last executing test programs: 3m1.035568676s ago: executing program 0 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 3m0.564083044s ago: executing program 0 (id=1358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)="a6cc78fa049ea02b6ec26d9784f6945b6379a283cf4948bdb568b9d26befb7f12fb654ef5262d0bb0b96a70c66a24c55d3dd5a58da4b5b3eec6669", 0x3b}, {&(0x7f0000000280)="9b78d66248e42d069dc23e8ee577d7ac2eb24cbffa36647da5ba7da6c7d6feb0b50da8998961d5140afcbc65f36681a91567a7504ff96be22fc5c1887dbde023ca12e6ab69cb320e0887b0cc02be6136a6c74b8dd0d9d46468ea1a01405510011dd1e874a1af200fa2ab9b081229055ce4f4b2ac3c44451adb056f469f2f8e9217288e60465970bb241729fed07fdbd03413bc9eefbdc51f0e3fab3692d314fa7ef264bd73ca19ff76cb88553cadb96e8baff7a17520a68c762e455c1c0caa4e9151a1e2dbd0940b2d627774b704ddc6e26245170d8d", 0xd6}], 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c0004"]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r2, 0x0, 0x0, 0x60, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r4, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000017c0)=r6) unshare(0x2c020400) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$xdp(r7, &(0x7f0000001240)={0x2c, 0x6, 0x0, 0x8}, 0x10) 3m0.232920773s ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x76120}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 3m0.169616636s ago: executing program 0 (id=1364): clock_gettime(0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814}, 0x94) 3m0.033197736s ago: executing program 0 (id=1366): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000006000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value=0x40000000}, 0x94) 2m59.814745187s ago: executing program 0 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x4, 0x178, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x20080010) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000043c0000c4ee00000c0a010100250370000000000000000a0000060900020073797a00000900010073797a3100000000100003800c00008008000340000000011400000011000100000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffce4}, 0x48) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008054) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) writev(r6, &(0x7f0000006280)=[{&(0x7f0000001700)="0000009fff55a106c32270", 0xb}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$unix(r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x2, @loopback, 0x2}}, 0x0, 0x0, 0x2020, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2m44.670217044s ago: executing program 32 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@delneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x4, 0x178, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x20080010) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000043c0000c4ee00000c0a010100250370000000000000000a0000060900020073797a00000900010073797a3100000000100003800c00008008000340000000011400000011000100000000000000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffce4}, 0x48) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008054) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) writev(r6, &(0x7f0000006280)=[{&(0x7f0000001700)="0000009fff55a106c32270", 0xb}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$unix(r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x2, @loopback, 0x2}}, 0x0, 0x0, 0x2020, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 4.710679594s ago: executing program 2 (id=2547): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000367768585bbfd204b8000cbfd6", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050007000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc0000001b00030027bd7000fddbdf25fe8000000000000000000000000000bb0a0101020000000000000000000000004e2000004e2300020a00002032000000687275dd0b44a2f503ce8cd2810b394d63134de3e7e363eaa598c8aabb54770ef710ab8a6cbaba0f250d6602e8b79f368f1e172e7ce388970a744ef219a0a9a1c2ab6d48bccc0a65224a424f301ec8c05564d03790b0c4e6465f0a67cabe99e9eb03cd67883b645d627bfe16ae75e38fd8d5"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0x23}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x16}, {0x9, 0x1}, {0x48, 0x1}, {0x6c}, {0xb}, {0x2, 0x1}, {0xb}, {0xb}, {0x9, 0x1}, {0x6c}, {0x30, 0x1}, {0x18, 0x1}, {0xb}, {0x18, 0x1}, {0x6}, {0x48}, {0x18, 0x1}, {0x18, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x8e}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xe16d}]}]}, 0x6c}}, 0x40008) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05000000000000b93e3b86708ebcef061e6beb3c311826246ae80b180e99e414dbb7fbd400000000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, 0x0, 0x0) write(r5, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 4.405941457s ago: executing program 5 (id=2554): socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2502000080280001"], 0x3c}}, 0x40000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r8, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x1, {0x0, 0xff, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x7, 0x5}, {0x7, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 4.343112409s ago: executing program 2 (id=2555): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000044c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x80000001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 4.087648053s ago: executing program 2 (id=2556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffc, 0x0, 0x300, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)={0xa, 0x800006, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0) (rerun: 64) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xf25) listen(r0, 0x20) shutdown(r0, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) (async) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) (async) getsockopt$inet_buf(r3, 0x118, 0x1, 0x0, &(0x7f00000003c0)=0xf) (async, rerun: 64) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a809000008000b000000000006000100070000000c000f000500000000000000050005"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x35ddbb55f92b37de, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x800}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="4000ff8d00"}) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008d5e0004200000000044423bcf99af0000000000000000000000000000a8cd7d2547f3842fe45979147e4d9a7ac2c1a76c9901c5eac81417ff4cd0df7f77f448625bf71d811f961fcdf933773fdb5360d0004b056d9d4087206d355e97fdcd226da0c4949bbdb450949b68e2101963f57d8a9156e4afee022590ff3a6e31983ae4e0c6e2cd0c5aa06ca1d0edf5e191358af80a891cb6f57f244a2d486cf1de4ad06b4ab4dfaf4f46ba902defe89e585b1c1223a14cf8036a4bcd56826817f8a511bf6c3ee61cff5999525447c634c1a533e2f92d78d64777c777867b455789b7b79e5f37497523b08745c80b4eeeb4fc1128"], 0x48) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) 4.026478316s ago: executing program 5 (id=2559): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2a060400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f00000000c0)="e01a8f9091dbe4e2d492ea9de2efd900f5738a8f6ec5c9"}, 0x20) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 3.881160878s ago: executing program 5 (id=2562): socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000100)) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb08004500001c00680000001190780000000000e7000000004e2000089078"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 3.352220376s ago: executing program 4 (id=2568): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r1, @ANYRES64=r3], 0xfdef) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r6], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r12) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r13, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4891}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x40000000, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.218795732s ago: executing program 4 (id=2571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000300)={r3, &(0x7f0000000040)='\xff\xff', 0x464080, &(0x7f00000000c0)={@align=0x1, {0x2, 0x0, 0x9, 0x7}}, 0xffffff3b, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000002c0)=0x8001}) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}]}, 0x44}}, 0x40400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x11, 0xb05, 0x2, 0x7ff, 0x468, r5, 0x162da6de, '\x00', r2, r5, 0x2, 0x2, 0x3}, 0x50) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x4e20}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='syzkaller\x00', 0xb7, 0x98, &(0x7f0000000ac0)=""/152, 0x40f00, 0x44, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000b80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000c00)=[{0x3, 0x4, 0xb, 0x2}, {0x5, 0x4, 0x2, 0xa}, {0x0, 0x3, 0x5}, {0x5, 0x5, 0xf, 0x1}, {0x4, 0x2, 0x4, 0x1}, {0x0, 0x5, 0xa, 0x6}, {0x1, 0x5, 0x1, 0x2}, {0x2, 0x3, 0x10, 0x1}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@fallback=r6, 0x24, 0x0, 0x100, &(0x7f0000000d40)=[0x0], 0x1, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@cgroup=r5, r7, 0x21, 0x10, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000980)={r1, &(0x7f0000000880)='\\!\\]\'#)([\'\x00', 0x40, &(0x7f00000008c0)={@align=0x8, {0x3, 0x8, 0x3, 0x7}}, 0xf, &(0x7f0000000900), &(0x7f0000000940)=0x3}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r10, &(0x7f00000009c0)={0x1000000c}) 3.093460281s ago: executing program 2 (id=2572): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x1000}}, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.930405434s ago: executing program 1 (id=2573): socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002020782500000000002020207b1bf0ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x0, 0xff, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0x7, 0x5}, {0x7, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8892}, 0x4008050) 2.406410202s ago: executing program 5 (id=2575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) r8 = epoll_create1(0x80000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000002000000732ac0ff00000000180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000010850000004500000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200)={0x4}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_getaddr={0x2c, 0x16, 0x800, 0x70bd2c, 0x27dfdffd, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x101, 0x5, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) 2.195928385s ago: executing program 4 (id=2576): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.183629322s ago: executing program 1 (id=2577): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c05c7fddbdf25060000000800420000ed76a1d4592ed907cc8903000000005ef082ce87a71e7128ac40fef27c9fdbcc67d0b830ec497066b014325da30b0057"], 0x1c}, 0x1, 0x0, 0x0, 0x208c1}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd, 0x11}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfb9}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4e9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2a7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe18}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6fa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x480}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x6, 0x1, 0x5, 0xa2e, 0x3, 0x0, 0x9, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x810}, 0x4008000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 2.007420513s ago: executing program 2 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000008100000002000000f51b000080050300", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000030000000800"/24, @ANYRES32, @ANYBLOB="a76822a3ae45ddbabc3603af7c24dde79b78402e818b31b6f215877a4382cbd91a161be5a5b4f178eba33da83c6853b6a6a465c5c0090dd24acfbbd138060472ff337a049610e7e28cd2d5d4"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0xcaa}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="91f858cf", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa3000000000000b704000000000000850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind(r1, &(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3, 0x4}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x55, &(0x7f0000000180), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x40d1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0xf589, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}, 0x1c) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xb}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) listen(r7, 0xfffffffd) unshare(0x68040200) 1.970352077s ago: executing program 3 (id=2579): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xc}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 1.810785241s ago: executing program 1 (id=2580): socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000046b1a29a900000049eafc524e3d2345b8b2f7cda4b3e590e16c886a90cdd2ba0f1d0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000340)=""/154, 0x9a}], 0x2, 0x9, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000700)={0x530, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x0, 0x1, 0x0, {0x0, 0xd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x7}}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x71, 0xfc, "e2d7091f41af2698abc848c0fc58ed7bd0b5041877efd71c0b905a01d4228cca8c9d0ba8204f315f94d0310af0ada3b688761f92872c16c300010c5791260de7c27e037451eef24e1fafa0f70da611d7eaf24d495007ec842cdfe38872c70017a1b7f9fd708784acc8047e7a20"}, @NL80211_ATTR_FILS_ERP_RRK={0x74, 0xfc, "b67c9c4d97e25abc0afd7d8dec6a205023e0940fd6c9d7f3e5bfad40741f0928343dfab30f7dc0dc69e5e7303b4e875d2ba84211f42bcdc3b37152303d3b0079af1d8b0d6f9ba4eb3fbc3a988b06cfeb00d0777c7e19255ff69b5c9ac9a2bccc6e2ffadc54020cc1b7a69c39e3e806fa"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "9eb67dd72f62446e61c23c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x1b, 0xfa, "e8528d6aa4f28aa8cda779426df9fc2142039af8f5bfea"}, @NL80211_ATTR_FILS_ERP_RRK={0x94, 0xfc, "1bae162d251ce68a04f6fd1af7cc85051e000a34c5177d776170413668aa32566a1ccac8c6ce3f215b5a5a2a4154e105db9dff6ae9b7cdccf53db8b47cde7f0693742ac635a99fc2ac031727ad6a173e68c0c53ca634378fbdb921a3dc0bf3207fac68614708218cb659c4d17a5693bdfdadd08bcb466903d96f93f02e8cb9a003a27e6abab39c32737f7e0b859769d4"}, @NL80211_ATTR_FILS_ERP_RRK={0x9d, 0xfc, "aab2ffb5a6d7e0c8edeee07a4b91ef16a54cfb4b052d1a34ee56fe91244aa34f79589a48ac38a5f60d18e9ee9a18c6d74b0a317bed5fdf51fc363fb07af8e4be0cbd1c5709931da66e15b55b70f5a1d675f09885a934c7f444f98bb7710ddaf66e708cab2e435d2d8a9393a06bc5ae9142579f9d41a46ba43c69774a6baf8a2b919c495ef9f2076b641cc587d0ca203dbbf9721cd7f7fe768a"}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x2a, 0xfe, "eb241c4d2603957f158cf196a5304c94831f0a6301e2413af9c48025a3f13a0822e6890ff79c"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}, @NL80211_ATTR_SAE_PASSWORD={0x5d, 0x115, "3dd596314e9bc2daeaf509fbe615a4c7197f07e953aa6aeee7927fbae5467e23274e62d199547c77c29d282d20032c69c3e55ea55d169829d1716256f9c9921985543e7adf2533206d266d3e59f6edacc400364c27e94e2743"}, @NL80211_ATTR_SAE_PASSWORD={0x57, 0x115, "2ed85a62e8f28bed0f8bcf718ea939d059a7e7c4d2e77e643c7b602f55bf42bfcec32ff95c2fee8cf41bcd662707c80d00e95601c39a4719b19d040e463a7a8753aa37d0d2fe941228152f52c73529544bd9c6"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x18, 0xfe, "2bed860cc2212017da9125e7455f50c1fc8b3fff"}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0xf, 0x8000, 0x7, 0xfffd}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_IE={0xa9, 0x2a, [@measure_req={0x26, 0x34, {0x0, 0xcd, 0x7, "b9857aa7b6eb47b39a92824720127b141adf148eaa3f83d10df3e93a65b72297d5fab1af515be24fc4e0375de4640a0dbf"}}, @preq={0x82, 0x6d, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x1, @broadcast, 0x2fc, @value=@device_b, 0xfe3, 0x9, 0x7, [{{0x1}, @broadcast, 0xf}, {{0x1}, @device_b}, {{0x1}, @broadcast, 0xf8}, {{0x1, 0x0, 0x1}, @device_b, 0x66}, {{0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}]}}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa6, 0xfa, "88d39304aef4bbdd12c9122482b1d2e346fbfe9bb77d8090e8e0e583b801dc09e5528566cd8158bd1afabd43ddde59cade16cb3f1cdf15fc214f876ebfa975fe2df15d4b40318e7235b617eb094a151e45b970976ce48ce4a6ab78416f3beb8380be4374a1860d44db6f946ce6f376113df96e4e588335808c944430f0ed7146100465d49a7bd62cafc3c0f0ac8844cf4de71cece578a88da8066cdf7075c79c5fcb"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1000}]]}, 0x530}, 0x1, 0x0, 0x0, 0xc011}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r5, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x14, 0x0, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500"], 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r9, 0x1, {0x0, 0xff, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x7, 0x5}, {0x7, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 1.81029773s ago: executing program 5 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}}, 0x20}}, 0x40000a0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.808707064s ago: executing program 4 (id=2582): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="317e3eb6a4b41153f0bf0f10724e0f6f99ad00774713f40d5a21941798ba548e68333dc90e972971bc102284b51833c1615bee64c858ba7f559d4382855251bfbd4c6280a3cc604488b2ebcabcd850624344be37e60ab905a123a9ee08095fcea219e1c9a722fbdfcb7e79426b3ca2eee01e6b73b1a33cae3c33f7de84a7743cbcbb98e8e79cd54ff5f74f1a58263e9c0d37aed53703000000000000007ace0c62613f08"], 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000300)={0x8, 0x400, 0x9, 0x2, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800124000190003050015000000000005000100060000000500050f0a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c69700023619af600d1324fe0d2992dc5c0cbfdf1a5ccb4e971b1044a379fdc08ed223165852fca78e62111cd4ffa4161eccc4c2b5335f93408330f20ed2afe81601bc5fbb25327f45785a9d268057ff65a284d5a298345f571ecde1eb2fcc6080d8aa9a764628bdfcad919ee836d45435f9fc8993b613c911d"], 0x60}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x4000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x56, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) 1.719189024s ago: executing program 5 (id=2583): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000027c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x247c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x16, 0x0, 0x0, &(0x7f0000002900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000452f00fc0000000000000000000000000000040000000000000000000000000000000124208100000100001f00000800000086dd080088be86ddffff10000000010000080022eb000000002000000002000000000000000000000008006558000000000000000000"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280"], 0x78}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x7, 0x6, 0xf043]}, 0x0, 0x1, 0x5, 0x0, &(0x7f00000002c0)=[{{@align=0x7, {0xffff, 0x585, 0x5, 0x3}}, 0xe2, 0x0, '[+\x00'}, {{@align=0x5, {0x2, 0x8000, 0x5, 0x3fb}}, 0x3, 0x0, '\'!\xd8\x00'}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000000000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r4, 0x0, 0x6c}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r6, @ANYBLOB="d3a4cc2a4656ea7f9297157423887b67c82828129a3ba54bdeacf443e9cfb3a828ad8c158f043cc8b6749d2a9b30dc68ca06", @ANYRESOCT=r6, @ANYRESOCT=r5], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2b000000211c61"], 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xfffffffffffffffb, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0x9, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0x3500, 0x0, 0x0, 0x0, 0x101, 0x800008, 0x35ced141}}, 0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000080), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x4, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 1.716886346s ago: executing program 3 (id=2584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000122, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x5a, &(0x7f0000000080)}, 0x9a) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000005540)={0x3, "dd5a16"}, 0x4) r4 = socket(0x1, 0x1, 0x0) unshare(0x22020600) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e949d17c7324939c505bb17af20a281393794845b33b9ded8609f6d1b7f3156a2b4e6cbb0ae0a61f906d7b8a2b7955221c9b7f32108ca5259c6f5fee279d3e1c07e2c4c6ccbe4d1db2da266017834ebc18ae6a3a98f3b7b161185a62b1a83815266938fba4d54002844ce37acd6841c74e0c794f99689f6d02e83a1dc255ef9ed552f6425d67df6fba0f6a7e2fd4b04b172e081f6bcf3798d0adf79b11db5643a8d7c772118902da77dc32fc9daf55c05e28318e032a5103c31fb4b689"], 0x48) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000008400000000000000b8a01b0900000400"], 0x18, 0x24000001}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000900)=0x4, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000200), &(0x7f00000000c0)=@tcp6=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 1.467564484s ago: executing program 3 (id=2585): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback, 0x3}, 0x1c) 1.396798341s ago: executing program 4 (id=2586): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000100)="3c0000003b00050001000000000000000a01000025000100534d432d425046544553542d554549442020202020202020202020202020202000000000", 0x3c) write(r2, &(0x7f0000000140)="380000003b00050002000000000000000a01000024000100534d432d425046544553542d5545494420202020202020202020202020202020", 0x38) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) listen(r3, 0xa) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) accept(r5, 0x0, 0x0) write(r2, &(0x7f0000000200)="140000003b000103030000000000000004010000", 0x14) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x28, 0x301, 0x2270bd24, 0x25dfdc02, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4808}, 0x2000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x20010, 0xffffffffffffffff, 0x77660000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xa50b, @mcast2, 0x3}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6_udp(0xa, 0x2, 0x0) 1.336290154s ago: executing program 1 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x18, r1, 0x1, 0x10, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.298448542s ago: executing program 1 (id=2588): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x64}}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000023c0)={&(0x7f0000002340)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="78e19c7e3859723140506f2424abed5bd09451bf6a9bd41d25f00410fa049a5ef402c6d019cdda4b24f1c10edfe09a0d657579520882dd750a59152db8f18f75a9bf9a08e0cd9debb6250df6db91b8c797a51a0f3285f22b8976a29d9ef8175cefedaa2c5d69bbe276bdfd38847efa3ad732c9f75d8bbd2af78697d5a257c91a4001874ccc0c342088499581102cb96c6493e8a466f5c76b29a35eb20fc028a659d9880a2d21f763e2b36b7a74ee5d6cd8964e3a72a00f5b3bda2e32622d39584dd25643082c486e81e45f3a3d06630f5409ee712baf22d1448715a45f539c42a2ef9674cab9ce9d6b20e1", 0xeb}, {&(0x7f0000000740)="d626649f68d0144968d128a95b9b7dbe3236023df9ecbfaae3da25801f6b77cdb70934fd0b598f515780bc42da9c8ddb6d2fa432165df4c64cd629f5fb07d6b165f6b595102fdddfb49b9a88f3aaf4dc094bcb6682391c715e9621e9f340fa70dab44a48201f7e9b4a9b9dbf06734fdf1749bd548ed60bbeac46408f603a390d580cffc3d83b97598e812d046f6a021d40ef50904964761cabb110870b3fad990f634a3189318b6d8f4628044b307c5b752a5972d1423641478f0142c7c8600864f59daf104e6c61d5e508039e509c2640b2", 0xd2}, {&(0x7f0000000840)="e968e9567aa80fa793023756d9e6d79b6467ef459af6422ed35237872cd1a186de1bd58ff3e20cb44e949ceab26189c50467fcdfd97b855778a0945ba680cbbcaaf16552c11a7d4bfb5341def18ba92055da6365bad3e895ce0604a13612f2fdc6a04acac7f931c2c9e986710c04f217607e4f21b0b95945e9729ba3524afeb8a7ecd582ab8b0686b087ec4fd7a584137c578164139e6085f42a2b5c5395e6c75878f1cd8beb0ce32a1e3c3ae7dd0f14f871e0dcd137459f5b3fd46b4d0ec593f10971a4b373ee124e4b9d2aa565cae252e65392b60a26b5c3313c0fb923e53a69ff2858466b36fb27c1", 0xea}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="ffe4d208b96eba270331ed3acf49dc01da622131d0630933b1a1107b0f20119d9d1f667709", 0x25}, {&(0x7f00000022c0)="f8a9b3f69ce37a72f8646cc485fde1abce9af73552ec0a93a0248b3823c4a88458eebd3ade445d0d0b2a3849394448c20c0c962e7e8d2d8c5b4e03d9e6632f8a0368746cf929ffdb66a58018e8d7409f7f400c31284d875bf573f5a1b99650c6bc", 0x61}], 0x7, 0x6, 0x0, 0xa2, 0x8, 0xa, 0x2, 0x2}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c000000090601020000000000000000050000054c0007801400170063616966300000000000000000000000080009400000000a0c00194000000000000000090900130073797a31000000000900120073797a3200000000050007000100000008000940ffdffffa050001000700000005000100070000000500010007000000100031750c000780060004404e2200000900020073797a3000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fc03000000080000000001000081ffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d1338e66ea9369c400"/128]}, 0xf8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000300)={r7, 0x400}, &(0x7f0000000240)=0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x2, 0xd) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000480)={@initdev, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r8, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newneigh={0x54, 0x1c, 0x8, 0x70bd27, 0x25dfdbff, {0x1c, 0x0, 0x0, r10, 0x4, 0x0, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_PROBES={0x8, 0x4, 0x8b}, @NDA_IFINDEX={0x8, 0x8, r11}, @NDA_DST_MAC={0xa, 0x1, @random="5beda3bbd6f9"}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PROBES={0x8, 0x4, 0xfffffff7}]}, 0x54}, 0x1, 0x0, 0x0, 0x220000c0}, 0x4004) 1.088907098s ago: executing program 2 (id=2589): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x18, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x4}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, 0x0, 0x0, 0x4ab2e41821fb85f6}, 0x20) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101, 0x2000000}, 0xfffffffffffffe02) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r6, 0x2e, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES64=r0, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004084) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) 395.552278ms ago: executing program 3 (id=2590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) (async) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="3d87a23ed346", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xefa14eda1b0c18be}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0), 0x4) 323.053677ms ago: executing program 4 (id=2591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)={0x10, 0x1002}, 0x10}, {&(0x7f0000000240)=ANY=[@ANYBLOB="180000003a00010029bd7000fddbdf250800c800", @ANYRES32, @ANYBLOB="6ae88c87bd11505c9180c117b591825841983551142090e66c8f6324a8fd8650bcfbb8b6d10a55107d6e1cb3e66d8f2392613c6f0b8010446a9e515a39a330d4c5ec70c5a668b924f277bfbd1b0ad0fd941779959c8dbe2a9b297314fbd53c74d0134e504e6e661a9efe09ea99f8821a61b5fbe852b5f0"], 0x18}], 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0x3, 0xff, 0x4, 0xe17, 0x2, 0x0, [{0xffffffffffffff00, 0x7f, 0x8, '\x00', 0x880}, {0x8, 0x5, 0x0, '\x00', 0x1}]}) r3 = socket(0x10, 0x803, 0x0) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20e9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x3c}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x93e000, 0x1000}, 0x20) close(r5) syz_genetlink_get_family_id$mptcp(0x0, r4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r3) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, r7, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x15}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4040880) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 314.285478ms ago: executing program 3 (id=2592): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="3a74be710dc53efe85200000050000001856000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 15.655025ms ago: executing program 1 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04", 0x1}], 0x1, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000680)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES32, @ANYBLOB="502afcb463e842918a67eda1bb120d20200c333349938af7eb02426eaa96301b3161705efad9b8e04867b17e63150baa8910f297576bb8381bbcd57992a0adba7d45b18c8ecd7482775d132c92397f0b6245bbab970163625ae0c253f945515102677ab028ed62557b78a7eafbfc29b78d0ea2be4159269ec9844adcafc578dcddf2cf62a1cfdd1d985979584d807146df9af413805b81149454ded9efa608ab7eac242b6cb848f28013b7c74ccf804c8e8e53dcc8c39efdb643d7133bea627b4ee2a5fac692e5f17a442f83b1d78fd0c735a501e0e4396252c246a251b26f13bca9cd4104a39503bf14312d67844079a37f4950c3e99b09aee9c51a9f38cd48317de6f99a9e2d927fbd726266ec777dbffb82d7ad2f1f344fc72646f7e4eec803a92fde7a7cef629761ba639ee6941cbf6f9f0335e5fcf08fb36b9daadbc434712e07011527b786a6271d49c4a8ed783b5788948a9264ace52ad75d046bb46b0cf8fd69cd6136e49b0a0e5566dd9603fac75be49ef0395fb8794a6284fc4f733678d7a1d7c4849765d001765ca2210b671db2de370fe097b52d8ae02dca69c5cb82ff5826bd0ba4bc7d302ca7edbed13afe966c81f6face1ed9adbef29f39d0a596385f3bf2a53e22d8275fa78cec95edc7f6aa6e73b079476d988ff52bfff97b8ba19981671ab3263b8b61fb0970c04aa851e30413aac5c2857daed87b7adb75b44ec18c406a76147eb4dc177d3c7b9dae964c840d31189b18d2d54c3ebc3917053bf77628c6b0b6e61cdc4ccaee34c985a5930b9f0e7ba579af75a63ff7ab9e918475845153b5226493d6d5a8478cc034a9b9ea5cc7c0b6791d8e29540e3da3380bec7dcc24ee14d3cb9270118cd577402c47fc585821e6de79b9eb97f8c7656a2555bd56d082c66af7ad778fa7d98429102f0d8ffc9f543b4994160a5d9e5119aa41abab9158f5c9591c1aadd6cc0b862e96598a2066847ed12a72f83ec139b4afbf59e44b7547c5c3a8bb1c57c6de47557ab962906fc36cb5d7252069ca88bd2a98794b9148d2c1c5e5106772df94"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x15, 0x4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r8, &(0x7f0000000840)=[{&(0x7f0000000580)="06c3", 0xffd8}], 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) 0s ago: executing program 3 (id=2594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff01000000", @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b00"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002060100f26568d09be8350000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x15809}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): to user failed while replacing table [ 274.662645][T11406] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 274.776821][T11414] smc: net device lo applied user defined pnetid SYZ0 [ 275.357240][T11451] __nla_validate_parse: 3 callbacks suppressed [ 275.357261][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 275.707425][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.783940][T11457] ip_vti0 speed is unknown, defaulting to 1000 [ 276.054905][T11469] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 276.279244][T11472] bond5: entered promiscuous mode [ 276.285108][T11472] bond5: entered allmulticast mode [ 276.300828][T11472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.396214][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 276.499577][T11469] bridge3: entered promiscuous mode [ 276.499847][T11469] bridge3: entered allmulticast mode [ 276.563705][T11469] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 276.576240][ T1117] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 276.671943][T11473] bridge4: entered promiscuous mode [ 276.685977][ T7705] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 276.687046][T11473] bridge4: entered allmulticast mode [ 276.703201][T11473] bond5: (slave bridge4): Enslaving as a backup interface with a down link [ 276.937373][T11490] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1296'. [ 277.020675][T11490] x_tables: unsorted underflow at hook 3 [ 277.309963][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1299'. [ 277.312439][T11502] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1298'. [ 277.312462][T11502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 277.460429][T11502] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1298'. [ 277.460469][T11502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 277.717832][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 277.861664][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'. [ 277.861730][T11514] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 278.518738][T11541] openvswitch: netlink: Multiple metadata blocks provided [ 278.540606][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 278.547218][T11538] 8021q: adding VLAN 0 to HW filter on device .` [ 278.559279][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.590309][T11538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.740880][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 278.740993][T11548] openvswitch: netlink: Message has 4 unknown bytes. [ 278.746775][T11538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.752513][T11550] openvswitch: netlink: Message has 4 unknown bytes. [ 278.766540][T11538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.798651][T11538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.798679][T11538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.856612][T11538] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.858551][T11538] veth1_vlan: left promiscuous mode [ 278.859814][T11538] veth0_vlan: left promiscuous mode [ 278.861699][T11538] veth0_vlan: entered promiscuous mode [ 278.864192][T11538] veth1_vlan: entered promiscuous mode [ 278.904761][T11538] veth1_macvtap: left promiscuous mode [ 278.914624][T11538] veth0_macvtap: left promiscuous mode [ 278.921838][T11538] veth0_macvtap: entered promiscuous mode [ 278.923166][T11538] veth1_macvtap: entered promiscuous mode [ 278.979630][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.982022][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.984179][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.985241][T11538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.039118][T11538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.044744][T11538] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 279.056156][T11538] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 279.060411][T11539] netlink: 'syz.0.1307': attribute type 3 has an invalid length. [ 279.061847][T11539] netlink: 'syz.0.1307': attribute type 3 has an invalid length. [ 279.076272][ T7704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.078277][ T7704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.078367][ T7704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.079851][ T7704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.177639][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.177771][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.179968][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.180070][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.089637][T11591] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.386791][T11596] vlan2: entered promiscuous mode [ 280.599605][T11606] ipvlan0: Caught tx_queue_len zero misconfig [ 281.011316][T11624] __nla_validate_parse: 6 callbacks suppressed [ 281.011336][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 281.376264][T11631] x_tables: duplicate underflow at hook 1 [ 281.643780][T11635] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1332'. [ 281.703690][T11639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 281.724500][T11633] ip_vti0 speed is unknown, defaulting to 1000 [ 281.849060][T11638] gretap2: entered allmulticast mode [ 282.534758][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 282.661787][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 282.989309][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 283.140409][T11696] netlink: 'syz.4.1346': attribute type 2 has an invalid length. [ 283.140433][T11696] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 283.855219][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 283.973544][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 284.387702][T11749] netlink: Conntrack attr has 4 unknown bytes [ 284.523692][T11755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1360'. [ 284.531156][T11753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1360'. [ 287.357549][T11855] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 287.403261][T11855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.694707][T11861] netlink: 'syz.1.1382': attribute type 23 has an invalid length. [ 287.694748][T11861] netlink: 'syz.1.1382': attribute type 9 has an invalid length. [ 287.716824][T11861] bridge2: entered promiscuous mode [ 288.132421][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.371596][T11876] geneve1: entered promiscuous mode [ 289.674821][T11897] __nla_validate_parse: 2 callbacks suppressed [ 289.674841][T11897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1392'. [ 289.739179][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 289.763191][T11902] netlink: 'syz.1.1393': attribute type 13 has an invalid length. [ 290.040442][T11902] netlink: 'syz.1.1393': attribute type 13 has an invalid length. [ 291.261030][T11940] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1399'. [ 292.925347][T11905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.292316][T11955] IPVS: set_ctl: invalid protocol: 51 172.30.0.5:20000 [ 293.521194][T11965] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 293.781777][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1405'. [ 293.919287][T11977] x_tables: duplicate underflow at hook 1 [ 293.920089][T11976] x_tables: duplicate underflow at hook 1 [ 295.671023][T12010] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 296.280320][T12030] Bluetooth: MGMT ver 1.23 [ 296.571236][T12036] veth0: entered promiscuous mode [ 296.611488][T12036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'. [ 296.612825][T12036] veth0: left promiscuous mode [ 297.013728][T12047] x_tables: duplicate entry at hook 1 [ 297.137984][T12045] syzkaller0: entered promiscuous mode [ 297.138024][T12045] syzkaller0: entered allmulticast mode [ 297.230780][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1424'. [ 297.364881][T12051] netlink: 'syz.3.1424': attribute type 1 has an invalid length. [ 297.475399][T12060] veth0_to_bond: Caught tx_queue_len zero misconfig [ 297.754124][T12065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 298.457977][T12095] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1434'. [ 299.155089][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 299.155115][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'. [ 299.155130][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 299.155373][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'. [ 299.155389][T12114] netlink: 'syz.2.1440': attribute type 6 has an invalid length. [ 299.282738][T12124] pimreg: entered allmulticast mode [ 299.601135][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.759203][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1443'. [ 300.278470][T12148] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 300.479439][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 300.637320][T12159] FAULT_INJECTION: forcing a failure. [ 300.637320][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 300.637353][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.4.1449 Not tainted syzkaller #0 PREEMPT(full) [ 300.637374][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.637406][T12159] Call Trace: [ 300.637414][T12159] [ 300.637422][T12159] dump_stack_lvl+0xe8/0x150 [ 300.637454][T12159] should_fail_ex+0x410/0x560 [ 300.637483][T12159] _copy_from_iter+0x1d3/0x1660 [ 300.637507][T12159] ? __alloc_skb+0x27a/0x7a0 [ 300.637532][T12159] ? __alloc_skb+0x27a/0x7a0 [ 300.637556][T12159] ? __alloc_skb+0x27a/0x7a0 [ 300.637579][T12159] ? __pfx__copy_from_iter+0x10/0x10 [ 300.637598][T12159] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 300.637624][T12159] ? __alloc_skb+0x27a/0x7a0 [ 300.637645][T12159] ? __alloc_skb+0x27a/0x7a0 [ 300.637673][T12159] ? netlink_sendmsg+0x650/0xb40 [ 300.637692][T12159] ? skb_put+0x112/0x210 [ 300.637718][T12159] netlink_sendmsg+0x6c0/0xb40 [ 300.637747][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.637775][T12159] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.637799][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.637818][T12159] sock_sendmsg_nosec+0x14e/0x190 [ 300.637841][T12159] ____sys_sendmsg+0x54e/0x850 [ 300.637873][T12159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.637908][T12159] ? import_iovec+0x73/0xa0 [ 300.637934][T12159] ___sys_sendmsg+0x2a5/0x360 [ 300.638016][T12159] ? __lock_acquire+0x747/0x2de0 [ 300.638039][T12159] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.638099][T12159] ? __fget_files+0x2a/0x420 [ 300.638125][T12159] ? __fget_files+0x3a2/0x420 [ 300.638159][T12159] __x64_sys_sendmsg+0x1b1/0x290 [ 300.638187][T12159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.638233][T12159] do_syscall_64+0x166/0x520 [ 300.638250][T12159] ? trace_irq_disable+0x3b/0x140 [ 300.638268][T12159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.638287][T12159] ? clear_bhb_loop+0x70/0xc0 [ 300.638307][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.638325][T12159] RIP: 0033:0x7f0e52b9e199 [ 300.638341][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.638357][T12159] RSP: 002b:00007f0e50df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.638377][T12159] RAX: ffffffffffffffda RBX: 00007f0e52e25fa0 RCX: 00007f0e52b9e199 [ 300.638393][T12159] RDX: 0000000000008004 RSI: 00002000000006c0 RDI: 0000000000000003 [ 300.638404][T12159] RBP: 00007f0e50df6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.638415][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.638426][T12159] R13: 00007f0e52e26038 R14: 00007f0e52e25fa0 R15: 00007ffda8f4dfb8 [ 300.638453][T12159] [ 300.998819][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.999943][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.016671][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.032235][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.044237][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.294761][T12169] netlink: 'syz.2.1450': attribute type 20 has an invalid length. [ 301.364239][T12169] netlink: 'syz.2.1450': attribute type 20 has an invalid length. [ 301.397824][ T1158] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.398049][ T1158] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.398116][ T1158] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.398181][ T1158] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.490433][T12177] macvlan1: entered promiscuous mode [ 301.524237][T12180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.804341][T12187] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 302.059301][T12189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.117158][T12189] __nla_validate_parse: 6 callbacks suppressed [ 302.117196][T12189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1459'. [ 302.125262][T12194] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 302.225382][T12198] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 302.263443][T12194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.274124][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 302.274166][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 302.604065][T12203] bond4: (slave geneve2): making interface the new active one [ 302.617262][T12203] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 302.739578][ T1034] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.890741][ T7705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.890836][ T7705] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.890895][ T7705] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.059693][ T1034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.119919][T12161] ip_vti0 speed is unknown, defaulting to 1000 [ 303.146366][ T5626] Bluetooth: hci5: command tx timeout [ 303.258892][ T1034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.525837][ T1034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.633890][T12242] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 303.633915][T12242] netlink: 'syz.3.1469': attribute type 8 has an invalid length. [ 303.633928][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1469'. [ 303.809382][ T1034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.827610][T12246] bridge0: Caught tx_queue_len zero misconfig [ 303.919447][T12242] syzkaller0: entered promiscuous mode [ 303.919469][T12242] syzkaller0: entered allmulticast mode [ 303.968539][T12252] Bluetooth: ISO socket layer initialized [ 304.328515][T12268] netlink: zone id is out of range [ 304.328541][T12268] netlink: zone id is out of range [ 304.328550][T12268] netlink: zone id is out of range [ 304.328557][T12268] netlink: zone id is out of range [ 304.328565][T12268] netlink: zone id is out of range [ 304.328573][T12268] netlink: zone id is out of range [ 304.328583][T12268] netlink: zone id is out of range [ 304.395584][T12254] ip_vti0 speed is unknown, defaulting to 1000 [ 304.678212][ T1034] bridge_slave_1: left allmulticast mode [ 304.678251][ T1034] bridge_slave_1: left promiscuous mode [ 304.680741][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.740219][ T1034] bridge_slave_0: left allmulticast mode [ 304.740263][ T1034] bridge_slave_0: left promiscuous mode [ 304.741340][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.226877][ T5626] Bluetooth: hci5: command tx timeout [ 305.331316][ T1034] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.346718][ T1034] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.350579][ T1034] .` (unregistering): Released all slaves [ 305.372617][ T1034] bond1 (unregistering): Released all slaves [ 305.393867][ T1034] bond0 (unregistering): Released all slaves [ 305.422889][T12275] tipc: Enabled bearer , priority 0 [ 305.583807][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 305.686173][ T1034] ´: left promiscuous mode [ 305.687182][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 306.133986][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1483'. [ 306.233500][T12322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1483'. [ 306.262119][ T1034] ´: left promiscuous mode [ 306.530196][ T1117] net_ratelimit: 1718 callbacks suppressed [ 306.530235][ T1117] bond5: (slave bridge3): link status up again after 0 ms [ 306.541989][ T1034] tipc: Disabling bearer [ 306.546257][ T1158] bond5: (slave bridge3): link status up again after 0 ms [ 306.567657][ T1117] bond5: (slave bridge3): link status up again after 0 ms [ 306.568274][ T1034] tipc: Disabling bearer [ 306.590956][ T1117] bond5: (slave bridge3): link status up again after 0 ms [ 306.606151][ T1158] bond5: (slave bridge3): link status up again after 0 ms [ 306.626350][ T1158] bond5: (slave bridge3): link status up again after 0 ms [ 306.631920][ T1034] tipc: Left network mode [ 306.646430][ T49] bond5: (slave bridge3): link status up again after 0 ms [ 306.646494][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 306.757420][ T1117] bond5: (slave bridge3): failed to get link speed/duplex [ 306.957572][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 307.312521][ T5626] Bluetooth: hci5: command tx timeout [ 307.333619][T12339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 307.344019][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 307.566645][T12347] syzkaller0: left promiscuous mode [ 307.566685][T12347] syzkaller0: left allmulticast mode [ 307.590475][T12344] x_tables: duplicate underflow at hook 1 [ 307.829814][T12352] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1489'. [ 308.736499][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.736658][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.736828][T12161] bridge_slave_0: entered allmulticast mode [ 308.744738][T12161] bridge_slave_0: entered promiscuous mode [ 308.979838][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.002882][T12382] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.385898][ T5626] Bluetooth: hci5: command tx timeout [ 309.390935][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.391036][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.391182][T12161] bridge_slave_1: entered allmulticast mode [ 309.458042][T12161] bridge_slave_1: entered promiscuous mode [ 309.470558][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 309.470617][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'. [ 309.502038][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.502212][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.568934][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.569130][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.828735][ T25] ip_vti0 speed is unknown, defaulting to 1000 [ 309.848699][ T25] s: Port: 1 Link ACTIVE [ 310.140757][ T25] ip_vti0 speed is unknown, defaulting to 1000 [ 313.408434][ T1034] hsr_slave_0: left promiscuous mode [ 313.409294][ T1034] hsr_slave_1: left promiscuous mode [ 313.410086][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.411084][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.412079][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.412098][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.523548][ T1034] veth1_macvtap: left promiscuous mode [ 313.525216][ T1034] veth0_macvtap: left promiscuous mode [ 313.529031][ T1034] veth1_vlan: left promiscuous mode [ 313.529098][ T1034] veth0_vlan: left promiscuous mode [ 313.984974][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 314.010141][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 314.189387][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.206697][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.208165][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 314.268164][ T57] net_ratelimit: 6 callbacks suppressed [ 314.268225][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 314.301233][T12465] syzkaller1: entered promiscuous mode [ 314.301260][T12465] syzkaller1: entered allmulticast mode [ 314.501096][T12161] team0: Port device team_slave_0 added [ 314.528091][T12161] team0: Port device team_slave_1 added [ 314.706297][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 314.991113][T12475] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.250117][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.250134][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.250161][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.252580][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.252596][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.252621][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.382316][T12504] syzkaller0: entered promiscuous mode [ 315.382340][T12504] syzkaller0: entered allmulticast mode [ 315.387122][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 315.561134][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 315.572010][T12505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1510'. [ 315.803261][ T1034] IPVS: stop unused estimator thread 0... [ 315.824655][T12161] hsr_slave_0: entered promiscuous mode [ 315.835901][T12161] hsr_slave_1: entered promiscuous mode [ 315.836642][T12161] debugfs: 'hsr0' already exists in 'hsr' [ 315.836662][T12161] Cannot create hsr debugfs directory [ 315.896380][ T1117] bond5: (slave bridge3): failed to get link speed/duplex [ 316.347853][T12549] bond5: (slave bridge3): failed to get link speed/duplex [ 316.526365][T12539] syzkaller0: entered promiscuous mode [ 316.526390][T12539] syzkaller0: entered allmulticast mode [ 316.565930][T12553] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1520'. [ 317.315145][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.384597][T12581] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 317.803356][T12586] ip_tables: iptables: counters copy to user failed while replacing table [ 320.118369][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 320.171365][T12581] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 320.219122][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 320.221178][T12587] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 320.221237][T12587] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 320.576158][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 320.619878][T12613] Bluetooth: MGMT ver 1.23 [ 320.689672][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 320.859786][T12623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1528'. [ 321.120787][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 321.121116][T12625] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 321.121149][T12625] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 321.121188][T12625] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 321.238777][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 321.437207][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 321.465106][T12633] IPVS: ip_vs_edit_dest(): server weight less than zero [ 321.511691][T12161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.575037][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.578211][T12161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.592009][T12640] openvswitch: netlink: Geneve option length err (len 283, max 255). [ 321.672355][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.823241][T12161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.845090][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.860639][T12161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.879195][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.027366][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 322.121056][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.150866][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.169039][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.169138][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.193042][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.193146][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.205696][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 322.392840][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 322.397919][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 322.437972][T12161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.437997][T12161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.516911][T12664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1535'. [ 322.612689][T12676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1535'. [ 322.853977][T12679] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 323.029743][T12695] dummy0: Caught tx_queue_len zero misconfig [ 323.029767][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 323.938726][T12713] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1545'. [ 323.938782][T12713] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1545'. [ 324.099493][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 324.226442][T12730] tunl0: Caught tx_queue_len zero misconfig [ 324.407457][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.347242][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 325.348482][T12782] net_ratelimit: 19 callbacks suppressed [ 325.348496][T12782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.537538][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.539950][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.563451][T12766] dummy0: left promiscuous mode [ 325.785171][T12766] veth0_to_bond: left allmulticast mode [ 326.006170][T12766] geneve1: left promiscuous mode [ 326.006708][T12766] gre1: left promiscuous mode [ 326.006723][T12766] gre1: left allmulticast mode [ 326.006995][T12766] geneve2: left promiscuous mode [ 326.007008][T12766] geneve2: left allmulticast mode [ 326.065392][ T5280] netdevsim netdevsim4 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 326.067891][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.071522][ T9072] ip_vti0 speed is unknown, defaulting to 1000 [ 326.071598][ T9072] s: Port: 1 Link DOWN [ 326.071745][ T9072] ip_vti0 speed is unknown, defaulting to 1000 [ 326.077811][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 326.175795][T12798] veth0: Caught tx_queue_len zero misconfig [ 326.306637][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 326.458882][T12815] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 326.519850][T12807] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1561'. [ 326.538513][T12815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.579411][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 326.579561][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 326.582033][T12798] macsec2: entered promiscuous mode [ 326.616795][T12814] bond7: (slave veth0_to_bond): Releasing active interface [ 326.658053][T12814] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 326.685899][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 326.775003][T12819] bridge3: entered promiscuous mode [ 326.800897][T12819] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 326.821710][T12815] bridge4: entered promiscuous mode [ 326.838995][T12815] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 326.941803][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 326.948152][T12823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1565'. [ 326.958938][T12161] veth0_vlan: entered promiscuous mode [ 327.001183][T12831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1567'. [ 327.019988][T12161] veth1_vlan: entered promiscuous mode [ 327.083426][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 327.132149][T12837] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1569'. [ 327.153135][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1567'. [ 327.218246][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 327.237837][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1570'. [ 327.326083][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 327.336086][T12161] veth0_macvtap: entered promiscuous mode [ 327.433903][T12161] veth1_macvtap: entered promiscuous mode [ 327.559172][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 327.681659][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.773909][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.868151][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.868242][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.868374][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.868442][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.895739][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 328.037300][T12547] bond5: (slave bridge3): failed to get link speed/duplex [ 328.534170][ T7704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.534190][ T7704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.617606][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.617628][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.665213][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 328.951692][T12877] bond6: option ad_user_port_key: invalid value (65535) [ 328.952976][T12877] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 329.034769][T12877] bond6 (unregistering): Released all slaves [ 329.628995][T12889] digital: digital_start_poll: Unknown protocol [ 329.754171][T12901] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 329.901560][T12901] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 330.416320][ T12] net_ratelimit: 13 callbacks suppressed [ 330.416341][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 330.745704][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 330.781240][T12950] syzkaller0: Caught tx_queue_len zero misconfig [ 330.826962][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 330.937983][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 331.047299][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 331.157175][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 331.269243][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 331.361087][T12970] nbd: socks must be embedded in a SOCK_ITEM attr [ 331.364563][T12970] block nbd1: shutting down sockets [ 331.560197][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 331.929143][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 332.037540][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 332.125059][T13007] ip_vti0 speed is unknown, defaulting to 1000 [ 332.160721][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 332.444727][T13015] __nla_validate_parse: 10 callbacks suppressed [ 332.444750][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 332.953132][ T12] tipc: Subscription rejected, illegal request [ 334.999096][T13113] pim6reg: entered allmulticast mode [ 335.005851][T13110] pim6reg: left allmulticast mode [ 335.437329][ T114] net_ratelimit: 16 callbacks suppressed [ 335.437383][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 335.548147][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 335.678845][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 335.699832][T13126] syzkaller1: entered promiscuous mode [ 335.699855][T13126] syzkaller1: entered allmulticast mode [ 335.934687][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 335.934740][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 335.934764][T13136] netlink: 'syz.1.1625': attribute type 14 has an invalid length. [ 335.945902][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 336.009855][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1626'. [ 336.237593][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 336.396721][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 336.517223][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 336.625719][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 336.736324][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 336.845709][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 337.051089][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 337.609499][T13198] vlan3: entered promiscuous mode [ 337.609526][T13198] team0: entered promiscuous mode [ 337.609539][T13198] team_slave_0: entered promiscuous mode [ 337.609747][T13198] team_slave_1: entered promiscuous mode [ 338.054734][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 338.054760][T13203] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1642'. [ 338.225245][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 338.581284][T13240] lo: Caught tx_queue_len zero misconfig [ 338.635111][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1651'. [ 338.648983][T13242] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1651'. [ 339.131019][T13258] netlink: 'syz.5.1654': attribute type 1 has an invalid length. [ 339.181381][ T5280] veth0_macvtap: left promiscuous mode [ 339.326381][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 339.326406][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1654'. [ 339.450388][T13264] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 339.774005][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1656'. [ 340.093373][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1658'. [ 342.129465][T13264] bond1 (unregistering): Released all slaves [ 342.251404][T13271] netlink: 'syz.5.1654': attribute type 1 has an invalid length. [ 342.259340][ T114] net_ratelimit: 20 callbacks suppressed [ 342.259376][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 342.822594][T13278] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.827056][ T57] bond5: (slave bridge3): link status up again after 0 ms [ 342.845622][ T7704] bond5: (slave bridge3): link status up again after 0 ms [ 342.858160][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1662'. [ 342.875355][ T7704] bond5: (slave bridge3): link status up again after 0 ms [ 342.894081][ T7704] bond5: (slave bridge3): link status up again after 0 ms [ 342.910883][ T114] bond5: (slave bridge3): link status up again after 0 ms [ 342.930117][ T114] bond5: (slave bridge3): link status up again after 0 ms [ 342.952826][ T57] bond5: (slave bridge3): link status up again after 0 ms [ 342.967836][ T57] bond5: (slave bridge3): link status up again after 0 ms [ 342.986213][ T57] bond5: (slave bridge3): link status up again after 0 ms [ 343.218837][T13316] netpci0: tun_chr_ioctl cmd 1074025678 [ 343.218861][T13316] netpci0: group set to 0 [ 343.270794][T13323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1666'. [ 343.412390][T13323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.437566][T13323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.443912][T13323] bond0 (unregistering): Released all slaves [ 343.516688][ T57] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 343.516908][ T57] veth0_to_bond: left promiscuous mode [ 343.536009][ T57] bond2: now running without any active interface! [ 343.710815][T13336] netlink: 'syz.5.1670': attribute type 1 has an invalid length. [ 343.856452][T13337] ip6tnl1: entered promiscuous mode [ 343.856475][T13337] ip6tnl1: entered allmulticast mode [ 343.861557][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 343.870656][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1673'. [ 344.277904][T13367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1675'. [ 344.602463][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1680'. [ 344.953425][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1681'. [ 345.064888][ T30] audit: type=1800 audit(1791411605.219:4): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1681" name="blkio.bfq.time_recursive" dev="tmpfs" ino=150 res=0 errno=0 [ 345.703419][T13419] syzkaller1: entered promiscuous mode [ 345.703446][T13419] syzkaller1: entered allmulticast mode [ 345.987476][T13423] bond2: entered promiscuous mode [ 346.246268][T13442] bond6: option miimon: invalid value (18446744073709551361) [ 346.246292][T13442] bond6: option miimon: allowed values 0 - 2147483647 [ 346.272588][T13442] bond6 (unregistering): Released all slaves [ 346.717254][ T5626] Bluetooth: hci5: link tx timeout [ 346.717354][ T5626] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 346.736239][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 346.886427][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 346.886525][T13484] netlink: 'syz.5.1694': attribute type 10 has an invalid length. [ 346.886541][T13484] netlink: 'syz.5.1694': attribute type 5 has an invalid length. [ 346.886554][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1694'. [ 346.908899][ T5626] Bluetooth: hci5: link tx timeout [ 346.908934][ T5626] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 346.973880][T13484] geneve3: entered promiscuous mode [ 346.973903][T13484] geneve3: entered allmulticast mode [ 346.989111][ T7704] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 42264 - 0 [ 346.989185][ T7704] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 42264 - 0 [ 347.010515][ T114] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 42264 - 0 [ 347.012124][ T7705] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 42264 - 0 [ 347.187640][T13495] netlink: 'syz.2.1697': attribute type 362 has an invalid length. [ 347.213830][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 347.553656][T13501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.555817][ T57] net_ratelimit: 31 callbacks suppressed [ 347.555900][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 347.644026][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.671424][T13511] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 347.707567][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 347.815807][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 347.904655][T13521] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 347.957217][T13521] syz_tun: entered promiscuous mode [ 348.006222][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 348.117379][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 348.228923][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 348.314960][T13553] __nla_validate_parse: 4 callbacks suppressed [ 348.315058][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 348.337229][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 348.446370][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 348.557562][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 348.686027][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 348.686934][T13561] macsec0: entered promiscuous mode [ 348.713203][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 348.747302][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 348.811540][T13561] veth1_macvtap: left promiscuous mode [ 348.884798][T13561] macsec0 (unregistering): left promiscuous mode [ 349.092974][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 349.124494][T13571] ip6gre1: entered promiscuous mode [ 349.124517][T13571] ip6gre1: entered allmulticast mode [ 349.142433][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.142645][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.166061][ T5726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.264761][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 349.348684][T13581] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1717'. [ 349.455676][ T5726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.538897][T13587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1718'. [ 349.595634][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.725574][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 349.762919][T13597] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.1721'. [ 350.089086][T13612] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1724'. [ 350.091488][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1724'. [ 350.166202][T13613] veth1_to_team: entered promiscuous mode [ 350.167628][T13613] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 350.168718][T13613] hsr1: entered promiscuous mode [ 350.363870][T13611] syzkaller0: entered promiscuous mode [ 350.363896][T13611] syzkaller0: entered allmulticast mode [ 350.539015][T13628] netlink: 'syz.3.1730': attribute type 4 has an invalid length. [ 350.607750][T13631] netlink: 'syz.3.1730': attribute type 4 has an invalid length. [ 353.556048][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.298495][T13653] digital: digital_start_poll: Unknown protocol [ 354.375591][ T7704] net_ratelimit: 12 callbacks suppressed [ 354.375612][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 354.440217][T13664] __nla_validate_parse: 5 callbacks suppressed [ 354.440240][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 354.440253][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 354.440276][T13664] netlink: 'syz.4.1736': attribute type 14 has an invalid length. [ 354.440290][T13664] netlink: 'syz.4.1736': attribute type 13 has an invalid length. [ 354.748156][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 354.858156][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 354.967879][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 355.075742][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 355.186532][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 355.302336][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 355.377215][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 355.410473][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 355.518147][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 355.587036][T13706] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 355.626064][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 355.731732][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 355.773597][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 360.380347][T12546] net_ratelimit: 8 callbacks suppressed [ 360.380388][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 360.457674][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 360.487416][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 360.502984][T13775] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 360.652693][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 360.672337][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 360.775593][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 360.889876][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 360.997791][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 361.109599][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 361.217806][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 361.328136][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 361.449702][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 361.515698][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 361.584065][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 361.601493][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 361.814733][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 361.863894][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 361.965120][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 362.378419][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 362.745758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.877645][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 363.866688][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 363.928913][T13936] netlink: 'syz.2.1795': attribute type 4 has an invalid length. [ 364.063164][T13937] can: request_module (can-proto-4) failed. [ 364.317588][T13952] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 364.400394][T13952] bond7: entered promiscuous mode [ 364.401181][T13952] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.550159][T13952] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.554077][T13952] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 364.554102][T13952] bond7: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 364.614762][T13952] bond7: (slave ip6gre3): making interface the new active one [ 364.614787][T13952] ip6gre3: entered promiscuous mode [ 364.635166][T13952] bond7: (slave ip6gre3): Enslaving as an active interface with an up link [ 364.684250][T13975] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 364.948258][T13975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.075087][T13976] bond3: (slave veth3): Enslaving as an active interface with a down link [ 365.331313][T13987] veth1_to_team: entered promiscuous mode [ 365.345199][T13987] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 365.368004][T13987] debugfs: 'hsr1' already exists in 'hsr' [ 365.368031][T13987] Cannot create hsr debugfs directory [ 365.368049][T13987] hsr1: entered promiscuous mode [ 365.390343][ T114] net_ratelimit: 23 callbacks suppressed [ 365.390399][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 365.495764][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 365.559860][T13992] netlink: 'syz.1.1807': attribute type 3 has an invalid length. [ 365.606782][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 365.622734][T14001] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.626696][T14001] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.709049][T14004] __nla_validate_parse: 4 callbacks suppressed [ 365.709073][T14004] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1810'. [ 365.717414][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 365.832758][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 365.850583][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 366.016044][T14020] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1812'. [ 366.098809][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 366.263412][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.263861][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.264228][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.264582][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.264918][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.265275][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.267826][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 366.273733][T14033] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1811'. [ 366.384381][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 366.485869][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 366.636440][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 367.030122][T14068] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 367.184011][T14076] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 367.333299][T14083] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 367.533359][T14083] bond12: entered promiscuous mode [ 367.534278][T14083] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.679252][T14084] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.690108][T14084] bond12: (slave gre2): The slave device specified does not support setting the MAC address [ 367.690162][T14084] bond12: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 367.728599][T14084] bond12: (slave gre2): making interface the new active one [ 367.728642][T14084] gre2: entered promiscuous mode [ 367.749881][T14084] bond12: (slave gre2): Enslaving as an active interface with an up link [ 368.065170][T14085] bond12 (unregistering): (slave gre2): Releasing backup interface [ 368.065215][T14085] gre2: left promiscuous mode [ 368.291025][T14085] bond12 (unregistering): Released all slaves [ 369.598224][T14159] vlan2: entered allmulticast mode [ 369.598247][T14159] vlan1: entered allmulticast mode [ 369.598259][T14159] veth0_vlan: entered allmulticast mode [ 369.599469][T14159] batman_adv: batadv0: Adding interface: vlan2 [ 369.599483][T14159] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.599511][T14159] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 369.877028][T14181] tipc: Enabling of bearer rejected, already enabled [ 369.895079][T14181] netlink: 'syz.4.1840': attribute type 39 has an invalid length. [ 370.486244][ T7705] net_ratelimit: 17 callbacks suppressed [ 370.486266][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 370.608074][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 370.722906][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 370.828752][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 370.922035][T14222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.940463][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 371.046109][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 371.157564][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 371.265854][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 371.382216][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 371.430082][T14234] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 372.082217][T14266] __nla_validate_parse: 67 callbacks suppressed [ 372.083415][T14266] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1859'. [ 372.183528][T14272] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1858'. [ 372.183552][T14272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 372.263365][T14272] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1858'. [ 372.340985][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.341109][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.341285][T14277] bridge_slave_0: entered allmulticast mode [ 372.370496][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.370611][T14277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.392574][T14377] netlink: 'syz.4.1883': attribute type 8 has an invalid length. [ 374.392634][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 375.985253][T14352] tc_dump_action: action bad kind [ 375.991391][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.991425][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.991465][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.991490][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.991526][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.991549][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.001309][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.001362][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.001441][ T49] net_ratelimit: 16 callbacks suppressed [ 376.001469][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 376.075229][T14373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.315077][T14387] netlink: 'syz.3.1884': attribute type 4 has an invalid length. [ 376.322965][T14386] netlink: 'syz.3.1884': attribute type 4 has an invalid length. [ 376.416051][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 376.525797][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 376.563050][T14391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 376.636102][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 376.746717][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 376.748725][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 376.748749][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'. [ 376.856791][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 376.935179][T14413] syz.3.1892: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.937712][T14413] CPU: 0 UID: 0 PID: 14413 Comm: syz.3.1892 Not tainted syzkaller #0 PREEMPT(full) [ 376.937741][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.937758][T14413] Call Trace: [ 376.937843][T14413] [ 376.937923][T14413] dump_stack_lvl+0xe8/0x150 [ 376.938068][T14413] warn_alloc+0x24d/0x270 [ 376.938112][T14413] ? kasan_save_track+0x4f/0x80 [ 376.938175][T14413] ? kasan_save_track+0x3e/0x80 [ 376.938200][T14413] ? __pfx_warn_alloc+0x10/0x10 [ 376.938218][T14413] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 376.938323][T14413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.938381][T14413] __vmalloc_node_range_noprof+0x127/0x1540 [ 376.938446][T14413] ? rcu_is_watching+0x16/0xb0 [ 376.938496][T14413] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.938528][T14413] ? __kmalloc_cache_noprof+0x321/0x600 [ 376.938550][T14413] ? __kmalloc_cache_noprof+0x14d/0x600 [ 376.938571][T14413] ? xskq_create+0x56/0x220 [ 376.938691][T14413] xskq_create+0x148/0x220 [ 376.938719][T14413] ? xsk_init_queue+0x8a/0xe0 [ 376.938749][T14413] xsk_init_queue+0x8a/0xe0 [ 376.938780][T14413] xsk_setsockopt+0x5e0/0x960 [ 376.938809][T14413] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.938836][T14413] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.938932][T14413] ? aa_sock_opt_perm+0x142/0x1e0 [ 376.938993][T14413] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 376.939034][T14413] ? __pfx_xsk_setsockopt+0x10/0x10 [ 376.939063][T14413] do_sock_setsockopt+0x17c/0x1b0 [ 376.939097][T14413] __x64_sys_setsockopt+0x13d/0x1b0 [ 376.939129][T14413] do_syscall_64+0x166/0x520 [ 376.939212][T14413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.939233][T14413] ? clear_bhb_loop+0x70/0xc0 [ 376.939259][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.939285][T14413] RIP: 0033:0x7ff1f739e199 [ 376.939337][T14413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.939389][T14413] RSP: 002b:00007ff1f826d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.939442][T14413] RAX: ffffffffffffffda RBX: 00007ff1f7625fa0 RCX: 00007ff1f739e199 [ 376.939458][T14413] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000f [ 376.939470][T14413] RBP: 00007ff1f74358e0 R08: 0000000000000004 R09: 0000000000000000 [ 376.939483][T14413] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.939496][T14413] R13: 00007ff1f7626038 R14: 00007ff1f7625fa0 R15: 00007fff7afe5eb8 [ 376.939531][T14413] [ 376.951268][T14413] Mem-Info: [ 376.951303][T14413] active_anon:6196 inactive_anon:0 isolated_anon:0 [ 376.951303][T14413] active_file:0 inactive_file:43579 isolated_file:0 [ 376.951303][T14413] unevictable:0 dirty:176 writeback:0 [ 376.951303][T14413] slab_reclaimable:11034 slab_unreclaimable:107336 [ 376.951303][T14413] mapped:29603 shmem:595 pagetables:1316 [ 376.951303][T14413] sec_pagetables:0 bounce:0 [ 376.951303][T14413] kernel_misc_reclaimable:0 [ 376.951303][T14413] free:1310533 free_pcp:11987 free_cma:0 [ 376.951394][T14413] Node 0 active_anon:24784kB inactive_anon:0kB active_file:0kB inactive_file:174112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118412kB dirty:704kB writeback:0kB shmem:2380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15568kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.951471][T14413] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.951559][T14413] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.951660][T14413] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 376.951727][T14413] Node 0 DMA32 free:1282928kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24784kB inactive_anon:0kB active_file:0kB inactive_file:174112kB unevictable:0kB writepending:704kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:47948kB local_pcp:26504kB free_cma:0kB [ 376.951820][T14413] lowmem_reserve[]: 0 0 0 0 0 [ 376.951866][T14413] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.957818][T14413] lowmem_reserve[]: 0 0 0 0 0 [ 376.957890][T14413] Node 1 Normal free:3943844kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.957982][T14413] lowmem_reserve[]: 0 0 0 0 0 [ 376.958078][T14413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.958291][T14413] Node 0 DMA32: 2494*4kB (UME) 399*8kB (UME) 210*16kB (ME) 2233*32kB (UME) 532*64kB (UM) 129*128kB (UME) 48*256kB (UM) 14*512kB (UM) 5*1024kB (UME) 3*2048kB (ME) 272*4096kB (UM) = 1283376kB [ 376.958610][T14413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.964647][T14413] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943844kB [ 376.964972][T14413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.965004][T14413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.965037][T14413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.965070][T14413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.965101][T14413] 44170 total pagecache pages [ 376.965136][T14413] 0 pages in swap cache [ 376.965160][T14413] Free swap = 124996kB [ 376.965168][T14413] Total swap = 124996kB [ 376.965192][T14413] 2097051 pages RAM [ 376.965199][T14413] 0 pages HighMem/MovableOnly [ 376.965208][T14413] 428666 pages reserved [ 376.965229][T14413] 0 pages cma reserved [ 376.967714][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 377.077274][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 377.185733][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 377.863202][T14446] tc_dump_action: action bad kind [ 377.875613][T14446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1900'. [ 377.875637][T14446] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1900'. [ 377.991325][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1899'. [ 378.380985][T14462] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20002 [ 378.444963][T14467] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 378.456114][T14467] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 378.461140][T14467] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 378.758349][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.787999][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 381.951374][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.276759][ T12] net_ratelimit: 8 callbacks suppressed [ 382.276796][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 382.386070][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 382.495873][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 382.612776][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1916'. [ 382.651300][T14508] bond8: entered promiscuous mode [ 382.651324][T14508] bond8: entered allmulticast mode [ 382.657959][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 382.773108][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 382.855692][T14515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 382.858895][T14515] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 382.880158][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 382.988702][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 383.056865][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1921'. [ 383.134019][T14527] netlink: 'syz.1.1922': attribute type 4 has an invalid length. [ 383.134062][T14527] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1922'. [ 383.161342][T14527] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 383.173405][T14527] batman_adv: batadv0: Adding interface: syzkaller0 [ 383.173439][T14527] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.179712][T14527] batman_adv: batadv0: Interface activated: syzkaller0 [ 383.389992][T14539] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1926'. [ 383.414769][T14525] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 383.592262][T14525] batman_adv: batadv0: Removing interface: syzkaller0 [ 383.612216][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1926'. [ 383.663053][T14554] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1923'. [ 383.912455][T14557] syzkaller0: left promiscuous mode [ 383.912516][T14557] syzkaller0: left allmulticast mode [ 383.916033][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 383.994396][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 384.006068][T14568] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1928'. [ 384.034423][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 384.657215][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'. [ 384.697444][T14581] ip_vti0 speed is unknown, defaulting to 1000 [ 385.002845][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 385.199356][T14589] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.200038][T14589] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.606644][T14589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.639589][T14589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.132878][T14589] geneve3: left allmulticast mode [ 386.148110][T14589] vlan2: left allmulticast mode [ 386.148135][T14589] vlan1: left allmulticast mode [ 386.148148][T14589] veth0_vlan: left allmulticast mode [ 386.198974][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.199039][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 42264 - 0 [ 386.307044][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.307112][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 42264 - 0 [ 386.307177][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.307218][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 42264 - 0 [ 386.470763][T14624] netlink: 'syz.4.1938': attribute type 2 has an invalid length. [ 386.486068][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.486125][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 42264 - 0 [ 386.893422][T14631] bridge7: entered promiscuous mode [ 386.893445][T14631] bridge7: entered allmulticast mode [ 386.940782][T14631] team0: Port device bridge7 added [ 387.032154][T14641] bridge8: entered promiscuous mode [ 387.032195][T14641] bridge8: entered allmulticast mode [ 387.047660][T14641] team0: Port device bridge8 added [ 387.240570][T14649] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1947'. [ 387.325953][T14654] pimreg: entered allmulticast mode [ 387.372595][T14654] pimreg: left allmulticast mode [ 387.530815][T14661] syzkaller1: entered promiscuous mode [ 387.530839][T14661] syzkaller1: entered allmulticast mode [ 387.559981][ T49] net_ratelimit: 14 callbacks suppressed [ 387.560061][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 387.631639][T14668] netlink: 'syz.2.1949': attribute type 21 has an invalid length. [ 387.631864][T14668] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 387.641722][T14668] ipt_ECN: cannot use operation on non-tcp rule [ 387.810025][T14668] bond2: (slave veth0_to_bond): Releasing active interface [ 387.846279][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 387.957399][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 388.207933][T14689] __nla_validate_parse: 3 callbacks suppressed [ 388.207958][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 388.207985][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 388.303663][T14693] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1954'. [ 388.303730][T14693] netlink: 'syz.2.1954': attribute type 9 has an invalid length. [ 388.303749][T14693] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 388.345277][T14694] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1955'. [ 388.387297][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 388.387381][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 388.400954][ T7704] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.401055][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 388.401176][ T7704] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.401242][ T7704] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.506079][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 388.617093][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 388.726201][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 388.836444][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 388.945889][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 389.061218][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 389.159945][T14728] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1963'. [ 389.384314][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 389.437937][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 389.558482][T14745] netlink: 'syz.2.1969': attribute type 5 has an invalid length. [ 389.558506][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 389.927635][T14762] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 389.927658][T14762] netlink: 'syz.4.1975': attribute type 2 has an invalid length. [ 390.344807][T14772] xt_CT: No such helper "netbios-ns" [ 391.204781][T14813] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 391.626504][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 391.783860][T14830] FAULT_INJECTION: forcing a failure. [ 391.783860][T14830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.783892][T14830] CPU: 1 UID: 0 PID: 14830 Comm: syz.3.1988 Not tainted syzkaller #0 PREEMPT(full) [ 391.783914][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 391.783926][T14830] Call Trace: [ 391.783934][T14830] [ 391.783942][T14830] dump_stack_lvl+0xe8/0x150 [ 391.783975][T14830] should_fail_ex+0x410/0x560 [ 391.784190][T14830] _copy_to_user+0x31/0xb0 [ 391.784293][T14830] simple_read_from_buffer+0xe1/0x170 [ 391.784338][T14830] proc_fail_nth_read+0x1bb/0x230 [ 391.784372][T14830] ? common_file_perm+0x20e/0x2b0 [ 391.784401][T14830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.784424][T14830] ? rw_verify_area+0x24a/0x4c0 [ 391.784465][T14830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 391.784484][T14830] vfs_read+0x213/0xa80 [ 391.784518][T14830] ? __pfx___mutex_lock+0x10/0x10 [ 391.784575][T14830] ? __pfx_vfs_read+0x10/0x10 [ 391.784606][T14830] ? __fget_files+0x2a/0x420 [ 391.784637][T14830] ? __fget_files+0x3a2/0x420 [ 391.784663][T14830] ? __fget_files+0x2a/0x420 [ 391.784698][T14830] ksys_read+0x150/0x270 [ 391.784729][T14830] ? __pfx_ksys_read+0x10/0x10 [ 391.784770][T14830] do_syscall_64+0x166/0x520 [ 391.784788][T14830] ? trace_irq_disable+0x3b/0x140 [ 391.784820][T14830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.784841][T14830] ? clear_bhb_loop+0x70/0xc0 [ 391.784865][T14830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.784885][T14830] RIP: 0033:0x7ff1f735e9ce [ 391.784904][T14830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.784922][T14830] RSP: 002b:00007ff1f826cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.784943][T14830] RAX: ffffffffffffffda RBX: 00007ff1f826d6c0 RCX: 00007ff1f735e9ce [ 391.784958][T14830] RDX: 000000000000000f RSI: 00007ff1f826d0a0 RDI: 0000000000000007 [ 391.784971][T14830] RBP: 00007ff1f826d090 R08: 0000000000000000 R09: 0000000000000000 [ 391.784983][T14830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.784995][T14830] R13: 00007ff1f7626038 R14: 00007ff1f7625fa0 R15: 00007fff7afe5eb8 [ 391.785026][T14830] [ 392.656530][ T57] net_ratelimit: 31 callbacks suppressed [ 392.656569][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 392.808844][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 392.837719][T14856] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 393.049425][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 393.052852][T14856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.129421][T14861] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.131970][T14861] bond6: (slave bond7): making interface the new active one [ 393.132737][T14861] bond6: (slave bond7): Enslaving as an active interface with an up link [ 393.189228][T14863] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 393.216262][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 393.450785][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 393.455149][T14879] __nla_validate_parse: 13 callbacks suppressed [ 393.455170][T14879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2000'. [ 393.471004][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 393.503121][T14874] ovs-system: entered promiscuous mode [ 393.668314][T14894] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 393.684869][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 393.685291][T14896] netlink: 'syz.5.2003': attribute type 1 has an invalid length. [ 393.783456][T14896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.789228][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 393.833094][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2003'. [ 393.851773][T14900] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 393.911378][T14896] bond4: entered promiscuous mode [ 393.911422][T14896] bond4: entered allmulticast mode [ 393.955635][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 394.075138][ T12] bond5: (slave bridge3): failed to get link speed/duplex [ 394.262354][T14912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.268259][T14918] netlink: 'syz.5.2005': attribute type 30 has an invalid length. [ 394.269915][T14912] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.369561][T14912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.382987][T14912] veth1_vlan: left promiscuous mode [ 394.385912][T14912] veth0_vlan: left promiscuous mode [ 394.390242][T14912] veth0_vlan: entered promiscuous mode [ 394.396723][T14912] veth1_vlan: entered promiscuous mode [ 394.467021][T14912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.516748][T14912] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 394.531248][T14117] ip_vti0 speed is unknown, defaulting to 1000 [ 394.536084][T14117] s: Port: 1 Link ACTIVE [ 394.559680][T14124] bridge0: port 4(vlan2) entered blocking state [ 394.559851][T14124] bridge0: port 4(vlan2) entered forwarding state [ 394.692137][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.692268][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.699992][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.700110][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.818862][T14117] ip_vti0 speed is unknown, defaulting to 1000 [ 394.865945][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.871674][T12546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.871718][T12546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.871751][T12546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.922114][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2009'. [ 395.026619][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2011'. [ 395.091895][T14936] hsr_slave_1 (unregistering): left promiscuous mode [ 395.163487][T14937] netlink: 'syz.5.2011': attribute type 362 has an invalid length. [ 395.259459][T14945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2014'. [ 395.326110][T14945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.347268][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 395.387180][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2014'. [ 395.424786][T14953] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2016'. [ 395.479777][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2016'. [ 395.481884][T14951] 8021q: adding VLAN 0 to HW filter on device bond9 [ 396.121845][T14974] bond5 (unregistering): Released all slaves [ 396.373739][T14991] team0: Port device team_slave_1 removed [ 396.572538][T15002] netlink: 'syz.2.2028': attribute type 16 has an invalid length. [ 396.572560][T15002] netlink: 'syz.2.2028': attribute type 17 has an invalid length. [ 396.674900][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.722019][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.809791][T15002] lo: left promiscuous mode [ 396.809813][T15002] lo: left allmulticast mode [ 396.835260][T15019] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 396.853094][T15002] syz_tun: left promiscuous mode [ 396.960127][T15002] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.960304][T15002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.964582][T15002] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.964696][T15002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.034157][T15002] veth1_vlan: left promiscuous mode [ 397.042140][T15002] veth0_vlan: left promiscuous mode [ 397.052081][T15002] veth0_vlan: entered promiscuous mode [ 397.058840][T15002] veth1_vlan: entered promiscuous mode [ 397.095669][T15002] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 397.095713][T15002] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 397.099443][T15002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.241594][T15002] bond2: left promiscuous mode [ 397.253163][T15002] veth0_to_team: entered promiscuous mode [ 397.273510][T15002] 8021q: adding VLAN 0 to HW filter on device eth0 [ 397.277088][T15002] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.281669][T15002] 8021q: adding VLAN 0 to HW filter on device eth2 [ 397.286398][T15002] 8021q: adding VLAN 0 to HW filter on device eth3 [ 397.342021][T15002] ip6gre1: left promiscuous mode [ 397.342046][T15002] ip6gre1: left allmulticast mode [ 397.357377][T15002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.373310][T14117] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.453764][T15019] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.510055][T15020] bond10: (slave veth7): Enslaving as an active interface with a down link [ 397.533364][T15039] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 397.566869][T14117] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.776787][ T7704] ip6_tunnel: L xmit: Local address not yet configured! [ 397.777441][ T7704] ip6_tunnel: L xmit: Local address not yet configured! [ 397.781537][ T7704] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 397.781966][ T7704] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 397.803624][ T9071] ip6_tunnel: L xmit: Local address not yet configured! [ 397.816788][ T9071] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 397.828722][ T7704] net_ratelimit: 12 callbacks suppressed [ 397.828758][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 397.935652][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 397.977695][T15055] IPVS: set_ctl: invalid protocol: 16 224.0.0.1:20000 [ 398.046183][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 398.206362][T15062] netlink: 'syz.5.2039': attribute type 1 has an invalid length. [ 398.434549][T15055] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 398.506704][ T9070] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 398.507133][ T9070] ip6_tunnel: L xmit: Local address not yet configured! [ 398.520292][T15062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.542829][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 398.646405][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 398.815910][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 398.926725][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 399.093109][T15101] __nla_validate_parse: 11 callbacks suppressed [ 399.093131][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 399.297652][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 399.405549][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 399.495107][T15108] 8021q: VLANs not supported on xfrm0 [ 399.647766][T15115] xt_CT: No such helper "snmp" [ 400.027751][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 400.080470][ T30] audit: type=1804 audit(1791411660.229:5): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2055" name="/newroot/98/cgroup.controllers" dev="tmpfs" ino=518 res=1 errno=0 [ 400.080929][ T30] audit: type=1800 audit(1791411660.239:6): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2055" name="cgroup.controllers" dev="tmpfs" ino=518 res=0 errno=0 [ 400.633304][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 400.680438][T15169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2060'. [ 400.804703][T15172] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.231328][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2068'. [ 401.658487][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 401.674745][T15227] ip6tnl4: entered allmulticast mode [ 401.710603][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2065'. [ 402.338192][T15251] ip_vti0 speed is unknown, defaulting to 1000 [ 403.118099][T14131] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 403.150981][T14131] hid-generic 0005:4C4A:4155.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 403.170666][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 403.301452][T15271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2082'. [ 403.306616][ T7705] net_ratelimit: 85 callbacks suppressed [ 403.306646][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 403.416614][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 403.525941][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 403.672088][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 404.037268][T15204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.070524][T15279] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.158778][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 404.265560][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 404.376205][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 405.248855][T15315] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2090'. [ 405.301703][T15317] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2090'. [ 405.405895][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 405.493896][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.494223][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.563860][T15317] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.563996][T15317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.564299][T15317] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.564409][T15317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.580462][T15317] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2090'. [ 405.773824][T15317] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.774018][T15317] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.879419][ T5626] Bluetooth: hci5: link tx timeout [ 405.879440][ T5626] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 405.887871][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 405.931683][T15327] Unknown options in mask 6 [ 406.000019][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 406.239237][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2095'. [ 406.794256][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2102'. [ 406.869905][T15362] bond11 (unregistering): Released all slaves [ 407.167901][T15368] netlink: 'syz.4.2105': attribute type 1 has an invalid length. [ 407.614360][T15379] netlink: 'syz.5.2109': attribute type 1 has an invalid length. [ 407.690606][T15379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.880580][T15405] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 407.903015][T15385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.921208][T15385] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.955343][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 407.986564][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2112'. [ 408.132116][T15385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.132170][T15385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.162782][T15385] veth1_macvtap: left promiscuous mode [ 408.176091][T15385] veth0_macvtap: left promiscuous mode [ 408.179190][T15385] veth0_macvtap: entered promiscuous mode [ 408.184805][T15385] veth1_macvtap: entered promiscuous mode [ 408.229693][T15385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.233927][T15385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.260403][T15385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.264359][T15385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.295175][T15385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.320891][T15385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.339930][T15385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.364088][T15385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.386302][T15385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.394983][T15385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.415919][T15385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.421100][T15385] 8021q: adding VLAN 0 to HW filter on device bond7 [ 408.469887][T15385] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.500863][T15385] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.504947][T15385] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.532246][T15385] 8021q: adding VLAN 0 to HW filter on device bond11 [ 408.585833][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.585870][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.585916][ T49] net_ratelimit: 11 callbacks suppressed [ 408.585928][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 408.585962][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.585987][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.586022][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.586046][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.586081][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.586106][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.761889][T15405] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 408.821112][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.821226][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.836302][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.836402][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.367807][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 409.714031][T15462] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2120'. [ 409.716562][ T57] bond5: (slave bridge3): failed to get link speed/duplex [ 409.892476][T15470] netlink: 'syz.1.2122': attribute type 11 has an invalid length. [ 410.056053][T12546] bond5: (slave bridge3): failed to get link speed/duplex [ 410.105686][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 410.105721][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 410.106836][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 410.432762][T15493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2124'. [ 410.827838][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 410.866392][T15502] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.2129'. [ 411.003434][T15502] sctp: [Deprecated]: syz.4.2129 (pid 15502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.003434][T15502] Use struct sctp_sack_info instead [ 411.005897][T15502] sctp: [Deprecated]: syz.4.2129 (pid 15502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.005897][T15502] Use struct sctp_sack_info instead [ 411.110035][ T7705] bond5: (slave bridge3): failed to get link speed/duplex [ 411.545831][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 411.870396][T15547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2133'. [ 411.875606][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 411.950286][ T30] audit: type=1804 audit(1791411672.109:7): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2134" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2310 res=1 errno=0 [ 411.950507][ T30] audit: type=1800 audit(1791411672.109:8): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2134" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 411.962410][ T30] audit: type=1800 audit(1791411672.119:9): pid=15546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2134" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 412.316192][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 412.430580][ T7704] bond5: (slave bridge3): failed to get link speed/duplex [ 413.422218][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2149'. [ 413.521056][T15622] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2151'. [ 413.521083][T15622] IPVS: Unknown mcast interface: macsec0 [ 413.678325][ T114] net_ratelimit: 8 callbacks suppressed [ 413.678344][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 413.797733][ T114] bond5: (slave bridge3): failed to get link speed/duplex [ 413.818840][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 413.934134][T15630] bond12: option lacp_active: invalid value (5) [ 413.948932][T15630] bond12 (unregistering): Released all slaves [ 413.989859][T15647] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 414.039427][T15635] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.107559][ T49] bond5: (slave bridge3): failed to get link speed/duplex [ 414.602979][T15635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.638483][T15635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.143589][T15635] tipc: Resetting bearer [ 415.346382][ T7705] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.346420][ T7705] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.346703][ T7705] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.346730][ T7705] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.353636][ T7705] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.353675][ T7705] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.771461][T15702] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.307810][T15728] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2171'. [ 416.381699][T15732] netlink: 'syz.5.2171': attribute type 12 has an invalid length. [ 417.091280][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 417.091325][T15774] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2182'. [ 417.463149][T15798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2186'. [ 417.497323][T15791] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2185'. [ 417.778554][T15791] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 417.804210][T15791] 0ªX¹¦Dö»: entered allmulticast mode [ 418.059716][T15834] netlink: 'syz.3.2193': attribute type 1 has an invalid length. [ 418.350726][T15857] ip_tables: iptables: counters copy to user failed while replacing table [ 418.718357][T15878] ip_tables: iptables: counters copy to user failed while replacing table [ 418.746676][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'. [ 418.859625][T15878] bond11: option broadcast_neighbor: invalid value (3) [ 418.864993][T15878] bond11 (unregistering): Released all slaves [ 419.065781][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.192955][T15896] batadv_slave_0: entered promiscuous mode [ 419.210009][T15896] Bluetooth: hci0: unsupported parameter 5135 [ 419.210029][T15896] Bluetooth: hci0: unsupported parameter 8192 [ 419.210059][T15896] Bluetooth: hci0: unsupported parameter 5135 [ 419.210072][T15896] Bluetooth: hci0: unsupported parameter 8192 [ 419.271919][T15895] batadv_slave_0: left promiscuous mode [ 419.445357][T15905] IPVS: set_ctl: invalid protocol: 58 172.30.1.4:19999 [ 419.828321][T15937] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 419.981748][T15937] 8021q: adding VLAN 0 to HW filter on device bond12 [ 420.372389][T15952] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 420.393665][T15917] digital: digital_start_poll: Unknown protocol [ 420.511655][T15943] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 420.973160][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 421.025748][T16009] openvswitch: netlink: Geneve option length err (len 283, max 255). [ 421.066054][T16009] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.2215'. [ 421.066086][T16009] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.2215'. [ 421.087841][T16020] nbd: socks must be embedded in a SOCK_ITEM attr [ 421.105145][T16020] block nbd1: shutting down sockets [ 421.160099][T15945] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_tx_wq": -EINTR [ 421.532070][T16041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 421.718433][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2222'. [ 421.820511][T16050] x_tables: duplicate underflow at hook 1 [ 421.869830][T16048] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2223'. [ 421.873007][T16048] netlink: 'syz.5.2223': attribute type 2 has an invalid length. [ 421.913498][T16052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2224'. [ 421.919515][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'. [ 421.978766][T16057] ip_vti0 speed is unknown, defaulting to 1000 [ 422.780948][T16088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2229'. [ 423.007796][T16058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.472172][T16110] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2235'. [ 424.367544][T16141] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2241'. [ 424.538214][T16150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2241'. [ 425.109437][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 426.105590][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 426.105821][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 428.964748][T16190] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 429.011159][T16195] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 429.028530][T16183] ip_vti0 speed is unknown, defaulting to 1000 [ 429.283983][T16213] netlink: 'syz.5.2255': attribute type 2 has an invalid length. [ 429.350241][T16217] : renamed from bridge_slave_1 (while UP) [ 429.529042][T16207] ip_vti0 speed is unknown, defaulting to 1000 [ 429.851871][T16206] ip_vti0 speed is unknown, defaulting to 1000 [ 430.683535][T16237] ip6tnl0: Caught tx_queue_len zero misconfig [ 430.726825][T16248] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 430.793619][T16256] netlink: Invalid conntrack helper [ 430.793661][T16256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.124389][T16261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 431.146479][T16261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 431.232121][T16266] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 431.418733][T16272] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001 [ 431.440857][T16278] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 431.440881][T16278] __nla_validate_parse: 1 callbacks suppressed [ 431.440892][T16278] netlink: 212380 bytes leftover after parsing attributes in process `syz.2.2270'. [ 431.694046][T16291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2275'. [ 431.699694][T16291] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2275'. [ 431.699948][ T5626] Bluetooth: hci5: SCO packet too small [ 431.819533][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2274'. [ 431.843880][T16296] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2276'. [ 431.988973][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 432.159048][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 432.177355][T16312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 432.391855][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 432.476136][T16324] nbd: couldn't find a device at index 0 [ 432.566513][T16324] syzkaller1: entered promiscuous mode [ 432.566537][T16324] syzkaller1: entered allmulticast mode [ 432.876097][T16333] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2285'. [ 434.838204][T16339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.255226][T16362] netlink: 'syz.2.2287': attribute type 29 has an invalid length. [ 435.308736][T16337] netlink: 'syz.2.2287': attribute type 29 has an invalid length. [ 435.694408][T16380] netlink: 'syz.3.2297': attribute type 6 has an invalid length. [ 435.704903][T16380] x_tables: duplicate underflow at hook 3 [ 436.184029][T16391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 436.384836][T16398] tipc: Started in network mode [ 436.384869][T16398] tipc: Node identity 7f000001, cluster identity 4711 [ 436.385121][T16398] tipc: New replicast peer: 127.0.0.1 [ 436.393233][T16398] tipc: Enabled bearer , priority 10 [ 437.182683][T16429] __nla_validate_parse: 3 callbacks suppressed [ 437.182705][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 437.183326][T16429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2312'. [ 437.183356][T16429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'. [ 437.227288][T16429] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 437.422964][T16439] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2313'. [ 437.567141][T15197] tipc: Node number set to 2130706433 [ 437.674775][T16451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2317'. [ 438.104625][T16478] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 438.177410][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2321'. [ 438.198057][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2323'. [ 438.353079][T16485] syzkaller0: entered promiscuous mode [ 438.353101][T16485] syzkaller0: entered allmulticast mode [ 438.357512][T16485] tipc: Resetting bearer [ 438.496140][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 438.714092][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 438.745253][T16519] xt_hl: Unknown Hop Limit match mode: 4 [ 438.761162][T16517] syzkaller0: entered promiscuous mode [ 438.761188][T16517] syzkaller0: entered allmulticast mode [ 438.779250][T16524] ip_tables: iptables: counters copy to user failed while replacing table [ 438.800706][T16524] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 438.800728][T16524] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2336'. [ 438.836094][T16524] TC_ACT_REPEAT abuse ? [ 439.502822][T16550] bond0: Caught tx_queue_len zero misconfig [ 439.586470][T16553] team_slave_1: Caught tx_queue_len zero misconfig [ 440.170898][T16593] block nbd1: Unsupported socket: should be TCP or UNIX. [ 440.189929][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.532395][T16583] syzkaller1: entered promiscuous mode [ 440.532421][T16583] syzkaller1: entered allmulticast mode [ 440.650962][T16595] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 440.705687][T16604] netlink: 'syz.4.2353': attribute type 2 has an invalid length. [ 440.798628][T16613] tipc: Cannot configure node identity twice [ 440.799317][T16613] tipc: Enabled bearer , priority 0 [ 440.820288][T16613] IPVS: length: 155 != 8 [ 440.822725][T16610] sctp: [Deprecated]: syz.1.2355 (pid 16610) Use of int in max_burst socket option. [ 440.822725][T16610] Use struct sctp_assoc_value instead [ 440.822777][T16615] sctp: [Deprecated]: syz.1.2355 (pid 16615) Use of int in max_burst socket option. [ 440.822777][T16615] Use struct sctp_assoc_value instead [ 441.079896][T16617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.154537][T16632] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 441.929585][T15195] tipc: Node number set to 3587027259 [ 442.020918][T16680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.145323][T16685] batman_adv: batadv0: Adding interface: macvtap0 [ 442.145344][T16685] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.175088][T16685] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 442.240095][T16690] pim6reg: entered allmulticast mode [ 442.271013][T16698] ip_vti0 speed is unknown, defaulting to 1000 [ 442.619913][T16704] netlink: 'syz.3.2384': attribute type 3 has an invalid length. [ 442.848602][T16721] __nla_validate_parse: 11 callbacks suppressed [ 442.848625][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 443.089599][T16715] bond8: option updelay: invalid value (18446744073709518847) [ 443.089626][T16715] bond8: option updelay: allowed values 0 - 2147483647 [ 443.104103][T16715] bond8 (unregistering): Released all slaves [ 443.254563][T16732] openvswitch: netlink: Duplicate or invalid key (type 0). [ 443.283257][T16718] bond8: option updelay: invalid value (18446744073709518847) [ 443.283282][T16718] bond8: option updelay: allowed values 0 - 2147483647 [ 443.284903][T16718] bond8 (unregistering): Released all slaves [ 443.479565][T16744] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 443.481388][T16744] netlink: 'syz.1.2394': attribute type 2 has an invalid length. [ 443.481407][T16744] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 443.543916][T16746] xt_HMARK: spi-set and port-set can't be combined [ 444.100327][T16764] block nbd1: server does not support multiple connections per device. [ 444.169868][T16764] block nbd1: shutting down sockets [ 444.227795][T16774] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.262969][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.264040][T16776] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.284566][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.314292][T16776] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.384319][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.402757][T16776] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.438253][T16769] xt_CT: No such helper "snmp" [ 444.474376][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.591347][T16776] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2403'. [ 444.752678][T16787] syz_tun: entered promiscuous mode [ 444.752833][T16787] vlan5: entered promiscuous mode [ 444.868781][T16770] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 444.868809][T16770] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 445.074743][T16802] Cannot find del_set index 3 as target [ 445.219633][T16810] Bluetooth: hci0: unsupported parameter 5135 [ 445.219658][T16810] Bluetooth: hci0: unsupported parameter 8192 [ 445.219670][T16810] Bluetooth: hci0: unsupported parameter 5135 [ 445.219683][T16810] Bluetooth: hci0: unsupported parameter 8192 [ 445.644960][T16816] IPVS: Error connecting to the multicast addr [ 445.881871][T16832] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 445.907154][T16837] netlink: 'syz.2.2416': attribute type 30 has an invalid length. [ 446.100136][T14126] ip_vti0 speed is unknown, defaulting to 1000 [ 446.100160][T14126] s: Port: 1 Link DOWN [ 446.106544][T14126] ip_vti0 speed is unknown, defaulting to 1000 [ 446.133842][T16844] Bluetooth: hci0: unsupported parameter 5134 [ 446.133878][T16844] Bluetooth: hci0: unsupported parameter 8192 [ 446.133891][T16844] Bluetooth: hci0: unsupported parameter 5134 [ 446.133903][T16844] Bluetooth: hci0: unsupported parameter 8192 [ 446.305818][T16849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.627125][T16868] nbd: must specify a size in bytes for the device [ 446.628380][T16864] ovs-system: entered promiscuous mode [ 446.628812][T16868] xt_ipcomp: unknown flags 1D [ 446.633835][T16869] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 446.907241][T16884] syzkaller0: entered promiscuous mode [ 446.907264][T16884] syzkaller0: entered allmulticast mode [ 447.123565][T16901] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 447.199955][T16901] bond11: entered promiscuous mode [ 447.201315][T16901] 8021q: adding VLAN 0 to HW filter on device bond11 [ 447.709387][T16943] netlink: 'syz.5.2444': attribute type 1 has an invalid length. [ 447.711766][T16942] netlink: 'syz.5.2444': attribute type 5 has an invalid length. [ 447.882840][T16955] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 447.950897][T16959] __nla_validate_parse: 24 callbacks suppressed [ 447.950920][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 447.950944][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 448.083840][T16964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2449'. [ 448.219225][T16972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2449'. [ 448.286990][T16980] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 448.287288][T16980] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 448.389393][T16984] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2454'. [ 448.389418][T16984] nbd: must specify a device to reconfigure [ 448.399847][T16985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2454'. [ 448.399870][T16985] nbd: must specify a device to reconfigure [ 448.559675][T16988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2455'. [ 449.161683][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 449.162604][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 449.177689][T17009] erspan0: left promiscuous mode [ 449.196543][T17009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.200083][T17009] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.291888][T17009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.295235][T17009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.302931][T17009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.309765][T17009] veth1_vlan: left promiscuous mode [ 449.312296][T17009] veth0_vlan: left promiscuous mode [ 449.324437][T17009] veth0_vlan: entered promiscuous mode [ 449.331140][T17009] veth1_vlan: entered promiscuous mode [ 449.348750][T17009] macvlan1: left promiscuous mode [ 449.379175][T17009] veth1_macvtap: left promiscuous mode [ 449.380363][T17009] veth0_macvtap: entered promiscuous mode [ 449.397951][T17009] veth1_macvtap: entered promiscuous mode [ 449.418134][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.426480][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.451076][T17009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.451663][T17009] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 449.466385][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.466492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.481242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.481358][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.519107][T17021] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 449.606870][T17018] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 449.658055][T17021] bond10: entered promiscuous mode [ 449.658399][T17021] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.671402][T17022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.690729][T17022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.697892][T17022] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 449.726008][T17022] bond0 (unregistering): Released all slaves [ 449.776131][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.776183][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.776218][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.828548][T17026] veth5: entered allmulticast mode [ 449.834049][T17026] bond10: (slave veth5): making interface the new active one [ 449.834075][T17026] veth5: entered promiscuous mode [ 449.868533][T17026] bond10: (slave veth5): Enslaving as an active interface with an up link [ 449.978770][T17034] geneve1: entered promiscuous mode [ 449.998658][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 449.999369][T17033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.245088][T17055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.001558][T17063] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.003486][T17063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.046785][T17063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.048907][T17063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.052373][T17063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.085302][T17063] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 451.160713][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.160822][T12547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.169730][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.169830][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.290644][T17068] ip_vti0 speed is unknown, defaulting to 1000 [ 451.667234][T17090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.020667][T17102] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 452.353745][T17116] block nbd4: not configured, cannot reconfigure [ 452.368296][T17116] netlink: 'syz.4.2483': attribute type 1 has an invalid length. [ 452.594842][T17116] bond12: entered promiscuous mode [ 452.595230][T17116] 8021q: adding VLAN 0 to HW filter on device bond12 [ 452.647733][T17122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.758895][T17125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 452.759124][T17125] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 452.759136][T17125] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 452.784983][T17125] bond12: (slave xfrm1): making interface the new active one [ 452.785019][T17125] xfrm1: entered promiscuous mode [ 452.802759][T17125] bond12: (slave xfrm1): Enslaving as an active interface with an up link [ 452.804459][T17124] tipc: Enabling of bearer rejected, failed to enable media [ 452.970458][T17143] xt_hashlimit: size too large, truncated to 1048576 [ 453.098317][T17142] xt_hashlimit: size too large, truncated to 1048576 [ 453.450700][T17154] syz_tun: entered allmulticast mode [ 453.547393][T17158] __nla_validate_parse: 7 callbacks suppressed [ 453.547427][T17158] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2488'. [ 453.666634][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 453.674834][T17164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2490'. [ 453.686745][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 453.757614][T17169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.800685][T17169] tipc: Started in network mode [ 453.800714][T17169] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 453.800859][T17169] tipc: Enabled bearer , priority 0 [ 454.131550][T17153] syz_tun: left allmulticast mode [ 454.334616][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2499'. [ 454.335291][T17204] ipt_REJECT: ECHOREPLY no longer supported. [ 454.403920][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2499'. [ 454.408822][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2499'. [ 455.078942][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2503'. [ 455.173137][T14131] tipc: Node number set to 43690 [ 455.263925][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 455.291017][T17233] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 455.560205][T17247] xt_IDLETIMER: label is empty or not nul-terminated [ 455.742868][T17260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.939341][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.940439][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.073231][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2519'. [ 456.524161][T17303] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 456.673043][T17314] xt_hashlimit: size too large, truncated to 1048576 [ 456.675113][T17316] @0Ù: renamed from bond_slave_1 (while UP) [ 456.825623][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 456.825882][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 456.852671][T17319] : option downdelay: invalid value (18446744073709547007) [ 456.852697][T17319] : option downdelay: allowed values 0 - 2147483647 [ 456.862152][T17319]  (unregistering): Released all slaves [ 458.557537][T17249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.858978][T17345] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2534'. [ 458.911928][T17345] netlink: 'syz.4.2534': attribute type 14 has an invalid length. [ 458.911951][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 459.048094][T17355] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2535'. [ 459.157512][T17358] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 459.199927][T12540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.199949][T12540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.228854][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'. [ 459.387511][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 459.419099][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2539'. [ 459.760067][T17394] netlink: 34 bytes leftover after parsing attributes in process `syz.5.2543'. [ 459.794617][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2541'. [ 460.038329][T17403] syzkaller0: entered promiscuous mode [ 460.038351][T17403] syzkaller0: entered allmulticast mode [ 460.213454][T17417] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2548'. [ 460.252372][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 460.349161][T17424] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 463.094486][T17569] ip_vti0 speed is unknown, defaulting to 1000 [ 463.562806][T17583] smc: removing ib device s [ 463.733930][T17583] smbdirect: ib_dev[s] removed [ 464.213967][T17608] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 464.853557][T17583] ================================================================== [ 464.853638][T17583] BUG: KASAN: slab-use-after-free in kobject_uevent_net_broadcast+0x12c/0x560 [ 464.853776][T17583] Read of size 8 at addr ffff88804e465690 by task syz.5.2583/17583 [ 464.853821][T17583] [ 464.853839][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.5.2583 Not tainted syzkaller #0 PREEMPT(full) [ 464.853891][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.853904][T17583] Call Trace: [ 464.853911][T17583] [ 464.853920][T17583] dump_stack_lvl+0xe8/0x150 [ 464.853950][T17583] print_address_description+0x55/0x1e0 [ 464.853985][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 464.854010][T17583] print_report+0x58/0x70 [ 464.854032][T17583] kasan_report+0x117/0x150 [ 464.854059][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 464.854088][T17583] ? __pfx_device_namespace+0x10/0x10 [ 464.854196][T17583] kobject_uevent_net_broadcast+0x12c/0x560 [ 464.854224][T17583] kobject_uevent_env+0x566/0x9e0 [ 464.854253][T17583] device_del+0x74d/0x8f0 [ 464.854273][T17583] ? lockdep_hardirqs_on+0x7b/0x110 [ 464.854303][T17583] ? __pfx_device_del+0x10/0x10 [ 464.854322][T17583] ? kobject_put+0x50f/0x550 [ 464.854343][T17583] disable_device+0x248/0x330 [ 464.854421][T17583] ? __pfx_disable_device+0x10/0x10 [ 464.854443][T17583] ? __mute ** replaying previous printk message ** [ 464.854443][T17583] ? __mutex_unlock_slowpath+0x731/0x900 [ 464.854473][T17583] __ib_unregister_device+0x2c9/0x400 [ 464.854498][T17583] ib_unregister_device_and_put+0xb8/0xf0 [ 464.854518][T17583] nldev_dellink+0x39c/0x430 [ 464.854619][T17583] ? __pfx_nldev_dellink+0x10/0x10 [ 464.854692][T17583] ? apparmor_capable+0x126/0x170 [ 464.854752][T17583] ? bpf_lsm_capable+0x9/0x20 [ 464.854772][T17583] ? security_capable+0x7e/0x2c0 [ 464.854834][T17583] ? __pfx_nldev_dellink+0x10/0x10 [ 464.854862][T17583] rdma_nl_rcv+0x6ef/0xa40 [ 464.854964][T17583] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 464.854998][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.855066][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.855089][T17583] netlink_unicast+0x7bd/0x940 [ 464.855114][T17583] netlink_sendmsg+0x813/0xb40 [ 464.855141][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.855167][T17583] ? apparmor_socket_sendmsg+0x98/0x360 [ 464.855192][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.855213][T17583] sock_sendmsg_nosec+0x14e/0x190 [ 464.855238][T17583] ____sys_sendmsg+0x54e/0x850 [ 464.855270][T17583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.855303][T17583] ? import_iovec+0x73/0xa0 [ 464.855362][T17583] ___sys_sendmsg+0x2a5/0x360 [ 464.855385][T17583] ? __lock_acquire+0x747/0x2de0 [ 464.855419][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.855457][T17583] ? futex_wait+0x2a2/0x390 [ 464.855509][T17583] ? __fget_files+0x2a/0x420 [ 464.855537][T17583] ? __fget_files+0x3a2/0x420 [ 464.855571][T17583] __x64_sys_sendmsg+0x1b1/0x290 [ 464.855602][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.855642][T17583] do_syscall_64+0x166/0x520 [ 464.855662][T17583] ? trace_irq_disable+0x3b/0x140 [ 464.855683][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.855705][T17583] ? clear_bhb_loop+0x70/0xc0 [ 464.855728][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.855750][T17583] RIP: 0033:0x7f071779e199 [ 464.855770][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.855789][T17583] RSP: 002b:00007f0718699028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.855812][T17583] RAX: ffffffffffffffda RBX: 00007f0717a25fa0 RCX: 00007f071779e199 [ 464.855829][T17583] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 464.855840][T17583] RBP: 00007f07178358e0 R08: 0000000000000000 R09: 0000000000000000 [ 464.855853][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.855866][T17583] R13: 00007f0717a26038 R14: 00007f0717a25fa0 R15: 00007ffc6b06b338 [ 464.855890][T17583] [ 464.855897][T17583] [ 464.855901][T17583] Allocated by task 17569: [ 464.855951][T17583] kasan_save_track+0x3e/0x80 [ 464.855970][T17583] __kasan_kmalloc+0x93/0xb0 [ 464.855989][T17583] __kmalloc_cache_noprof+0x321/0x600 [ 464.856008][T17583] uevent_net_init+0xdb/0x2d0 [ 464.856030][T17583] ops_init+0x35d/0x5d0 [ 464.856083][T17583] setup_net+0x118/0x350 [ 464.856103][T17583] copy_net_ns+0x53b/0x780 [ 464.856122][T17583] create_new_namespaces+0x3f0/0x6b0 [ 464.856159][T17583] unshare_nsproxy_namespaces+0x149/0x190 [ 464.856181][T17583] ksys_unshare+0x5a7/0x950 [ 464.856211][T17583] __x64_sys_unshare+0x38/0x50 [ 464.856236][T17583] do_syscall_64+0x166/0x520 [ 464.856252][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.856268][T17583] [ 464.856273][T17583] Freed by task 12543: [ 464.856282][T17583] kasan_save_track+0x3e/0x80 [ 464.856301][T17583] kasan_save_free_info+0x40/0x50 [ 464.856327][T17583] __kasan_slab_free+0x5c/0x80 [ 464.856347][T17583] kfree+0x1c5/0x650 [ 464.856371][T17583] ops_undo_list+0x43d/0x8d0 [ 464.856392][T17583] cleanup_net+0x572/0x810 [ 464.856413][T17583] process_scheduled_works+0xc3d/0x1630 [ 464.856437][T17583] worker_thread+0xa47/0xfb0 [ 464.856468][T17583] kthread+0x38b/0x480 [ 464.856483][T17583] ret_from_fork+0x514/0xb70 [ 464.856517][T17583] ret_from_fork_asm+0x1a/0x30 [ 464.856541][T17583] [ 464.856546][T17583] The buggy address belongs to the object at ffff88804e465680 [ 464.856546][T17583] which belongs to the cache kmalloc-32 of size 32 [ 464.856595][T17583] The buggy address is located 16 bytes inside of [ 464.856595][T17583] freed 32-byte region [ffff88804e465680, ffff88804e4656a0) [ 464.856613][T17583] [ 464.856618][T17583] The buggy address belongs to the physical page: [ 464.856662][T17583] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e465800 pfn:0x4e465 [ 464.856682][T17583] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 464.856700][T17583] page_type: f5(slab) [ 464.856719][T17583] raw: 00fff00000000200 ffff88801b041780 ffffea0001da78d0 ffffea00009af110 [ 464.856736][T17583] raw: ffff88804e465800 000000000040003f 00000000f5000000 0000000000000000 [ 464.856746][T17583] page dumped because: kasan: bad access detected [ 464.856761][T17583] page_owner tracks the page as allocated [ 464.856768][T17583] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (syz-executor), ts 423322604095 [ 464.856800][T17583] post_alloc_hook+0x1f9/0x250 [ 464.856829][T17583] get_page_from_freelist+0x2209/0x2280 [ 464.856849][T17583] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 464.856870][T17583] allocate_slab+0x7d/0x620 [ 464.856893][T17583] refill_objects+0x2d5/0x350 [ 464.856918][T17583] __pcs_replace_empty_main+0x2c8/0x6c0 [ 464.856941][T17583] __kmalloc_cache_noprof+0x39b/0x600 [ 464.856957][T17583] ref_tracker_alloc+0x221/0x530 [ 464.857011][T17583] get_net_track+0x16e/0x230 [ 464.857061][T17583] sk_alloc+0x1da/0x390 [ 464.857083][T17583] inet6_create+0x81a/0x1270 [ 464.857174][T17583] __sock_create+0x4b3/0x9d0 [ 464.857193][T17583] __sys_socket+0xd6/0x1b0 [ 464.857212][T17583] __x64_sys_socket+0x7a/0x90 [ 464.857232][T17583] do_syscall_64+0x166/0x520 [ 464.857248][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.857266][T17583] page last free pid 5618 tgid 5618 ts 423320469494 stack trace: [ 464.857281][T17583] free_pages_prepare+0x9eb/0xaf0 [ 464.857307][T17583] __free_contig_range_common+0x174/0x340 [ 464.857330][T17583] free_pages_bulk+0x48/0x120 [ 464.857348][T17583] vfree+0x231/0x490 [ 464.857374][T17583] __do_replace+0x846/0x990 [ 464.857432][T17583] do_ipt_set_ctl+0xb3c/0xe20 [ 464.857464][T17583] nf_setsockopt+0x26f/0x290 [ 464.857552][T17583] do_sock_setsockopt+0x17c/0x1b0 [ 464.857577][T17583] __x64_sys_setsockopt+0x13d/0x1b0 [ 464.857601][T17583] do_syscall_64+0x166/0x520 [ 464.857617][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.857635][T17583] [ 464.857640][T17583] Memory state around the buggy address: [ 464.857685][T17583] ffff88804e465580: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 464.857699][T17583] ffff88804e465600: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 464.857712][T17583] >ffff88804e465680: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 464.857722][T17583] ^ [ 464.857733][T17583] ffff88804e465700: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 464.857746][T17583] ffff88804e465780: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 464.857755][T17583] ================================================================== [ 464.944316][T17623] tipc: Enabled bearer , priority 0 [ 464.948046][T17623] syzkaller0: entered promiscuous mode [ 464.948067][T17623] syzkaller0: entered allmulticast mode [ 465.003558][T17583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 465.723728][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.5.2583 Not tainted syzkaller #0 PREEMPT(full) [ 465.733122][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.743238][T17583] Call Trace: [ 465.746536][T17583] [ 465.749489][T17583] vpanic+0x56d/0xa60 [ 465.753512][T17583] ? __pfx_vpanic+0x10/0x10 [ 465.758054][T17583] panic+0xc5/0xd0 [ 465.761805][T17583] ? __pfx_panic+0x10/0x10 [ 465.766259][T17583] ? preempt_schedule_thunk+0x16/0x40 [ 465.771664][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 465.777766][T17583] ? preempt_schedule_thunk+0x16/0x40 [ 465.783168][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 465.789275][T17583] check_panic_on_warn+0x89/0xb0 [ 465.794327][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 465.800444][T17583] end_report+0x73/0x170 [ 465.804724][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 465.810827][T17583] kasan_report+0x128/0x150 [ 465.815403][T17583] ? kobject_uevent_net_broadcast+0x12c/0x560 [ 465.821506][T17583] ? __pfx_device_namespace+0x10/0x10 [ 465.827093][T17583] kobject_uevent_net_broadcast+0x12c/0x560 [ 465.833030][T17583] kobject_uevent_env+0x566/0x9e0 [ 465.838091][T17583] device_del+0x74d/0x8f0 [ 465.842453][T17583] ? lockdep_hardirqs_on+0x7b/0x110 [ 465.847693][T17583] ? __pfx_device_del+0x10/0x10 [ 465.852574][T17583] ? kobject_put+0x50f/0x550 [ 465.857546][T17583] disable_device+0x248/0x330 [ 465.862268][T17583] ? __pfx_disable_device+0x10/0x10 [ 465.867514][T17583] ? __mutex_unlock_slowpath+0x731/0x900 [ 465.873176][T17583] __ib_unregister_device+0x2c9/0x400 [ 465.878579][T17583] ib_unregister_device_and_put+0xb8/0xf0 [ 465.884326][T17583] nldev_dellink+0x39c/0x430 [ 465.888964][T17583] ? __pfx_nldev_dellink+0x10/0x10 [ 465.894168][T17583] ? apparmor_capable+0x126/0x170 [ 465.899225][T17583] ? bpf_lsm_capable+0x9/0x20 [ 465.904094][T17583] ? security_capable+0x7e/0x2c0 [ 465.909057][T17583] ? __pfx_nldev_dellink+0x10/0x10 [ 465.914197][T17583] rdma_nl_rcv+0x6ef/0xa40 [ 465.918631][T17583] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 465.923596][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.928830][T17583] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.934054][T17583] netlink_unicast+0x7bd/0x940 [ 465.938841][T17583] netlink_sendmsg+0x813/0xb40 [ 465.943633][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.948947][T17583] ? apparmor_socket_sendmsg+0x98/0x360 [ 465.954520][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.959840][T17583] sock_sendmsg_nosec+0x14e/0x190 [ 465.964898][T17583] ____sys_sendmsg+0x54e/0x850 [ 465.969711][T17583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.975038][T17583] ? import_iovec+0x73/0xa0 [ 465.979574][T17583] ___sys_sendmsg+0x2a5/0x360 [ 465.984285][T17583] ? __lock_acquire+0x747/0x2de0 [ 465.989259][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.994507][T17583] ? futex_wait+0x2a2/0x390 [ 465.999052][T17583] ? __fget_files+0x2a/0x420 [ 466.003669][T17583] ? __fget_files+0x3a2/0x420 [ 466.008372][T17583] __x64_sys_sendmsg+0x1b1/0x290 [ 466.013348][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.018839][T17583] do_syscall_64+0x166/0x520 [ 466.023457][T17583] ? trace_irq_disable+0x3b/0x140 [ 466.028590][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.034669][T17583] ? clear_bhb_loop+0x70/0xc0 [ 466.039376][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.045282][T17583] RIP: 0033:0x7f071779e199 [ 466.049721][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.069356][T17583] RSP: 002b:00007f0718699028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.077791][T17583] RAX: ffffffffffffffda RBX: 00007f0717a25fa0 RCX: 00007f071779e199 [ 466.085782][T17583] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000004 [ 466.093863][T17583] RBP: 00007f07178358e0 R08: 0000000000000000 R09: 0000000000000000 [ 466.101901][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.109978][T17583] R13: 00007f0717a26038 R14: 00007f0717a25fa0 R15: 00007ffc6b06b338 [ 466.117976][T17583] [ 466.121312][T17583] Kernel Offset: disabled [ 466.125645][T17583] Rebooting in 86400 seconds..