last executing test programs: 3.416880308s ago: executing program 1 (id=1706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r7, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.923587865s ago: executing program 2 (id=1711): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010bd700d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.864334547s ago: executing program 2 (id=1712): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000078009106000000000000004a073e3dccf4548db274"], 0xfe33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1, &(0x7f0000000c80)=""/68, 0x44}, 0xcce1}], 0x1, 0x20, 0x0) pread64(r0, &(0x7f00000000c0)=""/64, 0x40, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0x8, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) getsockopt(r6, 0x5, 0x4, 0x0, &(0x7f0000000900)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) connect$vsock_stream(r5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 2.455497424s ago: executing program 1 (id=1717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000008500000007000000950000000000000028"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001d00)=0x0, &(0x7f0000001d40)=0x4) sendmsg$inet6(r4, &(0x7f0000001e40)={&(0x7f00000008c0)={0xa, 0x4e20, 0x47aa, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0xfff}, 0x1c, &(0x7f0000001c80)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000002040)="13326bd55946181510a02b0043bc2fafb19594bc3c6ca7da172e4bab460fa1ab65f55de84e5959a9b3d767e80737b14036b873685a0b09a5a9f4a6d9113e843970b8ea9ead87569cdee3b2f8b6e384990f29dac57dde1d08cb9c0e9c64246d3f0eaf01b7e5daa1a0956f954be9443fdeacb10ea6f181a0576e5f43a94da5a50bdfa6e0bc27dc55de0c9e85428982e5e1e01a618d5bd79326c5c101cf2811b29e652de9431f6d2ef4c5bdc30ee3dced608bf5352fb079b8c1e7bac0713ff3abbb10546bcc58b1", 0xc6}, {&(0x7f00000019c0)="0b0e3be155d7708362a741c996e7860af6a3b0af19bf85641c68a1deadcd53b97ed38e84829c78720ce22da6d0ba209299c2da05d04e81d5d23a2e50841d01cbdea17a1120b89ba6cef6226b12df3715c131c5a15b2ab4c67ec2fd8827689c56b467b5e88f5d200fa8570186245d1495d32d8edd5901b7fff43ab7df46848907bcc2e39658", 0x85}, {&(0x7f0000001a80)="c374b3f2e915aafae3501ce2dcd29ed763761b11f99a13d72d1e4100a99eac4f7b04a6a86c1fdc2e0d3edec2eb3b71e0bad9e22e5ccdc1396b7bc0bd455fafbf0ce2b84eb959c839a472fe735b2d44ac8b2a13c8ec071f013dec120e23dce6f4166bc70afff3ade747c0a32f73a41b46ec9c9db97248a7e94991dee90849089bd885febbec352474b362eb678f4308ce4e15571deacab3c9445ca9609961171f00f8152ea54aef3ce69cb6fe99046960b6ea87fc033e751e5b3997e870282a3d656090091ab2d17f33901d4669f78aee3806b82cd8aa4bbe2fdacaf912c3962b678a69776a", 0xe5}, {&(0x7f0000001b80)="fc10a6ec6e9353161c4158eb7e0c5f494944dd8f42075eb0642ed4bc747800ad3c0cfa2bb83a80c85d5d5cbbb88e7985b69dfbabf9f88282031349a2a60f0555caf8059f4841f00d261b9f898aa8585759878fc75ebf3e0f4c0a1a9b09b1ece307b36549ca9a004cabc3502ad0f6b6ffcd33af0e8a762eee8e3b3e75aa16e9befa62f9f08ad3d21c06642c43b54c1be0199208120bd12c211095a514b6d2128acbd266b718a5d1f91d240c1ee7aabd72af3e9a4ba7dc67e223d30cb0cc695478e4b562aba5b85cd0dd46eaa2b335deaab21fc6386853736426a2f92807bb9df207aad9", 0xe3}], 0x5, &(0x7f0000001d80)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x3}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r5}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0xb8}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800009d00010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c000280057f830cd4000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800077a0000000004000680"], 0x68}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080026bd7000fedbdf250500000005000400f700000008000b00030000000500060008000000140008046c6f0000000000000000000080e788716277a7ef26c623601dc15ed92040f4b6a01603f8ec8ec9f1330fc0587c9d94c3885de3b5557c50c3167c1e8c0e870e342788eb40a6107f1d45f5b0ce83df802933df7d10719ce6e45631139b5355a44b6aa4843b1355970188b7e94a5fa8362f2ddd12c0b5cfbf8c16c707c3115b438c19acc0b688107ca430059c7cf44fe7b8c039a674a292427daf6b5430701e8a366a91fffc58fe4c1d6d19000000", @ANYRESOCT=r3, @ANYRESOCT], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000040000000900000000000012050000000e0000000000000e04000000000000000a0000000000000804000000000000000200000d000000001000e98ede76650200000000000000000001000000010000000000001205000000020000000000001101000000070000000f0000000000000e030000000200000000610000ff0f0c127a669e1a8b47335744b39e7fbdf4f4c79cbbad743e335c33"], &(0x7f0000000740)=""/181, 0x8c, 0xb5, 0x0, 0x4, 0x10000, @value=r10}, 0x28) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0107000000000000000067"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r13 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltclass={0x3c, 0x29, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x1, 0xfff3}, {0x5, 0x3}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b00010000000000000000006401010100000000d20000000000000000000000000080000000ffff0a010101000000fbffffff7f0a0000b000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000020000000000000002000000000000000000000000004004000000000800000000000000000000004400080008000000000000000000000000000001000004"], 0xfc}}, 0x0) r14 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) bind$inet(r14, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.303630238s ago: executing program 4 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0100001300", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="050027000000000008008500", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x15c}}, 0x0) 2.29629577s ago: executing program 1 (id=1721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffc) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000b40)={0x6c, r6, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x16e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x6, 0x96, 0xfff9, 0x6, 0x7, 0x800, 0x401, 0x7f, 0x81]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x0, 0x0, 0x8, 0x6]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x8001, 0x7fff, 0x2, 0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x508}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0x800000008}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)="95318c", 0x3}], 0x1, 0x0, 0x0, 0x40008c0}, 0x20042041) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x2c, 0x3e, 0xd07, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x77}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1a'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="fa9e4645"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000}, 0x50) 2.215199993s ago: executing program 4 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000002) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x7, @remote, 0x1000}}, [0x8, 0x8b, 0xb, 0x1ff, 0x4, 0x4, 0x9, 0x4, 0x8000, 0x678f, 0x5, 0x2, 0x3, 0x4, 0x5]}, &(0x7f0000000300)=0x100) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf50}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x48000}, 0x8040) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0xf5, &(0x7f0000000680)=""/245, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x6, 0x2, 0x10000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x5, 0x4, 0x5}], 0x10, 0x1}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x3, 0x8001, 0x3, 0x2011, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0xd}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xa5, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1, &(0x7f0000000500)=@raw=[@exit], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x1, 0xfffff800, 0x9}, 0x10, 0x14306, r5, 0x2, &(0x7f0000000ac0)=[r6, r7, r8], &(0x7f0000000b00)=[{0x1, 0x5, 0x8, 0xb}, {0x5, 0x3, 0x0, 0x7}], 0x10, 0x6}, 0x94) (async) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000c00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000c40)=0x2c) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000d00)=""/14, 0x28, 0xe, 0x1, 0xb8b5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x401, 0x8000, 0x8000000, 0x6c852, r7, 0x1, '\x00', r10, r11, 0x1, 0x5, 0x4, 0xa}, 0x50) (async) getsockname$packet(r2, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'veth1_to_hsr\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r11) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f40)={'erspan0\x00', r12, 0x8000, 0x10, 0x40000000, 0x100, {{0x13, 0x4, 0x1, 0x1b, 0x4c, 0x64, 0x0, 0x8, 0x4, 0x0, @local, @empty, {[@cipso={0x86, 0x22, 0x1c64816b06c219ef, [{0x1, 0xc, "c351215fe31c4145548f"}, {0x1, 0xc, "bdc3b747ef7727c0780d"}, {0x6, 0x4, "c574"}]}, @end, @noop, @rr={0x7, 0x13, 0x1c, [@loopback, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000001000)={'gre0\x00', r12, 0x7f20, 0x8, 0x1ff, 0x10, {{0x25, 0x4, 0x3, 0x11, 0x94, 0x65, 0x0, 0x6, 0x29, 0x0, @broadcast, @local, {[@generic={0x89, 0x6, "54e15a45"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x98, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x1f, 0x78, [@remote, @private=0xa010102, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @rr={0x7, 0x1f, 0x5d, [@rand_addr=0x64010102, @multicast1, @empty, @private=0xa010100, @multicast1, @loopback, @empty]}, @rr={0x7, 0xf, 0x41, [@local, @remote, @remote]}, @generic={0x7, 0xe, "cb9d52628cce1bdbdf854da3"}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001100)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001240)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0xd05}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x9c, r13, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/118, 0x76}], 0x1}, 0x40010000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001400)={0x6, 0xb, 0x8000, 0xffff4e11, 0x6, 0x8, 0x7, 0x0, r3}, 0x20) r17 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001440), 0x80880, 0x0) ioctl$PPPIOCCONNECT(r17, 0x4004743a, &(0x7f0000001480)=0x3) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000014c0)=0x6) 2.108912498s ago: executing program 1 (id=1724): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80280, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a00)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @generic="70ac"]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_sctp(0xa, 0xfd335148a21b32ae, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0xa0, &(0x7f0000000640)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e20, 0x8, @private0, 0x550}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c000000}, @in6={0xa, 0x4e22, 0xb80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x281d}]}, &(0x7f0000000740)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e24, 0x700, @private0, 0x599}}, [0xfffffffffffffffb, 0x8000000000000001, 0x8, 0x4, 0x1, 0xe, 0x9, 0xfffffffffffffaf0, 0x2, 0x8, 0x237, 0x51, 0x4, 0x3, 0x4]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r6, 0x3}, 0x8) getsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000a40)=""/4096, &(0x7f0000000080)=0x1000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r6, 0x8c, "5c12146186948db9834bda91ece5a612deffd46c05243760db37ac01d60cb119e6b9955580e7b504b615744a9e84880fd63d53cb35791f78528da5f5acf4e16e9632e4249f8c08ffac6a95e6ca4460dd622fe863ed0dda3895ccee5c0784077f927c42f5f008247bf3cb4a9fcb4b0035dd8a7c13a24aad01c429d53d17ccae9bb3d0d188385b3f06cafd6f19"}, &(0x7f0000000000)=0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r12, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r11, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x5, 0x8, [0x9, 0x7ff, 0x401, 0x8, 0x40, 0x9, 0x1, 0x9]}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000540)={r7, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000080)={r13, 0x2}, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) 2.080757835s ago: executing program 4 (id=1725): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1.914321012s ago: executing program 2 (id=1727): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x10, 0x1}, {0xf, 0x1}, {0x4, 0x4}, {0x7, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b03feff000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r2, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0xfffffffffffffcbf) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000300)=""/2, &(0x7f0000001840)=0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x8, 0x100, r4, 0x3c, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x2, 0x4, 0x7, 0x22000, r8, 0x3, '\x00', r6, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xa}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8c4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, 0x0, 0x0) 1.68285234s ago: executing program 4 (id=1728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xffffff9b, 0x0, 0x32}, 0x9c) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.583373906s ago: executing program 4 (id=1729): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x1, 0x8, {{0x22, 0x4, 0x3, 0x25, 0x88, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x1, [{@remote, 0x3}, {@rand_addr=0x64010101, 0x6}, {@loopback, 0x7}, {@private=0xa010101, 0x81}, {@broadcast, 0x2}]}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x4, [0x8, 0x6]}, @lsrr={0x83, 0x1b, 0xcb, [@empty, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @rr={0x7, 0x1f, 0xa0, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @local, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010102]}]}}}}}) r0 = socket(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070627bd6100fcdbdf252d0000000c0005000201aa07aaaabaaa08002f00000000000a0001007770616e3100000005002b0005000000680de2c504a8e031779b472fa112e435ad9f5f76e8199e189b0b6a40b0d4a6d985138d73fbc84790f7b2896c74b463bc5800096aace961edd97ee2ccdb6d8643c28059e1b2d2b8f18f079a8da3fcfd3d2c1a44e557047d6026f0deee1f9353c1c576a5222ff62c2dcde2a146f5e242e0ba516b493c401208c7be9aa2440e2a69cf4425c0f54919280bdb8cf70f7889f1d1304d29"], 0x3c}}, 0x4008000) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf251500000008000300", @ANYRES32, @ANYBLOB="44002b800c000380080002000000000005000200000000000500020002000000080004000f0d00000c00050081000200000000000800010002"], 0x60}, 0x1, 0x0, 0x0, 0x48815}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x1) bind$inet6(r4, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r10, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x40004000) ppoll(&(0x7f0000000440)=[{r10, 0x4100}, {r4, 0x40}, {0xffffffffffffffff, 0x9452}], 0x3, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x5]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r11, &(0x7f00000011c0)="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", 0x1000, 0x200449c4, &(0x7f0000000dc0)={0xa, 0x0, 0xffff7692, @local, 0x1, 0x2}, 0x20) socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.267280917s ago: executing program 3 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0x2}, 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.252585789s ago: executing program 2 (id=1733): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) (async) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb080045000078fffc000000019078ac1e0001ac1414aa040090780300000047140000000024d3000000002f0000050000000000000001440c0001ac1414aa00000007862c00ffffffff0684924d898689b80755483b460508c92d3002d91d00020002860c000000000006ade34b0300"/134], 0x0) 1.143528816s ago: executing program 1 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd25, 0x25df9bfc, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000000)="9aadb24958c6947a737a2721b6909981a3f8f5a0a3f17744bcd4013813bcc809b634544a8e20377892ca936f4b843d0511aece1f4f3578b34ec6a77ff98340d8c93b10eec1db4f9c98ed3ecc1d9fa8318bf63c76f2225f05089c5a94c21e00c95a73caad7f5758d528d915ec91c28bc49f75f29358aba6b7240cc1c47ef7df8c5c1ed301ad029061e377a04ceec1f9ed284203735527db071fbb383553fc4b0928d4fdd0d6c1", &(0x7f0000000280)=""/182, &(0x7f0000000340)="ac04fc54c652792cb366fed26d4e2b223b7af8642ed28b1e1871dffdd84a4637118acfed05847b3d8015fa9e98a3f5650ca532a8f98ee971f7a7111fec9c637d96e72f002dd5869818d338bd700aa3377e22e985f2d4f4af1b8ef8e37d20cde1c38ae406713e6d20a9e871ecaf216ee9a613be0e5882fc5b5598bef53d0c85898e8b8cc1d80e", &(0x7f00000000c0)="72219742b45e5e13fbc657e435999a", 0xac, r4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.141642594s ago: executing program 3 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24ac1300000018000034241a59fffddbdf251d01040008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x40) 1.121276528s ago: executing program 2 (id=1738): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 955.543029ms ago: executing program 3 (id=1740): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x5, [@restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x61, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x8, 0x4}, {0xa, 0x5}, {0xa, 0x5}, {0xa}, {0x10, 0x1}, {0x5, 0x4}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x4, 0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x34, 0x4}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0xfffffff8, [{0x9, 0x3, 0x50}, {0x2, 0x0, 0x8}, {0x4, 0x3, 0x5}, {0x1, 0x3}, {0xd, 0x4}, {0xc, 0x2, 0x4}, {0x4, 0x2, 0x5a21}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0xbe]}}, &(0x7f0000000280)=""/57, 0x119, 0x39, 0x0, 0x1, 0x10000}, 0x28) (async) getsockname$ax25(r0, &(0x7f0000000300)={{0x3, @null}, [@rose, @rose, @remote, @null, @netrom, @null, @null, @null]}, &(0x7f0000000500)=0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x80000008, 0x5, 0x200, 0x8440, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x5, 0x2, 0x0, 0xf, @value=r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700100000000000ff000020850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc0189436, 0x2000141a) 944.008904ms ago: executing program 3 (id=1741): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 811.213137ms ago: executing program 1 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$can_j1939(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r9, 0x1, {0x2, 0xf0, 0x3}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f00000003c0)="1d195fc00f15227f5fe9a540675c925a1addcb43a9ba187c6443da3d19df60fcab4022ab6eacefd0f7380f7ca4a7c906d525a5ab6709563927cf006356eaf5f7c14298f15af01b0d2b7362c1c2b2f82e36a585e5fa09e11e", 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 677.445654ms ago: executing program 3 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x7, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x3f) close(r2) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0xad21d000) 676.423106ms ago: executing program 0 (id=1744): socket$kcm(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x3, 0x7fffffff, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x420, 0xc}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000094) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1407, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x400c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a0, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10, 0x42}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70f3a497d9cf8c4f3998c0077ac9d5e0b24f9891317f64a5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0e74fed6b7f41b893078a504dfa935ba16d5b372044b2571"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e225a53b07b15f74c010527ed1620c8186c01f4708770922"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a92abc638ac762ef6a8b8ce37d1e2ddfd65d524d1444562b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "591c60c67a1a69e86e55068dd9299f84c15c6e14a3f39f24"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fc10ef2f1a99e39d8674f04803e8088edae103c2dd89ac1"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "76b949a02ba16ad345e6f9ad4f8b3d6dd576cf1de5ce0169"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x100) sendmsg$nl_generic(r5, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000000800)={0x1248, 0x34, 0x300, 0x70bd2c, 0x25dfdbfd, {0x2}, [@generic="b2066f8145af0ba17da4b96575abd8fdb066ce5f05ab8d7ec19ab26d351f9a44fe88829963b345b4b0276bf5d80968978ed945651e621f67b905cd9cf51983c75425e70e0176582f899432f549ae5ae0f2b7e34fbdd832c91132a736adb36b60698db939944afb54731e1c123d69ce82c12fe47d24be5e830dde9025f313b73458e8c17ef9d8d2996ecacd561e32d8864042bc927e9d6abf7d168a467008bae0424fb85794a7b884b4e72ef4cf14df927a046e123a91bc6e73c0488336e37c7706e9cfd0a46a8d2887c2c7b48fb83d500fe8bd95cd9f3e", @generic="303ff1cedd44d5185667e209c639e0702c2eb0a3108739c6cd8a92eaac9a65dd14b0f0868ccb3d00ed51cb052bf116", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x7e, 0x124, 0x0, 0x1, [@nested={0x4, 0x130}, @typed={0xa, 0x3f, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @nested={0x4, 0x81}, @nested={0x4, 0x11}, @generic="86abb7b69555f923ead28ff01c27d1e758459a4895be7e2bae3eab497144f42510d6a9e4752dd45a0ea5ad02aa0495bcd65bf3d57c1e3451aa76100ea452f5335fe8e5363f8c88de13196c5b173ffad8d32109296a54", @nested={0x4, 0x8a}, @nested={0x4, 0x68}, @nested={0x4, 0x93}]}, @nested={0x10a4, 0x91, 0x0, 0x1, [@generic="3dc15756ed4c61c3e691c4fcfb5a38e1a37c857963de04311a296a5bd019c9d0d9f26ff465309294132ca0ed5d5b039a5ae6bc5335edf89b9d0a1614be74d7481a88194220d229db270fbb7c3abb5a51cad447ceacf40d0745997792dca2386b9fe6babb09411d3d10175b7bc71088c08cf85ff203234b8b580145d8c51476712ce44b1efcf043fb3f102c61", @nested={0x4, 0xf9}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x10000}, @typed={0x1004, 0x13a, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x5f}]}]}, 0x1248}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000001b00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000001b40)=0x2c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_ext={0x1c, 0x6, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}]}, &(0x7f0000001c80)='GPL\x00', 0x4, 0x8f, &(0x7f0000001cc0)=""/143, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x22d47, 0xffffffffffffffff, 0x0, &(0x7f0000001dc0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5d3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r6}, &(0x7f0000001c00), &(0x7f0000001ec0)=r7}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f80), r10) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x40, r11, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004044) socket$inet6(0xa, 0x800, 0x1a54) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000002500)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x88d, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x275}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]}, 0x58}}, 0x8d5) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000002240), &(0x7f0000002280)=0x4) bind$ax25(r4, &(0x7f00000022c0)={{0x3, @bcast, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 669.344365ms ago: executing program 4 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110805b1845ea7ddbd28e"], 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="54a698d4", @ANYRES16=r6, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x2404c080) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c1200003f000701feffffff00000000017c0000040042800c00018006000600800a0000451202803f121480040018"], 0x126c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 587.604159ms ago: executing program 2 (id=1746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 577.068732ms ago: executing program 3 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="39966a0000000000000000ef", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="0b001300b0830bb68c96030005007400000000000c004300080000000e000000"], 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x8000) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) recvfrom$rxrpc(r0, &(0x7f0000000340)=""/226, 0xe2, 0x80000041, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @private0, 0x6}}, 0x24) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) unshare(0x6020400) getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xfffffff8, 0x4, 0x7, 0xc0, 0x1, 0x1, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) 501.451315ms ago: executing program 0 (id=1748): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x5, 0x4, 0x0, 0x5, {0x4e22, 0x4e22, [0x4, 0x3, 0x1], [0x8, 0x1, 0x9157, 0xffffffff], 0x0, [0x7, 0x13a]}, 0x6, 0xfc}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x801) 283.145732ms ago: executing program 0 (id=1749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x24000100) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r2, &(0x7f0000001300)='-', 0x1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xfffffffffffffde0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x808}, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x504) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r11}, 0x10) (async) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="14000002809d000500"/24, @ANYRES32=r15, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004844}, 0x8000002) 178.649936ms ago: executing program 0 (id=1750): r0 = socket(0x28, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xe7878000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3d04aad14c65"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x24048045) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000600)='sample\x00', 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket(0x11, 0x800, 0x1b) 108.492236ms ago: executing program 0 (id=1751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000002600)}, 0x10) 0s ago: executing program 0 (id=1752): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r5 = accept4(r3, 0x0, 0x0, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xe}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r6, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) socket$l2tp(0x2, 0x2, 0x73) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f00000000c0), 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x70, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc163", 0xa5}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200250b00000004000b0004006e80310007000e4387aa3e2d356dcb1c5eb1d0000000986e1b768e82c9e2d018f0515b441151e0e8e46c0ab3d2f5271bcf83c85dd23975f86555b4f169770508f741a1962ec73161999966c01a702bf46ae3adbb69ba73f54e4fccf1ec44b16ebe36b3d02f8fe1b0eedc9388cf22da686953cc8a5ea61479692db15965a635b2ca9be69f71bf4bc5b89a0fd5ed2399f196e33f628fd7dadfb3b6f7d541b1aab951"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) kernel console output (not intermixed with test programs): process `syz.3.295'. [ 109.679969][ T7165] tunl0: Caught tx_queue_len zero misconfig [ 110.194852][ T7200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.306'. [ 110.272727][ T7202] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 110.527542][ T7219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.311'. [ 110.536867][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 110.611916][ T7209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 110.680971][ T7209] batman_adv: batadv0: Adding interface: gretap1 [ 110.729959][ T7209] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.777079][ T7209] batman_adv: batadv0: Interface activated: gretap1 [ 110.853367][ T7231] syzkaller1: entered promiscuous mode [ 110.874611][ T7231] syzkaller1: entered allmulticast mode [ 110.896458][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 110.947441][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 111.015977][ T7247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 111.264788][ T7258] macsec1: entered promiscuous mode [ 111.276008][ T7258] bridge0: entered promiscuous mode [ 111.285889][ T7247] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 111.290426][ T7258] bridge0: port 3(macsec1) entered blocking state [ 111.321312][ T7247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.317'. [ 111.329389][ T7258] bridge0: port 3(macsec1) entered disabled state [ 111.354833][ T7258] macsec1: entered allmulticast mode [ 111.367755][ T7258] bridge0: entered allmulticast mode [ 111.385817][ T7258] macsec1: left allmulticast mode [ 111.393152][ T7258] bridge0: left allmulticast mode [ 111.402853][ T7258] bridge0: left promiscuous mode [ 111.931458][ T7288] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 112.017256][ T7288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.027530][ T7289] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 112.041256][ T7289] bond3: entered allmulticast mode [ 112.080540][ T7288] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 112.482780][ T7315] netlink: 'syz.4.330': attribute type 10 has an invalid length. [ 112.504128][ T7315] netlink: 156 bytes leftover after parsing attributes in process `syz.4.330'. [ 113.103307][ T30] audit: type=1804 audit(1760897034.003:3): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.334" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=309 res=1 errno=0 [ 113.217897][ T30] audit: type=1800 audit(1760897034.013:4): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.334" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=309 res=0 errno=0 [ 113.807455][ T7366] IPVS: Unknown mcast interface: pimreg1 [ 113.836136][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 114.195418][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 114.212880][ T7380] netlink: 'syz.2.341': attribute type 16 has an invalid length. [ 114.226416][ T7381] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 114.229877][ T7380] netlink: 'syz.2.341': attribute type 17 has an invalid length. [ 114.302733][ T7380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.583998][ T7397] 8021q: VLANs not supported on nlmon0 [ 114.942973][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 115.012967][ T7410] syzkaller0: entered promiscuous mode [ 115.032415][ T7410] syzkaller0: entered allmulticast mode [ 115.040207][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'. [ 115.421041][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 115.884369][ T7453] lo: Caught tx_queue_len zero misconfig [ 116.128982][ T7479] sctp: [Deprecated]: syz.3.366 (pid 7479) Use of int in maxseg socket option. [ 116.128982][ T7479] Use struct sctp_assoc_value instead [ 116.140796][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 116.188191][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 116.360954][ T7480] macsec1: entered allmulticast mode [ 116.381819][ T7480] bridge0: entered allmulticast mode [ 116.399405][ T7480] bridge0: port 3(macsec1) entered blocking state [ 116.420821][ T7480] bridge0: port 3(macsec1) entered disabled state [ 116.462396][ T7480] bridge0: left allmulticast mode [ 116.605879][ T7481] macsec1: entered allmulticast mode [ 116.626063][ T7481] bridge0: entered allmulticast mode [ 116.645244][ T7481] bridge0: port 3(macsec1) entered blocking state [ 116.684022][ T7481] bridge0: port 3(macsec1) entered disabled state [ 116.723750][ T7481] bridge0: left allmulticast mode [ 117.227262][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 118.106036][ T7499] IPv6: sit2: Disabled Multicast RS [ 118.146951][ T7504] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 118.195063][ T7503] bond1: option downdelay: invalid value (18446744073709551615) [ 118.219755][ T7503] bond1: option downdelay: allowed values 0 - 2147483647 [ 118.233263][ T7503] bond1 (unregistering): Released all slaves [ 118.365775][ T7522] dvmrp8: entered allmulticast mode [ 118.443597][ T7532] xt_hashlimit: size too large, truncated to 1048576 [ 119.149348][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 119.180019][ T7576] can: request_module (can-proto-0) failed. [ 119.237656][ T7584] syzkaller1: entered promiscuous mode [ 119.243939][ T7584] syzkaller1: entered allmulticast mode [ 119.255671][ T7584] 8021q: VLANs not supported on syzkaller1 [ 119.263036][ T7584] syzkaller1: left promiscuous mode [ 119.268268][ T7584] syzkaller1: left allmulticast mode [ 119.526287][ T7596] netlink: 168 bytes leftover after parsing attributes in process `syz.4.395'. [ 120.014048][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 120.023561][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.031390][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.042706][ T7618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.079650][ T7626] xt_hashlimit: max too large, truncated to 1048576 [ 120.089665][ T7618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.104502][ T7618] batman_adv: batadv0: Interface deactivated: gretap1 [ 120.114475][ T7626] netlink: 'syz.1.403': attribute type 62 has an invalid length. [ 120.123234][ T7618] batman_adv: batadv0: Removing interface: gretap1 [ 120.578989][ T7640] bond1: option min_links: invalid value (18446744073709551612) [ 120.608155][ T7640] bond1: option min_links: allowed values 0 - 2147483647 [ 120.633215][ T7640] bond1 (unregistering): Released all slaves [ 120.677112][ T7650] tipc: Enabling of bearer rejected, failed to enable media [ 120.787428][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.412'. [ 120.817708][ T7663] sctp: [Deprecated]: syz.3.411 (pid 7663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.817708][ T7663] Use struct sctp_sack_info instead [ 121.283599][ T7682] netlink: 'syz.3.415': attribute type 2 has an invalid length. [ 121.303376][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 121.315154][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 121.325311][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 121.343099][ T7686] bond0: entered promiscuous mode [ 121.348784][ T7682] netlink: 'syz.3.415': attribute type 2 has an invalid length. [ 121.356650][ T7686] bond_slave_0: entered promiscuous mode [ 121.362625][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 121.371830][ T7686] bond_slave_1: entered promiscuous mode [ 121.395329][ T7686] bond0: left promiscuous mode [ 121.411916][ T7686] bond_slave_0: left promiscuous mode [ 121.428708][ T7686] bond_slave_1: left promiscuous mode [ 121.464468][ T7685] bond0: entered promiscuous mode [ 121.470022][ T7685] bond_slave_0: entered promiscuous mode [ 121.477124][ T7685] bond_slave_1: entered promiscuous mode [ 121.485246][ T7685] bond0: left promiscuous mode [ 121.493975][ T7685] bond_slave_0: left promiscuous mode [ 121.504067][ T7685] bond_slave_1: left promiscuous mode [ 121.516221][ T7692] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 121.571440][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 121.588490][ T7685] bond0: entered promiscuous mode [ 121.594781][ T7685] bond_slave_0: entered promiscuous mode [ 121.600854][ T7685] bond_slave_1: entered promiscuous mode [ 121.626470][ T7685] bond0: left promiscuous mode [ 121.631628][ T7685] bond_slave_0: left promiscuous mode [ 121.637288][ T7685] bond_slave_1: left promiscuous mode [ 121.669604][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 121.681914][ T7692] team_slave_0: left promiscuous mode [ 121.696632][ T7692] team_slave_1: left promiscuous mode [ 121.794787][ T7685] bond0: entered promiscuous mode [ 121.800032][ T7685] bond_slave_0: entered promiscuous mode [ 121.808198][ T7685] bond_slave_1: entered promiscuous mode [ 121.836522][ T7685] bond0: left promiscuous mode [ 121.849310][ T7685] bond_slave_0: left promiscuous mode [ 121.860082][ T7685] bond_slave_1: left promiscuous mode [ 121.967258][ T7685] bond0: entered promiscuous mode [ 121.972648][ T7685] bond_slave_0: entered promiscuous mode [ 121.980092][ T7685] bond_slave_1: entered promiscuous mode [ 121.989035][ T7685] bond0: left promiscuous mode [ 121.994243][ T7685] bond_slave_0: left promiscuous mode [ 122.000308][ T7685] bond_slave_1: left promiscuous mode [ 122.071746][ T7685] bond0: entered promiscuous mode [ 122.077857][ T7685] bond_slave_0: entered promiscuous mode [ 122.084443][ T7685] bond_slave_1: entered promiscuous mode [ 122.093004][ T7685] bond0: left promiscuous mode [ 122.097791][ T7685] bond_slave_0: left promiscuous mode [ 122.103987][ T7685] bond_slave_1: left promiscuous mode [ 122.215300][ T7711] tipc: Started in network mode [ 122.220590][ T7711] tipc: Node identity 3e4bdc7ab5fc, cluster identity 4711 [ 122.234395][ T7711] tipc: Enabled bearer , priority 0 [ 122.435693][ T7716] syzkaller0: entered promiscuous mode [ 122.442799][ T7716] syzkaller0: entered allmulticast mode [ 122.449407][ T7716] tipc: Resetting bearer [ 122.487275][ T1161] tipc: Resetting bearer [ 122.557169][ T7710] tipc: Resetting bearer [ 122.720829][ T7743] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 123.290790][ T9] tipc: Node number set to 2344082554 [ 123.863236][ T7710] tipc: Disabling bearer [ 124.384297][ T7789] bond_slave_0: entered promiscuous mode [ 124.390228][ T7789] bond_slave_1: entered promiscuous mode [ 124.395975][ T7789] dummy0: entered promiscuous mode [ 124.402656][ T7789] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 124.415174][ T7789] bond1: (slave macvlan0): making interface the new active one [ 124.424885][ T7789] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 124.440792][ T7790] bridge0: port 3(syz_tun) entered blocking state [ 124.447409][ T7790] bridge0: port 3(syz_tun) entered disabled state [ 124.470983][ T7790] syz_tun: entered allmulticast mode [ 124.478283][ T7790] syz_tun: entered promiscuous mode [ 124.490541][ T7790] bridge0: port 3(syz_tun) entered blocking state [ 124.496712][ T7786] trusted_key: syz.2.437 sent an empty control message without MSG_MORE. [ 124.497431][ T7790] bridge0: port 3(syz_tun) entered forwarding state [ 124.534389][ T7796] __nla_validate_parse: 12 callbacks suppressed [ 124.534415][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.663412][ T7800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.710036][ T7800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.905880][ T7800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.933886][ T7800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.996480][ T7825] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.134947][ T7800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.155003][ T7800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.194055][ T7825] netlink: 666 bytes leftover after parsing attributes in process `syz.3.448'. [ 125.206697][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 125.232678][ T7834] No such timeout policy "syz0" [ 125.239042][ T7834] tipc: Enabled bearer , priority 0 [ 125.280640][ T7800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.291152][ T7800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.306590][ T7834] syzkaller0: entered promiscuous mode [ 125.312427][ T7834] syzkaller0: entered allmulticast mode [ 125.417786][ T443] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.427113][ T443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.498994][ T443] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.508912][ T443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.526620][ T7852] netlink: 6 bytes leftover after parsing attributes in process `syz.0.456'. [ 125.536360][ T7852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.591592][ T7855] netlink: 'syz.1.457': attribute type 7 has an invalid length. [ 125.599305][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 125.612993][ T443] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.621332][ T443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.640012][ T443] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.666163][ T443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.753234][ T7863] ip6tnl0: Caught tx_queue_len zero misconfig [ 125.772204][ T7862] netlink: 'syz.1.459': attribute type 11 has an invalid length. [ 125.860060][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 125.917670][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 125.943965][ T7833] tipc: Resetting bearer [ 125.963199][ T7833] tipc: Disabling bearer [ 126.084366][ T7879] pim6reg1: entered allmulticast mode [ 126.259400][ T7883] syzkaller1: entered promiscuous mode [ 126.267265][ T7883] syzkaller1: entered allmulticast mode [ 126.294329][ T7895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 126.345554][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 126.389750][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.553871][ T7893] bridge_slave_1 (unregistering): left allmulticast mode [ 126.561342][ T7893] bridge_slave_1 (unregistering): left promiscuous mode [ 126.568492][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.669269][ T7919] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 126.760001][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 126.783046][ T7923] netlink: 'syz.3.476': attribute type 5 has an invalid length. [ 126.797978][ T7923] netlink: 'syz.3.476': attribute type 8 has an invalid length. [ 126.807959][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 126.834348][ T7925] bond3 (unregistering): Released all slaves [ 126.870196][ T7923] geneve2: entered promiscuous mode [ 126.875563][ T7923] geneve2: entered allmulticast mode [ 126.898842][ T443] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 126.924778][ T443] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 126.952979][ T443] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 126.961856][ T443] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 127.045686][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 127.141886][ T7946] Bluetooth: MGMT ver 1.23 [ 127.168902][ T7949] syzkaller1: entered promiscuous mode [ 127.174479][ T7949] syzkaller1: entered allmulticast mode [ 127.561690][ T7973] svc: failed to register nfsdv3 RPC service (errno 111). [ 127.583247][ T7983] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 127.595994][ T7973] svc: failed to register nfsaclv3 RPC service (errno 111). [ 127.721049][ T7991] netlink: 'syz.3.488': attribute type 11 has an invalid length. [ 127.882137][ T7993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.921921][ T7983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.939672][ T7983] bond2: (slave geneve3): making interface the new active one [ 127.948197][ T7983] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 127.981535][ T7994] syzkaller1: entered promiscuous mode [ 127.987266][ T7994] syzkaller1: entered allmulticast mode [ 128.024366][ T3558] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.040988][ T3558] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.052372][ T3558] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.157961][ T3558] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 128.355270][ T8013] xt_CONNSECMARK: invalid mode: 0 [ 129.021736][ T8038] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.027888][ T8038] syzkaller1: linktype set to 519 [ 129.040935][ T8037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.046888][ T8037] syzkaller1: linktype set to 519 [ 129.321212][ T8052] GUP no longer grows the stack in syz.0.503 (8052): 200000003000-20000000a000 (200000001000) [ 129.392819][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT(full) [ 129.392844][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.392861][ T8052] Call Trace: [ 129.392868][ T8052] [ 129.392876][ T8052] dump_stack_lvl+0x189/0x250 [ 129.392904][ T8052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.392922][ T8052] ? __pfx__printk+0x10/0x10 [ 129.392944][ T8052] ? find_vma+0xe7/0x160 [ 129.392975][ T8052] __get_user_pages+0x2470/0x2a00 [ 129.393025][ T8052] ? __gup_longterm_locked+0xc63/0x1660 [ 129.393041][ T8052] ? down_read_killable+0x1d1/0x350 [ 129.393065][ T8052] __gup_longterm_locked+0xde4/0x1660 [ 129.393087][ T8052] ? try_grab_folio_fast+0x1bf/0x6a0 [ 129.393114][ T8052] ? gup_fast_fallback+0x1b86/0x22d0 [ 129.393133][ T8052] gup_fast_fallback+0x1d65/0x22d0 [ 129.393185][ T8052] ? __pfx_gup_fast_fallback+0x10/0x10 [ 129.393198][ T8052] ? __mutex_lock+0x335/0x1350 [ 129.393223][ T8052] ? is_valid_gup_args+0x11f/0x200 [ 129.393248][ T8052] ? get_user_pages_fast+0x4d/0xb0 [ 129.393266][ T8052] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 129.393295][ T8052] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 129.393316][ T8052] ? wait_for_space+0x248/0x2d0 [ 129.393338][ T8052] iov_iter_get_pages2+0x5e/0xa0 [ 129.393362][ T8052] __se_sys_vmsplice+0x548/0x10d0 [ 129.393392][ T8052] ? futex_private_hash_put+0x4b/0x280 [ 129.393424][ T8052] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 129.393447][ T8052] ? __pfx_futex_wake+0x10/0x10 [ 129.393526][ T8052] ? do_syscall_64+0xbe/0xfa0 [ 129.393546][ T8052] do_syscall_64+0xfa/0xfa0 [ 129.393562][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.393577][ T8052] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.393594][ T8052] ? clear_bhb_loop+0x60/0xb0 [ 129.393613][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.393629][ T8052] RIP: 0033:0x7f6017b8efc9 [ 129.393645][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.393658][ T8052] RSP: 002b:00007f601896b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 129.393677][ T8052] RAX: ffffffffffffffda RBX: 00007f6017de6090 RCX: 00007f6017b8efc9 [ 129.393689][ T8052] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 129.393698][ T8052] RBP: 00007f6017c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.393708][ T8052] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 129.393717][ T8052] R13: 00007f6017de6128 R14: 00007f6017de6090 R15: 00007ffc713da808 [ 129.393750][ T8052] [ 129.956634][ T8069] __nla_validate_parse: 4 callbacks suppressed [ 129.956651][ T8069] netlink: 3 bytes leftover after parsing attributes in process `syz.3.506'. [ 130.009350][ T8069] batadv0: entered promiscuous mode [ 130.020933][ T8069] batadv0: entered allmulticast mode [ 130.163511][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.507'. [ 130.179176][ T8074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.507'. [ 130.189151][ T8073] delete_channel: no stack [ 130.242076][ T8076] veth1_to_hsr: entered promiscuous mode [ 130.255460][ T8076] macvtap1: entered promiscuous mode [ 130.262468][ T8076] macvtap1: entered allmulticast mode [ 130.268007][ T8076] veth1_to_hsr: entered allmulticast mode [ 130.297545][ T8081] macvtap2: entered promiscuous mode [ 130.310008][ T8081] macvtap2: entered allmulticast mode [ 130.366448][ T8090] tipc: Enabled bearer , priority 0 [ 130.454863][ T8090] tipc: Disabling bearer [ 130.563321][ T8101] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.575059][ T8098] block nbd0: server does not support multiple connections per device. [ 130.590308][ T8098] block nbd0: shutting down sockets [ 131.410387][ T8131] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 131.615891][ T8136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.671894][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 131.744804][ T8136] vlan2: entered promiscuous mode [ 131.750271][ T8136] bond0: entered promiscuous mode [ 131.770196][ T8136] bond_slave_0: entered promiscuous mode [ 131.799919][ T8136] bond_slave_1: entered promiscuous mode [ 131.831616][ T8134] netlink: 'syz.2.520': attribute type 14 has an invalid length. [ 132.045132][ T8148] bridge1: entered promiscuous mode [ 132.054320][ T8148] bridge1: entered allmulticast mode [ 132.067933][ T8148] team0: Port device bridge1 added [ 132.080914][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 132.196436][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 132.332994][ T8173] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 132.454546][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 132.543119][ T8179] netlink: 248 bytes leftover after parsing attributes in process `syz.1.530'. [ 132.593869][ T8181] IPVS: stopping backup sync thread 6728 ... [ 132.650804][ T8181] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.531'. [ 132.818276][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887279][ T8183] x_tables: duplicate underflow at hook 1 [ 132.922507][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.533'. [ 133.057837][ T8185] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 133.759934][ T8202] svc: failed to register nfsdv3 RPC service (errno 111). [ 133.798535][ T8202] svc: failed to register nfsaclv3 RPC service (errno 111). [ 134.189834][ T8216] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.410977][ T5832] Bluetooth: hci0: command tx timeout [ 134.658030][ T8233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.682656][ T8231] xt_hashlimit: max too large, truncated to 1048576 [ 134.817798][ T8233] hsr_slave_1 (unregistering): left promiscuous mode [ 135.240575][ T8242] __nla_validate_parse: 5 callbacks suppressed [ 135.240593][ T8242] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.550'. [ 135.327102][ T8252] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 135.434361][ T8255] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.478469][ T8255] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 135.543279][ T8250] netlink: 'syz.2.554': attribute type 6 has an invalid length. [ 135.822230][ T8252] vlan0: entered allmulticast mode [ 135.827585][ T8252] bridge0: entered allmulticast mode [ 135.834983][ T8252] bridge0: entered promiscuous mode [ 135.848257][ T8252] bridge0: left promiscuous mode [ 135.859138][ T8252] bond3: (slave vlan0): making interface the new active one [ 135.869413][ T8252] bridge0: entered promiscuous mode [ 135.876969][ T8252] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 135.916252][ T8260] tipc: Started in network mode [ 135.946184][ T8260] tipc: Node identity ac14140f, cluster identity 4711 [ 135.975477][ T8260] tipc: New replicast peer: 255.255.255.255 [ 135.986756][ T8260] tipc: Enabled bearer , priority 10 [ 136.002229][ T8260] gretap0: entered promiscuous mode [ 136.007890][ T8260] vlan2: entered promiscuous mode [ 136.064629][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'. [ 136.196465][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.560'. [ 136.606886][ T8297] hsr_slave_0: left promiscuous mode [ 136.613607][ T8297] hsr_slave_1: left promiscuous mode [ 136.847936][ T8305] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 136.879615][ T8305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.568'. [ 136.893594][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 136.903030][ T8313] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.916223][ T8312] netlink: 'syz.0.567': attribute type 11 has an invalid length. [ 136.923391][ T8305] team0: Port device geneve0 added [ 136.982449][ T8320] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.996468][ T8316] Cannot find del_set index 1 as target [ 137.100048][ T24] tipc: Node number set to 2886997007 [ 137.293827][ T8346] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.573'. [ 137.368107][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 137.601620][ T8356] syzkaller0: entered promiscuous mode [ 137.607246][ T8356] syzkaller0: entered allmulticast mode [ 137.875236][ T24] IPVS: starting estimator thread 0... [ 137.886508][ T8377] netlink: 128 bytes leftover after parsing attributes in process `syz.0.585'. [ 137.908268][ T8377] netlink: 'syz.0.585': attribute type 7 has an invalid length. [ 137.916239][ T8377] netlink: 'syz.0.585': attribute type 8 has an invalid length. [ 137.969665][ T8381] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.014620][ T8380] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.056743][ T8380] SET target dimension over the limit! [ 138.174981][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 138.289022][ T8393] tipc: Enabling of bearer rejected, failed to enable media [ 138.447890][ T8404] syzkaller0: entered promiscuous mode [ 138.484664][ T8404] syzkaller0: entered allmulticast mode [ 138.784344][ T8416] tipc: Enabled bearer , priority 0 [ 138.820415][ T8416] veth1: entered promiscuous mode [ 138.825485][ T8416] veth1: entered allmulticast mode [ 138.903069][ T8415] tipc: Disabling bearer [ 139.469116][ T8446] svc: failed to register nfsdv3 RPC service (errno 111). [ 139.492185][ T8446] svc: failed to register nfsaclv3 RPC service (errno 111). [ 139.794721][ T8454] syzkaller1: entered promiscuous mode [ 139.800498][ T8454] syzkaller1: entered allmulticast mode [ 139.876433][ T8456] netlink: 68 bytes leftover after parsing attributes in process `syz.3.605'. [ 140.093375][ T8463] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 140.191326][ T8463] team0: Port device netdevsim0 added [ 140.511944][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 140.531833][ T8474] netlink: 'syz.1.609': attribute type 5 has an invalid length. [ 140.559984][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 140.712017][ T8474] geneve5: entered promiscuous mode [ 140.729760][ T8474] geneve5: entered allmulticast mode [ 140.755076][ T8486] bond0: (slave dummy0): Releasing backup interface [ 140.804057][ T8486] dummy0: left promiscuous mode [ 140.809287][ T8486] dummy0: left allmulticast mode [ 140.830494][ T8486] bridge_slave_0: left allmulticast mode [ 140.846396][ T8486] bridge_slave_0: left promiscuous mode [ 140.856766][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.877350][ T8486] bridge_slave_1: left allmulticast mode [ 140.897160][ T8486] bridge_slave_1: left promiscuous mode [ 140.915659][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.927584][ T8486] bond0: (slave bond_slave_0): Releasing backup interface [ 140.936686][ T8486] bond_slave_0: left promiscuous mode [ 140.942427][ T8486] bond_slave_0: left allmulticast mode [ 140.949204][ T8486] bond0: (slave bond_slave_1): Releasing backup interface [ 140.958629][ T8486] bond_slave_1: left promiscuous mode [ 140.964744][ T8486] bond_slave_1: left allmulticast mode [ 140.973702][ T8486] team0: Port device team_slave_0 removed [ 140.981003][ T8486] team0: Port device team_slave_1 removed [ 140.987094][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.995013][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.003044][ T8486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.025977][ T443] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 141.035430][ T443] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 141.066908][ T443] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 141.159305][ T443] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 141.505296][ T8517] netlink: 830 bytes leftover after parsing attributes in process `syz.1.620'. [ 141.575939][ T8517] syzkaller1: entered promiscuous mode [ 141.582191][ T8517] syzkaller1: entered allmulticast mode [ 141.596076][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 141.811584][ T8528] netlink: 96 bytes leftover after parsing attributes in process `syz.4.625'. [ 142.112970][ T8553] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 142.129007][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.629'. [ 142.154615][ T8553] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 142.188405][ T8553] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 142.197764][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.629'. [ 142.207511][ T8553] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 142.324098][ T8559] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 142.351149][ T8564] netlink: 'syz.1.633': attribute type 21 has an invalid length. [ 142.360060][ T8559] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 142.367659][ T8561] netlink: 'syz.4.632': attribute type 5 has an invalid length. [ 142.379698][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 142.507311][ T8569] netlink: 260 bytes leftover after parsing attributes in process `syz.0.634'. [ 142.532718][ T8575] tipc: Enabled bearer , priority 0 [ 142.549825][ T8581] netlink: 260 bytes leftover after parsing attributes in process `syz.0.634'. [ 142.551498][ T8575] syzkaller0: entered promiscuous mode [ 142.582724][ T8575] syzkaller0: entered allmulticast mode [ 142.668840][ T8584] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.681508][ T8584] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 142.718535][ T8575] tipc: Resetting bearer [ 142.746947][ T8575] tipc: Disabling bearer [ 142.998513][ T8611] syz_tun: entered allmulticast mode [ 143.066531][ T8611] dvmrp1: entered allmulticast mode [ 143.272188][ T8623] bond0: (slave dummy0): Releasing backup interface [ 143.312144][ T8624] syz_tun: left allmulticast mode [ 143.867737][ T8660] set match dimension is over the limit! [ 144.163137][ T8657] delete_channel: no stack [ 144.212304][ T8678] lo speed is unknown, defaulting to 1000 [ 144.262949][ T8680] syzkaller0: entered promiscuous mode [ 144.268485][ T8680] syzkaller0: entered allmulticast mode [ 144.365446][ T8686] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.139769][ T8678] lo speed is unknown, defaulting to 1000 [ 145.190100][ T8686] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.225487][ T8686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.328142][ T8678] lo speed is unknown, defaulting to 1000 [ 145.373098][ T8686] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.390272][ T8686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.441700][ T8678] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.513449][ T8686] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.534244][ T8686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.547235][ T8678] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 145.621625][ T8686] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.649556][ T8686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.718763][ T8678] lo speed is unknown, defaulting to 1000 [ 145.719339][ T3558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.748170][ T8678] lo speed is unknown, defaulting to 1000 [ 145.758685][ T8713] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 145.771654][ T8678] lo speed is unknown, defaulting to 1000 [ 145.792507][ T8678] lo speed is unknown, defaulting to 1000 [ 145.810605][ T8678] lo speed is unknown, defaulting to 1000 [ 145.855798][ T1161] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.881781][ T1161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.938939][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.956865][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.970770][ T8723] __nla_validate_parse: 6 callbacks suppressed [ 145.970789][ T8723] netlink: 244 bytes leftover after parsing attributes in process `syz.0.671'. [ 146.017181][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.049755][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.132416][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.141378][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.177225][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 146.209543][ T8728] netlink: 560 bytes leftover after parsing attributes in process `syz.3.672'. [ 146.497906][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'. [ 146.510202][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'. [ 146.647742][ T8771] svc: failed to register nfsdv3 RPC service (errno 111). [ 146.663344][ T8771] svc: failed to register nfsaclv3 RPC service (errno 111). [ 146.711677][ T30] audit: type=1800 audit(1760897067.623:5): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.683" name="memory.events" dev="tmpfs" ino=702 res=0 errno=0 [ 146.854358][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'. [ 147.161276][ T8807] netlink: 'syz.0.690': attribute type 9 has an invalid length. [ 147.182909][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 147.211135][ T8810] bond0: Caught tx_queue_len zero misconfig [ 147.225503][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 147.249803][ T8809] tipc: Enabled bearer , priority 0 [ 147.266978][ T8809] tipc: Resetting bearer [ 147.352662][ T8809] tipc: Disabling bearer [ 147.365102][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 147.451514][ T8824] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 147.451745][ T8823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.693'. [ 147.757529][ T8840] lo speed is unknown, defaulting to 1000 [ 148.017333][ T8859] tipc: Enabled bearer , priority 0 [ 148.024969][ T8859] syzkaller0: entered promiscuous mode [ 148.043075][ T8859] syzkaller0: entered allmulticast mode [ 148.087886][ T8859] tipc: Resetting bearer [ 148.117317][ T8863] xt_TCPMSS: Only works on TCP SYN packets [ 148.130960][ T8857] tipc: Resetting bearer [ 148.155825][ T8857] tipc: Disabling bearer [ 148.797468][ T8886] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 148.818442][ T8886] macvtap1: entered allmulticast mode [ 148.825619][ T8886] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 148.842132][ T8886] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 148.849240][ T8886] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 148.895565][ T8917] veth1_to_batadv: entered allmulticast mode [ 148.896024][ T8900] lo speed is unknown, defaulting to 1000 [ 149.032542][ T8931] delete_channel: no stack [ 149.308385][ T8949] tipc: Enabled bearer , priority 0 [ 149.435562][ T8949] syzkaller0: entered promiscuous mode [ 149.441416][ T8949] syzkaller0: entered allmulticast mode [ 149.450166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.525038][ T8949] tipc: Resetting bearer [ 149.554064][ T8945] tipc: Resetting bearer [ 149.578181][ T8966] netlink: 'syz.1.734': attribute type 6 has an invalid length. [ 149.605449][ T8945] tipc: Disabling bearer [ 149.625975][ T8972] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 149.633921][ T8972] NCSI netlink: No device for ifindex 0 [ 149.661655][ T1220] IPVS: starting estimator thread 0... [ 149.747261][ T8978] Cannot find add_set index 2 as target [ 149.789556][ T8975] IPVS: using max 31 ests per chain, 74400 per kthread [ 149.981567][ T8989] lo speed is unknown, defaulting to 1000 [ 150.076335][ T8994] lo speed is unknown, defaulting to 1000 [ 151.226581][ T9026] __nla_validate_parse: 12 callbacks suppressed [ 151.226597][ T9026] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.750'. [ 151.453656][ T9054] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 151.597376][ T9059] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 151.605785][ T9059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.758'. [ 151.823700][ T9068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.835486][ T9068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 151.933624][ T9068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.944394][ T9068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 152.041360][ T9068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.051910][ T9068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 152.152160][ T9068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.168935][ T9068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 152.187818][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 152.221958][ T9082] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.310359][ T1161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.318967][ T1161] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 152.343931][ T1161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.352406][ T1161] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 152.368276][ T1161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.377137][ T1161] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 152.395166][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.405471][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.766'. [ 152.431389][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 153.340323][ T9141] IPv6: addrconf: prefix option has invalid lifetime [ 153.436361][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 153.437022][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 153.497285][ T9149] bridge4: port 1(veth5) entered blocking state [ 153.505683][ T9149] bridge4: port 1(veth5) entered disabled state [ 153.512650][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 153.515317][ T9149] veth5: entered allmulticast mode [ 153.539071][ T9149] veth5: entered promiscuous mode [ 153.723240][ T9149] bridge4: port 2(veth0_to_bond) entered blocking state [ 153.733867][ T9149] bridge4: port 2(veth0_to_bond) entered disabled state [ 153.741064][ T9149] veth0_to_bond: entered allmulticast mode [ 153.750602][ T9149] veth0_to_bond: entered promiscuous mode [ 153.775800][ T9166] vlan2: entered allmulticast mode [ 153.781645][ T9166] veth1: entered allmulticast mode [ 153.787099][ T9166] bridge4: port 3(vlan2) entered blocking state [ 153.829045][ T9166] bridge4: port 3(vlan2) entered disabled state [ 153.838158][ T9166] vlan2: entered promiscuous mode [ 153.845451][ T9166] veth1: entered promiscuous mode [ 153.852900][ T9169] netlink: 'syz.3.792': attribute type 15 has an invalid length. [ 154.009867][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 154.021318][ T9182] xt_NFQUEUE: number of total queues is 0 [ 154.138117][ T9183] syzkaller0: entered promiscuous mode [ 154.143978][ T9183] syzkaller0: entered allmulticast mode [ 154.888898][ T9219] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.849678][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 155.908471][ T9194] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 155.986361][ T9207] lo speed is unknown, defaulting to 1000 [ 156.042306][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 156.071012][ T9224] bond4 (unregistering): Released all slaves [ 156.447952][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 156.472826][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 156.622677][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 156.731991][ T9264] lo speed is unknown, defaulting to 1000 [ 156.900163][ T9271] lo speed is unknown, defaulting to 1000 [ 157.129643][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.307712][ T9284] Bluetooth: MGMT ver 1.23 [ 157.315189][ T9284] syzkaller0: entered promiscuous mode [ 157.321703][ T9284] syzkaller0: entered allmulticast mode [ 157.536539][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 157.562024][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 157.564019][ T9297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'. [ 157.590798][ T9297] netlink: 'syz.0.826': attribute type 21 has an invalid length. [ 157.607559][ T9297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.826'. [ 157.618238][ T9297] netlink: 'syz.0.826': attribute type 5 has an invalid length. [ 157.627244][ T9297] netlink: 'syz.0.826': attribute type 6 has an invalid length. [ 157.658988][ T9297] netlink: 3 bytes leftover after parsing attributes in process `syz.0.826'. [ 157.888472][ T9316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.830'. [ 158.008962][ T9324] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.832'. [ 158.067132][ T9328] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 158.083057][ T9327] netlink: zone id is out of range [ 158.114052][ T9327] netlink: zone id is out of range [ 158.121947][ T9327] netlink: zone id is out of range [ 158.124444][ T9328] bond4: (slave bridge4): making interface the new active one [ 158.135600][ T9328] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 158.176338][ T9327] netlink: zone id is out of range [ 158.189516][ T9327] netlink: zone id is out of range [ 158.194666][ T9327] netlink: zone id is out of range [ 158.205289][ T9327] netlink: zone id is out of range [ 158.212317][ T9327] netlink: zone id is out of range [ 158.217541][ T9327] netlink: zone id is out of range [ 158.222846][ T9327] netlink: zone id is out of range [ 158.445634][ T9361] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 159.064273][ T9408] .N: entered promiscuous mode [ 160.812759][ T13] wlan1: Trigger new scan to find an IBSS to join [ 160.979872][ T9441] lo speed is unknown, defaulting to 1000 [ 161.022571][ T9440] lo speed is unknown, defaulting to 1000 [ 161.202475][ T9469] netlink: 'syz.2.867': attribute type 10 has an invalid length. [ 161.618311][ T9488] __nla_validate_parse: 3 callbacks suppressed [ 161.618327][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 161.702432][ T9493] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 161.714473][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.784806][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 161.812842][ T9499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.874'. [ 161.820153][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 162.284917][ T9514] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.334377][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 162.973751][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.890'. [ 162.980171][ T9545] bond5: option downdelay: invalid value (18446744073709551615) [ 162.992998][ T9545] bond5: option downdelay: allowed values 0 - 2147483647 [ 163.002934][ T9545] bond5 (unregistering): Released all slaves [ 163.205591][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 163.227541][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.894'. [ 163.305509][ T9560] lo speed is unknown, defaulting to 1000 [ 163.514894][ T9577] lo speed is unknown, defaulting to 1000 [ 163.679399][ T9588] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 163.774105][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 163.829102][ T9589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.934577][ T9600] netlink: 'syz.2.900': attribute type 16 has an invalid length. [ 163.945238][ T9600] netlink: 'syz.2.900': attribute type 17 has an invalid length. [ 163.977455][ T9600] net_ratelimit: 5 callbacks suppressed [ 163.977465][ T9600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.019105][ T9596] svc: failed to register nfsdv3 RPC service (errno 111). [ 164.033993][ T9596] svc: failed to register nfsaclv3 RPC service (errno 111). [ 164.156909][ T9607] lo speed is unknown, defaulting to 1000 [ 164.409751][ T9610] netlink: 100 bytes leftover after parsing attributes in process `syz.1.904'. [ 164.472883][ T9614] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 164.550335][ T9618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.587315][ T9614] vlan0: entered allmulticast mode [ 164.729231][ T9622] svc: failed to register nfsdv3 RPC service (errno 111). [ 164.739193][ T9622] svc: failed to register nfsaclv3 RPC service (errno 111). [ 164.847968][ T9632] syz_tun: left allmulticast mode [ 164.854155][ T9632] syz_tun: left promiscuous mode [ 164.859378][ T9632] bridge0: port 3(syz_tun) entered disabled state [ 164.886758][ T9632] bridge_slave_0: left allmulticast mode [ 164.893304][ T9632] bridge_slave_0: left promiscuous mode [ 164.903447][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.925002][ T9632] bridge_slave_1: left allmulticast mode [ 164.932120][ T9632] bridge_slave_1: left promiscuous mode [ 164.938034][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.956549][ T9632] bond0: (slave bond_slave_0): Releasing backup interface [ 164.967073][ T9632] bond_slave_0: left promiscuous mode [ 164.995877][ T9643] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 165.043456][ T9632] bond0: (slave bond_slave_1): Releasing backup interface [ 165.074023][ T9632] bond_slave_1: left promiscuous mode [ 165.097037][ T9632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.116841][ T9635] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.148380][ T9644] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.152987][ T9651] svc: failed to register nfsdv3 RPC service (errno 111). [ 165.163955][ T9651] svc: failed to register nfsaclv3 RPC service (errno 111). [ 165.187745][ T9643] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 165.195888][ T9643] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 165.604896][ T9668] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 165.658081][ T9666] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 165.684103][ T9666] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 166.013225][ T9684] lo speed is unknown, defaulting to 1000 [ 166.147907][ T9688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.360912][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.607376][ T9708] vlan3: entered allmulticast mode [ 166.613106][ T9708] bond0: entered allmulticast mode [ 166.618404][ T9708] bond_slave_0: entered allmulticast mode [ 166.626727][ T9708] bond_slave_1: entered allmulticast mode [ 166.715298][ T9706] lo speed is unknown, defaulting to 1000 [ 166.837753][ T9714] __nla_validate_parse: 6 callbacks suppressed [ 166.837769][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 166.854084][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 166.937087][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 166.958659][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 167.046181][ T9718] dvmrp1: entered allmulticast mode [ 167.291199][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 167.397266][ T9728] can: request_module (can-proto-0) failed. [ 167.417362][ T9728] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 167.723814][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 167.791702][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.830466][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.837709][ T9728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.864820][ T9728] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.129278][ T9748] macsec1: entered promiscuous mode [ 168.135771][ T9748] macsec1: entered allmulticast mode [ 168.335965][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 168.345208][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 168.415562][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 168.533708][ T9774] lo speed is unknown, defaulting to 1000 [ 168.737016][ T9781] lo speed is unknown, defaulting to 1000 [ 168.996202][ T9790] lo: entered allmulticast mode [ 169.010031][ T9790] lo: left allmulticast mode [ 169.020941][ T9790] lo: entered allmulticast mode [ 169.029931][ T9795] lo: left allmulticast mode [ 169.249310][ T9807] vlan3: entered allmulticast mode [ 169.263551][ T9807] bridge0: entered allmulticast mode [ 169.304233][ T9811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.321533][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.954'. [ 169.787424][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.817953][ T9843] batadv_slave_0: entered promiscuous mode [ 169.834057][ T9843] netlink: 'syz.2.962': attribute type 2 has an invalid length. [ 170.095434][ T9857] syzkaller0: entered promiscuous mode [ 170.103128][ T9857] syzkaller0: entered allmulticast mode [ 170.483446][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.752128][ T9891] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 170.804754][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.833961][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.247037][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 172.534872][ T9882] syzkaller1: entered promiscuous mode [ 172.540846][ T9882] syzkaller1: entered allmulticast mode [ 172.548998][ T9891] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 172.662570][ T9893] gretap2: entered promiscuous mode [ 172.678545][ T9893] gretap2: entered allmulticast mode [ 172.684601][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.694311][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.765090][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.775754][ T9927] netlink: 'syz.1.978': attribute type 3 has an invalid length. [ 172.784706][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.151182][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.179957][ T9951] syzkaller0: tun_net_xmit 76 [ 173.185058][ T9951] tipc: Enabled bearer , priority 0 [ 173.216440][ T36] syzkaller0: tun_net_xmit 76 [ 173.222285][ T36] syzkaller0: tun_net_xmit 48 [ 173.240121][ T5933] syzkaller0: tun_net_xmit 76 [ 173.306344][ T9941] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.319606][ C1] syzkaller0: tun_net_xmit 76 [ 173.447370][ T9940] tipc: Resetting bearer [ 173.518641][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 174.710321][ T9940] tipc: Disabling bearer [ 174.720598][ T9971] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 174.760850][ T9953] lo speed is unknown, defaulting to 1000 [ 174.899676][ T9980] syz_tun: entered allmulticast mode [ 174.915344][ T9984] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 174.936446][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 174.967502][ T9984] netlink: 224 bytes leftover after parsing attributes in process `syz.1.991'. [ 175.132437][ T9998] bond0: left promiscuous mode [ 175.137524][ T9998] bond0: left allmulticast mode [ 175.163227][ T9998] veth1: left promiscuous mode [ 175.171520][ T9998] veth1: left allmulticast mode [ 175.213869][ T9998] geneve3: left promiscuous mode [ 175.259049][ T9998] geneve5: left promiscuous mode [ 175.266585][ T9998] geneve5: left allmulticast mode [ 175.319746][ T1161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.339050][ T1161] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.358867][ T1161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.371974][ T1161] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.386223][ T9977] syz_tun: left allmulticast mode [ 175.397276][ T1161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.417794][ T1161] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.426971][ T1161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.436508][ T1161] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 175.524270][T10012] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 175.534378][T10012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1000'. [ 175.821083][T10035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.833670][T10036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.943827][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 175.972226][T10039] lo speed is unknown, defaulting to 1000 [ 176.084849][T10046] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1008'. [ 176.454193][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'. [ 176.553351][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 176.574075][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 176.742117][T10088] team0: Port device team_slave_1 removed [ 177.112219][T10115] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.129864][T10115] team0: entered promiscuous mode [ 177.134997][T10115] team_slave_0: entered promiscuous mode [ 177.157790][T10115] geneve0: entered promiscuous mode [ 177.200398][T10115] team0: entered allmulticast mode [ 177.205646][T10115] team_slave_0: entered allmulticast mode [ 177.222731][T10115] geneve0: entered allmulticast mode [ 177.229219][T10115] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.400114][T10136] openvswitch: netlink: Missing key (keys=40, expected=100) [ 177.989315][T10164] lo speed is unknown, defaulting to 1000 [ 178.040594][T10175] tipc: Enabling of bearer rejected, failed to enable media [ 178.060854][T10169] svc: failed to register nfsdv3 RPC service (errno 111). [ 178.075785][T10169] svc: failed to register nfsaclv3 RPC service (errno 111). [ 178.186726][T10184] xt_hashlimit: overflow, try lower: 17592186044416/255 [ 178.241703][T10186] __nla_validate_parse: 8 callbacks suppressed [ 178.241722][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 178.335492][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 178.386707][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 178.621991][T10202] tipc: Enabled bearer , priority 0 [ 178.631332][T10202] syzkaller0: entered promiscuous mode [ 178.638480][T10202] syzkaller0: entered allmulticast mode [ 178.676455][T10207] macvlan0: entered promiscuous mode [ 178.695266][T10207] batadv0: entered promiscuous mode [ 178.717607][T10207] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 178.753099][T10207] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 178.775735][T10207] hsr1: entered allmulticast mode [ 178.788003][T10207] macvlan0: entered allmulticast mode [ 178.795899][T10207] batadv0: entered allmulticast mode [ 178.834637][T10207] macvlan0: left promiscuous mode [ 178.845092][T10207] batadv0: left promiscuous mode [ 178.856023][T10215] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1053'. [ 178.903784][T10212] tipc: Resetting bearer [ 178.919317][T10201] tipc: Resetting bearer [ 178.961026][T10201] tipc: Disabling bearer [ 179.145686][T10224] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1055'. [ 179.320902][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'. [ 179.370620][T10228] sch_fq: defrate 4 ignored. [ 179.567304][T10236] lo speed is unknown, defaulting to 1000 [ 179.693051][T10240] lo speed is unknown, defaulting to 1000 [ 179.733014][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 179.773031][T10246] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 179.833459][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 179.928406][T10259] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 179.966206][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1065'. [ 179.989994][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1065'. [ 180.031380][T10261] bridge2: entered promiscuous mode [ 180.037901][T10261] bridge2: entered allmulticast mode [ 180.048775][T10261] team0: Port device bridge2 added [ 180.070216][T10262] bond0: entered promiscuous mode [ 180.082178][T10262] bond_slave_0: entered promiscuous mode [ 180.100254][T10262] bond_slave_1: entered promiscuous mode [ 180.118300][T10262] bridge0: entered promiscuous mode [ 180.269237][T10279] lo speed is unknown, defaulting to 1000 [ 181.297128][T10316] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 181.305572][T10314] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 181.485139][T10323] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 181.583513][T10329] tipc: Enabled bearer , priority 0 [ 181.593341][T10329] syzkaller0: entered promiscuous mode [ 181.598837][T10329] syzkaller0: entered allmulticast mode [ 181.674052][T10332] tipc: Resetting bearer [ 181.729886][T10334] bridge3: entered promiscuous mode [ 181.735752][T10334] bridge3: entered allmulticast mode [ 181.747488][T10334] team0: Port device bridge3 added [ 182.402737][T10324] tipc: Resetting bearer [ 182.426215][T10324] tipc: Disabling bearer [ 182.455841][T10380] bridge4: entered promiscuous mode [ 182.461365][T10380] bridge4: entered allmulticast mode [ 182.469377][T10380] team0: Port device bridge4 added [ 182.717110][T10401] lo speed is unknown, defaulting to 1000 [ 182.845133][ T30] audit: type=1107 audit(1760897103.753:6): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 183.421610][T10431] __nla_validate_parse: 12 callbacks suppressed [ 183.421626][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1111'. [ 183.452426][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 183.461890][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1111'. [ 183.486596][T10434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.709888][T10438] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.924869][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 184.992121][T10448] lo speed is unknown, defaulting to 1000 [ 185.044532][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 185.117409][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 185.268632][T10469] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 185.338209][T10472] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 185.346443][T10472] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1122'. [ 185.702108][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'. [ 185.707392][T10492] lo speed is unknown, defaulting to 1000 [ 185.718728][T10499] xt_policy: output policy not valid in PREROUTING and INPUT [ 185.733657][T10499] netlink: 'syz.1.1130': attribute type 4 has an invalid length. [ 185.755947][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 185.776493][T10498] lo speed is unknown, defaulting to 1000 [ 185.790679][T10503] veth0: entered promiscuous mode [ 185.915177][T10509] lo: entered allmulticast mode [ 186.018876][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1133'. [ 186.154119][T10511] pim6reg1: entered promiscuous mode [ 186.159574][T10511] pim6reg1: entered allmulticast mode [ 186.245053][T10503] veth0: left promiscuous mode [ 186.302843][T10526] netlink: 'syz.4.1138': attribute type 21 has an invalid length. [ 186.348850][T10527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.409704][T10523] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 186.437729][T10532] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 186.709164][T10542] IPVS: set_ctl: invalid protocol: 94 172.20.20.62:20002 [ 186.727786][T10514] lo: left allmulticast mode [ 187.219902][T10578] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 187.236101][T10580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.847162][T10604] ip6gretap1: entered promiscuous mode [ 188.507179][T10635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.541538][T10635] bond_slave_0: left promiscuous mode [ 188.547149][T10635] bond_slave_0: left allmulticast mode [ 188.555025][T10644] __nla_validate_parse: 15 callbacks suppressed [ 188.555042][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 188.672454][T10635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.701787][T10635] bond_slave_1: left promiscuous mode [ 188.713861][T10635] bond_slave_1: left allmulticast mode [ 188.741486][T10635] bond0 (unregistering): (slave team0): Releasing backup interface [ 188.767375][T10635] team0: left promiscuous mode [ 188.772618][T10635] team_slave_0: left promiscuous mode [ 188.773682][T10659] netlink: 'syz.1.1167': attribute type 1 has an invalid length. [ 188.787792][T10635] geneve0: left promiscuous mode [ 188.803921][T10635] team0: left allmulticast mode [ 188.814961][T10635] team_slave_0: left allmulticast mode [ 188.821977][T10635] geneve0: left allmulticast mode [ 188.827877][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 188.831400][T10635] bond0 (unregistering): Released all slaves [ 189.017737][T10654] macvlan0: entered promiscuous mode [ 189.027545][T10654] macvlan0: entered allmulticast mode [ 189.034464][T10654] bond3: entered promiscuous mode [ 189.044429][T10654] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 189.056024][T10654] bond3: left promiscuous mode [ 189.162780][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1175'. [ 189.428440][T10702] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1179'. [ 189.540873][T10703] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 189.759210][T10729] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1188'. [ 189.882085][T10732] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1184'. [ 189.891610][T10732] 0XD: renamed from gretap0 (while UP) [ 189.915947][T10732] 0XD: entered allmulticast mode [ 189.971460][T10732] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 190.021517][T10739] x_tables: duplicate underflow at hook 1 [ 190.204790][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 190.235031][T10741] netlink: 'syz.0.1189': attribute type 3 has an invalid length. [ 190.254703][T10741] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 190.288863][T10741] 8021q: VLANs not supported on vcan0 [ 190.338449][T10752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1194'. [ 190.369035][T10745] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A [ 190.652221][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1198'. [ 190.742290][T10769] tipc: Enabling of bearer rejected, failed to enable media [ 190.994314][T10785] SET target dimension over the limit! [ 191.272072][T10792] lo speed is unknown, defaulting to 1000 [ 191.292236][T10801] lo speed is unknown, defaulting to 1000 [ 191.382871][T10805] netlink: 'syz.2.1207': attribute type 32 has an invalid length. [ 191.399154][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 191.536072][T10805] bond0: option coupled_control: invalid value (12) [ 191.554970][T10805] bond0 (unregistering): Released all slaves [ 191.614894][T10811] tap0: tun_chr_ioctl cmd 1074025680 [ 191.646181][T10806] tipc: Enabled bearer , priority 0 [ 191.682869][T10805] D: renamed from syzkaller0 [ 191.694477][T10805] tipc: Disabling bearer [ 192.023818][T10823] xt_NFQUEUE: number of total queues is 0 [ 192.337344][T10842] netlink: 'syz.3.1218': attribute type 1 has an invalid length. [ 192.378521][T10842] bond5: entered promiscuous mode [ 192.384195][T10842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.425321][T10853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.443593][T10853] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 192.453792][T10853] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 192.465931][T10853] bond5: (slave gre1): making interface the new active one [ 192.473217][T10853] gre1: entered promiscuous mode [ 192.482551][T10853] bond5: (slave gre1): Enslaving as an active interface with an up link [ 192.594677][T10859] lo speed is unknown, defaulting to 1000 [ 192.789218][T10876] nbd: socks must be embedded in a SOCK_ITEM attr [ 193.621379][T10912] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 193.627410][T10912] syzkaller1: linktype set to 778 [ 194.230422][T10941] tipc: Enabled bearer , priority 0 [ 194.237878][T10941] syzkaller0: entered promiscuous mode [ 194.243642][T10941] syzkaller0: entered allmulticast mode [ 194.259228][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.279643][T10937] tipc: Resetting bearer [ 194.312138][T10937] tipc: Disabling bearer [ 194.402494][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.419895][T10946] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 194.430781][T10953] netlink: 'syz.2.1248': attribute type 39 has an invalid length. [ 194.434428][T10946] bond0: (slave gre0): Error -95 calling set_mac_address [ 194.678879][T10978] __nla_validate_parse: 12 callbacks suppressed [ 194.678903][T10978] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1254'. [ 194.694652][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 194.704546][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 194.714498][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'. [ 194.839168][T10984] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1257'. [ 194.942732][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 194.991860][T10996] netlink: 'syz.2.1260': attribute type 11 has an invalid length. [ 195.012897][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 195.022409][T11001] netlink: 1324 bytes leftover after parsing attributes in process `syz.1.1261'. [ 195.031865][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'. [ 195.052003][T11003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1262'. [ 195.065120][T11003] netem: unknown loss type 4 [ 195.070691][T11003] netem: change failed [ 195.138337][T11011] tipc: Enabled bearer , priority 10 [ 195.166763][T11012] tipc: Enabled bearer , priority 0 [ 195.174478][T11006] syzkaller0: entered promiscuous mode [ 195.180586][T11006] syzkaller0: entered allmulticast mode [ 195.216201][T11006] tipc: Resetting bearer [ 195.226168][T11005] tipc: Resetting bearer [ 195.246155][T11005] tipc: Disabling bearer [ 195.466905][T11027] Cannot find del_set index 4 as target [ 195.495953][T11027] bridge5: entered promiscuous mode [ 195.509651][T11027] bridge5: entered allmulticast mode [ 195.530766][T11027] team0: Port device bridge5 added [ 195.545076][T11030] tipc: Resetting bearer [ 195.560049][T11034] bridge0: port 1(team0) entered blocking state [ 195.566871][T11034] bridge0: port 1(team0) entered disabled state [ 195.573587][T11034] team0: entered allmulticast mode [ 195.579240][T11034] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 195.597486][T11034] team0: entered promiscuous mode [ 195.603060][T11034] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.752363][T11042] syzkaller0: entered promiscuous mode [ 195.757997][T11042] syzkaller0: entered allmulticast mode [ 196.259810][ T5952] tipc: Node number set to 150994944 [ 196.305828][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.331735][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 196.331828][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 196.342034][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 196.646856][T11091] openvswitch: netlink: Message has 12 unknown bytes. [ 196.674234][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.067131][T11113] lo speed is unknown, defaulting to 1000 [ 197.218170][T11116] lo speed is unknown, defaulting to 1000 [ 197.460239][T11134] netlink: 'syz.1.1294': attribute type 10 has an invalid length. [ 198.026351][T11167] netlink: 'syz.0.1298': attribute type 13 has an invalid length. [ 198.049712][T11167] netlink: 'syz.0.1298': attribute type 17 has an invalid length. [ 198.068329][T11167] lo: left promiscuous mode [ 198.242354][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.288726][T11167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.299239][T11167] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.327104][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.360851][T11167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.464323][T11169] lo speed is unknown, defaulting to 1000 [ 199.189716][T11215] Bluetooth: hci0: invalid length 39, exp 2 for type 26 [ 199.710917][T11249] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 199.738590][T11249] netlink: 'syz.4.1321': attribute type 5 has an invalid length. [ 199.752153][T11262] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 199.760134][T11261] macvlan0: entered promiscuous mode [ 199.766628][T11261] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 199.783426][T11261] netlink: 'syz.3.1319': attribute type 2 has an invalid length. [ 199.805549][T11264] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 199.830797][T11262] team0: Port device dummy0 added [ 199.842571][T11267] __nla_validate_parse: 13 callbacks suppressed [ 199.842587][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 199.891894][T11249] syzkaller0: create flow: hash 215440651 index 1 [ 199.910622][T11264] team0: Port device dummy0 removed [ 200.031020][T11247] syzkaller0: delete flow: hash 215440651 index 1 [ 200.488799][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 201.654021][T11296] ip6gretap0: entered promiscuous mode [ 201.661681][T11296] ip6gretap0: left promiscuous mode [ 201.684877][T11303] kthread_run failed with err -4 [ 201.712624][T11298] lo speed is unknown, defaulting to 1000 [ 201.731625][T11283] lo speed is unknown, defaulting to 1000 [ 201.955413][T11319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1339'. [ 202.444102][T11324] syzkaller1: entered promiscuous mode [ 202.453292][T11324] syzkaller1: entered allmulticast mode [ 202.784386][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 202.820327][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 202.932677][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 202.942492][T11358] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 202.996128][T11352] bond2: option arp_validate: invalid value (18446744073491447809) [ 203.007562][T11352] bond2 (unregistering): Released all slaves [ 203.026021][T11368] netlink: 'syz.0.1346': attribute type 13 has an invalid length. [ 203.067914][T11358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.089074][T11357] bond6: (slave batadv0): Opening slave failed [ 203.325946][T11378] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 203.376687][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1351'. [ 203.716603][T11386] lo speed is unknown, defaulting to 1000 [ 203.908716][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1361'. [ 203.930942][T11414] netlink: 'syz.3.1363': attribute type 6 has an invalid length. [ 203.948984][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1361'. [ 204.122479][T11426] bond0: Device is already in use. [ 204.172923][T11428] tipc: Enabled bearer , priority 0 [ 204.196072][T11428] syzkaller0: entered promiscuous mode [ 204.229073][T11428] syzkaller0: entered allmulticast mode [ 204.374934][T11442] netlink: 'syz.0.1372': attribute type 13 has an invalid length. [ 204.400938][T11442] netlink: 'syz.0.1372': attribute type 17 has an invalid length. [ 204.409819][T11427] tipc: Resetting bearer [ 204.446964][T11453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1375'. [ 204.470638][T11427] tipc: Disabling bearer [ 204.518186][T11442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.527471][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.558143][T11442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.767557][T11460] svc: failed to register nfsdv3 RPC service (errno 111). [ 204.800802][T11460] svc: failed to register nfsaclv3 RPC service (errno 111). [ 205.231810][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 205.375924][T11499] netlink: 'syz.0.1383': attribute type 4 has an invalid length. [ 205.402994][T11500] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1386'. [ 205.469592][T11492] netlink: 'syz.0.1383': attribute type 4 has an invalid length. [ 206.182484][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1389'. [ 206.335596][T11518] lo speed is unknown, defaulting to 1000 [ 206.357880][T11528] lo speed is unknown, defaulting to 1000 [ 206.404183][T11529] lo speed is unknown, defaulting to 1000 [ 206.501320][T11535] svc: failed to register nfsdv3 RPC service (errno 111). [ 206.510857][T11535] svc: failed to register nfsaclv3 RPC service (errno 111). [ 206.536233][T11531] lo speed is unknown, defaulting to 1000 [ 206.764739][T11534] svc: failed to register nfsdv3 RPC service (errno 111). [ 206.790934][T11534] svc: failed to register nfsaclv3 RPC service (errno 111). [ 207.191043][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 207.223895][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 207.317584][ T1161] nci: nci_rx_work: unknown MT 0x7 [ 207.354839][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 207.364424][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 207.383849][T11584] bridge_slave_0: default FDB implementation only supports local addresses [ 207.494039][T11587] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1405'. [ 207.556135][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 207.612128][T11589] svc: failed to register nfsdv3 RPC service (errno 111). [ 207.635227][T11589] svc: failed to register nfsaclv3 RPC service (errno 111). [ 207.794736][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 207.805107][T11607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.022221][T11599] svc: failed to register nfsdv3 RPC service (errno 111). [ 208.053344][T11599] svc: failed to register nfsaclv3 RPC service (errno 111). [ 208.073636][T11609] netlink: 'syz.4.1410': attribute type 12 has an invalid length. [ 208.183817][T11622] syz.0.1411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 208.199515][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.0.1411 Not tainted syzkaller #0 PREEMPT(full) [ 208.199543][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.199554][T11622] Call Trace: [ 208.199563][T11622] [ 208.199572][T11622] dump_stack_lvl+0x189/0x250 [ 208.199602][T11622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.199631][T11622] ? __pfx__printk+0x10/0x10 [ 208.199651][T11622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 208.199673][T11622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 208.199695][T11622] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 208.199717][T11622] warn_alloc+0x214/0x310 [ 208.199739][T11622] ? stack_depot_save_flags+0x40/0x860 [ 208.199762][T11622] ? __pfx_warn_alloc+0x10/0x10 [ 208.199785][T11622] ? kasan_save_track+0x3e/0x80 [ 208.199804][T11622] ? __kasan_kmalloc+0x93/0xb0 [ 208.199826][T11622] ? xsk_setsockopt+0x4dc/0x8d0 [ 208.199849][T11622] ? do_sock_setsockopt+0x17c/0x1b0 [ 208.199873][T11622] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 208.199896][T11622] ? do_syscall_64+0xfa/0xfa0 [ 208.199913][T11622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.199941][T11622] __vmalloc_node_range_noprof+0x125/0x12d0 [ 208.199994][T11622] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 208.200018][T11622] ? __kasan_kmalloc+0x93/0xb0 [ 208.200045][T11622] vmalloc_user_noprof+0xad/0xf0 [ 208.200066][T11622] ? xskq_create+0xbf/0x170 [ 208.200092][T11622] xskq_create+0xbf/0x170 [ 208.200120][T11622] xsk_init_queue+0xb0/0x110 [ 208.200148][T11622] xsk_setsockopt+0x4dc/0x8d0 [ 208.200175][T11622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.200202][T11622] ? __pfx_aa_sk_perm+0x10/0x10 [ 208.200223][T11622] ? aa_sock_opt_perm+0xff/0x1b0 [ 208.200247][T11622] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 208.200270][T11622] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.200295][T11622] do_sock_setsockopt+0x17c/0x1b0 [ 208.200326][T11622] __x64_sys_setsockopt+0x13f/0x1b0 [ 208.200359][T11622] do_syscall_64+0xfa/0xfa0 [ 208.200375][T11622] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.200396][T11622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.200414][T11622] ? clear_bhb_loop+0x60/0xb0 [ 208.200437][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.200454][T11622] RIP: 0033:0x7f6017b8efc9 [ 208.200482][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.200497][T11622] RSP: 002b:00007f601896b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.200517][T11622] RAX: ffffffffffffffda RBX: 00007f6017de6090 RCX: 00007f6017b8efc9 [ 208.200531][T11622] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 208.200543][T11622] RBP: 00007f6017c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 208.200555][T11622] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.200567][T11622] R13: 00007f6017de6128 R14: 00007f6017de6090 R15: 00007ffc713da808 [ 208.200600][T11622] [ 208.200727][T11622] Mem-Info: [ 208.499590][T11622] active_anon:3974 inactive_anon:0 isolated_anon:0 [ 208.499590][T11622] active_file:3208 inactive_file:39932 isolated_file:0 [ 208.499590][T11622] unevictable:768 dirty:110 writeback:0 [ 208.499590][T11622] slab_reclaimable:11811 slab_unreclaimable:120957 [ 208.499590][T11622] mapped:30113 shmem:1387 pagetables:1009 [ 208.499590][T11622] sec_pagetables:0 bounce:0 [ 208.499590][T11622] kernel_misc_reclaimable:0 [ 208.499590][T11622] free:1304485 free_pcp:15822 free_cma:0 [ 208.545647][T11622] Node 0 active_anon:15896kB inactive_anon:0kB active_file:12832kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120452kB dirty:440kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12436kB pagetables:4000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.578372][T11622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.608562][T11622] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.639065][T11622] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 208.644870][T11622] Node 0 DMA32 free:1311772kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15896kB inactive_anon:0kB active_file:12832kB inactive_file:159528kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2561632kB mlocked:0kB bounce:0kB free_pcp:43444kB local_pcp:22556kB free_cma:0kB [ 208.679871][T11622] lowmem_reserve[]: 0 0 1 1 1 [ 208.684662][T11622] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.714757][T11622] lowmem_reserve[]: 0 0 0 0 0 [ 208.719580][T11622] Node 1 Normal free:3890808kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19860kB local_pcp:9756kB free_cma:0kB [ 208.752543][T11622] lowmem_reserve[]: 0 0 0 0 0 [ 208.757601][T11622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.771091][T11622] Node 0 DMA32: 525*4kB (UM) 801*8kB (UME) 292*16kB (UM) 421*32kB (UME) 178*64kB (UM) 105*128kB (UM) 87*256kB (UME) 28*512kB (UME) 11*1024kB (UM) 6*2048kB (M) 293*4096kB (M) = 1311772kB [ 208.792240][T11622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.804071][T11622] Node 1 Normal: 2*4kB (UE) 6*8kB (ME) 8*16kB (ME) 74*32kB (UME) 34*64kB (UME) 14*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890808kB [ 208.822540][T11622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.832372][T11622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.842838][T11622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.882659][T11622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.893171][T11634] svc: failed to register nfsdv3 RPC service (errno 111). [ 208.905421][T11634] svc: failed to register nfsaclv3 RPC service (errno 111). [ 208.923944][T11622] 44495 total pagecache pages [ 208.934160][T11622] 0 pages in swap cache [ 208.938728][T11622] Free swap = 124996kB [ 208.962375][T11622] Total swap = 124996kB [ 208.966851][T11622] 2097051 pages RAM [ 208.971730][T11622] 0 pages HighMem/MovableOnly [ 208.976975][T11622] 424553 pages reserved [ 208.981502][T11622] 0 pages cma reserved [ 209.185230][T11652] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 209.350063][T11662] syzkaller0: entered promiscuous mode [ 209.405930][T11662] syzkaller0: entered allmulticast mode [ 209.418810][T11655] svc: failed to register nfsdv3 RPC service (errno 111). [ 209.442855][T11655] svc: failed to register nfsaclv3 RPC service (errno 111). [ 209.487862][T11666] netlink: 'syz.3.1421': attribute type 11 has an invalid length. [ 209.583417][T11669] netlink: 'syz.2.1422': attribute type 2 has an invalid length. [ 209.643807][T11669] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 209.660145][T11669] batman_adv: batadv0: Adding interface: gretap1 [ 209.666780][T11669] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.693868][T11669] batman_adv: batadv0: Interface activated: gretap1 [ 209.823099][T11676] netlink: 'syz.2.1425': attribute type 2 has an invalid length. [ 210.218129][T11697] svc: failed to register nfsdv3 RPC service (errno 111). [ 210.277550][T11697] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.406740][T11719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.599732][T11718] svc: failed to register nfsdv3 RPC service (errno 111). [ 210.622864][T11718] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.733506][T11741] __nla_validate_parse: 13 callbacks suppressed [ 210.733527][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 210.791646][T11745] SET target dimension over the limit! [ 210.960749][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 210.970536][T11737] netlink: 'syz.0.1441': attribute type 5 has an invalid length. [ 211.080026][T11737] netlink: 'syz.0.1441': attribute type 8 has an invalid length. [ 211.124349][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 211.170171][T11737] geneve3: entered promiscuous mode [ 211.175421][T11737] geneve3: entered allmulticast mode [ 211.201331][T11746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1441'. [ 211.216069][ T1161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 211.239156][ T1161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 211.254405][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 211.285651][ T1161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 211.307305][ T1161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 211.320725][T11755] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 211.372784][ T9901] IPVS: starting estimator thread 0... [ 211.443717][T11769] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1448'. [ 211.454416][T11761] netlink: 'syz.2.1447': attribute type 13 has an invalid length. [ 211.462787][T11761] netlink: 'syz.2.1447': attribute type 17 has an invalid length. [ 211.470873][T11762] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.543319][T11769] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1448'. [ 211.585105][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.625577][T11761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.652471][T11768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.781657][T11767] lo speed is unknown, defaulting to 1000 [ 211.877553][T11796] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1455'. [ 212.034186][ T5834] Bluetooth: hci4: link tx timeout [ 212.042988][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 212.052596][ T5834] Bluetooth: hci4: link tx timeout [ 212.058472][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.174461][T11810] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 212.199668][T11811] lo speed is unknown, defaulting to 1000 [ 212.312815][T11813] svc: failed to register nfsdv3 RPC service (errno 111). [ 212.341929][T11813] svc: failed to register nfsaclv3 RPC service (errno 111). [ 212.783528][T11827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1461'. [ 212.832392][T11830] netlink: 'syz.1.1462': attribute type 21 has an invalid length. [ 212.849358][T11830] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1462'. [ 212.886693][T11832] dvmrp0: entered allmulticast mode [ 212.905375][T11831] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 213.050205][T11840] netlink: 'syz.0.1464': attribute type 10 has an invalid length. [ 213.323901][T11857] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 213.373230][T11860] svc: failed to register nfsdv3 RPC service (errno 111). [ 213.383763][T11857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.412716][T11857] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.421995][T11860] svc: failed to register nfsaclv3 RPC service (errno 111). [ 213.425266][T11857] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 213.437495][T11857] batadv0: entered promiscuous mode [ 213.450148][T11857] bond0: (slave batadv0): Releasing backup interface [ 213.462087][T11857] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 213.494592][T11869] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 213.572121][T11873] tipc: Enabled bearer , priority 0 [ 213.583460][T11873] syzkaller0: entered promiscuous mode [ 213.594642][T11873] syzkaller0: entered allmulticast mode [ 213.619836][T11873] tipc: Resetting bearer [ 213.628278][T11872] tipc: Resetting bearer [ 213.657751][T11872] tipc: Disabling bearer [ 213.941500][T11899] netlink: 'syz.2.1482': attribute type 8 has an invalid length. [ 214.056315][T11904] tipc: Enabled bearer , priority 0 [ 214.075294][T11904] syzkaller0: entered promiscuous mode [ 214.085730][T11904] syzkaller0: entered allmulticast mode [ 214.092068][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 214.249652][ T5834] Bluetooth: hci0: command tx timeout [ 216.169795][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 217.436525][T11913] netlink: 'syz.4.1489': attribute type 29 has an invalid length. [ 217.448082][T11917] tipc: Resetting bearer [ 217.453707][T11933] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 217.516271][T11917] tipc: Resetting bearer [ 217.556392][T11936] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 217.565509][T11917] tipc: Disabling bearer [ 217.578106][T11937] veth0: entered promiscuous mode [ 217.585047][T11933] __nla_validate_parse: 9 callbacks suppressed [ 217.585075][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 217.644768][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 217.649746][T11943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 217.682663][T11933] veth0 (unregistering): left promiscuous mode [ 217.711165][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1491'. [ 217.774387][T11945] tipc: Enabling of bearer rejected, failed to enable media [ 217.791428][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 217.826915][T11937] lo speed is unknown, defaulting to 1000 [ 217.847524][T11949] svc: failed to register nfsdv3 RPC service (errno 111). [ 217.883403][T11949] svc: failed to register nfsaclv3 RPC service (errno 111). [ 217.899167][T11940] dvmrp1: entered allmulticast mode [ 217.929261][T11940] lo speed is unknown, defaulting to 1000 [ 218.001794][T11945] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 218.041386][T11965] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 218.073372][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.269295][T11970] netlink: 'syz.1.1496': attribute type 10 has an invalid length. [ 218.311184][T11970] team0: left allmulticast mode [ 218.318978][T11970] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 218.332206][T11970] team0: left promiscuous mode [ 218.337160][T11970] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 218.351993][T11970] bridge0: port 1(team0) entered disabled state [ 218.387610][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.402593][T11970] bond0: (slave team0): Enslaving as an active interface with a down link [ 218.501704][T11976] Cannot find add_set index 6 as target [ 218.507626][T11978] syzkaller1: entered promiscuous mode [ 218.514678][T11978] syzkaller1: entered allmulticast mode [ 218.633965][T11991] batadv0: left promiscuous mode [ 218.651047][T11991] bridge2: left promiscuous mode [ 218.656030][T11991] bridge2: left allmulticast mode [ 218.682620][T11991] ip6gretap1: left promiscuous mode [ 218.695245][T11995] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 218.705468][T11996] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 218.705870][T11991] bridge5: left promiscuous mode [ 218.718304][T11991] bridge5: left allmulticast mode [ 218.852232][T12001] dvmrp1: left allmulticast mode [ 218.859444][T12001] dvmrp8: left allmulticast mode [ 218.869246][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 218.969006][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 219.003956][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1506'. [ 219.008347][T12010] svc: failed to register nfsdv3 RPC service (errno 111). [ 219.024762][T12010] svc: failed to register nfsaclv3 RPC service (errno 111). [ 219.027480][T12001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.039411][T12001] IPv6: NLM_F_CREATE should be set when creating new route [ 219.063924][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 219.128271][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 219.295368][T12025] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 219.304146][T12025] NCSI netlink: No device for ifindex 0 [ 219.311578][ T30] audit: type=1107 audit(1760897140.223:7): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[ZEYڃGF2+NNu1l_X ݳ䇜;KbTޒ?:{.k-:8F0;Q֤Y$/.W(3!' [ 219.345434][T12023] svc: failed to register nfsdv3 RPC service (errno 111). [ 219.366646][T12023] svc: failed to register nfsaclv3 RPC service (errno 111). [ 219.417683][T12025] team0: Port device team_slave_0 removed [ 219.599193][T12047] tipc: Enabled bearer , priority 0 [ 219.621375][T12047] syzkaller0: entered promiscuous mode [ 219.626913][T12047] syzkaller0: entered allmulticast mode [ 219.672354][T12047] tipc: Resetting bearer [ 219.746362][T12046] tipc: Resetting bearer [ 219.802513][T12046] tipc: Disabling bearer [ 219.852411][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.859649][T12054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.878914][T12054] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 219.909674][T12057] x_tables: duplicate underflow at hook 2 [ 219.943082][T12067] xfrm0: entered promiscuous mode [ 219.948534][T12067] xfrm0: entered allmulticast mode [ 219.958543][T12059] : renamed from ip6gre0 (while UP) [ 219.966748][T12059] tipc: Disabling bearer [ 220.291636][T12084] bridge_slave_1: left allmulticast mode [ 220.297553][T12084] bridge_slave_1: left promiscuous mode [ 220.304760][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.322489][T12084] bridge_slave_0: left allmulticast mode [ 220.337097][T12084] bridge_slave_0: left promiscuous mode [ 220.347238][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.494500][T12094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.622125][T12105] tipc: Enabled bearer , priority 0 [ 220.630011][T12105] syzkaller0: entered promiscuous mode [ 220.635723][T12105] syzkaller0: entered allmulticast mode [ 220.727117][T12105] tipc: Resetting bearer [ 220.741310][T12104] tipc: Resetting bearer [ 220.765460][T12104] tipc: Disabling bearer [ 220.840818][T12111] lo speed is unknown, defaulting to 1000 [ 221.221934][T12137] netem: incorrect ge model size [ 221.226940][T12137] netem: change failed [ 221.251318][T12137] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 221.269725][T12137] macvtap2: entered allmulticast mode [ 221.275153][T12137] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 222.028437][T12137] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 222.035976][T12137] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 222.279549][T12152] lo speed is unknown, defaulting to 1000 [ 222.282570][T12160] tipc: Enabled bearer , priority 0 [ 222.294272][T12161] tipc: Enabling of bearer rejected, already enabled [ 222.320610][T12161] syzkaller0: entered promiscuous mode [ 222.339537][T12161] syzkaller0: entered allmulticast mode [ 222.390566][T12160] tipc: Resetting bearer [ 222.399630][T12157] tipc: Resetting bearer [ 222.436475][T12157] tipc: Disabling bearer [ 222.716155][T12174] lo speed is unknown, defaulting to 1000 [ 223.479678][T12201] svc: failed to register nfsdv3 RPC service (errno 111). [ 223.523148][T12201] svc: failed to register nfsaclv3 RPC service (errno 111). [ 223.964582][T12212] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 224.068088][T12217] netlink: 'syz.2.1567': attribute type 4 has an invalid length. [ 224.140634][T12220] pim6reg: entered allmulticast mode [ 224.158068][T12220] pim6reg: left allmulticast mode [ 224.244016][T12223] lo speed is unknown, defaulting to 1000 [ 224.493297][T12230] Bluetooth: hci0: unsupported parameter 512 [ 224.499314][T12230] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 224.530327][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 225.478327][T12243] __nla_validate_parse: 14 callbacks suppressed [ 225.478348][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 225.621418][T12243] netlink: 'syz.0.1574': attribute type 5 has an invalid length. [ 225.629273][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1574'. [ 225.664993][T12267] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1576'. [ 226.110657][T12272] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1578'. [ 226.691846][T12308] netlink: 'syz.0.1589': attribute type 11 has an invalid length. [ 226.842649][T12311] lo speed is unknown, defaulting to 1000 [ 227.116487][T12329] IPVS: length: 4096 != 24 [ 227.334672][T12339] dvmrp1: left allmulticast mode [ 227.488074][T12345] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 227.563364][T12353] netlink: 'syz.0.1599': attribute type 27 has an invalid length. [ 227.600023][T12353] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 227.890421][T12370] netlink: 'syz.3.1604': attribute type 11 has an invalid length. [ 228.279730][T12392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1610'. [ 228.312049][T12393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1610'. [ 228.367550][T12391] syz.3.1610: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.405998][T12391] CPU: 1 UID: 0 PID: 12391 Comm: syz.3.1610 Not tainted syzkaller #0 PREEMPT(full) [ 228.406043][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.406054][T12391] Call Trace: [ 228.406062][T12391] [ 228.406071][T12391] dump_stack_lvl+0x189/0x250 [ 228.406100][T12391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.406119][T12391] ? __pfx__printk+0x10/0x10 [ 228.406139][T12391] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.406158][T12391] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.406180][T12391] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 228.406202][T12391] warn_alloc+0x214/0x310 [ 228.406230][T12391] ? __pfx_warn_alloc+0x10/0x10 [ 228.406261][T12391] ? __get_vm_area_node+0x28f/0x300 [ 228.406280][T12391] ? xskq_create+0xbf/0x170 [ 228.406309][T12391] __vmalloc_node_range_noprof+0x690/0x12d0 [ 228.406361][T12391] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.406386][T12391] ? __kasan_kmalloc+0x93/0xb0 [ 228.406413][T12391] vmalloc_user_noprof+0xad/0xf0 [ 228.406432][T12391] ? xskq_create+0xbf/0x170 [ 228.406457][T12391] xskq_create+0xbf/0x170 [ 228.406484][T12391] xsk_init_queue+0xb0/0x110 [ 228.406510][T12391] xsk_setsockopt+0x57b/0x8d0 [ 228.406537][T12391] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.406564][T12391] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.406585][T12391] ? aa_sock_opt_perm+0xff/0x1b0 [ 228.406608][T12391] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 228.406630][T12391] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.406655][T12391] do_sock_setsockopt+0x17c/0x1b0 [ 228.406685][T12391] __x64_sys_setsockopt+0x13f/0x1b0 [ 228.406716][T12391] do_syscall_64+0xfa/0xfa0 [ 228.406733][T12391] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.406750][T12391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.406768][T12391] ? clear_bhb_loop+0x60/0xb0 [ 228.406789][T12391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.406807][T12391] RIP: 0033:0x7f08b5b8efc9 [ 228.406824][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.406839][T12391] RSP: 002b:00007f08b6a88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.406859][T12391] RAX: ffffffffffffffda RBX: 00007f08b5de5fa0 RCX: 00007f08b5b8efc9 [ 228.406872][T12391] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 228.406884][T12391] RBP: 00007f08b5c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 228.406894][T12391] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 228.406906][T12391] R13: 00007f08b5de6038 R14: 00007f08b5de5fa0 R15: 00007ffec3d6bec8 [ 228.406939][T12391] [ 228.406945][T12391] Mem-Info: [ 228.632647][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 228.641119][T12391] active_anon:5558 inactive_anon:0 isolated_anon:0 [ 228.641119][T12391] active_file:3208 inactive_file:39942 isolated_file:0 [ 228.641119][T12391] unevictable:768 dirty:132 writeback:0 [ 228.641119][T12391] slab_reclaimable:11478 slab_unreclaimable:129589 [ 228.641119][T12391] mapped:30089 shmem:1358 pagetables:972 [ 228.641119][T12391] sec_pagetables:0 bounce:0 [ 228.641119][T12391] kernel_misc_reclaimable:0 [ 228.641119][T12391] free:1283944 free_pcp:25679 free_cma:0 [ 228.732095][T12391] Node 0 active_anon:22432kB inactive_anon:0kB active_file:12832kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124456kB dirty:528kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:3752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.732559][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 228.764346][T12391] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 228.829882][T12391] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.861597][T12391] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 228.867383][T12391] Node 0 DMA32 free:1231480kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22896kB inactive_anon:0kB active_file:12832kB inactive_file:159568kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2561632kB mlocked:0kB bounce:0kB free_pcp:80900kB local_pcp:61840kB free_cma:0kB [ 228.901271][T12391] lowmem_reserve[]: 0 0 1 1 1 [ 228.906279][T12391] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.966938][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 228.973994][T12391] lowmem_reserve[]: 0 0 0 0 0 [ 228.989969][T12391] Node 1 Normal free:3893308kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17396kB local_pcp:9576kB free_cma:0kB [ 229.075947][T12391] lowmem_reserve[]: 0 0 0 0 0 [ 229.088102][T12391] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.115097][T12391] Node 0 DMA32: 387*4kB (UME) 827*8kB (UME) 621*16kB (UME) 2535*32kB (UME) 1009*64kB (UME) 281*128kB (UM) 118*256kB (UME) 44*512kB (UME) 22*1024kB (UM) 14*2048kB (UM) 226*4096kB (UM) = 1229396kB [ 229.145598][T12391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.159526][T12391] Node 1 Normal: 174*4kB (UE) 47*8kB (UME) 34*16kB (UME) 107*32kB (UME) 35*64kB (UME) 14*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893360kB [ 229.203767][T12391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.215913][T12391] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.226448][T12391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.237536][T12391] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.250368][T12391] 44505 total pagecache pages [ 229.255185][T12391] 0 pages in swap cache [ 229.261102][T12391] Free swap = 124996kB [ 229.265443][T12391] Total swap = 124996kB [ 229.319872][T12391] 2097051 pages RAM [ 229.323814][T12391] 0 pages HighMem/MovableOnly [ 229.328498][T12391] 424553 pages reserved [ 229.333214][T12391] 0 pages cma reserved [ 229.442253][T12393] bond1: (slave macvlan0): Releasing active interface [ 229.462102][T12393] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 229.482645][T12393] bond0 (unregistering): Released all slaves [ 229.726494][T12413] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 229.926977][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 230.003103][T12432] tipc: Enabled bearer , priority 0 [ 230.015016][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1620'. [ 230.025796][T12432] syzkaller0: entered promiscuous mode [ 230.061424][T12432] syzkaller0: entered allmulticast mode [ 230.141051][T12431] tipc: Resetting bearer [ 230.182568][T12431] tipc: Disabling bearer [ 230.482726][T12454] lo speed is unknown, defaulting to 1000 [ 231.441972][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 231.508241][T12491] lo speed is unknown, defaulting to 1000 [ 231.545689][T12497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1635'. [ 231.852106][T12508] Bluetooth: MGMT ver 1.23 [ 231.917568][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 231.931780][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1643'. [ 231.952827][T12519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1640'. [ 231.991506][T12518] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1642'. [ 232.145696][T12531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.156732][T12531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 232.167155][T12531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 232.191901][T12528] tipc: Enabling of bearer rejected, failed to enable media [ 232.504491][T12531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.548099][T12531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 232.574770][T12531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 232.702757][T12531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.713413][T12531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 232.735962][T12531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 233.146372][T12550] geneve2: left promiscuous mode [ 233.155284][T12550] bridge3: left promiscuous mode [ 233.161017][T12550] bridge3: left allmulticast mode [ 233.166430][T12550] bridge4: left promiscuous mode [ 233.171841][T12550] bridge4: left allmulticast mode [ 233.179008][T12550] geneve3: left promiscuous mode [ 233.184823][T12550] geneve3: left allmulticast mode [ 233.313575][T12531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.326852][T12531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 233.337810][T12531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 233.355184][ T3558] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 233.364023][ T3558] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 233.372849][ T3558] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 233.383306][ T3558] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 233.393665][T12566] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 233.458092][ T443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.468337][ T443] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 233.476729][ T443] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 233.497067][ T443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.506018][ T443] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 233.514484][ T443] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 233.536361][ T443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.545555][ T443] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 233.554165][ T443] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 233.575212][ T443] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 233.584393][ T443] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 233.593107][ T443] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 233.803987][T12570] bond0: Removing last arp target with arp_interval on [ 233.815006][T12570] bond0: entered promiscuous mode [ 233.821597][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 233.832101][T12570] bond0: entered allmulticast mode [ 233.838013][T12570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.879111][T12570] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 233.916891][T12573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.927932][T12573] bond0: (slave bond6): Enslaving as an active interface with a down link [ 234.073825][T12588] syzkaller1: entered promiscuous mode [ 234.079896][T12588] syzkaller1: entered allmulticast mode [ 234.087908][T12588] raw_sendmsg: syz.2.1658 forgot to set AF_INET. Fix it! [ 234.290272][T12594] bond0: (slave team0): Releasing backup interface [ 234.299529][T12594] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 234.330691][T12594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.714739][T12613] lo speed is unknown, defaulting to 1000 [ 234.772981][T12617] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 234.817724][T12617] bond8: entered promiscuous mode [ 234.824160][T12617] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.859840][T12621] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 234.868887][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 234.868981][T12617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 234.887838][T12617] bond8: (slave bond9): making interface the new active one [ 234.895681][T12617] bond9: entered promiscuous mode [ 234.901940][T12617] bond8: (slave bond9): Enslaving as an active interface with an up link [ 235.008848][T12602] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1659'. [ 235.431363][T12642] sctp: [Deprecated]: syz.4.1672 (pid 12642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.431363][T12642] Use struct sctp_sack_info instead [ 235.484715][T12642] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1672'. [ 235.614936][T12645] svc: failed to register nfsdv3 RPC service (errno 111). [ 235.627391][T12645] svc: failed to register nfsaclv3 RPC service (errno 111). [ 235.851492][T12662] netlink: 'syz.1.1681': attribute type 2 has an invalid length. [ 235.930149][ T52] Bluetooth: hci0: command tx timeout [ 235.989805][T12666] nbd: must specify a size in bytes for the device [ 236.105726][T12679] openvswitch: netlink: IP tunnel dst address not specified [ 236.408983][T12670] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 236.411347][T12699] lo speed is unknown, defaulting to 1000 [ 236.494625][T12701] lo speed is unknown, defaulting to 1000 [ 236.769282][T12712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 236.785160][T12712] batman_adv: batadv0: Adding interface: gretap2 [ 236.791933][T12712] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.830058][T12712] batman_adv: batadv0: Interface activated: gretap2 [ 236.890377][T12720] __nla_validate_parse: 5 callbacks suppressed [ 236.890393][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1697'. [ 236.915997][T12720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'. [ 237.088533][T12734] lo speed is unknown, defaulting to 1000 [ 237.277190][T12746] syzkaller1: entered promiscuous mode [ 237.283822][T12746] syzkaller1: entered allmulticast mode [ 237.295200][T12749] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 237.356571][T12749] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.368244][T12749] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 237.418980][T12752] vlan3: entered allmulticast mode [ 237.429233][T12752] bond6: (slave vlan3): making interface the new active one [ 237.440079][T12752] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 237.591091][T12758] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 237.668433][T12758] bond10: entered promiscuous mode [ 237.674774][T12758] 8021q: adding VLAN 0 to HW filter on device bond10 [ 237.703638][T12769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1707'. [ 237.717037][T12769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.754954][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.774276][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.814674][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 238.017617][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 238.458114][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1717'. [ 238.469168][T12803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'. [ 238.508005][T12807] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1720'. [ 238.639124][T12809] vlan0: entered allmulticast mode [ 238.649820][T12809] veth1: entered allmulticast mode [ 238.812655][T12824] svc: failed to register nfsdv3 RPC service (errno 111). [ 238.825791][T12824] svc: failed to register nfsaclv3 RPC service (errno 111). [ 238.862884][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1726'. [ 239.085756][T12831] bond3: (slave vlan0): Releasing active interface [ 239.426038][T12835] team0 (unregistering): Port device team_slave_0 removed [ 239.436421][T12835] team0 (unregistering): Port device bridge1 removed [ 239.455095][T12835] team0 (unregistering): Port device geneve0 removed [ 239.472169][T12848] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1730'. [ 239.778301][T12867] svc: failed to register nfsdv3 RPC service (errno 111). [ 239.787526][T12867] svc: failed to register nfsaclv3 RPC service (errno 111). [ 239.925300][T12878] pim6reg1: entered promiscuous mode [ 239.931120][T12878] pim6reg1: entered allmulticast mode [ 240.075317][T12880] syzkaller0: entered promiscuous mode [ 240.093833][T12880] syzkaller0: entered allmulticast mode [ 240.173043][T12883] netlink: 'syz.3.1743': attribute type 3 has an invalid length. [ 241.051600][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 241.928030][T12903] tipc: Enabling of bearer rejected, failed to enable media [ 242.070925][T12905] lo speed is unknown, defaulting to 1000 [ 242.084142][T12910] lo speed is unknown, defaulting to 1000 [ 242.450371][T12960] __nla_validate_parse: 1 callbacks suppressed [ 242.450384][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 242.483590][T12960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.130802][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 245.209632][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 394.569928][ T31] INFO: task syz.3.1761:12969 blocked for more than 143 seconds. [ 394.577723][ T31] Not tainted syzkaller #0 [ 394.582772][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.591603][ T31] task:syz.3.1761 state:D stack:26184 pid:12969 tgid:12968 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 394.603720][ T31] Call Trace: [ 394.607110][ T31] [ 394.610100][ T31] __schedule+0x1798/0x4cc0 [ 394.614759][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.619699][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.624597][ T31] ? __pfx___schedule+0x10/0x10 [ 394.629703][ T31] ? schedule+0x91/0x360 [ 394.634068][ T31] schedule+0x165/0x360 [ 394.638238][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.643770][ T31] __mutex_lock+0x7e6/0x1350 [ 394.648428][ T31] ? __mutex_lock+0x5bb/0x1350 [ 394.653333][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 394.659091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.664279][ T31] ? net_generic+0x1e/0x240 [ 394.668853][ T31] ? net_generic+0x1e/0x240 [ 394.673414][ T31] ? net_generic+0x1e/0x240 [ 394.677919][ T31] ? net_generic+0x1e/0x240 [ 394.682471][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 394.688052][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 394.693751][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 394.699955][ T31] ? bpf_lsm_capable+0x9/0x20 [ 394.704661][ T31] ? security_capable+0x7e/0x2e0 [ 394.709702][ T31] genl_rcv_msg+0x60e/0x790 [ 394.714264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.719453][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 394.725656][ T31] netlink_rcv_skb+0x208/0x470 [ 394.730655][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.735533][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.740593][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.745898][ T31] ? down_read+0x1ad/0x2e0 [ 394.750339][ T31] genl_rcv+0x28/0x40 [ 394.754328][ T31] netlink_unicast+0x82f/0x9e0 [ 394.759180][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 394.764547][ T31] ? netlink_sendmsg+0x642/0xb30 [ 394.769596][ T31] ? skb_put+0x11b/0x210 [ 394.773958][ T31] netlink_sendmsg+0x805/0xb30 [ 394.778734][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.784076][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.789021][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.794353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.799698][ T31] __sock_sendmsg+0x21c/0x270 [ 394.804399][ T31] ____sys_sendmsg+0x505/0x830 [ 394.809173][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.814554][ T31] ? import_iovec+0x74/0xa0 [ 394.819162][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 394.823920][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.829270][ T31] ? __fget_files+0x2a/0x420 [ 394.833927][ T31] ? __fget_files+0x3a0/0x420 [ 394.838632][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 394.843637][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.849132][ T31] ? do_syscall_64+0xbe/0xfa0 [ 394.853873][ T31] do_syscall_64+0xfa/0xfa0 [ 394.858384][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.863627][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.869797][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.874508][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.880677][ T31] RIP: 0033:0x7f08b5b8efc9 [ 394.885121][ T31] RSP: 002b:00007f08b6a88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.893721][ T31] RAX: ffffffffffffffda RBX: 00007f08b5de5fa0 RCX: 00007f08b5b8efc9 [ 394.901841][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 394.909850][ T31] RBP: 00007f08b5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.917821][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.925906][ T31] R13: 00007f08b5de6038 R14: 00007f08b5de5fa0 R15: 00007ffec3d6bec8 [ 394.933955][ T31] [ 394.936998][ T31] [ 394.936998][ T31] Showing all locks held in the system: [ 394.944797][ T31] 1 lock held by khungtaskd/31: [ 394.949689][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.959722][ T31] 2 locks held by getty/5591: [ 394.964496][ T31] #0: ffff88814dd610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.974384][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 394.984627][ T31] 2 locks held by syz.2.1756/12933: [ 394.989901][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.998114][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 395.008185][ T31] 2 locks held by syz.3.1761/12969: [ 395.013419][ T31] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.021664][ T31] #1: ffffffff8e426b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 395.031884][ T31] [ 395.034243][ T31] ============================================= [ 395.034243][ T31] [ 395.042730][ T31] NMI backtrace for cpu 0 [ 395.042754][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.042767][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.042774][ T31] Call Trace: [ 395.042780][ T31] [ 395.042787][ T31] dump_stack_lvl+0x189/0x250 [ 395.042807][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.042817][ T31] ? __pfx__printk+0x10/0x10 [ 395.042835][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 395.042851][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.042864][ T31] ? __pfx__printk+0x10/0x10 [ 395.042876][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.042891][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.042905][ T31] watchdog+0xf60/0xfa0 [ 395.042921][ T31] ? watchdog+0x1e2/0xfa0 [ 395.042936][ T31] kthread+0x711/0x8a0 [ 395.042949][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.042961][ T31] ? __pfx_kthread+0x10/0x10 [ 395.042971][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.042985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.042994][ T31] ? __pfx_kthread+0x10/0x10 [ 395.043004][ T31] ret_from_fork+0x4bc/0x870 [ 395.043019][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.043035][ T31] ? __switch_to_asm+0x39/0x70 [ 395.043045][ T31] ? __switch_to_asm+0x33/0x70 [ 395.043055][ T31] ? __pfx_kthread+0x10/0x10 [ 395.043065][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.043084][ T31] [ 395.043088][ T31] Sending NMI from CPU 0 to CPUs 1: [ 395.188601][ C1] NMI backtrace for cpu 1 [ 395.188624][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 395.188642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.188653][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 395.188698][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 41 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 395.188713][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 395.188729][ C1] RAX: 93601bbe03ebbe00 RBX: ffffffff8196bc07 RCX: 93601bbe03ebbe00 [ 395.188741][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e7f5f RDI: ffffffff8bc077e0 [ 395.188752][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 395.188764][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0b70 [ 395.188776][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003859b58 [ 395.188786][ C1] FS: 0000000000000000(0000) GS:ffff888125e0e000(0000) knlGS:0000000000000000 [ 395.188800][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.188810][ C1] CR2: 00007fef52de2060 CR3: 000000000df38000 CR4: 00000000003526f0 [ 395.188825][ C1] Call Trace: [ 395.188841][ C1] [ 395.188848][ C1] default_idle+0x13/0x20 [ 395.188866][ C1] default_idle_call+0x73/0xb0 [ 395.188885][ C1] do_idle+0x1e7/0x510 [ 395.188910][ C1] ? __pfx_do_idle+0x10/0x10 [ 395.188939][ C1] cpu_startup_entry+0x44/0x60 [ 395.188958][ C1] start_secondary+0x101/0x110 [ 395.188977][ C1] common_startup_64+0x13e/0x147 [ 395.189003][ C1] [ 395.189641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.189664][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.189686][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.189698][ T31] Call Trace: [ 395.189708][ T31] [ 395.189720][ T31] dump_stack_lvl+0x99/0x250 [ 395.189745][ T31] ? __asan_memcpy+0x40/0x70 [ 395.189765][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.189784][ T31] ? __pfx__printk+0x10/0x10 [ 395.189829][ T31] vpanic+0x237/0x6d0 [ 395.189852][ T31] ? __pfx_vpanic+0x10/0x10 [ 395.189876][ T31] ? preempt_schedule_common+0x83/0xd0 [ 395.189909][ T31] panic+0xb9/0xc0 [ 395.189931][ T31] ? __pfx_panic+0x10/0x10 [ 395.189956][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.189985][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 395.190011][ T31] watchdog+0xf9f/0xfa0 [ 395.190040][ T31] ? watchdog+0x1e2/0xfa0 [ 395.190067][ T31] kthread+0x711/0x8a0 [ 395.190090][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.190111][ T31] ? __pfx_kthread+0x10/0x10 [ 395.190131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.190155][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.190171][ T31] ? __pfx_kthread+0x10/0x10 [ 395.190190][ T31] ret_from_fork+0x4bc/0x870 [ 395.190216][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.190246][ T31] ? __switch_to_asm+0x39/0x70 [ 395.190265][ T31] ? __switch_to_asm+0x33/0x70 [ 395.190284][ T31] ? __pfx_kthread+0x10/0x10 [ 395.190303][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.190339][ T31] [ 395.501595][ T31] Kernel Offset: disabled [ 395.505917][ T31] Rebooting in 86400 seconds..