3ff, 0x4, 0x8845, 0x70000000, 0x2, 0x2, 0x7, 0x10000, 0x2, 0x4, 0xfa, 0xffffd176, 0x7, 0x6, 0x9, 0x8001, 0xe, 0x53c8, 0xfffffffa, 0x8, 0x4, 0x31fc, 0x0, 0x9, 0x2, 0xfffff011, 0xd9, 0xe7, 0x7, 0x10001, 0x6, 0x9, 0xa, 0x7, 0xfffff65e, 0x5, 0x4, 0xfffff534, 0xf6, 0xe, 0x800, 0x2, 0x2e, 0x2, 0x13, 0x3, 0x0, 0x10001, 0x0, 0xfffffffd, 0x5, 0xffffffff, 0x800, 0x80, 0x0, 0x0, 0x1, 0x9, 0x4, 0x23243311, 0x7bcd, 0xf4, 0x9, 0x4, 0x3, 0x8, 0x3, 0x0, 0x80000000, 0x3, 0x8, 0xffffffff, 0x10001, 0x0, 0x5, 0x6, 0x3, 0xac, 0x1, 0x3, 0xa5, 0x4, 0x9, 0xe77c, 0x1, 0x8, 0x8, 0x9, 0x4, 0x2, 0xffff4279, 0x2, 0x3, 0x9, 0x9, 0x2, 0x80, 0x100, 0x5, 0x5, 0x6, 0xc4d, 0x7, 0x5, 0x6, 0x1c7e6c92, 0x200, 0x2, 0x0, 0xffffffff, 0x50, 0x1ff, 0x8, 0xffff, 0x7, 0x2f, 0x9, 0xfffffffd, 0x2, 0x1000, 0x3, 0x6, 0x5cd5, 0x2, 0xf, 0x5, 0x9, 0x51607662, 0x81, 0x4, 0xbfe, 0x10001, 0x6, 0x0, 0x0, 0x800, 0xc60b, 0x408, 0x7fff, 0xb, 0xa, 0x337b, 0x6, 0x23, 0x5, 0x7fffffff, 0x4, 0x2, 0x8000, 0x8, 0x8, 0x8, 0x928, 0x80000001, 0x0, 0x4, 0x1000, 0x4, 0xb6, 0x8, 0x10001, 0x10001, 0x2, 0x7, 0x7ff, 0xc4, 0x0, 0x0, 0x2, 0x2, 0x4, 0x8000, 0x374b8f4a, 0x0, 0x7fffffff, 0x6, 0xa80d, 0xfffff801, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x16}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5, 0x7ff, 0x1, 0x9, 0x7, 0x55, 0x8, 0x3, 0x5, 0xa, 0x6, 0x401, 0xc2d, 0x2, 0xfffffffd, 0x6, 0xb, 0x7, 0x8, 0x2, 0x8, 0x8, 0x8, 0x45ff39fa, 0x2, 0x7, 0xf, 0x3, 0x0, 0x7, 0x0, 0xac, 0x6, 0xffffffff, 0x1000, 0x800, 0x2e8e, 0x0, 0xf87a154c, 0x8, 0x6, 0x1, 0x2, 0x9e72, 0x6, 0x2, 0x3, 0x5, 0x7fffffff, 0x3, 0x7, 0x120, 0x6a, 0x6e2, 0x685e, 0x3, 0x3, 0x81, 0x401, 0x9ae, 0x9, 0x90, 0x2, 0x1, 0x1ff, 0x400, 0x4, 0xffffffff, 0x7, 0x7, 0x9, 0x1e79, 0xe, 0xa, 0x3, 0xfed1, 0x7, 0x6, 0xfffff001, 0xc4, 0x9, 0x1, 0x4, 0x5, 0x51, 0x6, 0x10001, 0x4, 0x7, 0x1000, 0xc6c6, 0x7a9c, 0x5c, 0x6c, 0xa, 0x4, 0xf5b, 0x5, 0x4000e31, 0x3, 0x8000, 0x7, 0x5, 0x3, 0x4, 0x800, 0x2, 0x5, 0x81, 0x5, 0xffffffff, 0x8, 0x3, 0x2, 0xff, 0x3, 0x2, 0x9, 0x6, 0x8, 0x9, 0x1, 0x1ba38a2c, 0x81, 0x1, 0x3, 0x6a, 0xc0000, 0x4, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7fffffff, 0x8, 0x5, 0x7, 0xa5, 0x9, 0x77, 0x1, 0x7, 0x3, 0x9, 0x83, 0xa, 0x3, 0x4, 0x3, 0x8, 0x9, 0x3, 0x5, 0x6b35, 0x21, 0x4, 0x9, 0x80000000, 0x7, 0x101, 0x6590926e, 0x3, 0x9, 0x10, 0x7, 0x8, 0x7fffffff, 0xf, 0x319, 0xffffffff, 0x8, 0x53fd, 0x2, 0x2, 0x0, 0x7, 0x318f4a30, 0x7, 0x3, 0x8, 0x3, 0x2cab, 0x773, 0x2, 0x4, 0xd, 0x8001, 0xa, 0x3, 0x6, 0x8, 0x5, 0x1, 0x3, 0x6, 0x2, 0xfffff800, 0x5, 0xf, 0x9, 0x4, 0x8, 0x3, 0x8000, 0x2, 0x40, 0x1000, 0x1, 0x1, 0x4, 0x7, 0x101, 0x0, 0x2, 0x2, 0x9, 0xd2, 0x9, 0x7, 0x1000, 0xd, 0x10001, 0x5, 0xa9, 0xdee9, 0x2, 0x3, 0x3, 0x5, 0x2, 0x8, 0x6, 0x5cc, 0x9, 0x80, 0x3, 0x101, 0x8000, 0xec, 0xe, 0x3, 0xffff, 0xff, 0x9a2e, 0x10, 0xfffffffe, 0x1, 0xfffffff7, 0x10000, 0x1, 0x3, 0x7f, 0x4, 0x800]}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0xd4, 0x2, [@TCA_TCINDEX_ACT={0xa8, 0x7, [@m_connmark={0xa4, 0x1a, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x811, 0x5, 0x9c98, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xa, 0x6, 0x1, 0x1}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xac, 0x7, 0x7, 0x8}, 0x5}}]}, {0x20, 0x6, "1a27c979354dacdef1e213e8cb2422da51c0325a8764a9311a182426"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0x548, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffe0, 0xe}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x50c}, @TCA_TCINDEX_ACT={0x524, 0x7, [@m_tunnel_key={0xe0, 0xf, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, {0x9c, 0x6, "fb35e47f9227f4a35980dfad1cf544f2896c86a72b172893838f9a6e9fabcabdf4c1b834438a25dd49d998d1f56049d40f847b96fdc39fec36d15ed294d886eb122b555f0a66b5f6aa0058d3f72d32a7fdb85e50ba500bb122693ad74d141a2031c95653d0cb195e9fa137edbe8405d0bca7931a4882cd83474f150c4a15a5b3987f73bfd99b6874edfc50f9151978cf845c7403ab986a03"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x10c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x89d78}, @TCA_MPLS_PROTO={0x6, 0x4, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xcb9a3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6dc05}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x80000000, 0x10000000, 0x2, 0xfffffffb}, 0x4}}]}, {0xa2, 0x6, "21b34effc9fa438730f3a90e20bbbe5542255dbfaed646009121086bddfdb17b6fb3690ad5a35d952173aa06c2a1fc16f6e56bea4277389983d89d38ec558fa868305e1e5c78615f05e35f8a0e9665a6cd347b8fc231157a2fe60283897393e05fdf3d29653c6f2ccdcd1f9dca7d7c5cb92173d467daab290cc11d34c5b18e29dc3e6e00d5c4ec369cd3d3d3e16d24746ee7744cbf07d0b6f43c9a065f04"}, {0xc, 0x7, {0x42f34df64606e448}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x9c, 0x1b, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6d, 0x781, 0x6, 0x72fb, 0xca}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x6, 0x9, 0x7d9}, 0x6d}}]}, {0x38, 0x6, "01a4202b04b56180d91f43d6d009e91a6d23173a26eab0ebdf3f3f9e2adcd897419af6c5e4c52276aa653f327415af514f9b822c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xfc, 0x1a, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x101, 0x6, 0x8, 0x9, 0xd}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x8b, 0x6, "2e76c7088f675f884f00fe4f3f7780259396fd0388aef55bae30c909e6bb92c47fc96958e080d9b4af437d945d620e628cbe94f8cdd95f5951d481fb86ec0c7dcdb1d0170d98f4e23a47442c1a5a4f9fe557e6aba826b0cb458d32304e23ba768eaa031efad291d599042da19d16c04947a56e4122659c5dd9b31f98d2bbfe31c2c3d4f21918a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x148, 0x13, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xd1, 0x6, "da7b5cedd61959a037f8ecb3e359346d8b946f64c220ae245df98abd1822e5a5ab545a2e3da0f2f0afda1a5ae3d1eeba8e1aeded9d7d374c7f36c3cee03e0d336fe191eac45bfdac725faee2900c49ff7578eef81ff40a90ae1738c618109a5476bbf704dc64bfb02e73554fe5d28a8e5ed0135b04f71a6b159827418b2c0faba4a1312483799760b3845a02bfa4a6959caeb8dfe624582e547787aa7a1d1cc50529bce32b02ac50051f630f0ce2d7e532906bb8589f611215ff2d0022ccccc46680a69019e4c88640dbf6e89d"}, {0xc, 0x7, {0xa67695cc4241fc46, 0x1}}, {0xc}}}, @m_ctinfo={0x54, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x1d, 0x6, "5ea36ebcb6f143e78c367e60f624a72f855a5d9552e28da649"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_tcindex={{0xc}, {0x9a4, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xbc8f}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x227e}, @TCA_TCINDEX_POLICE={0x81c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x401, 0x75d, 0x23ce, 0x9, 0x1, 0x0, 0xbce, 0xff, 0x0, 0x8, 0x1, 0xa3ab, 0x1, 0x5, 0x6, 0x81, 0x0, 0x4, 0xfffffff9, 0xd48, 0x56ce36e6, 0x10, 0x81, 0x3, 0xe03d, 0xffffffff, 0x540f, 0x10000, 0x8, 0x80000001, 0x180, 0x3, 0x4, 0x2, 0xffffdca4, 0x6, 0xf4, 0x3, 0xc4b, 0x7, 0x6, 0x400, 0x1, 0x8, 0x40, 0x80, 0xc8800000, 0x3, 0xe6, 0xff, 0x8, 0x100, 0x1, 0x1, 0xcde, 0x1, 0x4a4, 0x2, 0x78, 0x7, 0x5, 0x0, 0xb, 0x81, 0xa66, 0xe, 0x0, 0x8a9, 0x0, 0x2, 0x2, 0xfffffff8, 0x1047, 0xa, 0xad, 0x2, 0x10, 0x800, 0x0, 0x2, 0x4, 0x101, 0x4, 0x800000, 0x80000001, 0x2, 0x56c, 0x0, 0x0, 0x956, 0x6, 0xb9, 0x7ba, 0x1ff, 0x101, 0x5, 0x0, 0xc25, 0x5, 0x3, 0x80000001, 0x214, 0x1, 0x8722, 0x3, 0x7, 0x4, 0x6, 0x1200000, 0xd, 0x80000001, 0x0, 0xa, 0x200, 0x10, 0x2, 0x4, 0x3, 0x9462, 0x40, 0x6, 0x3, 0x1f, 0x2, 0x7, 0x7fff, 0x61f, 0x3, 0xffffffc0, 0x10, 0xff, 0xdd8, 0x0, 0xb, 0xb693, 0x9, 0xb, 0x4, 0xfffff000, 0xe, 0x4, 0x10, 0x9, 0x9, 0x776, 0x400, 0x5, 0x8, 0x7, 0xbd, 0x7d8, 0xff, 0x5, 0x1, 0x2, 0x7, 0xb7, 0xbde, 0x1ff, 0x0, 0x7, 0x0, 0xa, 0x4, 0x2, 0xf, 0x7fff, 0x7, 0xfffffff8, 0x3fc8, 0x7, 0x6, 0x4, 0xd, 0x9d, 0x579, 0xd5, 0x100, 0x0, 0x7, 0x7, 0x200, 0x0, 0x52, 0xfff, 0x0, 0x8, 0xffffff80, 0x9, 0x3, 0x10001, 0x4580000, 0x9, 0x9fbf, 0x2, 0x100, 0x2, 0xb9, 0x6a, 0x2, 0x100, 0x4, 0x9, 0xc, 0x4, 0x1b55bd65, 0x8, 0x5, 0x2, 0xfb, 0x6, 0x9, 0x7, 0xffffffff, 0x4, 0x1, 0x3, 0x7, 0x9166, 0x1, 0x1, 0x6, 0x28d, 0x7ff, 0x9, 0xff, 0x0, 0x9, 0x3, 0x6, 0x8, 0xff, 0x10000, 0x2, 0x6, 0x6, 0xe, 0x5, 0x8, 0x200, 0x9c4, 0x0, 0x6, 0x9, 0x5, 0x80000001, 0x9, 0x9, 0xffff, 0x7, 0x2, 0x10000, 0x6, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x4, 0x4, 0x8, 0x9, 0x6, 0x0, 0x1, 0x80, 0x5, 0x4, 0x8, 0xfff, 0xff, 0xff, 0x0, 0x96, 0x0, 0x40, 0x7, 0x0, 0x1, 0x6, 0x7fffffff, 0x8, 0x8000, 0x100, 0x416, 0x25a, 0x4, 0x80000, 0x1, 0x6, 0x5, 0x80000001, 0x8, 0x5, 0x20000, 0x2, 0x0, 0x1b6, 0x9, 0x6, 0x1, 0x4, 0x6, 0x4, 0x9364, 0xd55, 0x8, 0x3, 0x5, 0x9, 0x2, 0x4, 0x80000001, 0xa9, 0xa, 0x8, 0x240, 0x4, 0x7, 0xfffffff9, 0x0, 0x75, 0x0, 0x7, 0xfffffffc, 0x4, 0x3, 0x5, 0x8, 0x5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x1, 0x4, 0xcb, 0x81, 0x0, 0x6, 0x9, 0x6, 0x6, 0x6, 0x80000000, 0xfffffffd, 0x80000001, 0x7, 0x4, 0x7, 0xfffffff9, 0xffff, 0x81, 0x182a, 0x685, 0x3, 0x401, 0x9, 0x1, 0xebf, 0x4, 0x0, 0x4, 0x40, 0x1, 0x8, 0x8, 0x0, 0x7, 0xfffffff8, 0x1000, 0x80000000, 0xa35f, 0x5, 0x7, 0x0, 0x101, 0xffffffff, 0xff, 0x6, 0x8, 0x5, 0xe0, 0x7fffffff, 0x5, 0xff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc, 0x5, 0x0, 0x800, 0xff, 0xa, 0x3ff, 0x9, 0x7, 0x8, 0xe49f, 0x1, 0x1, 0x6, 0x0, 0x9, 0x200, 0x7fffffff, 0xd7, 0x6, 0x2, 0x2fb5, 0x7, 0x30c, 0x2, 0x4, 0x1, 0xf, 0x3fc7, 0x7, 0x8, 0x2, 0x2a58ae19, 0x7, 0x6, 0xbe9c, 0xf61, 0x5, 0x3, 0x6, 0x4, 0xb, 0x7, 0x4, 0x6, 0x5078, 0x1, 0x7, 0x5, 0x8, 0x164, 0x10, 0x9, 0xffffff57, 0x7, 0x80000000, 0x80000001, 0x7, 0xff, 0x80, 0x6, 0x3, 0xbd, 0x7, 0x401, 0x6, 0x3, 0x5, 0xd0, 0xa2fb, 0x5, 0xff, 0xfffffeff, 0x10001, 0x7, 0x11f, 0x1, 0xffffffff, 0x4, 0x2, 0x9, 0x522, 0xb51, 0xfffffff5, 0xa93, 0xab28, 0xe0, 0x7b6, 0x7, 0x6, 0x6, 0x5, 0x2, 0x8, 0x6, 0x6, 0x4, 0x4, 0x44, 0xe2, 0x2, 0x471, 0x5, 0x4, 0x9, 0x5, 0x1d7a, 0x1, 0x4, 0xe, 0x3, 0x9, 0x5, 0x1, 0x29, 0x59e, 0x81, 0x3]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x200}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x100}, @TCA_TCINDEX_ACT={0x158, 0x7, [@m_simple={0xd8, 0x9, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '}^-[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x8, 0x7, 0xcc}}]}, {0x88, 0x6, "72d1518877973e8e91c4be1cede4d0e4bf9445f3db4bc27ddfdbdebb07c590820b7c2e11611b765fd33b68e05dff07dee36108a1235b3df570fdc70a2c4911f3cd45296c4a826a9c0546fd554be1c81ec9321d5118c8655eda725f7521d40894554f5a3b8c29b7a2c26f97658ab5e222027189df0651f0d217f9595b2e888564581eeab8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x7c, 0xc, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x100}]}, {0x3b, 0x6, "dcaa237e5739cf0848703e3f0e8503100b049ac230b140d5ae523b8a24674693386a1c1a9eda00384e162bfb723e9ed763124332b6f948"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x8c0, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xfff4}}, @TCA_RSVP_POLICE={0x854, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xc9, 0x7, 0x2, 0xfffffffc, 0x3, 0x0, 0x6, 0x6, 0x8, 0xc508, 0x8, 0x2, 0x0, 0x5c, 0x7, 0x2, 0xd1, 0x3, 0x8, 0x3, 0xf64, 0x7, 0xb, 0x1, 0x2, 0xffffffd4, 0x8000, 0x5, 0x7, 0x3, 0x386e, 0x2, 0x9, 0x2, 0x1, 0x800, 0x87, 0x80000001, 0xe, 0x9, 0x8, 0x7fff, 0x7, 0x4, 0x2c8, 0xe3a, 0x4, 0x7, 0x5, 0x0, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0xfa6b, 0x4, 0x1, 0x1, 0x10001, 0x7f, 0x7, 0x2d03, 0x0, 0x3, 0x4, 0x5, 0xade, 0x6, 0x10001, 0x7, 0x2, 0x9, 0x1bf, 0x5, 0x9, 0x3ffc000, 0x1, 0x3, 0x5, 0xffff, 0xa2d, 0x7, 0x100, 0x8, 0x80000000, 0xfffffff7, 0x80000001, 0x9d, 0x80, 0x0, 0x6, 0xbbf, 0x3, 0x10, 0x8, 0x84e, 0x7fffffff, 0x3, 0x6, 0x0, 0x7, 0xfffffd9b, 0x1, 0x9, 0x3, 0x6, 0x3, 0x3, 0x9, 0x7ff, 0x6, 0x20000000, 0x3, 0x7, 0x4, 0x1, 0xff, 0x200, 0x1, 0xffff272a, 0x6, 0x80, 0x0, 0x5, 0x2, 0x5, 0x4, 0x81, 0x2, 0x8, 0x8, 0x8, 0x7, 0x40, 0x800, 0x3, 0x4, 0x8, 0x401, 0x8, 0xd, 0x0, 0x19ed70d2, 0x8, 0x0, 0x80, 0x6, 0x6, 0x204, 0x1, 0x7, 0x3, 0x4, 0x0, 0x9cd1, 0x2, 0x9, 0x8, 0x6, 0x3, 0x4, 0x2, 0x58e, 0x2, 0x10000, 0x28a, 0xd6, 0x80, 0x8, 0x9, 0x4, 0xa, 0x10001, 0x9, 0x7, 0x4, 0x2, 0xe4, 0xba92, 0x1, 0xbbf, 0x480000, 0x4, 0x9, 0x5, 0x8, 0x80000, 0x7, 0x2, 0x21, 0x3, 0x1, 0x8, 0x6, 0x8, 0x4, 0x496, 0x3, 0x6, 0x3, 0x9, 0x0, 0xce55, 0x47, 0x8, 0x1, 0x7, 0xfff, 0x8, 0x40000000, 0x4e3a, 0xbf, 0x5, 0x7f, 0x7ff, 0x101, 0x4, 0x800, 0x5, 0x8714, 0x6, 0x0, 0x7, 0x80000000, 0xffffffff, 0x8, 0x3, 0x8, 0x4, 0x31, 0x6, 0x4000, 0xc822, 0x9, 0x13c, 0x9, 0x9, 0x8, 0x8, 0x7, 0x4, 0x0, 0x8828, 0x1, 0x7, 0x6, 0x9, 0x2, 0x7f, 0x1, 0x0, 0x9, 0x0, 0x56]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xe0a, 0x3, 0x5, 0x0, 0x5, 0x2, 0x4, 0x101, 0x101, 0x5, 0x0, 0x1ff, 0x9, 0x0, 0x10, 0xffff, 0x2477, 0xffffff9e, 0x66, 0x200, 0x1, 0x5, 0x4, 0x8, 0x3, 0x5, 0x6, 0x4, 0x6, 0x9, 0x9, 0x40, 0x5, 0x400, 0x3, 0x3, 0xe0, 0x4, 0xd, 0x2824f57, 0x4, 0x5, 0x2000000, 0x3f, 0x6, 0x200, 0xffff, 0xf, 0xffff0001, 0x8, 0x5, 0x2, 0x0, 0x52ca, 0x4, 0x7, 0x3, 0x0, 0x8, 0x5, 0x6b2, 0x1fffe0, 0x0, 0x5, 0x9, 0x2, 0x477f, 0x80, 0x2, 0x4, 0xa, 0xba, 0x7fff, 0x9bd, 0x2, 0x7, 0x2, 0x0, 0x4, 0x10000, 0x9, 0x0, 0x7, 0x1000, 0x8, 0xffffffc0, 0xfffffff8, 0xaf4e, 0x6, 0xfffffffb, 0x2, 0x9, 0xd8b5, 0x8, 0x0, 0x2, 0x1, 0xffffff06, 0x3, 0x9, 0x6, 0x5, 0x6, 0x400, 0x8, 0x838, 0x80000001, 0x10000, 0xa, 0x0, 0x5, 0x8, 0x7, 0x9b08, 0xfffffff7, 0x8204, 0x480, 0x3, 0x400, 0x80000000, 0x7, 0x7, 0x4, 0x8, 0x4, 0x9c, 0x80, 0xc, 0xab, 0x9, 0x6, 0x0, 0x2, 0x0, 0x5, 0x40, 0x80, 0x6, 0x79a, 0x4, 0xc93b, 0x7, 0x5, 0x4, 0x4, 0x9, 0x0, 0x101, 0x8, 0x0, 0x1a, 0x7ff, 0x7, 0x10001, 0xb62e, 0x1, 0xffffffff, 0x1, 0xfffffffe, 0xffff8001, 0xe5, 0x4, 0x9a, 0x100, 0x1, 0xc, 0xf92, 0x6, 0x200, 0x10001, 0x80000000, 0x1, 0x6, 0x0, 0x1ff, 0x8, 0x3, 0x30a47f90, 0x8, 0x717, 0x9, 0xc2, 0x742, 0x7fffffff, 0x7, 0x6, 0x3, 0x8, 0x40, 0x5, 0x9, 0xa5, 0x2, 0x3ff, 0x6, 0x7, 0x1ff, 0x2, 0x2288, 0x7, 0x8, 0x5, 0x2d, 0x2, 0xffffffff, 0x2, 0x2, 0x0, 0x10000, 0x7, 0x8, 0x10, 0x2, 0x6fd0, 0x3681, 0x8, 0x3, 0x1d, 0x7ff, 0xb, 0x8, 0x3, 0x0, 0x3, 0x1, 0xfffffffd, 0xc, 0x10, 0x0, 0x0, 0x6886, 0xff, 0x40, 0xb, 0x6, 0x4, 0x1, 0x2, 0x83, 0x3ff, 0x200, 0x9, 0x4, 0x7, 0x2, 0x7fff, 0x9, 0x522, 0x400, 0x8001, 0x8, 0x70e82cfb, 0x7, 0x8, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x1, 0xf, 0x3, 0x80000001, {0x5f, 0x1, 0x2, 0x101, 0x1, 0x2}, {0x80, 0x0, 0x4, 0x5, 0x5, 0x9}, 0x6, 0x2, 0xff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x6}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x6}}, @TCA_RSVP_SRC={0x14, 0x3, @private2}]}}]}, 0x2994}, 0x1, 0x0, 0x0, 0x20000804}, 0x24000004) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1c31, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.254536468s ago: executing program 0 (id=4172): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="5c005a8054000180050007000100000047000200"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) epoll_create(0x3ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) epoll_pwait(r6, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.132887121s ago: executing program 1 (id=4173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 1.132128487s ago: executing program 4 (id=4174): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000000)='yeah\x00', 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0xff}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)={0x1f4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb59d}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf329e1ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ca6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1878}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x484}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x100}, 0x40010) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @any, 0x11}, 0xa) close(0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100d2abd7000ffdbdf251200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0800150002000000"], 0x44}, 0x1, 0x0, 0x0, 0x10800}, 0x0) 861.519742ms ago: executing program 3 (id=4175): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMAXCID(r3, 0x4004743c, 0x0) 855.107747ms ago: executing program 4 (id=4176): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x2000000000000108, &(0x7f0000000740)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x20000004}, @exit, @func], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x1b) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) socket(0x1d, 0xa, 0x800) 702.0142ms ago: executing program 4 (id=4177): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x23}}}}, ["", ""]}, 0x30}}, 0x8c1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x3}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) 700.803554ms ago: executing program 2 (id=4178): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) (async) r2 = socket$nl_crypto(0x10, 0x3, 0x15) writev(r2, &(0x7f0000003440)=[{&(0x7f0000000340)="f0d57883b944439d32297739c33461d7288042c440d69990a98cc0fdd5e21781f05f30832eafaf657fd2cd48faa91f386b208f8b1f8e0e7d51f096966a0fe0bdf7d3c222b3066af199f3446875c51e6ff59bffec391823653137f221ccfa12ac051fdf6bf947f45ebb9eabc956eee7f8882cfd0f0e", 0x75}, {&(0x7f00000003c0)="91991259c1f053605d9345a68cc5822be71bea15087f09dcca461b58dd581743bd6ec9f3bfc2eb11c993826ee48d3e646108b13cfd9285ec1b204a4a6b7ee44002b00543ea98a45448e9398001dca2920c532814ae50640d1d389482016c21367552b7cb87eda48b9f5e466bbf802298b26c87bf3480c764d99eae412b20330a46", 0x81}, {&(0x7f0000000480)="2a73602e73eb0c75c9949724f0464f59237ea34f68a79032bfc9216fb87a014d595fd97dd0bbad6683bc29cc3cd0580360b36e5c916e2e75528beeb5a500c9b10903e8a3f023e66d002aaff900a353da6669d6412adc87d3cd90fb7fb6e696004c1d0ec2c5e698edbbe3161ca9e759b59c175fabcb7f66b0fb3189738c45af14c3ee6380c3199c2e839eed1de3f5f37616de0f85841e507cca82b0943b0acc1d72fcd56983686869df32fa", 0xab}, {&(0x7f0000000540)="8f55764c0046fac97c0e5ee3af033d35728e131237e2fbaec8d2fa3a73b5481c1ba7840a4c0dec699fc1de460fd51b4158985c7b1e12f0a57d6e9fec45b2cc25ec440e8c82a1788136096f4f35b19b38aadce7d56b7babe6124c9278dfdf86b4f856fd4c23d3fc1682cc12194c73eb90cf0ac0c368f57ea73652e25aef97cd0b2921f190818c80ae84d0a627135bc69d4e7deb7d87c34701c11c0b6f157a461813e8768cbd1cc0baec99f91b038c2baa394d16dfdfc617a25f4018112e2ea82d205935aef5374207aad9c35573bfa96ae42e97b4994f0afb02945fab970946598da9bde327cfa053a5bbbd921b", 0xed}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="d4e3dfcef3cebba9e8f51c6c612d7c86d344de", 0x13}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="585f9b1f6c0db14d85f30a7048c4231ec099280e89dbf2755733c34fafe1b4bfddafe01c70012c9f42d35727ae10e22665b3245c80618cbb0df66d8d0ef8e2", 0x3f}, {&(0x7f0000003380)="2c2d732544d748bd1bd0f63a55b4f72360508ef5f71282c65d87a8532cec70a8f06a5ec9ec538144f9078cef0c43dcee9fda478376353176168e53de28e2d658c9fa0fa8e67fbf68cdc9afbbe3f7508524a71f05c8c40ae671bb1170eb99fb0b1dbc9cc8606e6b323613d51ae29957cee2246d47ebc08a09454dc3bc5d903c08cdd7d3bb5fefde01f63e12f3405566b96d61443ea96b01f82f9f2f4da0d043a345ae85c5e0ea9f3dd512beea08ea33774d", 0xb1}], 0x9) (async) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r1], 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000040feffffff00000000017c0007000000000000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00@\x00\x00\x00\a\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES64=r6, @ANYRES8=0x0], 0x48}}, 0x0) 700.503651ms ago: executing program 1 (id=4179): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'hsr0\x00', {0x6}, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 568.345243ms ago: executing program 2 (id=4180): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xce}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 567.821758ms ago: executing program 4 (id=4181): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffee8, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x230, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee95}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^+.\'(&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\x1f\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']$$$\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#@)/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\N]\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@\\:@$#$/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "73b4b2b09f36f954ea73ad3e58a3e541725edd74b778c214206cd544c9f495067e57dc52355b40"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+$/*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[([!\xef\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x230}}, 0x44000) (async) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, 0x0, 0x4) (async) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c2300fd) 558.358794ms ago: executing program 1 (id=4182): r0 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x9}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="ff02040006ffb6630058ffffffbfffffff000000", 0x14) 384.981859ms ago: executing program 3 (id=4183): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x4000010, r0, 0x2bf77000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) 384.163137ms ago: executing program 2 (id=4184): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000100)={0x2}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) 383.926777ms ago: executing program 1 (id=4185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={r7, 0x1ff}, &(0x7f0000000340)=0x8) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000380), 0x4) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x80000, r3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000080)='\xaa,(\'\x87\x00', 0x4000, &(0x7f00000000c0)={@_ha_fsid={[0x1000, 0x7ef]}, {0xd, 0xff72, 0x200, 0xfffffffffffffff8}}, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0xeec7}) read$alg(r10, &(0x7f0000000280)=""/124, 0x7c) 382.327183ms ago: executing program 4 (id=4186): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044000) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000000)='yeah\x00', 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0xff}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)={0x1f4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb59d}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf329e1ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ca6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1878}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x484}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x100}, 0x40010) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @any, 0x11}, 0xa) close(0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100d2abd7000ffdbdf251200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0800150002000000"], 0x44}, 0x1, 0x0, 0x0, 0x10800}, 0x0) 368.670356ms ago: executing program 3 (id=4187): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000002180)=""/4046, 0xc93) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}]}, 0x40}}, 0x0) 265.923745ms ago: executing program 2 (id=4188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 264.282558ms ago: executing program 0 (id=4189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) splice(r0, &(0x7f0000000040)=0xfffffffffffffffd, r0, 0x0, 0x6, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a", 0x56}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d7", 0xbb}, {&(0x7f0000000900)="ae2917d5a4b014842a61845c01908087c19287ad5d95c4053c4acbbd1a55627bf84a05cf9d6eed56274564f3370cd0381600b85895021cd99fd08da69965bd09c9486474e231b39e39e34ffe0291b6707116991c0cc22b7905be98a373370f47ee57c47783ef5079642b93c65e1a88ce831dbeab21cd1f6db1c14039e12ad899fa4786b2811b9e07cb1219c1bcfd19d9d46cbbb3eefcac345bf6faee97b453bc60175c3e1f0773ba3da9c05cf83fc9fe86b966f7f3332e994f5c9bc82f419db2385a25ee1dc7abdfbba9c8ba90347db4e1917f6af823257394be05d2a75be84d2839a7b839f1f9d008b3d04728314152e7f44db8d0a5d9be7c889db21d42", 0xfe}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46589b216d", 0xeb}, {&(0x7f0000000140)="292a26692895c48e5670e19cc646f85a75772f22ae06b576502dcae8deef2c85890ba3a489d85a850088295e495a45179795ff4e4e8560da757145dd589c53242fb40dc5641fec08c566e437445c185643ce0a048a29e0694250424da6e4f97c9ad2b4ee41d1a2c517ee4e9dc1d4e7b26c9f564d034c87b312da6e991d4f9bef05a141ed34409a694e1bcc04b2580d45354f3157faab897c065c43249e483c4a102813b2fc1abdbb0c7dfffdc0a2f6ba2d18220e1a09c3e60c5e71bb05ab28c752f63998b3fa0e20bc0f29f0ff1af21e4949fe38b12465973af3ce6eefb2a90e", 0xe0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="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", 0x1b2}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) 206.222559ms ago: executing program 1 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x1000000000020, &(0x7f00000005c0)=0x7ffc, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x380000, @mcast1, 0xfffffffc}, 0x1c) 203.856948ms ago: executing program 2 (id=4191): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x27, @short}, 0x14) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000200)=0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x6, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) sendmsg$AUDIT_GET(r10, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x3e8, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1}) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r11, 0x80087601, 0x0) (async, rerun: 64) r12 = socket(0x15, 0x5, 0x6) (async, rerun: 64) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r13, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bind$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ffffffc}, 0x1c) 54.621021ms ago: executing program 1 (id=4192): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x18, 0x1, 0xfffffffe, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0x100, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x9}, {0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x4}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044039}, 0x20044804) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r4, 0x1, 0x81}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000006c0)={"6404e59764f25d57f8ca1a5414a8b973", r7, 0x0, {0x86}, {0x9, 0x8}, 0x8000000000000001, [0x7, 0x76, 0xffffffffffffffff, 0x3, 0x1, 0x49e, 0x8515, 0x2, 0x5, 0x3, 0x7fff, 0xfffffffffffffffe, 0xbd9, 0xfffffffffffffff3, 0x7fff, 0x6]}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 44.286532ms ago: executing program 4 (id=4193): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) syz_emit_ethernet(0x23, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) pipe(&(0x7f0000000300)) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async) syz_emit_ethernet(0x23, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000040)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}}}, 0x84) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) pipe(&(0x7f0000000300)) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) 0s ago: executing program 0 (id=4194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000130700000000000000000a010101000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0ce783c93724bc5f7bc5b86000002000000000000000000000000000004d632000000ac1414000000000000000002000000000000000000000000006037d0997ccefe4fa4c4527f2c00005485f098ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000002000000020000000000000000000000480001007368613338342d61767800000000000000000000000000000000000000000000000000000000000000000000011f0400"/259], 0x138}}, 0x0) kernel console output (not intermixed with test programs): 0039][T15710] nbd4: detected capacity change from 0 to 127 [ 369.623384][ T5627] block nbd4: Receive control failed (result -104) [ 369.759801][T15734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.836292][ T5627] Bluetooth: hci3: command tx timeout [ 370.111223][T15604] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.118890][T15604] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.126382][T15604] bridge_slave_0: entered allmulticast mode [ 370.138306][T15604] bridge_slave_0: entered promiscuous mode [ 370.164077][T15604] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.183448][T15604] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.200398][T15604] bridge_slave_1: entered allmulticast mode [ 370.218854][T15604] bridge_slave_1: entered promiscuous mode [ 370.282004][T15604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.297746][T15604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.379236][T15604] team0: Port device team_slave_0 added [ 370.391045][T15604] team0: Port device team_slave_1 added [ 370.401197][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 370.433991][T15771] syzkaller0: entered promiscuous mode [ 370.440357][T15771] syzkaller0: entered allmulticast mode [ 370.448283][T15604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.456576][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.483741][T15604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.498637][T15604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.505795][T15604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.533402][T15604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.585624][T15735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.818487][T15604] hsr_slave_0: entered promiscuous mode [ 370.843492][T15604] hsr_slave_1: entered promiscuous mode [ 370.859457][T15604] debugfs: 'hsr0' already exists in 'hsr' [ 370.875265][T15604] Cannot create hsr debugfs directory [ 371.627688][T15819] netlink: 'syz.4.2978': attribute type 29 has an invalid length. [ 371.670889][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 371.790303][T15821] netlink: 'syz.4.2978': attribute type 29 has an invalid length. [ 371.809710][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 371.915447][ T5627] Bluetooth: hci3: command tx timeout [ 371.946052][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 371.971285][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 371.992102][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 372.019399][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 372.330229][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 372.414633][T15866] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2989'. [ 372.595468][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 372.661208][T15868] gre1: entered promiscuous mode [ 372.666624][T15868] gre1: entered allmulticast mode [ 372.716245][T15879] netlink: 'syz.4.2992': attribute type 7 has an invalid length. [ 372.988495][T15884] veth17: entered allmulticast mode [ 373.262666][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 373.310606][T15899] netlink: 'syz.3.2998': attribute type 15 has an invalid length. [ 373.442582][ T1157] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 373.445858][T15899] netlink: 'syz.3.2998': attribute type 15 has an invalid length. [ 373.478258][ T1157] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 373.515420][T15604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.545761][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.595964][ T1157] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 373.649320][T15604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.681229][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.723680][T15604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.770635][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.792611][ T1157] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 373.820344][T15604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.840217][T15604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.995421][ T5627] Bluetooth: hci3: command tx timeout [ 374.013907][T15925] syzkaller0: entered promiscuous mode [ 374.019696][T15925] syzkaller0: entered allmulticast mode [ 376.808874][T15604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.913078][T15985] vlan2: entered allmulticast mode [ 376.920053][T15985] bond0: entered allmulticast mode [ 376.927295][T15985] bond_slave_0: entered allmulticast mode [ 376.938033][T15985] bond_slave_1: entered allmulticast mode [ 376.987854][T15604] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.022220][T15991] __nla_validate_parse: 6 callbacks suppressed [ 377.022242][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 377.054187][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.061450][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.168668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.175976][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.396542][T16008] Cannot find set identified by id 65534 to match [ 377.444251][T16009] x_tables: duplicate underflow at hook 2 [ 377.524889][T16014] sit0: Caught tx_queue_len zero misconfig [ 377.557399][T16014] netlink: 'syz.4.3023': attribute type 1 has an invalid length. [ 377.720178][T16027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3026'. [ 377.853201][T16032] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 377.864838][T16032] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.3028'. [ 378.321187][T16045] syzkaller1: entered promiscuous mode [ 378.351619][T16045] syzkaller1: entered allmulticast mode [ 378.389934][T15604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.507504][T16060] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3036'. [ 378.581030][T15604] veth0_vlan: entered promiscuous mode [ 378.654029][T15604] veth1_vlan: entered promiscuous mode [ 378.762989][T15604] veth0_macvtap: entered promiscuous mode [ 378.800583][T15604] veth1_macvtap: entered promiscuous mode [ 378.823729][T16075] syzkaller0: entered promiscuous mode [ 378.861161][T16075] syzkaller0: entered allmulticast mode [ 378.886419][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.979416][T15604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.020083][T15604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.041263][T16045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.083040][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.119678][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.319745][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.350769][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.410344][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3044'. [ 379.639930][T12494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.677412][T12494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.689521][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 379.803181][T16100] bond6: entered promiscuous mode [ 379.829843][T16101] macvlan2: entered promiscuous mode [ 379.844371][T16101] macvlan2: entered allmulticast mode [ 379.866677][T16101] bond6: (slave macvlan2): Opening slave failed [ 379.908094][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.954207][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.162162][T16123] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3050'. [ 380.218652][T16123] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 380.263367][T16123] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 380.296612][T16123] team0: Failed to send options change via netlink (err -105) [ 380.323489][T16123] team0: Port device batadv2 added [ 380.672449][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.689203][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.699404][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.711456][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.723299][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.363621][T16166] syzkaller0: entered promiscuous mode [ 381.385294][T16166] syzkaller0: entered allmulticast mode [ 381.449215][T16172] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3061'. [ 381.621869][T16141] lo speed is unknown, defaulting to 1000 [ 381.651089][T16141] lo speed is unknown, defaulting to 1000 [ 381.921491][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 382.409969][T16216] netlink: 'syz.1.3072': attribute type 29 has an invalid length. [ 382.428152][T16216] netlink: 'syz.1.3072': attribute type 29 has an invalid length. [ 382.517005][T16216] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3072'. [ 382.623962][T16190] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 382.795411][ T5627] Bluetooth: hci0: command tx timeout [ 382.931625][T16233] syzkaller0: entered promiscuous mode [ 382.937489][T16233] syzkaller0: entered allmulticast mode [ 383.068734][T16141] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.076292][T16141] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.083769][T16141] bridge_slave_0: entered allmulticast mode [ 383.092159][T16141] bridge_slave_0: entered promiscuous mode [ 383.100975][T16141] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.109304][T16141] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.118292][T16141] bridge_slave_1: entered allmulticast mode [ 383.126530][T16141] bridge_slave_1: entered promiscuous mode [ 383.158578][T16141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.171030][T16141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.204250][T16141] team0: Port device team_slave_0 added [ 383.212676][T16141] team0: Port device team_slave_1 added [ 383.242769][T16141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.250197][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.277539][T16141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.290109][T16141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.297659][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.324860][T16141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.377296][T16141] hsr_slave_0: entered promiscuous mode [ 383.383906][T16141] hsr_slave_1: entered promiscuous mode [ 383.391035][T16141] debugfs: 'hsr0' already exists in 'hsr' [ 383.397221][T16141] Cannot create hsr debugfs directory [ 383.543940][T16141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.634902][T16141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.723582][T16141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.818756][T16141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.875238][ T5627] Bluetooth: hci0: command tx timeout [ 385.331026][T16211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.412848][T16141] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.462558][T16141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.484271][T16141] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.528681][T16141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.537494][T16243] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3078'. [ 385.551121][T16141] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.567195][T16243] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3078'. [ 385.609802][T16141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.649292][T16141] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.689869][T16141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.782833][T16257] atomic_op ffff88805bb8d198 conn xmit_atomic 0000000000000000 [ 385.901469][T16271] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 385.928245][T16271] netlink: 'syz.0.3083': attribute type 29 has an invalid length. [ 385.938106][T16271] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3083'. [ 386.046515][T16141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.064248][T16273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3084'. [ 386.079600][T16273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3084'. [ 386.107551][T16273] netlink: 'syz.1.3084': attribute type 2 has an invalid length. [ 386.119163][T16273] netlink: 'syz.1.3084': attribute type 2 has an invalid length. [ 386.143098][T16141] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.144748][T16278] can: request_module (can-proto-0) failed. [ 386.156823][T16282] syzkaller0: entered promiscuous mode [ 386.157883][T16284] netlink: 'syz.4.3085': attribute type 9 has an invalid length. [ 386.162485][T16282] syzkaller0: entered allmulticast mode [ 386.242402][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.249730][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.280688][T16288] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 386.291663][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.299056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.437872][T16294] sctp: [Deprecated]: syz.4.3091 (pid 16294) Use of int in max_burst socket option. [ 386.437872][T16294] Use struct sctp_assoc_value instead [ 386.459640][T16294] x_tables: duplicate underflow at hook 2 [ 386.847971][T16141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.908720][T16141] veth0_vlan: entered promiscuous mode [ 386.954052][T16141] veth1_vlan: entered promiscuous mode [ 386.959709][ T5627] Bluetooth: hci0: command tx timeout [ 386.991051][T16141] veth0_macvtap: entered promiscuous mode [ 387.001783][T16141] veth1_macvtap: entered promiscuous mode [ 387.022043][T16141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.043892][T16141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.059899][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.069380][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.080708][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.090560][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.035259][ T5627] Bluetooth: hci0: command tx timeout [ 389.054126][T16276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.249782][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3095'. [ 389.266167][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3095'. [ 389.283245][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.300164][T16314] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 389.311339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.329977][T16317] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 389.388023][T16314] veth0_to_bridge: entered promiscuous mode [ 389.433823][T16313] veth0_to_bridge: left promiscuous mode [ 389.439734][ T30] audit: type=1804 audit(1778582305.711:8): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3098" name="/newroot/44/cgroup.controllers" dev="tmpfs" ino=242 res=1 errno=0 [ 389.440951][ T30] audit: type=1800 audit(1778582305.731:9): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3098" name="cgroup.controllers" dev="tmpfs" ino=242 res=0 errno=0 [ 389.519419][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.553337][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.633575][T16328] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 389.634535][T16330] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3102'. [ 389.653080][T16328] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 389.799367][T16339] batadv_slave_0: Caught tx_queue_len zero misconfig [ 389.918921][T16350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.200788][T16357] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.232711][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 390.250687][T16360] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.284169][T16357] netlink: 'syz.1.3109': attribute type 2 has an invalid length. [ 390.285090][T16359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3110'. [ 390.312987][T16357] netlink: 'syz.1.3109': attribute type 2 has an invalid length. [ 390.352277][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.367733][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.393113][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.413447][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.428111][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.440319][T16359] geneve2: entered promiscuous mode [ 390.484140][T16359] geneve2: entered allmulticast mode [ 390.594441][T16371] sctp: [Deprecated]: syz.3.3114 (pid 16371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.594441][T16371] Use struct sctp_sack_info instead [ 390.778295][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3118'. [ 390.781712][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3116'. [ 390.820944][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 390.851150][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3116'. [ 390.877314][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 391.625900][T16419] geneve3: entered promiscuous mode [ 391.631360][T16419] geneve3: entered allmulticast mode [ 391.671274][T16363] lo speed is unknown, defaulting to 1000 [ 391.686648][T16363] lo speed is unknown, defaulting to 1000 [ 391.784627][T16427] sctp: [Deprecated]: syz.0.3128 (pid 16427) Use of int in maxseg socket option. [ 391.784627][T16427] Use struct sctp_assoc_value instead [ 392.338578][T16363] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.346194][T16363] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.354114][T16363] bridge_slave_0: entered allmulticast mode [ 392.363330][T16363] bridge_slave_0: entered promiscuous mode [ 392.379559][T16363] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.387090][T16363] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.394428][T16363] bridge_slave_1: entered allmulticast mode [ 392.409818][T16363] bridge_slave_1: entered promiscuous mode [ 392.454967][T16363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.470781][T16363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.481210][ T5645] Bluetooth: hci4: command tx timeout [ 392.528301][T16363] team0: Port device team_slave_0 added [ 392.537956][T16363] team0: Port device team_slave_1 added [ 392.581982][T16363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.589538][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.616345][T16363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.634961][T16363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.642888][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.669591][T16363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.722069][T16363] hsr_slave_0: entered promiscuous mode [ 392.729611][T16363] hsr_slave_1: entered promiscuous mode [ 392.736677][T16363] debugfs: 'hsr0' already exists in 'hsr' [ 392.742483][T16363] Cannot create hsr debugfs directory [ 392.887927][T16363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.987716][T16363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.079216][T16363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.167512][T16363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.190994][T16403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.273288][T16363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.333291][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.368546][T16363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.423677][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.483400][T16363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.522780][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.548557][T16363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 394.555488][ T5645] Bluetooth: hci4: command tx timeout [ 394.593912][T16363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.913467][T16465] xt_ecn: cannot match TCP bits for non-tcp packets [ 394.994907][T16363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.092307][T16363] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.147346][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.154762][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.208810][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.216260][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.300167][T16476] __nla_validate_parse: 3 callbacks suppressed [ 395.300190][T16476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3141'. [ 395.391626][T16476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3141'. [ 395.864180][T16506] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3148'. [ 396.017600][T16512] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 396.289057][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 396.402839][T16538] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 396.635253][ T5645] Bluetooth: hci4: command tx timeout [ 396.717379][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 396.736239][T16549] bond1: entered promiscuous mode [ 396.742363][T16549] bond1: entered allmulticast mode [ 396.747974][T16555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3163'. [ 396.758686][T16549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.773324][T16556] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 396.856476][T16568] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3164'. [ 396.857738][T16554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.879098][T16557] team0: No ports can be present during mode change [ 396.894541][T16566] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 396.917672][T16569] vlan0: entered promiscuous mode [ 396.939148][T16569] team0: Port device vlan0 added [ 396.945491][T16564] bond1: entered promiscuous mode [ 396.966748][T16564] bond1: entered allmulticast mode [ 396.996917][T16564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.027558][T16564] team0: Port device bond1 added [ 397.053766][T16554] team_slave_1: entered promiscuous mode [ 397.073945][T16554] team0: Port device team_slave_1 removed [ 397.086454][T16556] tipc: Enabled bearer , priority 0 [ 397.111153][T16363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.689921][T16601] syzkaller1: entered promiscuous mode [ 397.697516][T16601] syzkaller1: entered allmulticast mode [ 397.744275][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3175'. [ 397.810890][T16598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3175'. [ 397.860155][T16605] openvswitch: netlink: Missing key (keys=40, expected=80) [ 397.877582][T16600] openvswitch: netlink: Missing key (keys=40, expected=80) [ 397.923775][T16363] veth0_vlan: entered promiscuous mode [ 397.959202][T16363] veth1_vlan: entered promiscuous mode [ 398.072075][T16363] veth0_macvtap: entered promiscuous mode [ 398.118294][T16363] veth1_macvtap: entered promiscuous mode [ 398.174503][T16363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.208203][ T5737] tipc: Node number set to 758005887 [ 398.240047][T16363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.282590][ T8229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.318815][ T8229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.343750][ T8229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.365954][ T8229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.587128][T16629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 398.695890][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.730823][ T5645] Bluetooth: hci4: command tx timeout [ 398.749783][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.844295][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 398.891694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.919278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.931107][T16642] geneve4: entered promiscuous mode [ 398.944823][T16642] geneve4: entered allmulticast mode [ 399.077953][T16654] netlink: 'syz.1.3193': attribute type 5 has an invalid length. [ 399.108518][T16656] netlink: 'syz.0.3194': attribute type 15 has an invalid length. [ 399.193995][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 399.229486][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 399.273462][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 399.328122][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 399.485660][T16667] netlink: 'syz.3.3197': attribute type 32 has an invalid length. [ 399.624986][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.642160][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.660166][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.670556][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.679499][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.002441][ T1183] block nbd4: Possible stuck request ffff888028377000: control (read@0,1024B). Runtime 30 seconds [ 400.014582][ T1183] block nbd4: Possible stuck request ffff8880283771c0: control (read@1024,1024B). Runtime 30 seconds [ 400.025848][ T1183] block nbd4: Possible stuck request ffff888028377380: control (read@2048,1024B). Runtime 30 seconds [ 400.036943][ T1183] block nbd4: Possible stuck request ffff888028377540: control (read@3072,1024B). Runtime 30 seconds [ 400.573325][T16696] __nla_validate_parse: 3 callbacks suppressed [ 400.573348][T16696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3201'. [ 400.649620][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 400.738797][T16699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 400.922645][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 400.995281][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3203'. [ 401.040529][T16712] geneve5: entered promiscuous mode [ 401.060279][T16712] geneve5: entered allmulticast mode [ 401.123515][T16673] lo speed is unknown, defaulting to 1000 [ 401.159250][T16673] lo speed is unknown, defaulting to 1000 [ 401.600944][T16729] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 401.756646][ T5645] Bluetooth: hci2: command tx timeout [ 401.807910][T16734] tun0: tun_chr_ioctl cmd 1074025675 [ 401.814268][T16734] tun0: persist disabled [ 402.086572][T16741] --map-set only usable from mangle table [ 402.244588][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 402.266102][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3215'. [ 402.307926][T16744] geneve2: entered promiscuous mode [ 402.313357][T16744] geneve2: entered allmulticast mode [ 402.388966][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3216'. [ 402.406463][T16752] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3217'. [ 402.460517][ T8229] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.482521][ T8229] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.511999][ T8229] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.522755][ T8229] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.840798][T16775] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 402.863376][T16774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 402.888839][T16775] netlink: 'syz.2.3222': attribute type 33 has an invalid length. [ 402.914935][T16777] netlink: 'syz.2.3222': attribute type 33 has an invalid length. [ 402.936571][T16781] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 403.012424][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3224'. [ 403.030173][T16775] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 403.066674][T16775] bond2 (unregistering): Released all slaves [ 403.233061][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3224'. [ 403.306991][T16777] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 403.349605][T16777] bond2 (unregistering): Released all slaves [ 403.477399][T16783] bond1: (slave bridge1): making interface the new active one [ 403.509369][T16783] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 403.539030][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.560130][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.576163][T16673] bridge_slave_0: entered allmulticast mode [ 403.601920][T16673] bridge_slave_0: entered promiscuous mode [ 403.652643][T16794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.691914][T16799] geneve2: entered promiscuous mode [ 403.708168][T16799] geneve2: entered allmulticast mode [ 403.736550][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.762129][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.778213][T16673] bridge_slave_1: entered allmulticast mode [ 403.797745][T16673] bridge_slave_1: entered promiscuous mode [ 403.842849][ T5645] Bluetooth: hci2: command tx timeout [ 403.881170][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.897893][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.969484][T16673] team0: Port device team_slave_0 added [ 404.002368][T16673] team0: Port device team_slave_1 added [ 404.116783][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.151557][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.235146][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.280550][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.297821][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.360906][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.389872][T16821] hsr0: entered allmulticast mode [ 404.413616][T16821] hsr_slave_0: entered allmulticast mode [ 404.430201][T16821] hsr_slave_1: entered allmulticast mode [ 404.622145][T16673] hsr_slave_0: entered promiscuous mode [ 404.639588][T16673] hsr_slave_1: entered promiscuous mode [ 404.661278][T16673] debugfs: 'hsr0' already exists in 'hsr' [ 404.675872][T16673] Cannot create hsr debugfs directory [ 405.173368][T16848] FAULT_INJECTION: forcing a failure. [ 405.173368][T16848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.198301][T16848] CPU: 1 UID: 0 PID: 16848 Comm: syz.4.3242 Not tainted syzkaller #0 PREEMPT(full) [ 405.198333][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.198345][T16848] Call Trace: [ 405.198354][T16848] [ 405.198362][T16848] dump_stack_lvl+0xe8/0x150 [ 405.198392][T16848] should_fail_ex+0x412/0x560 [ 405.198426][T16848] _copy_to_iter+0x404/0x17d0 [ 405.198457][T16848] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.198496][T16848] ? __pfx__copy_to_iter+0x10/0x10 [ 405.198524][T16848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 405.198551][T16848] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.198581][T16848] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 405.198607][T16848] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 405.198645][T16848] __skb_datagram_iter+0xf8/0x980 [ 405.198676][T16848] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 405.198717][T16848] skb_copy_datagram_iter+0xb5/0x240 [ 405.198751][T16848] netlink_recvmsg+0x2c3/0xa50 [ 405.198790][T16848] ? __pfx_netlink_recvmsg+0x10/0x10 [ 405.198823][T16848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.198851][T16848] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 405.198877][T16848] ? security_socket_recvmsg+0x7e/0x2c0 [ 405.198907][T16848] ? __pfx_netlink_recvmsg+0x10/0x10 [ 405.198934][T16848] sock_recvmsg+0x172/0x1b0 [ 405.198968][T16848] ____sys_recvmsg+0x1e6/0x4a0 [ 405.199006][T16848] ? __pfx_____sys_recvmsg+0x10/0x10 [ 405.199048][T16848] ? import_iovec+0x73/0xa0 [ 405.199082][T16848] ___sys_recvmsg+0x215/0x590 [ 405.199117][T16848] ? __pfx____sys_recvmsg+0x10/0x10 [ 405.199150][T16848] ? __fget_files+0x2a/0x420 [ 405.199195][T16848] ? __fget_files+0x3a0/0x420 [ 405.199230][T16848] do_recvmmsg+0x334/0x800 [ 405.199269][T16848] ? __pfx_do_recvmmsg+0x10/0x10 [ 405.199312][T16848] ? _copy_from_user+0x94/0xb0 [ 405.199358][T16848] __x64_sys_recvmmsg+0x1b7/0x250 [ 405.199392][T16848] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 405.199431][T16848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.199454][T16848] do_syscall_64+0x15f/0xf80 [ 405.199484][T16848] ? clear_bhb_loop+0x40/0x90 [ 405.199510][T16848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.199537][T16848] RIP: 0033:0x7faa5079cdd9 [ 405.199558][T16848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.199577][T16848] RSP: 002b:00007faa5160e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 405.199602][T16848] RAX: ffffffffffffffda RBX: 00007faa50a15fa0 RCX: 00007faa5079cdd9 [ 405.199618][T16848] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 405.199633][T16848] RBP: 00007faa5160e090 R08: 0000200000003700 R09: 0000000000000000 [ 405.199646][T16848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.199659][T16848] R13: 00007faa50a16038 R14: 00007faa50a15fa0 R15: 00007fff4630cd18 [ 405.199693][T16848] [ 405.840422][T16864] Cannot find set identified by id 65534 to match [ 405.896770][T16673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.912098][T16673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.930542][ T5645] Bluetooth: hci2: command tx timeout [ 405.943244][T16868] __nla_validate_parse: 4 callbacks suppressed [ 405.943267][T16868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3248'. [ 405.982584][T16860] tunl0: entered promiscuous mode [ 406.032229][T16860] netlink: 'syz.0.3243': attribute type 3 has an invalid length. [ 406.059257][T16860] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3243'. [ 406.127635][T16673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.138500][T16673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.219899][T16881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.234730][T16881] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 406.254881][T16881] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3252'. [ 406.274590][T16881] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3252'. [ 406.290988][T16881] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 406.315382][T16881] netlink: 'syz.0.3252': attribute type 8 has an invalid length. [ 406.339287][T16881] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3252'. [ 406.382060][T16890] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3255'. [ 406.391666][T16890] openvswitch: netlink: Flow key attr not present in new flow. [ 406.413272][T16673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.426022][T16673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.650401][T16894] syzkaller0: entered promiscuous mode [ 406.666304][T16894] syzkaller0: entered allmulticast mode [ 406.692485][T16914] netlink: 'syz.4.3259': attribute type 3 has an invalid length. [ 406.714934][T16673] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 406.753149][T16673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.775117][T16673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.811865][T16919] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 406.825327][T16919] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3260'. [ 406.956824][T16926] IPv6: addrconf: prefix option has invalid lifetime [ 406.963700][T16926] IPv6: addrconf: prefix option has invalid lifetime [ 407.064909][T16929] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3262'. [ 408.002695][ T5645] Bluetooth: hci2: command tx timeout [ 408.033240][T16934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3265'. [ 409.469876][T16921] ipvlan2: entered allmulticast mode [ 409.476017][T16921] batadv_slave_1: entered allmulticast mode [ 409.484685][T16921] batman_adv: batadv0: Adding interface: ipvlan2 [ 409.491180][T16921] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.518147][T16921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.529313][T16921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.540352][T16921] batman_adv: batadv0: Interface activated: ipvlan2 [ 409.562645][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 409.613980][T16937] geneve3: entered promiscuous mode [ 409.645963][T16937] geneve3: entered allmulticast mode [ 409.730120][T16941] veth0: entered promiscuous mode [ 409.741104][ T1157] tipc: Subscription rejected, illegal request [ 409.758040][T16943] netlink: 'syz.2.3269': attribute type 21 has an invalid length. [ 409.810363][T16940] veth0: left promiscuous mode [ 409.920345][T16673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.937572][T16953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.956864][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.974726][T16673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.997345][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.017157][T16957] Bluetooth: MGMT ver 1.23 [ 410.018116][T16673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.062895][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.087503][T16673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.111346][T16673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.453796][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.510484][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.572734][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.580005][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.621687][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.628976][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.804548][T16994] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 410.875792][T16994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.906524][T16997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.989506][T17001] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 410.995841][T17001] syzkaller1: Linktype set failed because interface is up [ 411.005481][ T8676] syzkaller1: tun_net_xmit 90 [ 411.104998][T17013] pim6reg: entered allmulticast mode [ 411.118807][T17015] pim6reg: left allmulticast mode [ 411.417534][T17022] __nla_validate_parse: 3 callbacks suppressed [ 411.417556][T17022] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3289'. [ 411.578006][T17030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.678270][T17019] infiniband syz1: set active [ 411.687878][T17019] infiniband syz1: added batadv_slave_1 [ 411.733603][T17030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.803861][T17019] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 411.854607][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.886794][T17019] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 411.902521][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 411.914446][T17040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3295'. [ 411.926741][ T5645] Bluetooth: hci2: command tx timeout [ 411.942542][T17019] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 411.947209][T17040] geneve3: entered promiscuous mode [ 411.961294][T17040] geneve3: entered allmulticast mode [ 412.047062][T17045] openvswitch: netlink: IP tunnel dst address not specified [ 412.080025][T17019] RDS/IB: syz1: added [ 412.101383][T17019] smc: adding ib device syz1 with port count 1 [ 412.120490][T17019] smc: ib device syz1 port 1 has no pnetid [ 412.283413][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.372666][T16673] veth0_vlan: entered promiscuous mode [ 412.375797][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 412.389371][T16673] veth1_vlan: entered promiscuous mode [ 412.550178][T16673] veth0_macvtap: entered promiscuous mode [ 412.581261][T16673] veth1_macvtap: entered promiscuous mode [ 412.641436][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.697375][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.732444][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.746900][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.774749][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.784019][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.978345][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.993507][T17048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.001831][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.079645][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.096309][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.231413][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 413.306549][T17069] bond1 (unregistering): Released all slaves [ 413.730797][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 413.756060][T17080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3305'. [ 413.852282][T17080] geneve4: entered promiscuous mode [ 413.865524][T17080] geneve4: entered allmulticast mode [ 414.010763][T17092] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3308'. [ 415.029419][T17113] netlink: 'syz.2.3314': attribute type 21 has an invalid length. [ 415.097683][T17124] netlink: 'syz.1.3317': attribute type 29 has an invalid length. [ 415.130684][T17124] netlink: 'syz.1.3317': attribute type 29 has an invalid length. [ 415.152718][T17124] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3317'. [ 415.333732][T17132] macsec1: entered promiscuous mode [ 415.431782][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3323'. [ 415.715905][T15544] IPVS: starting estimator thread 0... [ 415.805644][T17151] IPVS: using max 34 ests per chain, 81600 per kthread [ 415.929244][T17156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.082996][T17167] netlink: 'syz.2.3332': attribute type 3 has an invalid length. [ 416.170180][T17166] syzkaller1: entered promiscuous mode [ 416.186500][T17166] syzkaller1: entered allmulticast mode [ 416.332889][T17174] netlink: 'syz.2.3333': attribute type 29 has an invalid length. [ 416.346334][T17174] netlink: 'syz.2.3333': attribute type 29 has an invalid length. [ 416.618516][T17183] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 417.188010][T17217] __nla_validate_parse: 4 callbacks suppressed [ 417.188033][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 417.338288][T17223] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 417.459375][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3351'. [ 417.517260][T17228] vlan2: entered allmulticast mode [ 417.537433][T17228] bond0: entered allmulticast mode [ 417.556236][T17228] bond_slave_0: entered allmulticast mode [ 417.580140][T17228] bond_slave_1: entered allmulticast mode [ 417.690009][T17230] : entered promiscuous mode [ 417.748101][T17236] gtp0: entered promiscuous mode [ 417.753176][T17236] gtp0: entered allmulticast mode [ 417.992292][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 418.021164][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 418.092820][T17252] netlink: 'syz.4.3359': attribute type 13 has an invalid length. [ 418.131125][T17263] sctp: [Deprecated]: syz.2.3365 (pid 17263) Use of int in maxseg socket option. [ 418.131125][T17263] Use struct sctp_assoc_value instead [ 418.150293][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'. [ 418.180487][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 418.220993][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 418.654401][T17282] bond1: entered promiscuous mode [ 418.667226][T17294] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3368'. [ 418.678587][T17294] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 418.853472][T17304] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 418.864425][T17300] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3374'. [ 418.877365][ T5645] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.884963][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.970287][T17308] gretap1: entered promiscuous mode [ 418.977612][T17308] batman_adv: batadv0: Adding interface: gretap1 [ 418.984029][T17308] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.057308][T17308] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 419.211156][T17330] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3384'. [ 419.252778][T17331] vlan3: entered promiscuous mode [ 419.269572][T17331] bridge0: entered promiscuous mode [ 419.558181][T17350] netlink: get zone limit has 4 unknown bytes [ 419.641074][T17350] 8021q: VLANs not supported on ip6gre0 [ 420.388380][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.396454][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.439540][T17406] netlink: 'syz.1.3409': attribute type 29 has an invalid length. [ 420.449071][T17406] netlink: 'syz.1.3409': attribute type 29 has an invalid length. [ 420.664289][T17412] FAULT_INJECTION: forcing a failure. [ 420.664289][T17412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.704729][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.3.3411 Not tainted syzkaller #0 PREEMPT(full) [ 420.704763][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.704777][T17412] Call Trace: [ 420.704786][T17412] [ 420.704796][T17412] dump_stack_lvl+0xe8/0x150 [ 420.704883][T17412] should_fail_ex+0x412/0x560 [ 420.704918][T17412] _copy_from_user+0x2d/0xb0 [ 420.704955][T17412] get_timespec64+0x96/0x1b0 [ 420.704982][T17412] ? __pfx_get_timespec64+0x10/0x10 [ 420.705016][T17412] __x64_sys_recvmmsg+0x14b/0x250 [ 420.705051][T17412] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 420.705089][T17412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.705113][T17412] do_syscall_64+0x15f/0xf80 [ 420.705142][T17412] ? trace_irq_disable+0x3b/0x140 [ 420.705172][T17412] ? clear_bhb_loop+0x40/0x90 [ 420.705200][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.705223][T17412] RIP: 0033:0x7fdc6079cdd9 [ 420.705245][T17412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.705264][T17412] RSP: 002b:00007fdc616c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 420.705289][T17412] RAX: ffffffffffffffda RBX: 00007fdc60a15fa0 RCX: 00007fdc6079cdd9 [ 420.705306][T17412] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 420.705322][T17412] RBP: 00007fdc616c0090 R08: 0000200000003700 R09: 0000000000000000 [ 420.705337][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.705350][T17412] R13: 00007fdc60a16038 R14: 00007fdc60a15fa0 R15: 00007ffc1d930338 [ 420.705385][T17412] [ 420.875153][T17416] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 421.153418][T17433] xt_hashlimit: size too large, truncated to 1048576 [ 421.241460][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.349036][T17438] bridge_slave_0 (unregistering): left allmulticast mode [ 421.365693][T17438] bridge_slave_0 (unregistering): left promiscuous mode [ 421.385312][T17438] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.443089][T17440] netlink: 'syz.1.3423': attribute type 29 has an invalid length. [ 421.465979][T17453] netlink: 'syz.1.3423': attribute type 29 has an invalid length. [ 421.698620][T17466] xt_hashlimit: size too large, truncated to 1048576 [ 421.706658][T17467] netlink: 'syz.1.3427': attribute type 10 has an invalid length. [ 421.720080][T17467] ipvlan0: entered allmulticast mode [ 421.731125][T17467] veth0_vlan: entered allmulticast mode [ 421.801109][T17467] team0: Device ipvlan0 failed to register rx_handler [ 421.933551][T17476] bond2: option all_slaves_active: invalid value (222) [ 421.950402][T17476] bond2 (unregistering): Released all slaves [ 422.245816][T17487] bond0: entered promiscuous mode [ 422.257861][T17487] bond_slave_0: entered promiscuous mode [ 422.273066][T17487] bond_slave_1: entered promiscuous mode [ 422.414119][T17502] netlink: 'syz.3.3437': attribute type 29 has an invalid length. [ 422.440663][T17503] netlink: 'syz.3.3437': attribute type 29 has an invalid length. [ 422.469921][T17502] __nla_validate_parse: 11 callbacks suppressed [ 422.469945][T17502] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3437'. [ 422.964898][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3448'. [ 422.997691][T17535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.106147][T17535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.158279][T17548] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3451'. [ 423.170256][ T9] IPVS: starting estimator thread 0... [ 423.224302][T17553] IPVS: sh: FWM 3 0x00000003 - no destination available [ 423.279627][T17551] IPVS: using max 33 ests per chain, 79200 per kthread [ 423.506100][T17562] syzkaller1: entered promiscuous mode [ 423.521035][T17562] syzkaller1: entered allmulticast mode [ 423.715914][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.734506][T17570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 423.765732][T17570] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.773898][T17570] gretap1: entered promiscuous mode [ 423.782492][T17570] gretap1: entered allmulticast mode [ 423.791625][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.802225][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.815220][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.826751][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.837882][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 423.848464][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3456'. [ 424.249265][T17586] nbd: must specify at least one socket [ 424.314712][T17598] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 424.349922][T17597] ip_vti0: entered promiscuous mode [ 424.499966][T17598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.665652][T17617] ip6tnl1: entered allmulticast mode [ 424.906756][T17631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.918582][T17631] bridge0: port 3(bond2) entered blocking state [ 424.935643][T17631] bridge0: port 3(bond2) entered disabled state [ 424.949644][T17631] bond2: entered allmulticast mode [ 424.962961][T17631] bond2: entered promiscuous mode [ 424.970552][T17631] bridge0: port 3(bond2) entered blocking state [ 424.977085][T17631] bridge0: port 3(bond2) entered forwarding state [ 425.101381][T17640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.124253][T17640] bridge0: port 4(bond3) entered blocking state [ 425.140184][T17640] bridge0: port 4(bond3) entered disabled state [ 425.147322][T17640] bond3: entered allmulticast mode [ 425.156210][T17640] bond3: entered promiscuous mode [ 425.162243][T17640] bridge0: port 4(bond3) entered blocking state [ 425.168686][T17640] bridge0: port 4(bond3) entered forwarding state [ 425.370707][T17653] siw: device registration error -23 [ 425.482222][T12494] bridge0: port 3(bond2) entered disabled state [ 425.538704][T12494] bridge0: port 4(bond3) entered disabled state [ 425.762220][T17684] sctp: [Deprecated]: syz.1.3493 (pid 17684) Use of int in max_burst socket option. [ 425.762220][T17684] Use struct sctp_assoc_value instead [ 425.866909][T17684] xfrm1: entered promiscuous mode [ 425.879143][T17684] xfrm1: entered allmulticast mode [ 425.925392][T17694] syzkaller1: entered promiscuous mode [ 425.931236][T17694] syzkaller1: entered allmulticast mode [ 426.114458][T17706] sctp: [Deprecated]: syz.3.3500 (pid 17706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.114458][T17706] Use struct sctp_sack_info instead [ 426.178108][T17717] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 426.188959][T17719] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 426.390531][T17721] bond2: (slave geneve2): making interface the new active one [ 426.413823][T17721] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 426.431807][ T8229] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 426.463425][ T8229] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 426.512864][ T8229] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 426.535827][ T8229] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 426.617524][T17737] netlink: 'syz.1.3511': attribute type 21 has an invalid length. [ 427.066947][T17759] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 427.270148][T17772] syzkaller0: entered promiscuous mode [ 427.276331][T17772] syzkaller0: entered allmulticast mode [ 427.302371][T17774] netlink: 'syz.2.3520': attribute type 7 has an invalid length. [ 428.034149][T17765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.204851][T17786] __nla_validate_parse: 30 callbacks suppressed [ 428.204876][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 428.343719][T17791] 8021q: VLANs not supported on vxcan1 [ 428.634106][T17811] : renamed from vlan0 (while UP) [ 428.672937][T17814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.367773][ T30] audit: type=1804 audit(1778582345.651:10): pid=17851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3537" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=302 res=1 errno=0 [ 429.429171][ T30] audit: type=1800 audit(1778582345.651:11): pid=17851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3537" name="cgroup.controllers" dev="tmpfs" ino=302 res=0 errno=0 [ 429.754340][T17825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.814012][T17847] netlink: 'syz.1.3537': attribute type 1 has an invalid length. [ 429.851237][T17847] netlink: 'syz.1.3537': attribute type 3 has an invalid length. [ 429.863615][T17847] netlink: 'syz.1.3537': attribute type 7 has an invalid length. [ 429.872503][T17847] netlink: 'syz.1.3537': attribute type 8 has an invalid length. [ 429.894763][T17847] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3537'. [ 429.904666][T17847] NCSI netlink: No device for ifindex 131092 [ 429.954365][T17876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3545'. [ 430.089221][ T1183] block nbd4: Possible stuck request ffff888028377000: control (read@0,1024B). Runtime 60 seconds [ 430.100353][ T1183] block nbd4: Possible stuck request ffff8880283771c0: control (read@1024,1024B). Runtime 60 seconds [ 430.112012][ T1183] block nbd4: Possible stuck request ffff888028377380: control (read@2048,1024B). Runtime 60 seconds [ 430.123801][ T1183] block nbd4: Possible stuck request ffff888028377540: control (read@3072,1024B). Runtime 60 seconds [ 430.167505][T17866] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 430.192530][T17866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.215249][T17866] veth3: entered allmulticast mode [ 430.224689][T17866] bond2: (slave veth3): Enslaving as an active interface with a down link [ 430.242380][T17866] bond2 (unregistering): (slave veth3): Releasing active interface [ 430.259305][T17866] bond2 (unregistering): Released all slaves [ 430.295381][T17886] bridge2: entered promiscuous mode [ 430.300692][T17886] bridge2: entered allmulticast mode [ 430.435959][T17889] macvtap1: entered allmulticast mode [ 430.441583][T17889] veth0_macvtap: entered allmulticast mode [ 432.869950][T17871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.080251][T17899] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3553'. [ 433.189599][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 433.251179][T17910] macvlan2: entered allmulticast mode [ 433.266632][T17910] hsr0: entered allmulticast mode [ 433.288161][T17910] hsr_slave_0: entered allmulticast mode [ 433.302961][T17910] hsr_slave_1: entered allmulticast mode [ 433.311219][T17922] FAULT_INJECTION: forcing a failure. [ 433.311219][T17922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.319125][T17910] hsr0: entered promiscuous mode [ 433.356955][T17922] CPU: 1 UID: 0 PID: 17922 Comm: syz.0.3558 Not tainted syzkaller #0 PREEMPT(full) [ 433.356991][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.357005][T17922] Call Trace: [ 433.357015][T17922] [ 433.357026][T17922] dump_stack_lvl+0xe8/0x150 [ 433.357058][T17922] should_fail_ex+0x412/0x560 [ 433.357093][T17922] _copy_from_user+0x2d/0xb0 [ 433.357127][T17922] get_timespec64+0x96/0x1b0 [ 433.357153][T17922] ? __pfx_get_timespec64+0x10/0x10 [ 433.357189][T17922] __x64_sys_recvmmsg+0x14b/0x250 [ 433.357232][T17922] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 433.357273][T17922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.357298][T17922] do_syscall_64+0x15f/0xf80 [ 433.357327][T17922] ? trace_irq_disable+0x3b/0x140 [ 433.357360][T17922] ? clear_bhb_loop+0x40/0x90 [ 433.357387][T17922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.357409][T17922] RIP: 0033:0x7f3d1859cdd9 [ 433.357430][T17922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.357450][T17922] RSP: 002b:00007f3d19399028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.357478][T17922] RAX: ffffffffffffffda RBX: 00007f3d18816090 RCX: 00007f3d1859cdd9 [ 433.357495][T17922] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 433.357511][T17922] RBP: 00007f3d19399090 R08: 0000200000003700 R09: 0000000000000000 [ 433.357525][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.357539][T17922] R13: 00007f3d18816128 R14: 00007f3d18816090 R15: 00007ffed5b206a8 [ 433.357573][T17922] [ 433.594860][T17929] FAULT_INJECTION: forcing a failure. [ 433.594860][T17929] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 433.645417][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.1.3561 Not tainted syzkaller #0 PREEMPT(full) [ 433.645448][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.645461][T17929] Call Trace: [ 433.645471][T17929] [ 433.645481][T17929] dump_stack_lvl+0xe8/0x150 [ 433.645520][T17929] should_fail_ex+0x412/0x560 [ 433.645554][T17929] prepare_alloc_pages+0x22a/0x650 [ 433.645596][T17929] __alloc_frozen_pages_noprof+0x12f/0x380 [ 433.645633][T17929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.645670][T17929] ? __pfx_policy_nodemask+0x10/0x10 [ 433.645728][T17929] ? __lock_acquire+0x6b5/0x2cf0 [ 433.645756][T17929] alloc_pages_mpol+0x235/0x490 [ 433.645793][T17929] folio_alloc_mpol_noprof+0x39/0x160 [ 433.645827][T17929] vma_alloc_folio_noprof+0xe1/0x1e0 [ 433.645858][T17929] ? __lock_acquire+0x6b5/0x2cf0 [ 433.645882][T17929] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 433.645916][T17929] ? __pte_offset_map+0x29/0x240 [ 433.645944][T17929] ? __pte_offset_map+0x29/0x240 [ 433.645974][T17929] do_pte_missing+0x159d/0x33f0 [ 433.646018][T17929] ? handle_mm_fault+0xee/0x3170 [ 433.646060][T17929] handle_mm_fault+0x1bd7/0x3170 [ 433.646104][T17929] ? handle_mm_fault+0xee/0x3170 [ 433.646139][T17929] ? __pfx_handle_mm_fault+0x10/0x10 [ 433.646178][T17929] ? __lock_acquire+0x6b5/0x2cf0 [ 433.646206][T17929] ? lock_mm_and_find_vma+0xa7/0x340 [ 433.646236][T17929] do_user_addr_fault+0x75b/0x1340 [ 433.646276][T17929] exc_page_fault+0x6a/0xc0 [ 433.646306][T17929] asm_exc_page_fault+0x26/0x30 [ 433.646328][T17929] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 433.646352][T17929] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 433.646370][T17929] RSP: 0018:ffffc90005a574d8 EFLAGS: 00050202 [ 433.646392][T17929] RAX: ffff888053682001 RBX: ffff8880536824b1 RCX: 0000000000000157 [ 433.646408][T17929] RDX: 0000000000000000 RSI: ffff8880536824f1 RDI: 0000200000001000 [ 433.646424][T17929] RBP: ffffc90005a57650 R08: ffff888053682647 R09: 1ffff1100a6d04c8 [ 433.646439][T17929] R10: dffffc0000000000 R11: ffffed100a6d04c9 R12: dffffc0000000000 [ 433.646455][T17929] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 433.646492][T17929] _copy_to_iter+0x60a/0x17d0 [ 433.646535][T17929] ? __pfx__copy_to_iter+0x10/0x10 [ 433.646562][T17929] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 433.646589][T17929] ? lockdep_hardirqs_on+0x7a/0x110 [ 433.646616][T17929] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 433.646642][T17929] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 433.646681][T17929] __skb_datagram_iter+0xf8/0x980 [ 433.646714][T17929] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 433.646756][T17929] skb_copy_datagram_iter+0xb5/0x240 [ 433.646791][T17929] netlink_recvmsg+0x2c3/0xa50 [ 433.646832][T17929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 433.646868][T17929] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.646899][T17929] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 433.646927][T17929] ? security_socket_recvmsg+0x7e/0x2c0 [ 433.646960][T17929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 433.646989][T17929] sock_recvmsg+0x172/0x1b0 [ 433.647018][T17929] ____sys_recvmsg+0x1e6/0x4a0 [ 433.647069][T17929] ? __pfx_____sys_recvmsg+0x10/0x10 [ 433.647118][T17929] ? import_iovec+0x73/0xa0 [ 433.647153][T17929] ___sys_recvmsg+0x215/0x590 [ 433.647190][T17929] ? __pfx____sys_recvmsg+0x10/0x10 [ 433.647233][T17929] ? __fget_files+0x2a/0x420 [ 433.647280][T17929] ? __fget_files+0x3a0/0x420 [ 433.647317][T17929] do_recvmmsg+0x334/0x800 [ 433.647366][T17929] ? __pfx_do_recvmmsg+0x10/0x10 [ 433.647412][T17929] ? _copy_from_user+0x94/0xb0 [ 433.647461][T17929] __x64_sys_recvmmsg+0x1b7/0x250 [ 433.647496][T17929] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 433.647566][T17929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.647590][T17929] do_syscall_64+0x15f/0xf80 [ 433.647619][T17929] ? trace_irq_disable+0x3b/0x140 [ 433.647649][T17929] ? clear_bhb_loop+0x40/0x90 [ 433.647674][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.647694][T17929] RIP: 0033:0x7f849519cdd9 [ 433.647715][T17929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.647733][T17929] RSP: 002b:00007f8495fc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.647755][T17929] RAX: ffffffffffffffda RBX: 00007f8495415fa0 RCX: 00007f849519cdd9 [ 433.647771][T17929] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 433.647785][T17929] RBP: 00007f8495fc0090 R08: 0000200000003700 R09: 0000000000000000 [ 433.647799][T17929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.647813][T17929] R13: 00007f8495416038 R14: 00007f8495415fa0 R15: 00007ffdbe2fd6c8 [ 433.647849][T17929] [ 434.398479][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'. [ 434.409950][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3569'. [ 434.682596][T17964] FAULT_INJECTION: forcing a failure. [ 434.682596][T17964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.698585][T17964] CPU: 1 UID: 0 PID: 17964 Comm: syz.3.3575 Not tainted syzkaller #0 PREEMPT(full) [ 434.698617][T17964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.698631][T17964] Call Trace: [ 434.698639][T17964] [ 434.698649][T17964] dump_stack_lvl+0xe8/0x150 [ 434.698679][T17964] should_fail_ex+0x412/0x560 [ 434.698711][T17964] _copy_to_iter+0x589/0x17d0 [ 434.698752][T17964] ? __pfx__copy_to_iter+0x10/0x10 [ 434.698777][T17964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 434.698804][T17964] ? lockdep_hardirqs_on+0x7a/0x110 [ 434.698832][T17964] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 434.698856][T17964] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 434.698894][T17964] __skb_datagram_iter+0xf8/0x980 [ 434.698924][T17964] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 434.698960][T17964] skb_copy_datagram_iter+0xb5/0x240 [ 434.699002][T17964] netlink_recvmsg+0x2c3/0xa50 [ 434.699049][T17964] ? __pfx_netlink_recvmsg+0x10/0x10 [ 434.699084][T17964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.699112][T17964] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 434.699138][T17964] ? security_socket_recvmsg+0x7e/0x2c0 [ 434.699170][T17964] ? __pfx_netlink_recvmsg+0x10/0x10 [ 434.699199][T17964] sock_recvmsg+0x172/0x1b0 [ 434.699227][T17964] ____sys_recvmsg+0x1e6/0x4a0 [ 434.699266][T17964] ? __pfx_____sys_recvmsg+0x10/0x10 [ 434.699311][T17964] ? import_iovec+0x73/0xa0 [ 434.699344][T17964] ___sys_recvmsg+0x215/0x590 [ 434.699380][T17964] ? __pfx____sys_recvmsg+0x10/0x10 [ 434.699415][T17964] ? __fget_files+0x2a/0x420 [ 434.699460][T17964] ? __fget_files+0x3a0/0x420 [ 434.699497][T17964] do_recvmmsg+0x334/0x800 [ 434.699536][T17964] ? __pfx_do_recvmmsg+0x10/0x10 [ 434.699581][T17964] ? _copy_from_user+0x94/0xb0 [ 434.699628][T17964] __x64_sys_recvmmsg+0x1b7/0x250 [ 434.699662][T17964] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 434.699703][T17964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.699727][T17964] do_syscall_64+0x15f/0xf80 [ 434.699756][T17964] ? trace_irq_disable+0x3b/0x140 [ 434.699786][T17964] ? clear_bhb_loop+0x40/0x90 [ 434.699812][T17964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.699835][T17964] RIP: 0033:0x7fdc6079cdd9 [ 434.699857][T17964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.699876][T17964] RSP: 002b:00007fdc616c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 434.699902][T17964] RAX: ffffffffffffffda RBX: 00007fdc60a15fa0 RCX: 00007fdc6079cdd9 [ 434.699919][T17964] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 434.699935][T17964] RBP: 00007fdc616c0090 R08: 0000200000003700 R09: 0000000000000000 [ 434.699950][T17964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.699964][T17964] R13: 00007fdc60a16038 R14: 00007fdc60a15fa0 R15: 00007ffc1d930338 [ 434.699999][T17964] [ 435.010454][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 435.139912][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3576'. [ 435.152124][T17973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3576'. [ 435.172258][T17973] geneve5: entered promiscuous mode [ 435.177905][T17973] geneve5: entered allmulticast mode [ 435.405804][T17988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3582'. [ 435.419303][T17988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3582'. [ 435.481568][T17990] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 435.495354][T17992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.581394][T17987] syzkaller0: entered promiscuous mode [ 435.592426][T17987] syzkaller0: entered allmulticast mode [ 435.625998][T17987] tipc: Started in network mode [ 435.634727][T17987] tipc: Node identity 5e593d1e91f9, cluster identity 4711 [ 435.645832][T17987] tipc: Enabled bearer , priority 0 [ 435.657578][T17985] tipc: Resetting bearer [ 435.699032][T17985] tipc: Disabling bearer [ 435.713301][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 435.723326][T17999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3585'. [ 435.733243][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 435.909122][T18012] geneve4: entered promiscuous mode [ 435.914521][T18012] geneve4: entered allmulticast mode [ 436.149634][T18023] veth0_macvtap: Caught tx_queue_len zero misconfig [ 436.631041][T18047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.894765][T18067] vlan2: entered allmulticast mode [ 436.900455][T18067] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 437.041193][T18071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.166786][T18075] syzkaller0: entered promiscuous mode [ 437.176569][T18075] syzkaller0: entered allmulticast mode [ 437.351323][T18095] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 437.361042][T18095] netlink: 'syz.0.3618': attribute type 2 has an invalid length. [ 437.371840][T18095] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 437.389167][T18095] netlink: 'syz.0.3618': attribute type 3 has an invalid length. [ 437.431586][T18095] netlink: 'syz.0.3618': attribute type 9 has an invalid length. [ 437.696061][T18105] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 439.787802][T18107] netlink: 'syz.3.3619': attribute type 11 has an invalid length. [ 439.796635][T18107] netlink: 'syz.3.3619': attribute type 5 has an invalid length. [ 439.797109][T18110] FAULT_INJECTION: forcing a failure. [ 439.797109][T18110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.804514][T18107] __nla_validate_parse: 19 callbacks suppressed [ 439.804531][T18107] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.3619'. [ 439.850648][T18110] CPU: 0 UID: 0 PID: 18110 Comm: syz.4.3620 Not tainted syzkaller #0 PREEMPT(full) [ 439.850680][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 439.850694][T18110] Call Trace: [ 439.850703][T18110] [ 439.850713][T18110] dump_stack_lvl+0xe8/0x150 [ 439.850744][T18110] should_fail_ex+0x412/0x560 [ 439.850777][T18110] _copy_to_iter+0x404/0x17d0 [ 439.850815][T18110] ? do_raw_spin_lock+0x12b/0x2f0 [ 439.850856][T18110] ? __pfx__copy_to_iter+0x10/0x10 [ 439.850883][T18110] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 439.850912][T18110] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.850950][T18110] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 439.850978][T18110] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 439.851016][T18110] __skb_datagram_iter+0xf8/0x980 [ 439.851047][T18110] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 439.851086][T18110] skb_copy_datagram_iter+0xb5/0x240 [ 439.851121][T18110] netlink_recvmsg+0x2c3/0xa50 [ 439.851161][T18110] ? __pfx_netlink_recvmsg+0x10/0x10 [ 439.851194][T18110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 439.851224][T18110] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 439.851250][T18110] ? security_socket_recvmsg+0x7e/0x2c0 [ 439.851281][T18110] ? __pfx_netlink_recvmsg+0x10/0x10 [ 439.851309][T18110] sock_recvmsg+0x172/0x1b0 [ 439.851335][T18110] ____sys_recvmsg+0x1e6/0x4a0 [ 439.851375][T18110] ? __pfx_____sys_recvmsg+0x10/0x10 [ 439.851419][T18110] ? import_iovec+0x73/0xa0 [ 439.851448][T18110] ___sys_recvmsg+0x215/0x590 [ 439.851476][T18110] ? __pfx____sys_recvmsg+0x10/0x10 [ 439.851505][T18110] ? __fget_files+0x2a/0x420 [ 439.851539][T18110] ? __fget_files+0x3a0/0x420 [ 439.851567][T18110] do_recvmmsg+0x334/0x800 [ 439.851599][T18110] ? __pfx_do_recvmmsg+0x10/0x10 [ 439.851633][T18110] ? _copy_from_user+0x94/0xb0 [ 439.851670][T18110] __x64_sys_recvmmsg+0x1b7/0x250 [ 439.851697][T18110] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 439.851729][T18110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.851748][T18110] do_syscall_64+0x15f/0xf80 [ 439.851771][T18110] ? trace_irq_disable+0x3b/0x140 [ 439.851796][T18110] ? clear_bhb_loop+0x40/0x90 [ 439.851816][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.851833][T18110] RIP: 0033:0x7faa5079cdd9 [ 439.851850][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.851865][T18110] RSP: 002b:00007faa5160e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.851885][T18110] RAX: ffffffffffffffda RBX: 00007faa50a15fa0 RCX: 00007faa5079cdd9 [ 439.851899][T18110] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 439.851911][T18110] RBP: 00007faa5160e090 R08: 0000200000003700 R09: 0000000000000000 [ 439.851930][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.851942][T18110] R13: 00007faa50a16038 R14: 00007faa50a15fa0 R15: 00007fff4630cd18 [ 439.851969][T18110] [ 440.329207][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.764197][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3634'. [ 440.799944][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'. [ 441.220652][T18174] ip6t_srh: unknown srh invflags 4000 [ 441.366290][T18182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.943498][T18218] FAULT_INJECTION: forcing a failure. [ 441.943498][T18218] name failslab, interval 1, probability 0, space 0, times 0 [ 441.956909][T18218] CPU: 0 UID: 0 PID: 18218 Comm: syz.4.3658 Not tainted syzkaller #0 PREEMPT(full) [ 441.956942][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.956955][T18218] Call Trace: [ 441.956964][T18218] [ 441.956974][T18218] dump_stack_lvl+0xe8/0x150 [ 441.957005][T18218] should_fail_ex+0x412/0x560 [ 441.957038][T18218] should_failslab+0xa8/0x100 [ 441.957070][T18218] __kmalloc_noprof+0xe8/0x760 [ 441.957097][T18218] ? __lock_acquire+0x6b5/0x2cf0 [ 441.957120][T18218] ? iovec_from_user+0x87/0x250 [ 441.957155][T18218] iovec_from_user+0x87/0x250 [ 441.957188][T18218] __import_iovec+0x163/0x7e0 [ 441.957229][T18218] import_iovec+0x73/0xa0 [ 441.957264][T18218] ___sys_recvmsg+0x4bd/0x590 [ 441.957301][T18218] ? __pfx____sys_recvmsg+0x10/0x10 [ 441.957335][T18218] ? __fget_files+0x2a/0x420 [ 441.957377][T18218] ? __fget_files+0x3a0/0x420 [ 441.957413][T18218] do_recvmmsg+0x334/0x800 [ 441.957451][T18218] ? __pfx_do_recvmmsg+0x10/0x10 [ 441.957495][T18218] ? _copy_from_user+0x94/0xb0 [ 441.957541][T18218] __x64_sys_recvmmsg+0x1b7/0x250 [ 441.957575][T18218] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 441.957615][T18218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.957640][T18218] do_syscall_64+0x15f/0xf80 [ 441.957669][T18218] ? trace_irq_disable+0x3b/0x140 [ 441.957700][T18218] ? clear_bhb_loop+0x40/0x90 [ 441.957735][T18218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.957756][T18218] RIP: 0033:0x7faa5079cdd9 [ 441.957777][T18218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.957795][T18218] RSP: 002b:00007faa5160e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 441.957821][T18218] RAX: ffffffffffffffda RBX: 00007faa50a15fa0 RCX: 00007faa5079cdd9 [ 441.957837][T18218] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 441.957852][T18218] RBP: 00007faa5160e090 R08: 0000200000003700 R09: 0000000000000000 [ 441.957866][T18218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.957880][T18218] R13: 00007faa50a16038 R14: 00007faa50a15fa0 R15: 00007fff4630cd18 [ 441.957915][T18218] [ 442.256539][T18215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3657'. [ 442.571403][T18238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3665'. [ 442.654572][T18250] team_slave_1: Caught tx_queue_len zero misconfig [ 442.836176][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 442.867866][T18255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3671'. [ 442.934909][T18255] geneve6: entered promiscuous mode [ 442.940002][T18259] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 442.947247][T18261] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 442.958369][T18255] geneve6: entered allmulticast mode [ 442.984255][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 443.008192][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 443.024993][T18265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3674'. [ 443.170578][T18268] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 443.294960][T18268] bond4: (slave gretap1): making interface the new active one [ 443.306906][T18268] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 443.341714][T18268] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 443.363772][T18268] macvlan2: entered promiscuous mode [ 443.369744][T18268] macvlan2: entered allmulticast mode [ 443.377087][T18268] bond4: entered promiscuous mode [ 443.382295][T18268] gretap1: entered promiscuous mode [ 443.389265][T18268] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.401257][T18268] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 443.420089][T18268] bond4: left promiscuous mode [ 443.427792][T18268] gretap1: left promiscuous mode [ 443.865847][T18300] geneve3: entered promiscuous mode [ 443.877133][T18300] geneve3: entered allmulticast mode [ 444.166489][T18312] xt_ipcomp: unknown flags 1D [ 444.344336][T18317] netlink: 'syz.0.3691': attribute type 1 has an invalid length. [ 444.421044][T18319] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 445.180192][T18337] netlink: 'syz.0.3696': attribute type 29 has an invalid length. [ 445.189554][T18337] netlink: 'syz.0.3696': attribute type 29 has an invalid length. [ 445.269194][T18339] __nla_validate_parse: 7 callbacks suppressed [ 445.269216][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 445.354410][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 445.377374][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3698'. [ 445.395662][T18342] geneve7: entered promiscuous mode [ 445.401621][T18342] geneve7: entered allmulticast mode [ 445.492917][T18344] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 445.502577][T18344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3699'. [ 445.571588][T18345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3699'. [ 446.701721][T18288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.930967][T18371] netlink: 'syz.0.3707': attribute type 29 has an invalid length. [ 446.968747][T18371] netlink: 'syz.0.3707': attribute type 29 has an invalid length. [ 447.003151][T18375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3711'. [ 447.157098][T18382] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3713'. [ 447.299182][T18396] openvswitch: netlink: Unknown key attributes 2 [ 447.480740][T18404] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3718'. [ 447.744167][T18426] lo: Caught tx_queue_len zero misconfig [ 447.787239][T18428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'. [ 448.752040][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 449.025385][T18455] lo speed is unknown, defaulting to 1000 [ 449.032542][T18455] lo speed is unknown, defaulting to 1000 [ 450.521629][T18414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.741328][T18468] ip_vti0: entered allmulticast mode [ 450.835976][T18481] validate_nla: 3 callbacks suppressed [ 450.835998][T18481] netlink: 'syz.2.3740': attribute type 33 has an invalid length. [ 450.845649][T18464] __nla_validate_parse: 1 callbacks suppressed [ 450.845679][T18464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3734'. [ 450.889752][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 450.910813][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 451.033364][T18494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3742'. [ 451.125761][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 451.145745][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 451.460797][T18514] netem: change failed [ 451.534068][T18516] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3749'. [ 451.628240][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 451.638060][T18520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3751'. [ 451.652527][T18520] geneve6: entered promiscuous mode [ 451.660203][T18520] geneve6: entered allmulticast mode [ 452.233879][T18532] SET target dimension over the limit! [ 452.244707][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3754'. [ 454.116710][T18499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.881556][T18562] veth0: entered promiscuous mode [ 455.908348][T18597] bond0: Caught tx_queue_len zero misconfig [ 455.952412][T18564] veth0: left promiscuous mode [ 458.067734][T18592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.319429][T18651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3790'. [ 458.369709][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 458.954702][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 459.353364][T18710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3805'. [ 460.159092][ T1183] block nbd4: Possible stuck request ffff888028377000: control (read@0,1024B). Runtime 90 seconds [ 460.170837][ T1183] block nbd4: Possible stuck request ffff8880283771c0: control (read@1024,1024B). Runtime 90 seconds [ 460.183222][ T1183] block nbd4: Possible stuck request ffff888028377380: control (read@2048,1024B). Runtime 90 seconds [ 460.195349][ T1183] block nbd4: Possible stuck request ffff888028377540: control (read@3072,1024B). Runtime 90 seconds [ 460.439450][T18724] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 460.533322][T18729] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 460.550572][T18729] netlink: 'syz.1.3810': attribute type 21 has an invalid length. [ 460.642406][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 460.666979][T18735] bond3: entered promiscuous mode [ 460.673796][T18735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.693918][T18735] bridge2: entered promiscuous mode [ 460.701383][T18735] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 460.880973][T18743] netlink: 'syz.1.3814': attribute type 20 has an invalid length. [ 460.889439][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3814'. [ 460.906663][T12494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.906750][T18743] netlink: 'syz.1.3814': attribute type 20 has an invalid length. [ 460.916703][T12494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.923574][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3814'. [ 460.942060][T12494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.952248][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.696877][T18672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.706161][T18685] netlink: 'syz.4.3800': attribute type 1 has an invalid length. [ 461.714336][T18685] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3800'. [ 461.861301][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3816'. [ 461.903570][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 462.171979][T18765] openvswitch: netlink: Duplicate key (type 2). [ 462.298044][T18769] tipc: Started in network mode [ 462.303759][T18769] tipc: Node identity 220bb40174fb, cluster identity 4711 [ 462.328849][T18769] tipc: Enabled bearer , priority 0 [ 462.361552][T18778] macvlan0: entered promiscuous mode [ 462.382397][ T79] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.411793][ T79] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.434912][ T79] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.466785][ T79] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.547647][T18767] tipc: Disabling bearer [ 462.634454][T18790] geneve5: entered promiscuous mode [ 462.652659][T18790] geneve5: entered allmulticast mode [ 462.881840][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 462.901141][T18805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.970990][T18805] openvswitch: netlink: Flow actions attr not present in new flow. [ 463.314429][T18839] netlink: 'syz.2.3843': attribute type 21 has an invalid length. [ 463.403749][T18835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.698103][T18856] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 463.716982][T18856] syzkaller1: linktype set to 823 [ 463.745861][T18856] netlink: 'syz.3.3850': attribute type 83 has an invalid length. [ 463.883885][T18868] x_tables: duplicate underflow at hook 3 [ 464.176124][T18882] __nla_validate_parse: 8 callbacks suppressed [ 464.176148][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'. [ 464.204609][T18889] netlink: 'syz.1.3863': attribute type 2 has an invalid length. [ 464.238495][T18889] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 464.277963][T18889] netlink: 'syz.1.3863': attribute type 21 has an invalid length. [ 464.287382][T18894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3865'. [ 464.313959][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 464.340033][T18897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3865'. [ 464.366284][T18889] netlink: 'syz.1.3863': attribute type 21 has an invalid length. [ 464.403656][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 464.721557][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3870'. [ 464.892706][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 464.903810][T18928] bridge_slave_1: left allmulticast mode [ 464.907621][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 464.923230][T18928] bridge_slave_1: left promiscuous mode [ 464.933721][T18928] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.079631][T18924] bond5: entered promiscuous mode [ 465.085894][T18924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.139382][T18940] SET target dimension over the limit! [ 465.159015][T18930] bridge5: entered promiscuous mode [ 465.181306][T18930] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 465.242681][T18944] openvswitch: netlink: Missing key (keys=40, expected=80) [ 465.739489][T18970] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 465.772613][T18970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3888'. [ 465.831082][T18970] validate_nla: 2 callbacks suppressed [ 465.831104][T18970] netlink: 'syz.4.3888': attribute type 3 has an invalid length. [ 465.870272][T18970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'. [ 465.945893][T18974] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 465.987288][T18976] bridge0: port 5(gretap0) entered blocking state [ 466.015382][T18976] bridge0: port 5(gretap0) entered disabled state [ 466.022549][T18976] gretap0: entered allmulticast mode [ 466.031365][T18976] gretap0: entered promiscuous mode [ 466.039542][T18976] bridge0: port 5(gretap0) entered blocking state [ 466.046219][T18976] bridge0: port 5(gretap0) entered forwarding state [ 466.060809][T18982] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 466.153786][T18985] gtp1: entered promiscuous mode [ 466.176333][T18985] gtp1: entered allmulticast mode [ 466.214742][T18988] netlink: 'syz.3.3895': attribute type 10 has an invalid length. [ 466.278742][T18988] team0 (unregistering): Port device team_slave_0 removed [ 466.313442][T18988] team0 (unregistering): Port device team_slave_1 removed [ 466.390156][T18997] tipc: Enabling of bearer rejected, failed to enable media [ 466.421172][T18999] tipc: Enabling of bearer rejected, failed to enable media [ 466.442204][T18997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.660011][T19016] netlink: 'syz.0.3905': attribute type 1 has an invalid length. [ 466.882994][T19025] netlink: 'syz.3.3909': attribute type 12 has an invalid length. [ 466.892894][T19025] netlink: 'syz.3.3909': attribute type 29 has an invalid length. [ 466.932820][ T13] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 466.967311][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 466.989860][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 467.020560][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 467.037207][T19033] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.236041][T19045] syz_tun: entered allmulticast mode [ 467.255687][T19043] syz_tun: left allmulticast mode [ 467.461326][T19065] lo: entered promiscuous mode [ 467.492503][T19065] tunl0: entered promiscuous mode [ 467.530016][T19065] gre0: entered promiscuous mode [ 467.589714][T19065] gretap0: entered promiscuous mode [ 467.720007][T19065] erspan0: entered promiscuous mode [ 467.754885][T19065] ip_vti0: entered promiscuous mode [ 467.788363][T19065] ip6_vti0: entered promiscuous mode [ 467.811787][T19065] sit0: entered promiscuous mode [ 467.873886][T19065] ip6tnl0: entered promiscuous mode [ 467.981161][T19065] ip6gre0: entered promiscuous mode [ 468.052583][T19065] syz_tun: entered promiscuous mode [ 468.087701][T19065] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.140902][T19065] vcan0: entered promiscuous mode [ 468.162029][T19065] bond0: entered promiscuous mode [ 468.167714][T19065] bond_slave_0: entered promiscuous mode [ 468.173564][T19065] bond_slave_1: entered promiscuous mode [ 468.192316][T19065] team0: entered promiscuous mode [ 468.202678][T19065] team_slave_0: entered promiscuous mode [ 468.209419][T19065] team_slave_1: entered promiscuous mode [ 468.220611][T19065] dummy0: entered promiscuous mode [ 468.265522][T19065] nlmon0: entered promiscuous mode [ 468.276216][T19065] batadv0: entered promiscuous mode [ 468.293325][T19065] vxcan0: entered promiscuous mode [ 468.313741][T19065] vxcan1: entered promiscuous mode [ 468.329645][T19065] veth0: entered promiscuous mode [ 468.339419][T19065] veth1: entered promiscuous mode [ 468.364611][T19065] wg0: entered promiscuous mode [ 468.386217][T19065] wg1: entered promiscuous mode [ 468.402792][T19065] wg2: entered promiscuous mode [ 468.416451][T19065] veth0_to_bridge: entered promiscuous mode [ 468.457010][T19065] veth1_to_bridge: entered promiscuous mode [ 468.490529][T19065] veth0_to_bond: entered promiscuous mode [ 468.520626][T19065] veth1_to_bond: entered promiscuous mode [ 468.548039][T19065] veth0_to_team: entered promiscuous mode [ 468.582228][T19065] veth1_to_team: entered promiscuous mode [ 468.619073][T19065] veth0_to_batadv: entered promiscuous mode [ 468.639445][T19065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.656518][T19065] batadv_slave_0: entered promiscuous mode [ 468.672161][T19065] veth1_to_batadv: entered promiscuous mode [ 468.685818][T19065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.695603][T19065] batadv_slave_1: entered promiscuous mode [ 468.710714][T19065] xfrm0: entered promiscuous mode [ 468.728019][T19065] veth0_to_hsr: entered promiscuous mode [ 468.747321][T19065] veth1_to_hsr: entered promiscuous mode [ 468.770512][T19065] hsr0: entered promiscuous mode [ 468.780551][T19065] veth1_virt_wifi: entered promiscuous mode [ 468.794104][T19065] veth0_virt_wifi: entered promiscuous mode [ 468.814838][T19065] virt_wifi0: entered promiscuous mode [ 468.900642][T19065] vlan0: entered promiscuous mode [ 468.906844][T19065] vlan1: entered promiscuous mode [ 468.918741][T19065] macvlan0: entered promiscuous mode [ 468.934548][T19065] macvlan1: entered promiscuous mode [ 468.952600][T19065] ipvlan0: entered promiscuous mode [ 468.958310][T19065] ipvlan0: left allmulticast mode [ 468.972578][T19065] veth0_vlan: left allmulticast mode [ 468.978612][T19065] ipvlan1: entered promiscuous mode [ 469.002872][T19065] macvtap0: entered promiscuous mode [ 469.014439][T19065] macsec0: entered promiscuous mode [ 469.027503][T19065] geneve0: entered promiscuous mode [ 469.043662][T19065] geneve1: entered promiscuous mode [ 469.103403][T19065] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 469.122544][T19065] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 469.141072][T19065] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 469.182609][T19065] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 469.210746][T19065] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 469.223856][T19065] vlan2: entered promiscuous mode [ 469.231946][T19065] vlan2: left allmulticast mode [ 469.237564][T19065] bond0: left allmulticast mode [ 469.242651][T19065] bond_slave_0: left allmulticast mode [ 469.248771][T19065] bond_slave_1: left allmulticast mode [ 469.254728][T19065] vxlan0: entered promiscuous mode [ 469.260498][T19065] bridge1: entered promiscuous mode [ 469.267128][T19065] xfrm1: left allmulticast mode [ 469.272933][T19065] bond2: entered promiscuous mode [ 469.278459][T19065] geneve2: entered promiscuous mode [ 469.285877][T19065] ip6tnl1: entered promiscuous mode [ 469.291808][T19065] geneve3: left allmulticast mode [ 469.319046][T19065] @: entered promiscuous mode [ 469.332479][T19065] gtp0: entered promiscuous mode [ 469.345109][T19065] mac80211_hwsim hwsim36 wlan2: entered promiscuous mode [ 469.352981][T19065] bridge3: entered promiscuous mode [ 469.359694][T19065] gtp1: left allmulticast mode [ 469.368360][T19065] gre1: entered promiscuous mode [ 469.433147][T19068] vlan4: entered promiscuous mode [ 469.445661][T19068] vlan4: entered allmulticast mode [ 469.454302][T19068] geneve1: entered allmulticast mode [ 469.469233][ T8229] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.512724][ T8229] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.549596][ T8229] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.573227][ T8229] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.598204][ T8229] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.625204][ T8229] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.644388][ T8229] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.655483][ T8229] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.664611][ T8229] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.690483][ T8229] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.700410][ T8229] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.710818][ T8229] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.722150][T19104] syzkaller0: entered promiscuous mode [ 469.727821][T19104] syzkaller0: entered allmulticast mode [ 470.643480][T19072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.958976][T19125] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.998328][T19133] syzkaller0: entered promiscuous mode [ 471.017927][T19133] syzkaller0: entered allmulticast mode [ 471.203051][T19145] openvswitch: netlink: Duplicate or invalid key (type 0). [ 471.213330][T19145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.229446][T19143] bond4 (unregistering): Released all slaves [ 471.361585][T19157] veth0: entered promiscuous mode [ 471.386294][T19157] veth0: left promiscuous mode [ 471.397746][T19157] __nla_validate_parse: 9 callbacks suppressed [ 471.397777][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3941'. [ 471.708649][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3947'. [ 471.875350][T19189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3952'. [ 472.224730][T19209] : renamed from bond0 (while UP) [ 472.255645][T19220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.446670][T19230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3965'. [ 472.590514][T19240] ipvlan1: left promiscuous mode [ 472.828289][T19248] can: request_module (can-proto-0) failed. [ 472.948932][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'. [ 472.999608][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3974'. [ 473.042573][T19260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.068460][T19260] ipvlan2: entered promiscuous mode [ 473.127703][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3972'. [ 473.238843][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3977'. [ 473.286130][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 473.309198][T19275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.434678][T19281] sctp: [Deprecated]: syz.1.3980 (pid 19281) Use of int in max_burst socket option. [ 473.434678][T19281] Use struct sctp_assoc_value instead [ 473.690312][ T4993] udevd[4993]: worker [15554] /devices/virtual/block/nbd4 is taking a long time [ 473.713554][T19297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3984'. [ 473.787526][T19304] siw: device registration error -23 [ 473.817383][T19304] »»»»»»: renamed from lo [ 474.045329][T19309] netlink: 'syz.2.3987': attribute type 63 has an invalid length. [ 474.078547][T19309] netlink: 'syz.2.3987': attribute type 63 has an invalid length. [ 474.574110][T19334] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 474.604201][ T30] audit: type=1800 audit(1778582390.881:12): pid=19332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3994" name="memory.events" dev="tmpfs" ino=1162 res=0 errno=0 [ 475.068195][T19357] xt_l2tp: unknown flags: 10 [ 475.176187][T19356] tipc: Enabling of bearer rejected, failed to enable media [ 475.388429][T19370] SET target dimension over the limit! [ 475.417071][T19368] netlink: 'syz.3.4006': attribute type 1 has an invalid length. [ 475.417939][T19373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.826620][T19395] syzkaller1: entered promiscuous mode [ 475.861551][T19395] syzkaller1: entered allmulticast mode [ 475.917715][T19397] syzkaller0: entered promiscuous mode [ 475.926929][T19397] syzkaller0: entered allmulticast mode [ 476.011409][T19397] tipc: Started in network mode [ 476.014934][T19402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.016765][T19397] tipc: Node identity ceb2f92c732a, cluster identity 4711 [ 476.035832][T19397] tipc: Enabled bearer , priority 0 [ 476.049309][T19396] tipc: Resetting bearer [ 476.083215][T19396] tipc: Disabling bearer [ 476.091153][T19402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.114905][T19408] Bluetooth: MGMT ver 1.23 [ 476.172448][T19409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.311814][ T79] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.332003][ T79] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.389442][ T79] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.400516][ T79] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.524789][T19433] __nla_validate_parse: 15 callbacks suppressed [ 476.524813][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4027'. [ 476.562452][T19438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4030'. [ 476.712395][T19445] syzkaller0: entered promiscuous mode [ 476.724122][T19445] syzkaller0: entered allmulticast mode [ 476.732204][T19447] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 476.754913][T19447] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4032'. [ 476.764432][T19447] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4032'. [ 476.780023][T19447] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 476.789881][T19447] netlink: 634 bytes leftover after parsing attributes in process `syz.4.4032'. [ 476.817797][T19445] tipc: Started in network mode [ 476.818638][T19449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4033'. [ 476.822977][T19445] tipc: Node identity 3a553756497e, cluster identity 4711 [ 476.844270][T19445] tipc: Enabled bearer , priority 0 [ 476.899246][T19444] tipc: Resetting bearer [ 476.968795][T19444] tipc: Disabling bearer [ 477.001600][T19460] dummy0: entered allmulticast mode [ 477.177730][T19462] syzkaller0: entered promiscuous mode [ 477.183531][T19462] syzkaller0: entered allmulticast mode [ 477.211000][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'. [ 477.228078][T19462] xt_HMARK: proto mask must be zero with L3 mode [ 477.246073][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'. [ 480.619874][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 480.641822][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 480.718987][T19518] netlink: 'syz.4.4054': attribute type 10 has an invalid length. [ 480.744542][T19518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.754464][T19518] : (slave netdevsim1): Enslaving as an active interface with an up link [ 488.475380][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 490.236865][ T1183] block nbd4: Possible stuck request ffff888028377000: control (read@0,1024B). Runtime 120 seconds [ 490.248143][ T1183] block nbd4: Possible stuck request ffff8880283771c0: control (read@1024,1024B). Runtime 120 seconds [ 490.259314][ T1183] block nbd4: Possible stuck request ffff888028377380: control (read@2048,1024B). Runtime 120 seconds [ 490.271538][ T1183] block nbd4: Possible stuck request ffff888028377540: control (read@3072,1024B). Runtime 120 seconds [ 499.877580][T19547] netlink: 'syz.4.4063': attribute type 21 has an invalid length. [ 499.885895][T19547] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4063'. [ 499.897719][T19547] netlink: 'syz.4.4063': attribute type 4 has an invalid length. [ 499.906124][T19547] netlink: 'syz.4.4063': attribute type 5 has an invalid length. [ 499.914162][T19547] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4063'. [ 499.927455][T19547] netlink: 'syz.4.4063': attribute type 21 has an invalid length. [ 499.935664][T19547] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4063'. [ 499.944869][T19547] netlink: 'syz.4.4063': attribute type 4 has an invalid length. [ 499.953289][T19547] netlink: 'syz.4.4063': attribute type 5 has an invalid length. [ 499.961435][T19547] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4063'. [ 500.231856][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4066'. [ 500.272570][T19560] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 500.283688][T19560] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4066'. [ 500.299562][T19560] 8021q: VLANs not supported on ip6tnl0 [ 500.308006][T19560] x_tables: duplicate entry at hook 1 [ 500.669726][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'. [ 500.704130][T19581] syzkaller0: entered promiscuous mode [ 500.716523][T19581] syzkaller0: entered allmulticast mode [ 501.082563][ T5627] Bluetooth: hci2: link tx timeout [ 501.095274][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.112572][ T5627] Bluetooth: hci2: link tx timeout [ 501.125243][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.133294][ T5627] Bluetooth: hci2: link tx timeout [ 501.139399][ T5627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.545975][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4086'. [ 501.760436][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.040982][T19654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4091'. [ 502.063448][T19654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4091'. [ 502.478296][T19677] netlink: 'syz.3.4100': attribute type 15 has an invalid length. [ 502.501758][T19678] FAULT_INJECTION: forcing a failure. [ 502.501758][T19678] name failslab, interval 1, probability 0, space 0, times 0 [ 502.525544][T19678] CPU: 0 UID: 0 PID: 19678 Comm: syz.2.4098 Not tainted syzkaller #0 PREEMPT(full) [ 502.525576][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.525589][T19678] Call Trace: [ 502.525598][T19678] [ 502.525607][T19678] dump_stack_lvl+0xe8/0x150 [ 502.525640][T19678] should_fail_ex+0x412/0x560 [ 502.525672][T19678] should_failslab+0xa8/0x100 [ 502.525706][T19678] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 502.525735][T19678] ? __alloc_skb+0x186/0x7d0 [ 502.525760][T19678] ? __alloc_skb+0x1d0/0x7d0 [ 502.525784][T19678] ? __local_bh_enable_ip+0xd0/0x130 [ 502.525811][T19678] __alloc_skb+0x1d0/0x7d0 [ 502.525837][T19678] ? __lock_acquire+0x6b5/0x2cf0 [ 502.525863][T19678] alloc_skb_with_frags+0xc8/0x760 [ 502.525893][T19678] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 502.525928][T19678] sock_alloc_send_pskb+0x878/0x990 [ 502.525978][T19678] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 502.526017][T19678] ? aa_sk_perm+0x6d5/0x900 [ 502.526049][T19678] hci_sock_sendmsg+0x208/0xf40 [ 502.526078][T19678] ? __pfx_aa_sk_perm+0x10/0x10 [ 502.526105][T19678] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 502.526133][T19678] ? aa_sock_msg_perm+0xf1/0x1b0 [ 502.526163][T19678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.526193][T19678] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 502.526219][T19678] sock_write_iter+0x49b/0x4f0 [ 502.526243][T19678] ? __pfx_sock_write_iter+0x10/0x10 [ 502.526276][T19678] ? bpf_lsm_file_permission+0x9/0x20 [ 502.526305][T19678] ? security_file_permission+0x75/0x260 [ 502.526347][T19678] vfs_write+0x61d/0xb90 [ 502.526387][T19678] ? __pfx_vfs_write+0x10/0x10 [ 502.526427][T19678] ? __fget_files+0x2a/0x420 [ 502.526462][T19678] ksys_write+0x150/0x270 [ 502.526495][T19678] ? __pfx_ksys_write+0x10/0x10 [ 502.526533][T19678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.526557][T19678] do_syscall_64+0x15f/0xf80 [ 502.526586][T19678] ? trace_irq_disable+0x3b/0x140 [ 502.526616][T19678] ? clear_bhb_loop+0x40/0x90 [ 502.526643][T19678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.526664][T19678] RIP: 0033:0x7fa9b019cdd9 [ 502.526685][T19678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.526705][T19678] RSP: 002b:00007fa9b105b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.526730][T19678] RAX: ffffffffffffffda RBX: 00007fa9b0415fa0 RCX: 00007fa9b019cdd9 [ 502.526747][T19678] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000005 [ 502.526762][T19678] RBP: 00007fa9b105b090 R08: 0000000000000000 R09: 0000000000000000 [ 502.526775][T19678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.526789][T19678] R13: 00007fa9b0416038 R14: 00007fa9b0415fa0 R15: 00007ffe1a3068a8 [ 502.526822][T19678] [ 502.960886][T19685] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 503.207384][ T5645] Bluetooth: hci2: command 0x0405 tx timeout [ 503.280271][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.420825][T19705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.530762][T19712] ipvlan2: entered allmulticast mode [ 503.549403][T19712] bond4: entered allmulticast mode [ 503.615864][T19705] bond4: (slave ipip0): refused to change device type [ 503.864553][T19729] FAULT_INJECTION: forcing a failure. [ 503.864553][T19729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.906791][T19729] CPU: 1 UID: 0 PID: 19729 Comm: syz.3.4113 Not tainted syzkaller #0 PREEMPT(full) [ 503.906824][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.906838][T19729] Call Trace: [ 503.906847][T19729] [ 503.906858][T19729] dump_stack_lvl+0xe8/0x150 [ 503.906890][T19729] should_fail_ex+0x412/0x560 [ 503.906923][T19729] _copy_from_iter+0x1d3/0x1670 [ 503.906965][T19729] ? __pfx__copy_from_iter+0x10/0x10 [ 503.907001][T19729] ? aa_sk_perm+0x6d5/0x900 [ 503.907027][T19729] ? skb_put+0x11b/0x210 [ 503.907060][T19729] hci_sock_sendmsg+0x426/0xf40 [ 503.907088][T19729] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.907119][T19729] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 503.907155][T19729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 503.907184][T19729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.907215][T19729] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 503.907248][T19729] sock_write_iter+0x49b/0x4f0 [ 503.907274][T19729] ? __pfx_sock_write_iter+0x10/0x10 [ 503.907305][T19729] ? bpf_lsm_file_permission+0x9/0x20 [ 503.907335][T19729] ? security_file_permission+0x75/0x260 [ 503.907367][T19729] vfs_write+0x61d/0xb90 [ 503.907407][T19729] ? __pfx_vfs_write+0x10/0x10 [ 503.907447][T19729] ? __fget_files+0x2a/0x420 [ 503.907483][T19729] ksys_write+0x150/0x270 [ 503.907515][T19729] ? __pfx_ksys_write+0x10/0x10 [ 503.907565][T19729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.907589][T19729] do_syscall_64+0x15f/0xf80 [ 503.907617][T19729] ? trace_irq_disable+0x3b/0x140 [ 503.907649][T19729] ? clear_bhb_loop+0x40/0x90 [ 503.907675][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.907697][T19729] RIP: 0033:0x7fdc6079cdd9 [ 503.907718][T19729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.907737][T19729] RSP: 002b:00007fdc616c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.907762][T19729] RAX: ffffffffffffffda RBX: 00007fdc60a15fa0 RCX: 00007fdc6079cdd9 [ 503.907778][T19729] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000005 [ 503.907793][T19729] RBP: 00007fdc616c0090 R08: 0000000000000000 R09: 0000000000000000 [ 503.907807][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.907821][T19729] R13: 00007fdc60a16038 R14: 00007fdc60a15fa0 R15: 00007ffc1d930338 [ 503.907854][T19729] [ 504.316491][T19092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.387057][T19740] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 504.714922][T19755] bond0: entered allmulticast mode [ 504.724477][T19755] bond_slave_0: entered allmulticast mode [ 504.736814][T19755] bond_slave_1: entered allmulticast mode [ 504.935638][T19771] SET target dimension over the limit! [ 504.954379][T19773] FAULT_INJECTION: forcing a failure. [ 504.954379][T19773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.976682][T19773] CPU: 0 UID: 0 PID: 19773 Comm: syz.0.4126 Not tainted syzkaller #0 PREEMPT(full) [ 504.976719][T19773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.976733][T19773] Call Trace: [ 504.976742][T19773] [ 504.976751][T19773] dump_stack_lvl+0xe8/0x150 [ 504.976784][T19773] should_fail_ex+0x412/0x560 [ 504.976819][T19773] _copy_to_user+0x31/0xb0 [ 504.976853][T19773] simple_read_from_buffer+0xe1/0x170 [ 504.976886][T19773] proc_fail_nth_read+0x1bb/0x230 [ 504.976917][T19773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.976949][T19773] ? rw_verify_area+0x2a6/0x4d0 [ 504.976977][T19773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.977005][T19773] vfs_read+0x20c/0xa70 [ 504.977041][T19773] ? __pfx___mutex_lock+0x10/0x10 [ 504.977073][T19773] ? __pfx_vfs_read+0x10/0x10 [ 504.977105][T19773] ? __fget_files+0x2a/0x420 [ 504.977136][T19773] ? __fget_files+0x3a0/0x420 [ 504.977160][T19773] ? __fget_files+0x2a/0x420 [ 504.977195][T19773] ksys_read+0x150/0x270 [ 504.977228][T19773] ? __pfx_ksys_read+0x10/0x10 [ 504.977267][T19773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.977291][T19773] do_syscall_64+0x15f/0xf80 [ 504.977318][T19773] ? trace_irq_disable+0x3b/0x140 [ 504.977350][T19773] ? clear_bhb_loop+0x40/0x90 [ 504.977375][T19773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.977397][T19773] RIP: 0033:0x7f3d1855d60e [ 504.977418][T19773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.977436][T19773] RSP: 002b:00007f3d193b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.977460][T19773] RAX: ffffffffffffffda RBX: 00007f3d193ba6c0 RCX: 00007f3d1855d60e [ 504.977476][T19773] RDX: 000000000000000f RSI: 00007f3d193ba0a0 RDI: 0000000000000004 [ 504.977491][T19773] RBP: 00007f3d193ba090 R08: 0000000000000000 R09: 0000000000000000 [ 504.977504][T19773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.977518][T19773] R13: 00007f3d18816038 R14: 00007f3d18815fa0 R15: 00007ffed5b206a8 [ 504.977563][T19773] [ 505.196725][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.248585][T19777] netlink: 'syz.2.4128': attribute type 29 has an invalid length. [ 505.298101][T19777] netlink: 'syz.2.4128': attribute type 29 has an invalid length. [ 505.334167][T19777] __nla_validate_parse: 6 callbacks suppressed [ 505.334190][T19777] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4128'. [ 505.357132][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.373550][T19789] tipc: Trying to set illegal importance in message [ 505.754748][T19810] : renamed from bond0 (while UP) [ 505.765493][T19811] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 506.012982][T19823] netlink: 'syz.0.4143': attribute type 29 has an invalid length. [ 506.022663][T19823] netlink: 'syz.0.4143': attribute type 29 has an invalid length. [ 506.039455][T19825] netlink: 'syz.4.4144': attribute type 1 has an invalid length. [ 506.081585][T19825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.105997][T19825] vlan3: entered promiscuous mode [ 506.111485][T19825] bond2: entered promiscuous mode [ 506.117034][T19825] vlan3: entered allmulticast mode [ 506.122513][T19825] bond2: entered allmulticast mode [ 506.193828][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.204231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.216390][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.224919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.237638][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.246340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.262797][T19828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.271578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.617020][T19845] netlink: 'syz.0.4150': attribute type 13 has an invalid length. [ 506.933998][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 506.964219][T19860] xt_hashlimit: size too large, truncated to 1048576 [ 506.964771][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 507.079180][T19864] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4154'. [ 507.115701][T19864] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4154'. [ 507.140147][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'. [ 507.164259][T19867] netlink: 'syz.2.4155': attribute type 29 has an invalid length. [ 507.182037][T19867] netlink: 'syz.2.4155': attribute type 29 has an invalid length. [ 507.204037][T19867] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4155'. [ 507.235463][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 507.266252][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4154'. [ 507.666950][T19890] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4163'. [ 507.833671][T19906] netlink: 'syz.3.4168': attribute type 29 has an invalid length. [ 507.850084][T19906] netlink: 'syz.3.4168': attribute type 29 has an invalid length. [ 507.958172][T19911] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 508.051401][T19914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.261435][T19914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.277518][T19914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.291698][T19914] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 508.620119][T19936] syz.3.4175 (19936) used obsolete PPPIOCDETACH ioctl [ 509.328898][ T8228] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 [ 509.411293][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fa31400: rx timeout, send abort [ 509.638922][T19992] team0 (unregistering): Port device team_slave_0 removed [ 509.658020][T19992] team0 (unregistering): Port device team_slave_1 removed [ 509.911552][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806915bc00: rx timeout, send abort [ 509.920902][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fa31400: abort rx timeout. Force session deactivation [ 510.420353][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806915bc00: abort rx timeout. Force session deactivation [ 510.555374][ T5752] net_ratelimit: 900 callbacks suppressed [ 510.555393][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.275608][T19093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.597034][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.637271][T19092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.675813][T19092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.078105][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 514.315332][T19093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.715735][T19092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.755884][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.795345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.356851][T19093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.835605][T19092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.875444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog