last executing test programs: 10.427627847s ago: executing program 2 (id=2219): syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x735a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40488d0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xfffffb3a}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r4, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 5.769630635s ago: executing program 2 (id=2251): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8000}, 0x8f) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000006c0)={'filter\x00', 0x0, 0x4, 0xb8, [0x3, 0x5, 0x10, 0x0, 0x4, 0xa], 0x0, &(0x7f0000000480), &(0x7f0000000740)=""/184}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) unshare(0xc000000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r10, &(0x7f000000e340), 0x0, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0400000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0xfffffdf7, 0x1, 0x1, 0x10000, @value=r9}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) 2.521775559s ago: executing program 1 (id=2272): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="cd3e00000000f9dbdf340100000081fe010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd200006f64e62cd3404917f3be657330adc6bf06c8b6286f917412935536f4406edcdc8a3765814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000014000600fe80001d0000000000000000000000aa6500020005000000"], 0x100}}, 0x8810) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0xab, @empty, 0x8000000}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x60000) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}, 0x1) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.250552847s ago: executing program 3 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x545280, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38020000100013072dbd700000000000ffffffff0000000000000000000000007f00000100000000000000000000000000000007000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}}, 0x0) getsockopt$inet6_int(r3, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) unshare(0x22020600) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2b, 0x801, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000740)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x4, 0xc5, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xde, 0x65, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x5d, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adae295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b453147fe8f8e819f6d5ea"}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b11b45b57a3131"}}}}, 0xec) 2.249753858s ago: executing program 1 (id=2277): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480), 0x8) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000004380)=[{{&(0x7f00000002c0)=@generic={0x1, "5c5cefed78a48d3dad155e60f94160013af79a50e8809133e38fc18a2433ffe0cbdaa20eaa1b67ef5399bf343d3e1043eec0e603c55917c7e218844590eca2a2286162a9c947d6fec327b043def4ecabf64993266dfdc241cc6e14ea6fe29f6542400f00fffcf467faa67c2d31462dc67ed88895180aae118fbc4a2b7c9a"}, 0x80, 0x0}}], 0x1, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000000000010000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x4}, 0x20) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c0002800800014000000004080002400000009408000340000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 2.017209248s ago: executing program 1 (id=2280): r0 = socket(0x200000100000011, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000000600)="f6f4e9a1d78ad62cc339b9b98bf9ae603fb7dbfc038bd4bc04cd4f6416bb80e9a373", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000340)={0x100, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="590dde9a7f3a37e26c7e4a3b6de268a707b621dc47d7dce1aa744509637a8e83f21f6cdac09ceccf8f776f8bf32dfd77128354cb08365f05953339000f8b96f288212d62af3d65b5feb4f6b9766154a0dd1ef2b838b9d7219db882b02995dd120a67cee16b09758612a57ed88f0a4d7df417e40cc102fd744ae51bead8d5539d2067494785139f06a54a846ba4e4e1613bf2e9f0ba0e03e697a25317d50ddb806c4d9a929f811861891e77c38e0149c7bec0c2e61a81b8d092270d6800b87ef0d7d1431f5dd3e1353a89c08e01ac39a12a437daa5ed405354629f17ec83f25318423f9d186"]}, 0x100}], 0x2}, 0x0) 1.804335946s ago: executing program 3 (id=2282): socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@float={0xd, 0x0, 0x0, 0x10, 0x8}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @fwd={0x3}]}, {0x0, [0x2e, 0x5f, 0x61]}}, &(0x7f0000000480)=""/154, 0x45, 0x9a, 0x0, 0xb8, 0x10000, @value=r0}, 0x28) write(r2, &(0x7f0000000540), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x52, &(0x7f0000000080)=""/82, 0x82300, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xc, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x902}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c17130000000000000002e000000180000000e00004020000ffff00000f000000f98aa257ebd13732df319ad13bd9642b6c4d69dbf9f3b78e495ae5072fe3bb8f78864c19fb0b5ae9e702"], 0x30}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.803048768s ago: executing program 4 (id=2283): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@private0, 0x0}, &(0x7f0000000040)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000140)=""/174, &(0x7f0000000200)=0xae) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='dvmrp0\x00', 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000380)='netdevsim0\x00') setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000003c0)={0x4}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r7, &(0x7f00000004c0)="8063195f9b65e06a91721f66241d32922fee73098892712e385cdf6f7bbcc3e9239e6f9fd99ba1b210f56591df256541304435b741d65e50afccdd60fce80ef21315aa260cdbf181d6c4ce2b748f7ebf60fe73a81e5ccbfdd35a343d02fe0fd3bf9163543fe3b52e81cc032989a8bb00c9cfee7de1fa2f61efe90d5243665907d2ae4fbd9376b7fbb602a8eca499be220a3bd00d12b3f15fe9d1905ac6740c1f584b94ef38dad422bfe1c48dccf68d595fc519380372301ebca93d4f4c80197856fb8f8d80a82187debef5d2ba3113d18c4d3b45378b1a86979c42468f8d1f5234f643d3015b0c5cd97c57c5", &(0x7f00000005c0)=@udp6=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) sendmsg$xdp(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000680)="43ef8c62a8687862ca1ae976af9f59204fedbb2ea5ac58770eb47bae058a28bf1f08b35dcbc5d5470bf2230b217e23887fc6c9558011d20d9c8e1336704b5b850a7e2c9f0900a62d854f0050a7f74da6f302a2fd3204875635f69f635485389b1c7da23c178588665e9fde19d755227f886cb0fb676f3b7fe1dbff509eda428c96b8a56f65b7cedfa07e13b8640beec5b17c136d3e072284c55156b32409ac1595dcd9e39ee9dbf17f89802b53ff9b98a503c0ee8f1b3c1b0098018adb1ab1189aaacd0812e743f9ef3b", 0xca}, {&(0x7f0000000780)="93396a078ca74059ba6c273b57ea9930b0c20055874d215cdf1cea0431036f04adf0fb768ddd72b6db5de16a86899f1ea4b5c1767a16ce7b3c9a156c3fb44572f73d53b0f1290f9b38ca03f9c5056ae0a02c18b72ee67be98779a25cab814e2454b9971984823fe67cb4356f9b0755e089b4e3a5d8b349b89a706d727df9a5", 0x7f}, {&(0x7f0000000800)="80a23d115c8e7d092fc0f77e38ad8766c962b7ebc59ca2a461f1d6a9b059ba1718c082bfd3814d3dc93cbdef8de6b5b61e67965ec4111196475ad25cd5156c06b71c1577066dd95fed3b6c7ce6139949f1c3c150d2ffa15c62677a80d880283335be50dda3b38c67bcebaeea70156052defeff0a939dded9d091b894b78d830756b159ccd844e2f556ade19a854010ed00de13abff8beda9a5010f7aa97af43d8ff6e3e1ade67518205d3450bf1842fd3d7c8f06336e4669dd8a8b0d675e14766ff2894ca21cb681d1a086c54be2b53ecde0cf445e06df0bcc5e0622dfe63865d2c21b9fa6cffc27c86c357b9cbf16fabf53140cd42284aca18e59099a71e71eb9686b4904503cfd3a31e8297a20b559f56f2e9fb9c506dfd449a96d2dd807a7b6b71ee59172f519b2166d84ae3b8179372074df8b99569449bc60c9100c093d35e531ecdfd5e31f32d66e08cc2171f1103549b481061407e53c3bbd23de613f3df366bf82d786f8915907ded55db8c450b3608df5293bf2c65bcac7c2c637e0db4aaffb7103d85ebaab91083292d00f9e0e56c8328f13c196d4c099ff912fd59f7cf181ea06ad716ef658c29fb22609d26bcfc77f97c16797a9dd5fa3bfb3daa3403d7e954faa6169768b16e882102c1019c0925e8a5fb0710d3cf645df1b1f4559870f9d1872074723489f528fa838bb5a103cfc85ece62bfa6fa5804aaf12704d3087c3b07f66162817f9283e26a895337e3ac441ea51697ae52d9c715d0809e7993d3bf29009d99a4f134ece041f5ee59e9acf18ec97755e97bca902f41993bba3b3c5074d8b04e4c3b5a999c1ece30e987aa57a465191afd014b15cd3f2944d46a642fe0f43c8dcbb746aaa452aa1f4de2c5c257be8ea6702b7378f75d085d272330e4366052f834b58ad787c564871a9730c839920b88d08671e9f98872cb3865c360cef00fd0250a6ac98da209961cdc4808c620fd9e9773043c7e55cc82349737b0bfe7e5345944d74041192d8a34bd11b73297bf3220a43a46c8966dd69e698d7417fb65d52a7c13755cd1bfe5905869a8bc11809569ef11a46cd372f9f3cbe23719d0d43604a2fbdc248ec8f005464f509195df0a2357f573cb5959b1f7f20567bc3bcf1f03f310f52af2be8d92cf7431bfe5c68dfbc2efa8634d7e27a844469cb40b403abd9337bbffdb46ca8c878d54ab3ef1a5eed5e2691b87a544f579dcbe17881827ad94a3466b5c961c2ed006b48dde38d7249e94c7152fbe2c0da709e513e2efe57ecb1f2b809acf1f9b1fdcc65d7afc18f4c5c64b6b6b13b795e8948f0a2ccf72796d5899091a9bd756708624a13d43c39bf74850dd71813ff21509c0784f469e0c74c8efb8b350f28b03e9cb6fec4d91d0d5713ace4eddc889fbdd4f4d1e327852a3dd5757c287434321928ea02158a1deca752662b6c98f0dbef8d48fd300f61193da44050a0a3ff66bb56e4d935b621bfeeef719deb2dcc7ee9b3a06b83d37bb91e016768c6af5bb1deaab62b34c92ee784102b71f5846fe9c90fb6224580b07f0fbea2beef32f3b680c956b16baf7350597d2ad26d029d2f8c2855b0ca173157159d4c3a4daed38a1cdeb532e1fb68a775bb926ebfb1fb0029f2fc52b77ddc8697b75190b1e0805aa9888ae9b48c951495b4e7d19c6895ad77051af1dc948545f6f625a299c0d3f404038f41347cc73b47315d8225f7041baa06728edcb1f8ad2a1fca38790cf22b7e7517f06f5b6b98fedc04cb1007825cbf8103bc2d482575bacf8f022d5f86fbab406e158a712fed49dc6efda8dbfb90682517eaff18dbc4993f2d86c4ce65b45c7cf058d61986925d048a9d18c3ec72e1c755632c7a4b6e34f30103768f789d9a5ddd1b5ea5debf5d8b8bcd462f96f3881f2a6c898770ef1fdadd47704f8af68355d1ce2b9c1ea299558bdaee8e6eb1d9f26763f5cbf9a20e1cc517616d5602249541b2a06d4db1ae5252e2d56c2ef3e097a17124d23a99b7c86bbd5799ddf24444f058ba963a0b801eeb28732b65c5c374c83fec6066c98f55b19c3e44300d83c1b9090b3a82e46b87aea0f7e91771bfe57b10c4ae551170aee727e4e8e40486f3e4561b4efae1fa9c71c51b39e762cad0b346efc6481c8ab7e5b0bc0ab980282559b37ebd9481da7185413ea6bd0f449ce33a0cb2070476d96e17ba1d4303f3b339ec2738d84f49a717459ac4f0b5506400e4c1b6e0d3205890c0ad41742b0e98c5193c4a87a282e0d8eee0fe2e35728f2fc042e4d01b94d207b3427a62b01b722240f7a774184185054ae0602a7983cc5201dd8db65c46d9a62b7dedf52907becb9c1a168be8927fb9b1452dec3fb6c400c5851c266cb216ba1992301e0c9e97c3d63a52babfaae2396142c682a702fa6735d96b1549ca23dddb5a66e1e58e1a2634ee5fb1c047ba281e9edc73bc36d87284213d929882b8c1fc4eca73344f75185d0b2c56cbcd021ca6d8dfe80ef782459bd4f8d492984b2d22a69c9390eb55b968d384dbded07289811851b731864216354704028b7700141f01119bc112d3de18b7d3ed4e36d35c930ebf39ed0a6641159d1fe6026f14df90528cf06e2b68546f402c4edeaf2423a1c7309d34ad1155f36261c0427212e3054d66f9da76e0a4ba3172d119f803d0b08e3e0bcbd5335d2258d26b0d576f0cca19451587f57324291a641f1360d077bfef6a5fd6f05d21f8176585c0db93832f40becb879d93e05f6a64db84f73de401492823a72cc9034c5eab42d999872aaab0ccbc06fcd3c993d2f80dae9f56fdcb69c817bbd8f67d1c00e802bfdc0dd2898cf4de9852788a12f16eee41ead59b97697cbe54cbf1e73d3046c60e9339c07440b5d22c52e7db00320e0454b18473a04e0b615705b395a6c8394e6a33810ec7c6495f3af33f4c2270cae86e1326a00b0919825ba78ee3a2c70ce55dfc1dfa407bf2c3c0e1eebc5d649800e09fe0dafbca39efba3edeaf43368848d99695d5e0ab81b0c65906c5d3b1f7e39ab3f85321ac0b753d765a1bb16c397747f3661a8aced241fe7e0f1f845b3122b5b46fb4a78e09fb65ebf658e5e0fb37406bf091240163966e6fb6765e439f0807a1b381632d6ef43d16cc5322443a7f7057fff0277babd93f194f09fbf3d2c4845f9fd20a0adb4640d24fd5a7208854548845817bb85ef21f79a49398338bd1953f95be17b77934945c533d102f17dba057a5ee2dc787885ceb8fc72190ea0570f1cd9a023ac25dd527ba1db56b4757ce778e5fce062ff1f0712ce8830679f995245ba0aca43a06951365c46d5f02626a27d522eed67d4dd2d0c0ebeecf1dd8b36019c4d3206401bb43268a9056382b992bcc0380975dcada10f84782c81166194c1f16ee3262b23709703c0cd7b4825a9ac817553347cd88115472d2845988ad1b4ffa284907bf4b65bf25bda3413492c994ff07337f7827ce406698122fdae7658f9159549e984380c4aad9c003e17b1984b9cfca27486b1ebb8685951554787327af7f658776af72767162ce5fe01bf36b69eb501f623cb3f779ef0b409bb525ff0571e51835e37c9b9caafeb84cac28c3c5ffd68300d1273db3a7740a9cd2de3ca63756eb2eb525efdc26cdd2c49ff81b774bcff7c859a9f04defae79f6f6247559c9971eeac9e6ef49e86c0839d6a2f7e52da182d2580e9e77b5dc4e444c3fc26c8b6a94d119c3b7fe1b35962c6ced208d0489f39053a21f27bc9f5a8ddc1d9f6c518cf8b5d08ea59e0fbc177c9a9a5ae6dd37929da6775592add7c02395803bd3216fb6a27416f4f639df6ab784ca1690751b0dc7a03a211d8956a321d372a38fca412339b7057e849d215b09707c3a703dda0565f24a45975bd0a39e95736da665da4065bfc5396cf2bf0c5d48de8eb27d51a686f4be92fbcc93f014948aa812f8f54c854e330bdd59ea438006a6b62406d57c87a499f3f9e04a07c0ed60aa27f36ecac1169e7b60f7e2f47bf3d2cf6322e22f2a48042feacff99156233eca25822615379ba97e986d7703cd7e3ca6f01228893e646d7a877c743d9e786b610f9da6d6172fab4bafa7cdb7ef9bf22ef03313f3f1bda88bd98e063a061d398723c8c6e6c8b80dc0d49304f629056a7c6e73817ee826fc7729a489b5aca1f63b078b173d28b10b3bc3f2b0392b4a6ba229aa9ebd88733502e3c657b71e179e8ee9b1d91cc80ac7c4b273c2813d4d9f762427280bfe4aaf4d004daf8874558f9329a2a08d3c6e6287526f0f52fd395d8ac3d9ada7c87613380cf14c47b97898d8b7fb8411f2ebb4e4509e0ec883de288aaf46776d73548e99a4ef89c52be696380f79a56dbf076843ccb9e42b82da711a7af11ab735dfd12501f50c376cef1a814fc8a959de9dbf7591b82fd9ad4a8fa7b575a28952eb92226ea3ad13b9f37e4218d62a5d6dbbff0a258634c0eac63b3160e520a6a73f6c5ef323b1698acdd89865471e41a817ac84b2a761cad9fe38b1d3f3bf8f4071a95baf830cfaed4e7ac44605916c47cf16465f95adc28b4f98dc68a80dea96364f83f0a040f4866b0dd72e943f70d64c2a331e185c83230b382c9372a46a706b29ef8151ce505d5aed0cc8b120dddb8df04d5cbc642b220fb0767060353d33b3c4f535292f32e87d7431ab328f501cdf6b0a72eb5b04cc838f284ed2094cb22c0dd16da642309bf582b855f06ab12479d21337c54a9235a8210675ea7e0b5f0a4d009f9d5c82c1f547177f54327f76fb193e17c001697f4b7dccffa16f304d9d30ba4225a9446d38f2a1a0abc128d885f66f7c59e72e1a5fa9a249ed52b20206aff9eb6f8df4ad4a716325ceb0e1bd46bbcc55d5182d5d5c9d3bbb4776498aad469754ab39b8ed18c85e34f909f72ae9f041c82787da792af56bd66e8fd0d1b5499ec2d4d24b3af7b0a7790e7f25194281fe2abe572f907899fd0b4187302d7fd704c2245363a15d935cf55a586c237e2cfe828648f755c8d75b7f492f0804d80419f2e57211cc194ab701889e5def3fef87e7e5635b7d53209ddb4af018c351e14fd0c9a27a1c6a1278d928efd2577af1bf4530277f7d3b6ca7df7dfc68fbd4c6d360e64dbfe8c43b4aa91577bb79c292a06faeef59bc1f800bf12dfcfbf68933252f6407bae2172435c884b3611b0281805950ee2c2296c3a1e81718347d671f9b5e051e1214b097b91cef5a12b96b4a7bb2cf9b0fcf1f65eb543f85e6c08e6bbcc2620d841d77deec0465a055e64923d84f8384e6027cc07ed4d7835be2bd0c5ee4763a40cdf86c0d4101cbfc8bd0c06e24f795bd127629108d99b4266486a17422dc27e2fd6811fe4529833048da0489ab23ee2d61d90f664fb5e998deccd9db828e803545d08c1d6111b677d81a1e64af9fa8fe6065f5b3600f7234933fc2df2828dae9c68a2b4f321abac664ee85ff682d4dc6855497a6eb7e93603e81697211138085d96b483458ff5ad8f5eb212390c51170cf983aacaadf53ab6f3db7c7c99fe1d8d730502b3e807d18da6194a5108b69d33e72407308d2d0658d28d4ef269b818922a54e189253c83dae507a5660a99853ba36b70ca39afaba1c076bea180e525c041737e43f86bffce1dacc837dc3cc8cd09a44dd8e7395eef2160465fef9c8f21ff41e602996005be1d92c89b7cca5559f779ab6fa94b3cd033ac9abdeb1ec420783da4edf3d7a716d1f53f74a3a09853e9aa3cd46bb730ddd8f715935e4dbdc452a38445f58ac1482ce0ea2030968fa603a3c628bf0e1872c22b8e13882ebe3f6110d6ec1df34", 0x1000}, {&(0x7f0000001800)="3eec9e7f576a6260883691b94be7463bf24724bb90", 0x15}, {&(0x7f0000001840)="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", 0x1000}], 0x5, 0x0, 0x0, 0x20044000}, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000002900)=""/57, &(0x7f0000002940)=0x39) recvmmsg(r4, &(0x7f0000003e40)=[{{&(0x7f0000002980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a00)=""/248, 0xf8}, {&(0x7f0000002b00)=""/25, 0x19}], 0x2, &(0x7f0000002b80)=""/251, 0xfb}, 0xffff}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002c80)=""/82, 0x52}, {&(0x7f0000002d00)=""/204, 0xcc}, {&(0x7f0000002e00)=""/79, 0x4f}], 0x3}, 0x80000000}, {{&(0x7f0000002ec0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/127, 0x7f}, {&(0x7f0000002fc0)=""/156, 0x9c}, {&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/7, 0x7}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003180)=""/112, 0x70}, {&(0x7f0000003200)=""/168, 0xa8}], 0x2, &(0x7f0000003300)=""/139, 0x8b}, 0x8}, {{&(0x7f00000033c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003440)=""/37, 0x25}, {&(0x7f0000003480)=""/182, 0xb6}], 0x2, &(0x7f0000003580)=""/166, 0xa6}, 0x2}, {{&(0x7f0000003640), 0x80, &(0x7f0000003880)=[{&(0x7f00000036c0)=""/162, 0xa2}, {&(0x7f0000003780)=""/63, 0x3f}, {&(0x7f00000037c0)=""/140, 0x8c}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/140, 0x8c}], 0x1, &(0x7f00000039c0)=""/85, 0x55}, 0x9}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003a40)=""/165, 0xa5}, {&(0x7f0000003b00)=""/211, 0xd3}, {&(0x7f0000003c00)=""/109, 0x6d}, {&(0x7f0000003c80)=""/168, 0xa8}], 0x4, &(0x7f0000003d80)=""/167, 0xa7}, 0xffff}], 0x8, 0x10120, &(0x7f0000004040)={0x77359400}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000004080)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0xfffffffffffffff7, 0xd954, 0x8000, 0xfffffffffffffffa, 0x1]}, &(0x7f0000004100)=0x78) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000004140)={0x0, 0x4}, 0x8) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$SIOCAX25DELFWD(r11, 0x89eb, &(0x7f0000004180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000004200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x44, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.601633086s ago: executing program 4 (id=2285): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x2, &(0x7f00000002c0)="1a0000000200", 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) listen(r3, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400f60000000000000006006558000008000280044012"], 0x34}, 0x1, 0x0, 0x0, 0x2004c000}, 0x8000) write$cgroup_int(r5, &(0x7f0000000080)=0x30000000, 0x12) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c000000000000000000000008000000", @ANYRES32], 0x50}}], 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000a00010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r8 = socket$inet(0x2, 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r8, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 1.598593799s ago: executing program 0 (id=2286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffff0}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x7f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newchain={0x454, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x428, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x280000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1fe, 0x80, 0x9, 0x1, 0xce, 0x5, 0xbf1a, 0x80000000, 0xf6b, 0x0, 0x7, 0x7, 0x0, 0x2, 0x4, 0x8, 0x9, 0x1, 0x7, 0x2, 0x9, 0x4, 0x0, 0xc67, 0x80000000, 0x4, 0x5, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0x3, 0x2, 0x10, 0x5, 0x9, 0x3, 0x3, 0x10001, 0x9, 0x4, 0x5, 0x0, 0x7, 0x40, 0xffff7fff, 0xb5, 0xff, 0x7db, 0x4, 0x7a, 0x7fff, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2d2a, 0x3, 0x6, 0x6, 0x5, 0x200, 0x7fff, 0x5, 0xffff8001, 0x74, 0x2, 0x0, 0x101, 0xa00, 0xf, 0xf03, 0xc53, 0x7, 0x2, 0x4, 0x7, 0x9c0f, 0x0, 0x6, 0x2, 0x4, 0x10000, 0xe9, 0x3, 0x7, 0x6f1, 0x9, 0x140, 0x5, 0x0, 0x6, 0x5, 0x3, 0x9, 0x1000, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x580, 0xfffffffa, 0xffffffc0, 0x2, 0x80000000, 0x1ff, 0xd, 0x3, 0x800, 0x9, 0xfffffff2, 0x7, 0xe, 0x8, 0x3, 0xfffffff8, 0xcc, 0x5, 0x4, 0x4, 0x6, 0x4, 0x5, 0x4, 0x0, 0x3e, 0xfffffff8, 0x45d, 0x8, 0x3f3898ed, 0x2, 0x8, 0x3, 0x1, 0x1, 0x6, 0xffffff62, 0xfffffffc, 0x4c72, 0x7, 0x5, 0x9, 0xfffffbf5, 0xa4, 0x101, 0x9, 0x1, 0x7, 0x38, 0x8, 0x401, 0x5, 0x2, 0x7, 0x0, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x8, 0x7, 0x9, 0x7, 0x0, 0x6b, 0x7, 0x5, 0xb, 0x1ff, 0xe00000, 0x6, 0x9, 0x6, 0x3, 0x81, 0x5, 0x1, 0x401, 0x9, 0x6, 0x804, 0xfffffff9, 0x4, 0x3ff, 0x2017, 0x82, 0x5, 0x9c64, 0x623, 0x4, 0xe, 0x6, 0x2, 0x0, 0x593, 0x4, 0x7, 0x4, 0x4f2eb6dd, 0x7fffffff, 0x3ff, 0x401, 0x4, 0x0, 0x22d, 0x1, 0x4d17, 0x7, 0x3, 0x4, 0x6da, 0x7, 0x1, 0xb400000, 0x4, 0x9, 0x800, 0x4, 0x2, 0x4, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0xffffff7f, 0x5, 0x0, 0x3, 0x2, 0x6, 0x80000001, 0x7, 0x3b5, 0x400, 0x7, 0x0, 0x2, 0x8, 0x400, 0xbbc2, 0x3, 0x2, 0x2]}]}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, @hci={0x1f, 0x0, 0x4}, @phonet={0x23, 0xa1, 0x11, 0xc}, @l2tp={0x2, 0x0, @remote, 0x4}, 0x35c, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)='ip6erspan0\x00', 0x0, 0xa, 0xfffc}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r7, 0x12e9d000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000200)={0x1100, 0x0, 0x2e36, 0x10002}) 1.522773376s ago: executing program 1 (id=2287): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'rose0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000305000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="154601000000000085"], 0x20}}, 0x40) 1.421537205s ago: executing program 0 (id=2288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000033000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.350820247s ago: executing program 3 (id=2289): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) (async) ioctl(r0, 0x8b2c, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200580, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0) (async) shutdown(r3, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x18) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x404c0c1) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc808) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.257689516s ago: executing program 0 (id=2290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='bond0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000006c0), 0x9, r1}, 0x38) 1.163467382s ago: executing program 2 (id=2291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xffffffff) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000080"], 0xfe61}}], 0x2, 0xc88c4) unshare(0x20000400) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab", 0x1}], 0x1}}], 0x1, 0x8004) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x28) (async, rerun: 64) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r9, 0x0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) shutdown(r9, 0x1) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c0, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7b67}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x266}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7583}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbb55}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4497de66}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d64353994ac0c9d8d8b53889c1d9699148c269b11b9962594dcaa45a7ce945fcb0"}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x800}, 0x2) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.119349705s ago: executing program 1 (id=2292): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="83a77cec42849eba50a0fe93d293e52db60d37b1a04bc02f481886981098c1e43cc2d19e9baf6e844174bc072ac7231ab0ab05444e890a7b0806180e0f8e8d63e5031dc25485194e36fc29d6e52a6f120c489812735e8d47437c3b29e96fd3557b7867acb70883957cca5fe531", 0x6d}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b12, 0x0, 0xfffffffffffffdfd) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x40}]}) close(0x3) 1.045873653s ago: executing program 0 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x39, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000449", @ANYRES32=0x0, @ANYBLOB="00a3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) 1.044886218s ago: executing program 3 (id=2294): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240001, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fffffff, '\x00', r3, r2, 0x3, 0x4, 0x1}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x8}, {}, 0x0, 0x0, 0x2, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "776c3dac4c123121daa2ff5cd87186c96a82d89c65ea6ba138aa025681856d0f5f5e956336d23906f1a7e9087ab152c38d015e5be92b828b1f0eb091afe0a4e2ce"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000001000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = accept$netrom(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @default}, [@bcast, @rose, @rose, @remote, @null, @remote, @netrom, @bcast]}, &(0x7f0000000640)=0x48) ioctl$SIOCNRDECOBS(r7, 0x89e2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1c, 0x8, 0xb2f3, 0x7, 0x8000, r4, 0x5, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x8b99, 0x0, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r12, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r13, 0x0, 0x0}, 0x10) r14 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r14, &(0x7f00000003c0)=""/87, 0x57, 0x40000000, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20}, @dstaddrv6={0x20, 0x84, 0x8, @dev}], 0x40}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 982.694852ms ago: executing program 0 (id=2295): r0 = socket(0x10, 0x6, 0xe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e5ff0000"], 0x50) r1 = socket(0x29, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000008400000084000000080000000400000000000009000000000b0000000000000c040000000b00000000000007000000000e0000000000000c010000000d00000004000006040000000b000000050000000500000004000000810000000900000000000000060000000500000000000009040000000a0000000000001104000000040000000b0000000000000a010000000061305f71003000"], &(0x7f00000002c0)=""/132, 0xa4, 0x84, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r12, 0x43) setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) 959.666606ms ago: executing program 1 (id=2296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xb, 0x2, 0x5, 0x40, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x6, 0x1, 0xa, 0xfffffffffffffff0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x6, &(0x7f0000000240)=""/6, 0x41000, 0x28, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x6}, {0x2, 0x2, 0x2, 0xc}, {0x3, 0x5, 0x1, 0xc}, {0x3, 0x1, 0x9}, {0x2, 0x3, 0x6, 0xb}], 0x10, 0x7}, 0x94) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x40ae}}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x30, 0x4}, @const={0x6}]}, {0x0, [0x61, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000740)=""/17, 0x5f, 0x11, 0x0, 0x800000}, 0x28) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000980)={&(0x7f00000007c0), 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf4, r5, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback=0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) (async, rerun: 32) r7 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) 959.085553ms ago: executing program 2 (id=2297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) unshare(0x2c020400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 609.866283ms ago: executing program 4 (id=2298): unshare(0x22020600) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x4130, 0x41020, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000000c0)=""/193}, 0x20) r1 = socket(0x840000000002, 0x3, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 599.675873ms ago: executing program 0 (id=2299): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x4}, 0x8) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r8}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="288000e10000000000000000010000000a00000000000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@multicast1, 0x4e24, 0x1, 0x4e24, 0x5, 0xa, 0xa0, 0x0, 0x33, r8, r11}, {0x9, 0x8, 0x8, 0x2, 0xff, 0x4, 0xe494, 0x2}, {0x9, 0xb6e, 0x8, 0xffffffffffffff81}, 0x8, 0x6e6bba, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d4, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0xbb, 0x401, 0x0, 0x80000001}}, 0xe8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x4d) close(0x3) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0xc}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000280)={@private2, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@bridge_newvlan={0x24, 0x70, 0x20, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r13}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) write$tun(r14, &(0x7f0000000580)={@val={0x0, 0x8847}, @val={0x2, 0x1, 0x401, 0xa, 0x5, 0xa}, @llc={@snap={0xff, 0xab, "ec33", "c9c938", 0x892f, "dbe754d263e0802068fe8dd3d3aedea57d34160b79aa52e050c266e23d395969c6e4db3fa09c6db8ba1362f17e2eaeac9c019d3ddadf41cce47557a90313068dca00b6127cbecaeae10b51b3b485"}}}, 0x65) 583.156864ms ago: executing program 2 (id=2300): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a0000000000000000000000000000000000000000000000030000003c000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 461.763805ms ago: executing program 4 (id=2301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x210, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200000008000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 444.941678ms ago: executing program 2 (id=2302): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d65000071334b6f1bfa13b9d397b21274d8d0f3b8ffa7d7bd23bbd2f223ac7da8ce58370fa13a0992a1e44f372ab3ce9e8ced4b87"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xed, 0x4, 0x50, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x20, 0x80, 0x8, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @mcast1, 0x3}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000110000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') recvmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) r10 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c0) r11 = socket(0x40000000015, 0x5, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bind$alg(r12, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000a40)={0x0, 0x1000, "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"}, &(0x7f0000000180)=0x1008) 430.325977ms ago: executing program 4 (id=2303): r0 = socket(0xa, 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x0, 0x1fffffff, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 97.30063ms ago: executing program 3 (id=2304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x75e}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0xd4b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008844}, 0x44000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000200)="9d7d60044b0e3858af63671f2f905285ad2d8aaf38ac200b023f2553631db400c0fc5f0f246f129994", 0x29, 0x4000, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000200)="9d7d60044b0e3858af63671f2f905285ad2d8aaf38ac200b023f2553631db400c0fc5f0f246f129994", 0x29, 0x4000, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000240)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000280), 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000280), 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000500)) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x9, &(0x7f0000000540)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x100, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call], &(0x7f00000005c0)='syzkaller\x00', 0x4bdb, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xc, 0xffff, 0x248}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x3, 0x7, 0xb}, {0x1, 0x5, 0xa, 0xb}, {0x2, 0x3, 0x6, 0xc}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x9, &(0x7f0000000540)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x100, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call], &(0x7f00000005c0)='syzkaller\x00', 0x4bdb, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xc, 0xffff, 0x248}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000680)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x3, 0x7, 0xb}, {0x1, 0x5, 0xa, 0xb}, {0x2, 0x3, 0x6, 0xc}], 0x10, 0x3}, 0x94) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x200200, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000800)) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000840)={'team0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000840)={'team0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x3, 0x7, 0x104, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x377}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7e5e}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0xbc, 0x4, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20, 0x8000, 0x5, 0x7fffffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0xbc, 0x4, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20, 0x8000, 0x5, 0x7fffffff}}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@loopback, @in=@loopback, 0x4e22, 0xef7, 0x4e23, 0x0, 0x2, 0xc0, 0xe0, 0x2c, r7}, {0x8, 0x7fffffffffffffff, 0xbe3b, 0x0, 0x0, 0x8, 0xfffffffffffffffb}, {0x3, 0x4, 0x67, 0x10}, 0x9, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@loopback, 0x3504, 0x4, 0x3, 0xb, 0x0, 0x4, 0x1}}, 0xe8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xc, 0x0, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xc, 0x0, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40080) writev(r3, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="f17ca3706e493fd5be0de4c7940a4c", 0xf}, {&(0x7f0000000d00)="187451193b16f29c13fb875a678f56a15b4d0fdb1137be9f21ebefda87c5", 0x1e}, {&(0x7f0000000d40)="38927f51ae8466cc982b5b7cddbb6f84c730", 0x12}, {&(0x7f0000000d80)="64e9cbde244d7141ab62b6459d28b6312f3372f7c366b06d2722739f3c7a8c356b48c0c0b3e47981b0b271a2dca477e9e3cfbff132d4fba2bb95d5", 0x3b}], 0x4) openat$cgroup_subtree(r2, &(0x7f0000000e00), 0x2, 0x0) (async) openat$cgroup_subtree(r2, &(0x7f0000000e00), 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000e80)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000ec0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 61.622718ms ago: executing program 4 (id=2305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) r4 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000380)=0x1c, 0x80000) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000003c0)={0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}, 0x18) (async) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000003c0)={0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8}, @pad1]}, 0x18) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x24, r6, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x10'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) 0s ago: executing program 3 (id=2306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r2, 0x4) listen(r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r5, 0xffffe000) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0xffffffffffffff69) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) close(r5) kernel console output (not intermixed with test programs): 255.255.255 [ 144.859846][ T7398] tipc: Enabled bearer , priority 10 [ 145.900020][ T6013] tipc: Node number set to 2899786917 [ 147.959586][ T7408] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.318'. [ 147.992479][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 148.205537][ T7425] netlink: 176 bytes leftover after parsing attributes in process `syz.3.324'. [ 148.483635][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 148.548822][ T7437] netlink: 83 bytes leftover after parsing attributes in process `syz.3.326'. [ 148.696722][ T7437] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.719021][ T3434] bond0: (slave bond_slave_0): interface is now down [ 148.726041][ T3434] bond0: (slave bond_slave_1): interface is now down [ 148.760267][ T36] bond0: (slave bond_slave_0): interface is now down [ 148.788686][ T36] bond0: (slave bond_slave_1): interface is now down [ 148.856560][ T3434] bond0: (slave bond_slave_0): interface is now down [ 148.881517][ T3434] bond0: (slave bond_slave_1): interface is now down [ 148.915902][ T3434] bond0: now running without any active interface! [ 149.076489][ T7450] bridge0: port 3(ipvlan2) entered blocking state [ 149.119637][ T7450] bridge0: port 3(ipvlan2) entered disabled state [ 149.142579][ T7450] ipvlan2: entered allmulticast mode [ 149.171786][ T7450] bridge0: entered allmulticast mode [ 149.200925][ T7450] ipvlan2: left allmulticast mode [ 149.219313][ T7450] bridge0: left allmulticast mode [ 149.275733][ T7454] tipc: Started in network mode [ 149.282345][ T7454] tipc: Node identity 224738f84012, cluster identity 4711 [ 149.291197][ T7454] tipc: Enabled bearer , priority 0 [ 149.306093][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.323'. [ 149.327734][ T7456] syzkaller0: entered promiscuous mode [ 149.334273][ T7456] syzkaller0: entered allmulticast mode [ 149.546999][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 149.564772][ T7462] tipc: Enabling of bearer rejected, failed to enable media [ 149.785987][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 149.887948][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 149.935557][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.336'. [ 150.027339][ T7454] tipc: Resetting bearer [ 150.122253][ T7454] tipc: Disabling bearer [ 150.148821][ T7489] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 150.183831][ T7474] : entered promiscuous mode [ 150.360306][ T7494] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 150.707096][ T7501] bridge_slave_1: left allmulticast mode [ 150.715459][ T7501] bridge_slave_1: left promiscuous mode [ 150.722807][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.733823][ T7501] bridge_slave_0: left allmulticast mode [ 150.741279][ T7501] bridge_slave_0: left promiscuous mode [ 150.747317][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.887503][ T7511] netlink: 'syz.0.346': attribute type 29 has an invalid length. [ 150.898350][ T7512] netlink: 'syz.0.346': attribute type 29 has an invalid length. [ 150.947146][ T7513] netlink: 'syz.4.347': attribute type 15 has an invalid length. [ 150.965257][ T7510] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 150.981933][ T7510] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 151.028380][ T7520] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001 [ 151.330576][ T7537] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 151.356894][ T7537] geneve0: entered promiscuous mode [ 151.377542][ T7537] geneve0: entered allmulticast mode [ 151.397743][ T7537] team0: Port device geneve0 added [ 151.536410][ T7542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.627931][ T7551] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 151.721643][ T7554] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 151.755211][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.780466][ T7554] bond0: (slave gretap1): making interface the new active one [ 151.793229][ T7554] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 151.819061][ T7554] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 151.915699][ T7560] tipc: Started in network mode [ 151.921442][ T7560] tipc: Node identity 1e1a5a5ed4a5, cluster identity 4711 [ 151.929917][ T7560] tipc: Enabled bearer , priority 0 [ 151.937631][ T7560] syzkaller0: entered promiscuous mode [ 151.943637][ T7560] syzkaller0: entered allmulticast mode [ 151.955805][ T7560] netlink: 'syz.0.360': attribute type 4 has an invalid length. [ 151.984281][ T7560] tipc: Resetting bearer [ 151.996890][ T7559] tipc: Resetting bearer [ 152.025511][ T7559] tipc: Disabling bearer [ 152.751396][ T7605] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 153.001613][ T7618] pim6reg1: entered promiscuous mode [ 153.007022][ T7618] pim6reg1: entered allmulticast mode [ 153.092512][ T7629] __nla_validate_parse: 12 callbacks suppressed [ 153.092534][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.375'. [ 153.122565][ T7629] nbd: must specify at least one socket [ 153.734025][ T7668] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 153.780766][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.2.386'. [ 153.788270][ T7671] Can't find ip_set type hash:net,ned [ 153.877068][ T7672] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 153.957290][ T7672] netlink: 116 bytes leftover after parsing attributes in process `syz.4.388'. [ 153.980863][ T7672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.041377][ T7680] veth0: entered promiscuous mode [ 154.086724][ T7677] veth0: left promiscuous mode [ 154.502915][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 154.535429][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 154.541263][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.393'. [ 154.773272][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 155.534606][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 155.560133][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 156.120505][ T7749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.407'. [ 156.677307][ T7777] validate_nla: 1 callbacks suppressed [ 156.677327][ T7777] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 156.783975][ T7778] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 156.884776][ T7777] bond1: entered promiscuous mode [ 156.925856][ T7777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.946844][ T7788] netlink: 'syz.1.415': attribute type 4 has an invalid length. [ 156.966429][ T7793] netlink: 'syz.4.416': attribute type 3 has an invalid length. [ 156.986314][ T7780] bond1: (slave bridge0): making interface the new active one [ 157.009101][ T7780] bridge0: entered promiscuous mode [ 157.015897][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.016552][ T7780] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 157.086170][ T7797] netlink: 'syz.4.417': attribute type 30 has an invalid length. [ 157.136375][ T7789] syzkaller1: entered promiscuous mode [ 157.175037][ T7789] syzkaller1: entered allmulticast mode [ 158.108940][ T7815] syz_tun: entered allmulticast mode [ 158.122743][ T7809] syz_tun: left allmulticast mode [ 158.414012][ T7830] netlink: 'syz.1.425': attribute type 5 has an invalid length. [ 158.488349][ T7835] __nla_validate_parse: 6 callbacks suppressed [ 158.488370][ T7835] netlink: 44 bytes leftover after parsing attributes in process `syz.3.426'. [ 158.615497][ T7852] syzkaller0: entered promiscuous mode [ 158.632514][ T7852] syzkaller0: entered allmulticast mode [ 159.664695][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.443'. [ 160.602278][ T7930] sctp: [Deprecated]: syz.2.450 (pid 7930) Use of int in maxseg socket option. [ 160.602278][ T7930] Use struct sctp_assoc_value instead [ 161.107191][ T7956] netlink: 96 bytes leftover after parsing attributes in process `syz.3.455'. [ 161.353199][ T7966] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 161.367333][ T7967] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 161.408060][ T7966] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 161.706624][ T7979] netlink: 156 bytes leftover after parsing attributes in process `syz.1.462'. [ 161.822648][ T7986] sctp: [Deprecated]: syz.4.464 (pid 7986) Use of int in maxseg socket option. [ 161.822648][ T7986] Use struct sctp_assoc_value instead [ 161.981941][ T7994] netlink: 'syz.1.466': attribute type 3 has an invalid length. [ 162.080180][ T7999] syz_tun: entered allmulticast mode [ 162.095639][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 162.121861][ T7999] dvmrp8: entered allmulticast mode [ 162.132588][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 162.166380][ T7999] dvmrp1: entered allmulticast mode [ 162.219406][ T7998] syz_tun: left allmulticast mode [ 162.226204][ T7998] dvmrp1: left allmulticast mode [ 162.329269][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 162.399942][ T8020] netlink: 'syz.0.473': attribute type 2 has an invalid length. [ 162.407629][ T8020] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 162.430239][ T8020] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 162.648284][ T3503] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 162.707542][ T8002] Bluetooth: MGMT ver 1.23 [ 163.157552][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 163.176275][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 163.277695][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'. [ 163.323829][ T8057] veth1_macvtap: left promiscuous mode [ 163.351493][ T8057] macsec0: entered promiscuous mode [ 163.790839][ T8081] __nla_validate_parse: 3 callbacks suppressed [ 163.790857][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 163.834663][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 164.438363][ T8081] netlink: 'syz.1.488': attribute type 6 has an invalid length. [ 165.088937][ T8122] tipc: Can't bind to reserved service type 0 [ 165.278103][ T8135] netlink: 'syz.4.501': attribute type 9 has an invalid length. [ 165.299111][ T8135] netlink: 'syz.4.501': attribute type 7 has an invalid length. [ 165.316054][ T8135] netlink: 'syz.4.501': attribute type 8 has an invalid length. [ 165.325323][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'. [ 165.335721][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'. [ 165.397078][ T8140] erspan0: entered promiscuous mode [ 165.404136][ T8144] rdma_op ffff88807a84f1f0 conn xmit_rdma 0000000000000000 [ 165.590500][ T8150] gtp0: entered promiscuous mode [ 165.602343][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 165.703698][ T8154] dvmrp0: entered allmulticast mode [ 165.735508][ T8155] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.508'. [ 165.925796][ T8171] Bluetooth: MGMT ver 1.23 [ 166.022907][ T8170] hsr0: entered promiscuous mode [ 166.126969][ T8173] Â: renamed from pim6reg1 [ 166.135588][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.514'. [ 166.180603][ T8177] unsupported nlmsg_type 40 [ 166.232218][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 166.259730][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 166.275390][ T8175] tipc: Enabled bearer , priority 0 [ 166.353410][ T8175] syzkaller0: entered promiscuous mode [ 166.379654][ T8175] syzkaller0: entered allmulticast mode [ 166.404000][ T8175] veth0_vlan: mtu greater than device maximum [ 166.432468][ T8174] tipc: Resetting bearer [ 166.456603][ T8174] tipc: Disabling bearer [ 166.564635][ T8191] tipc: Enabled bearer , priority 0 [ 166.573731][ T8191] syzkaller0: entered promiscuous mode [ 166.580156][ T8191] syzkaller0: entered allmulticast mode [ 166.604972][ T8194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.738222][ T8200] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.519'. [ 166.783947][ T8200] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 166.814997][ T8198] tipc: Resetting bearer [ 166.860905][ T8190] tipc: Resetting bearer [ 166.924578][ T8205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.946027][ T8190] tipc: Disabling bearer [ 167.290709][ T8221] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 167.950014][ T5857] Bluetooth: hci2: command 0x0401 tx timeout [ 167.956245][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 168.230771][ T8259] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 168.283129][ T8263] tipc: Enabled bearer , priority 0 [ 168.307305][ T8263] syzkaller0: entered promiscuous mode [ 168.354646][ T8263] syzkaller0: entered allmulticast mode [ 168.414641][ T8263] tipc: Resetting bearer [ 168.447660][ T8263] tipc: Disabling bearer [ 168.563002][ T8279] lo speed is unknown, defaulting to 1000 [ 168.572241][ T8279] lo speed is unknown, defaulting to 1000 [ 168.590692][ T8279] lo speed is unknown, defaulting to 1000 [ 169.024811][ T5949] hid-generic 0005:16C0:5507.0001: item fetching failed at offset 0/1 [ 169.035072][ T5949] hid-generic 0005:16C0:5507.0001: probe with driver hid-generic failed with error -22 [ 169.055127][ T8300] __nla_validate_parse: 4 callbacks suppressed [ 169.055145][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.552'. [ 169.124421][ T8297] delete_channel: no stack [ 169.477852][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.545944][ T8279] infiniband syz0: set down [ 169.554268][ T44] lo speed is unknown, defaulting to 1000 [ 169.605183][ T8279] infiniband syz0: added lo [ 169.616675][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 169.688038][ T8327] pimreg: entered allmulticast mode [ 169.719517][ T8279] RDS/IB: syz0: added [ 169.724351][ T8279] smc: adding ib device syz0 with port count 1 [ 169.731003][ T8279] smc: ib device syz0 port 1 has pnetid [ 169.772678][ T5913] lo speed is unknown, defaulting to 1000 [ 169.780438][ T8279] lo speed is unknown, defaulting to 1000 [ 169.792260][ T8328] tipc: Enabled bearer , priority 0 [ 169.831004][ T8328] syzkaller0: entered promiscuous mode [ 169.836534][ T8328] syzkaller0: entered allmulticast mode [ 170.092814][ T8332] tipc: Resetting bearer [ 170.134749][ T8279] lo speed is unknown, defaulting to 1000 [ 170.155352][ T8326] tipc: Resetting bearer [ 170.226681][ T8326] tipc: Disabling bearer [ 170.332825][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'. [ 170.608005][ T8348] netlink: 'syz.4.564': attribute type 39 has an invalid length. [ 170.669902][ T8279] lo speed is unknown, defaulting to 1000 [ 170.931792][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 170.975912][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 171.488133][ T8279] lo speed is unknown, defaulting to 1000 [ 171.602813][ T8386] syz_tun: entered allmulticast mode [ 171.639375][ T8385] syz_tun: left allmulticast mode [ 171.836568][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 171.908226][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 171.969932][ T8401] netlink: 'syz.4.577': attribute type 12 has an invalid length. [ 172.433949][ T8376] lo speed is unknown, defaulting to 1000 [ 172.983914][ T8279] lo speed is unknown, defaulting to 1000 [ 194.511687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.958653][ T8437] netlink: 152 bytes leftover after parsing attributes in process `syz.4.587'. [ 207.975504][ T8438] netlink: 'syz.2.585': attribute type 4 has an invalid length. [ 207.996098][ T8436] tipc: Enabled bearer , priority 0 [ 208.008306][ T8438] netlink: 'syz.2.585': attribute type 4 has an invalid length. [ 208.025952][ T8436] syzkaller0: entered promiscuous mode [ 208.045137][ T8436] syzkaller0: entered allmulticast mode [ 208.057455][ T8442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 208.108181][ T8436] tipc: Resetting bearer [ 208.120040][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 208.135203][ T8443] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.135498][ T5922] lo speed is unknown, defaulting to 1000 [ 208.147352][ T8443] block nbd1: shutting down sockets [ 208.156702][ T8427] tipc: Resetting bearer [ 208.171706][ T5922] syz0: Port: 1 Link ACTIVE [ 208.220572][ T8427] tipc: Disabling bearer [ 208.294205][ T5922] lo speed is unknown, defaulting to 1000 [ 208.605427][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'. [ 208.775732][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 208.862048][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 208.999580][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 209.210676][ T8484] bridge0: port 3(0!) entered disabled state [ 209.217191][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.225051][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.266250][ T8484] batadv0: left promiscuous mode [ 209.336611][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.351048][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.628820][ T8484] gretap1: left promiscuous mode [ 209.637467][ T8484] gretap1: left allmulticast mode [ 209.664648][ T8480] erspan0: entered promiscuous mode [ 209.725679][ T6068] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.757907][ T6068] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.870907][ T6068] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.911715][ T6068] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.302415][ T8536] syz_tun: entered allmulticast mode [ 210.413812][ T8539] syz_tun: left allmulticast mode [ 210.450906][ T8540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.611'. [ 210.476217][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 210.551768][ T8540] dummy0: entered promiscuous mode [ 210.561792][ T8540] dummy0: left promiscuous mode [ 210.746645][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.615'. [ 210.831293][ T8558] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 210.864469][ T8558] netlink: 228 bytes leftover after parsing attributes in process `syz.1.616'. [ 211.238638][ T8574] bridge0: entered allmulticast mode [ 211.394409][ T8581] TCP: TCP_TX_DELAY enabled [ 211.446616][ T8583] syzkaller1: entered promiscuous mode [ 211.476176][ T8583] syzkaller1: entered allmulticast mode [ 211.652375][ T8588] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 211.761809][ T8588] team0: Port device dummy0 added [ 211.793268][ T8594] veth0: entered promiscuous mode [ 211.960636][ T8603] lo speed is unknown, defaulting to 1000 [ 211.977833][ T8606] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 211.983774][ T8594] veth0: left promiscuous mode [ 212.051722][ T8606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.165174][ T8610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.197874][ T8610] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.211475][ T8610] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 212.394058][ T8617] vti0: entered promiscuous mode [ 212.417800][ T8617] vti0: entered allmulticast mode [ 212.502936][ T8621] veth5: entered promiscuous mode [ 212.515718][ T8621] bond2: (slave veth5): Enslaving as an active interface with a down link [ 212.656989][ T8606] erspan0: entered allmulticast mode [ 212.685969][ T8606] bond2: (slave erspan0): making interface the new active one [ 212.696746][ T8606] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 213.307789][ T8645] bond0: entered promiscuous mode [ 213.338319][ T8645] batadv0: entered promiscuous mode [ 213.351552][ T8645] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 213.369487][ T8645] hsr1: entered allmulticast mode [ 213.379180][ T8645] bond0: entered allmulticast mode [ 213.384442][ T8645] batadv0: entered allmulticast mode [ 213.397536][ T8645] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 213.420368][ T8645] bond0: left promiscuous mode [ 213.427228][ T8645] batadv0: left promiscuous mode [ 213.472826][ T8652] tipc: Enabled bearer , priority 0 [ 213.528380][ T8652] tipc: Disabling bearer [ 213.764856][ T8664] __nla_validate_parse: 3 callbacks suppressed [ 213.764875][ T8664] netlink: 112 bytes leftover after parsing attributes in process `syz.1.640'. [ 213.839737][ T8671] netlink: 'syz.4.645': attribute type 8 has an invalid length. [ 214.190695][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 214.240226][ T8698] netlink: 'syz.0.651': attribute type 21 has an invalid length. [ 214.263547][ T8687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.649'. [ 214.306737][ T8687] Bluetooth: MGMT ver 1.23 [ 214.316200][ T8698] netlink: 'syz.0.651': attribute type 6 has an invalid length. [ 214.344353][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 214.355165][ T8698] netlink: 64 bytes leftover after parsing attributes in process `syz.0.651'. [ 214.371100][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 214.397351][ T8697] vlan3: entered promiscuous mode [ 214.403786][ T8697] gretap0: entered promiscuous mode [ 214.419232][ T8690] lo speed is unknown, defaulting to 1000 [ 214.436738][ T8706] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.455812][ T8706] netlink: 196 bytes leftover after parsing attributes in process `syz.3.654'. [ 214.473489][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 214.520932][ T8687] syz.4.649 (8687) used greatest stack depth: 17864 bytes left [ 214.536029][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 214.556790][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 214.697240][ T8714] netlink: 'syz.4.656': attribute type 21 has an invalid length. [ 214.770748][ T8714] netlink: 'syz.4.656': attribute type 5 has an invalid length. [ 214.794022][ T8714] netlink: 'syz.4.656': attribute type 6 has an invalid length. [ 214.941989][ T8703] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.987491][ T8703] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 215.846871][ T8755] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 216.031601][ T8764] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 216.079338][ T8764] netlink: 'syz.3.669': attribute type 2 has an invalid length. [ 216.262416][ T8766] lo speed is unknown, defaulting to 1000 [ 216.793943][ T8779] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96 [ 217.070147][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.071064][ T5851] Bluetooth: hci2: command 0x0401 tx timeout [ 217.081448][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 217.174393][ T8787] netlink: 'syz.4.676': attribute type 29 has an invalid length. [ 217.746812][ T8799] C: renamed from lo (while UP) [ 217.770301][ T8799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.849698][ T8799] only policy match revision 0 supported [ 217.849718][ T8799] unable to load match [ 217.915604][ T8804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.112932][ T8810] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 218.129209][ T8810] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 218.186926][ T8812] geneve3: entered promiscuous mode [ 218.198572][ T8812] geneve3: entered allmulticast mode [ 218.931985][ T8870] validate_nla: 4 callbacks suppressed [ 218.932007][ T8870] netlink: 'syz.4.699': attribute type 21 has an invalid length. [ 219.009158][ T8873] can: request_module (can-proto-0) failed. [ 219.027465][ T8874] can: request_module (can-proto-0) failed. [ 219.183228][ T8884] __nla_validate_parse: 12 callbacks suppressed [ 219.183247][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 219.217081][ T8884] netlink: 256 bytes leftover after parsing attributes in process `syz.1.703'. [ 219.261746][ T8883] netlink: 256 bytes leftover after parsing attributes in process `syz.1.703'. [ 219.459988][ T8896] tipc: Enabled bearer , priority 0 [ 219.480615][ T8896] syzkaller0: entered promiscuous mode [ 219.496116][ T8896] syzkaller0: entered allmulticast mode [ 219.603778][ T8868] netlink: 'syz.0.698': attribute type 3 has an invalid length. [ 219.763157][ T8908] tipc: Resetting bearer [ 219.926095][ T8908] tipc: Disabling bearer [ 219.982588][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 220.065280][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 220.097128][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.130397][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.200705][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.208248][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.381480][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'. [ 220.483309][ T8934] syzkaller0: entered promiscuous mode [ 220.490595][ T8934] syzkaller0: entered allmulticast mode [ 220.579745][ T8948] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 220.763634][ T8958] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 221.987866][ T8958] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 222.312533][ T44] IPVS: starting estimator thread 0... [ 222.326183][ T8987] bridge3: entered allmulticast mode [ 222.352945][ T8990] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 222.446155][ T8997] netlink: 200 bytes leftover after parsing attributes in process `syz.1.730'. [ 222.459562][ T8991] IPVS: using max 24 ests per chain, 57600 per kthread [ 222.486211][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 223.390765][ T9036] netlink: 'syz.1.740': attribute type 25 has an invalid length. [ 223.417270][ T9036] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 223.445831][ T9036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.526208][ T9040] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 223.577946][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 223.911963][ T9050] C speed is unknown, defaulting to 1000 [ 223.920448][ T9052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.041728][ T9060] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 224.109440][ T9064] pimreg: left allmulticast mode [ 224.764546][ T9086] netlink: 'syz.4.755': attribute type 3 has an invalid length. [ 224.996139][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 225.746789][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 226.025446][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 226.065037][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 226.192586][ T9125] netlink: 'syz.3.766': attribute type 10 has an invalid length. [ 226.198720][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 226.244903][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 226.255704][ T9125] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 226.337441][ T9124] tipc: Enabling of bearer rejected, failed to enable media [ 226.416904][ T9129] C speed is unknown, defaulting to 1000 [ 226.468151][ T9127] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.770450][ T9144] macvtap0: refused to change device tx_queue_len [ 226.799435][ T9144] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 226.965549][ T9146] netlink: 96 bytes leftover after parsing attributes in process `syz.3.771'. [ 227.076392][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 227.114932][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 227.131101][ T9146] netlink: 'syz.3.771': attribute type 11 has an invalid length. [ 227.287753][ T9150] netlink: 'syz.0.773': attribute type 11 has an invalid length. [ 227.310554][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 227.496723][ T8857] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.520552][ T8857] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.543272][ T6070] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.561038][ T9162] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.579336][ T6070] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.019475][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.358954][ T9195] vlan0: entered promiscuous mode [ 228.364248][ T9195] vlan0: entered allmulticast mode [ 228.373328][ T9195] hsr_slave_1: entered allmulticast mode [ 228.384694][ T9194] C speed is unknown, defaulting to 1000 [ 228.816911][ T9207] hsr0: left promiscuous mode [ 228.830965][ T9221] sctp: [Deprecated]: syz.4.791 (pid 9221) Use of int in max_burst socket option deprecated. [ 228.830965][ T9221] Use struct sctp_assoc_value instead [ 228.902743][ T9206] syzkaller0: entered promiscuous mode [ 228.909435][ T9206] syzkaller0: entered allmulticast mode [ 228.938182][ T9211] syzkaller1: entered promiscuous mode [ 228.947536][ T9211] syzkaller1: entered allmulticast mode [ 229.377025][ T9232] netlink: 'syz.1.797': attribute type 13 has an invalid length. [ 229.795258][ T9232] bridge0: port 3(0!) entered disabled state [ 229.801738][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.809542][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.097470][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.134841][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.137640][ T9274] __nla_validate_parse: 11 callbacks suppressed [ 230.137828][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 230.490079][ T8850] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.521906][ T8850] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.636640][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 230.638657][ T8850] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.647187][ T9278] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 230.664008][ T9278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.698920][ T8850] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.870456][ T9282] sctp: [Deprecated]: syz.4.810 (pid 9282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.870456][ T9282] Use struct sctp_sack_info instead [ 231.035862][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'. [ 231.171364][ T9294] C speed is unknown, defaulting to 1000 [ 231.244496][ T9299] syzkaller1: entered promiscuous mode [ 231.252591][ T9299] syzkaller1: entered allmulticast mode [ 231.592092][ T9310] tipc: Enabled bearer , priority 0 [ 231.814071][ T9310] tipc: Disabling bearer [ 231.987897][ T9330] C speed is unknown, defaulting to 1000 [ 232.161351][ T9347] netlink: zone id is out of range [ 232.203946][ T9341] !: left allmulticast mode [ 232.213571][ T9341] !: left promiscuous mode [ 232.218935][ T9341] bridge0: port 3(0!) entered disabled state [ 232.297814][ T9341] bridge_slave_0: left allmulticast mode [ 232.326384][ T9341] bridge_slave_0: left promiscuous mode [ 232.410253][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.995168][ T9341] bridge_slave_1: left allmulticast mode [ 233.023954][ T9341] bridge_slave_1: left promiscuous mode [ 233.030463][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.052558][ T9341] bond0: (slave bond_slave_0): Releasing backup interface [ 233.067516][ T9341] bond0: (slave bond_slave_1): Releasing backup interface [ 233.082609][ T9341] team_slave_1: left promiscuous mode [ 233.096878][ T9341] team0: Port device team_slave_1 removed [ 233.106289][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.117029][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.132695][ T9341] bond0: (slave wlan1): Releasing backup interface [ 233.152601][ T9347] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 233.163300][ T9347] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 233.431037][ T9366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.584061][ T9366] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 234.286192][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 234.474609][ T9407] bridge2: entered promiscuous mode [ 234.509409][ T9407] bridge2: entered allmulticast mode [ 234.532223][ T9407] team0: Port device bridge2 added [ 234.550530][ T9416] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 234.812363][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.851'. [ 235.149671][ T9452] C speed is unknown, defaulting to 1000 [ 235.149944][ T9459] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.235775][ T9461] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 235.345239][ T9461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.361251][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 235.371318][ T9463] tipc: Enabled bearer , priority 0 [ 235.379633][ T9471] netlink: 'syz.2.861': attribute type 17 has an invalid length. [ 235.388173][ T9471] netlink: 2 bytes leftover after parsing attributes in process `syz.2.861'. [ 235.429207][ T9471] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.449453][ T9468] syzkaller0: entered promiscuous mode [ 235.455079][ T9468] syzkaller0: entered allmulticast mode [ 235.565098][ T9463] tipc: Resetting bearer [ 235.694262][ T9460] tipc: Resetting bearer [ 235.705614][ T9483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.744078][ T9460] tipc: Disabling bearer [ 235.982238][ T9495] tipc: Enabled bearer , priority 0 [ 235.990752][ T9495] syzkaller0: entered promiscuous mode [ 235.996362][ T9495] syzkaller0: entered allmulticast mode [ 236.006906][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.868'. [ 236.183376][ T9507] syzkaller0: left promiscuous mode [ 236.201616][ T9507] syzkaller0: left allmulticast mode [ 236.228936][ T9508] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 236.281040][ T9495] tipc: Resetting bearer [ 236.294621][ T9494] tipc: Resetting bearer [ 236.335910][ T9494] tipc: Disabling bearer [ 237.067368][ T9528] team0: Port device dummy0 removed [ 237.143655][ T9545] netlink: 'syz.1.880': attribute type 12 has an invalid length. [ 237.159397][ T9545] netlink: 'syz.1.880': attribute type 29 has an invalid length. [ 237.186769][ T9545] netlink: 148 bytes leftover after parsing attributes in process `syz.1.880'. [ 237.233164][ T9545] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 237.509539][ T9567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.886'. [ 237.705366][ T9573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.887'. [ 238.280622][ T9602] bridge4: entered promiscuous mode [ 238.313962][ T9602] bridge4: entered allmulticast mode [ 238.351846][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 238.390209][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 238.435727][ T9606] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 238.480171][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 238.581450][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 238.983151][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 239.049867][ T9638] tipc: Enabling of bearer rejected, failed to enable media [ 239.355558][ T9649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.386368][ T9652] tipc: Invalid UDP bearer configuration [ 239.386427][ T9652] tipc: Enabling of bearer rejected, failed to enable media [ 239.472068][ T9649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.605905][ T9649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.703123][ T9649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.865941][ T8848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.951477][ T8848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.969865][ T8850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.008600][ T8850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.922566][ T9705] syzkaller1: entered promiscuous mode [ 240.930911][ T9705] syzkaller1: entered allmulticast mode [ 240.953416][ T9708] __nla_validate_parse: 3 callbacks suppressed [ 240.953434][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 240.991474][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.929'. [ 241.138243][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 241.153757][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 241.252750][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 241.351331][ T9722] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 241.376943][ T9722] netlink: 232 bytes leftover after parsing attributes in process `syz.1.933'. [ 241.398321][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 241.540749][ T9728] tipc: Enabled bearer , priority 0 [ 241.566493][ T9728] syzkaller0: entered promiscuous mode [ 241.582379][ T9728] syzkaller0: entered allmulticast mode [ 241.626028][ T9728] tipc: Resetting bearer [ 241.637687][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.936'. [ 241.690735][ T9727] tipc: Resetting bearer [ 241.715124][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.937'. [ 241.755648][ T9727] tipc: Disabling bearer [ 241.823857][ T9744] tipc: Enabled bearer , priority 0 [ 241.849455][ T9744] syzkaller0: entered promiscuous mode [ 241.855077][ T9744] syzkaller0: entered allmulticast mode [ 241.932073][ T9744] tipc: Resetting bearer [ 242.082036][ T9756] ipvlan0: entered promiscuous mode [ 242.095566][ T9756] bridge0: port 1(ipvlan0) entered blocking state [ 242.104114][ T9756] bridge0: port 1(ipvlan0) entered disabled state [ 242.116433][ T9756] ipvlan0: entered allmulticast mode [ 242.124039][ T9756] gretap0: entered allmulticast mode [ 242.132916][ T9756] ipvlan0: left allmulticast mode [ 242.138002][ T9756] gretap0: left allmulticast mode [ 242.450169][ T9740] tipc: Resetting bearer [ 242.467967][ T9740] tipc: Disabling bearer [ 242.672796][ T9788] openvswitch: netlink: Message has 8 unknown bytes. [ 242.763167][ T9790] netlink: 'syz.2.955': attribute type 3 has an invalid length. [ 242.788582][ T9790] netlink: 666 bytes leftover after parsing attributes in process `syz.2.955'. [ 242.913363][ T9793] C speed is unknown, defaulting to 1000 [ 243.322875][ T9806] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 243.966561][ T9816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.118967][ T9816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.276730][ T9816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.537879][ T9816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.538824][ T9832] netlink: 'syz.2.968': attribute type 15 has an invalid length. [ 244.689401][ T9842] syzkaller1: entered promiscuous mode [ 244.695646][ T9842] syzkaller1: entered allmulticast mode [ 244.845806][ T8855] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.916675][ T8855] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.973382][ T8855] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.016938][ T8855] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.118396][ T9870] tipc: Enabled bearer , priority 0 [ 245.152628][ T9870] syzkaller0: entered promiscuous mode [ 245.158237][ T9870] syzkaller0: entered allmulticast mode [ 245.210253][ T9870] tipc: Resetting bearer [ 245.230165][ T9869] tipc: Resetting bearer [ 245.286527][ T9869] tipc: Disabling bearer [ 245.949248][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.983963][ T9892] bond0: (slave rose0): Enslaving as an active interface with an up link [ 246.037629][ T9902] __nla_validate_parse: 8 callbacks suppressed [ 246.037650][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.988'. [ 246.069888][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 246.342948][ T9906] syzkaller1: entered promiscuous mode [ 246.367699][ T9906] syzkaller1: entered allmulticast mode [ 246.413558][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 246.818668][ T9926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.995'. [ 246.869742][ T9926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.995'. [ 247.267008][ T9941] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 247.275044][ T9941] netlink: 232 bytes leftover after parsing attributes in process `syz.4.999'. [ 247.291186][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 247.314769][ T9947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1000'. [ 247.410068][ T9952] sctp: [Deprecated]: syz.2.1001 (pid 9952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.410068][ T9952] Use struct sctp_sack_info instead [ 247.527221][ T9955] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1002'. [ 247.721429][ T9962] netlink: 'syz.1.1004': attribute type 4 has an invalid length. [ 247.733340][ T9962] netlink: 'syz.1.1004': attribute type 4 has an invalid length. [ 247.841821][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.174600][ T9993] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1012'. [ 248.438000][T10006] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 248.463579][T10006] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.476351][T10006] bond0: (slave team0): Enslaving as an active interface with a down link [ 248.847571][T10028] C speed is unknown, defaulting to 1000 [ 249.420612][T10051] tipc: Enabled bearer , priority 0 [ 249.442794][T10051] syzkaller0: entered promiscuous mode [ 249.459870][T10051] syzkaller0: entered allmulticast mode [ 249.841644][T10051] tipc: Resetting bearer [ 249.858358][T10048] tipc: Resetting bearer [ 249.989607][T10048] tipc: Disabling bearer [ 250.776990][T10102] C speed is unknown, defaulting to 1000 [ 250.850655][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.193622][T10124] tipc: New replicast peer: 255.255.255.255 [ 251.259695][T10124] tipc: Enabled bearer , priority 10 [ 252.016188][T10133] __nla_validate_parse: 1 callbacks suppressed [ 252.016210][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 252.057747][T10133] C speed is unknown, defaulting to 1000 [ 252.389745][ T9260] tipc: Node number set to 2953937209 [ 252.845592][T10169] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.983688][T10169] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.076262][T10169] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.160233][T10169] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.376135][ T8857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.492613][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.512126][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.542156][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.769227][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 253.965859][T10212] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1072'. [ 254.267228][T10230] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 254.323646][T10206] team0 (unregistering): left allmulticast mode [ 254.330264][T10206] geneve0: left allmulticast mode [ 254.372589][T10206] team0 (unregistering): left promiscuous mode [ 254.383701][T10206] geneve0: left promiscuous mode [ 254.397386][T10206] team0 (unregistering): Port device geneve0 removed [ 254.516886][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 254.529050][T10243] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 254.556788][T10230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.567902][T10243] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1079'. [ 254.584874][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 254.607480][T10233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.615134][T10233] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.627516][T10233] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 254.677214][T10236] veth3: entered promiscuous mode [ 254.686534][T10236] bond1: (slave veth3): Enslaving as an active interface with a down link [ 254.713198][T10239] erspan0: entered allmulticast mode [ 254.761458][T10239] bond1: (slave erspan0): making interface the new active one [ 254.796713][T10239] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 254.821664][ T8850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.842785][ T8850] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.951692][T10257] C speed is unknown, defaulting to 1000 [ 255.075255][ T8850] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.098528][ T8850] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.219453][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 255.259889][T10272] netlink: 'syz.2.1083': attribute type 30 has an invalid length. [ 255.286285][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 255.286707][ T6065] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.295564][T10272] netlink: 'syz.2.1083': attribute type 30 has an invalid length. [ 255.354515][ T8850] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.373713][ T8850] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.441098][ T8850] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.496892][T10278] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1085'. [ 255.517387][T10278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.562896][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 255.765769][T10291] pimreg: entered allmulticast mode [ 255.799843][T10291] pimreg: left allmulticast mode [ 255.971254][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 257.001873][T10332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.262601][T10394] __nla_validate_parse: 3 callbacks suppressed [ 258.262623][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 258.288108][T10384] IPVS: Scheduler module ip_vs_sip not found [ 258.294807][T10392] IPVS: length: 8 != 446622349272 [ 258.603554][T10404] netlink: 'syz.0.1123': attribute type 13 has an invalid length. [ 259.068794][ T12] wlan0: Trigger new scan to find an IBSS to join [ 259.519292][ T6065] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 259.646597][T10442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1128'. [ 259.662945][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 259.981785][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1134'. [ 259.991665][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 260.012220][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1134'. [ 260.038723][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1134'. [ 260.076679][T10464] C speed is unknown, defaulting to 1000 [ 260.288817][T10486] dvmrp0: left allmulticast mode [ 260.297823][T10485] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1140'. [ 260.320918][T10485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1140'. [ 260.804630][T10517] sctp: [Deprecated]: syz.0.1148 (pid 10517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.804630][T10517] Use struct sctp_sack_info instead [ 260.832173][T10518] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 260.850241][T10518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1147'. [ 260.897168][T10519] netlink: 'syz.3.1147': attribute type 31 has an invalid length. [ 261.035520][T10523] lo: entered allmulticast mode [ 261.053306][T10523] lo: left allmulticast mode [ 261.058766][T10521] block nbd1: server does not support multiple connections per device. [ 261.089275][T10521] block nbd1: shutting down sockets [ 262.003044][T10558] bridge0: Device is already in use. [ 262.030720][T10552] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 262.109531][ T6068] wlan0: Trigger new scan to find an IBSS to join [ 262.587883][T10579] C speed is unknown, defaulting to 1000 [ 262.890489][T10603] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 263.310241][T10611] __nla_validate_parse: 7 callbacks suppressed [ 263.310261][T10611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1174'. [ 264.139944][T10644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.357814][T10654] syzkaller0: entered allmulticast mode [ 264.483306][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 264.563869][T10660] C speed is unknown, defaulting to 1000 [ 264.919371][T10688] batadv0: entered promiscuous mode [ 264.949880][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.149799][ T37] wlan0: Trigger new scan to find an IBSS to join [ 265.377320][T10692] tipc: Enabling of bearer rejected, failed to enable media [ 265.409605][T10697] C speed is unknown, defaulting to 1000 [ 265.442443][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1197'. [ 265.604116][T10709] macsec1: entered promiscuous mode [ 265.629201][T10709] !: entered promiscuous mode [ 265.645930][T10709] macsec1: entered allmulticast mode [ 265.668706][T10709] !: entered allmulticast mode [ 265.713221][T10709] !: left allmulticast mode [ 265.728667][T10709] !: left promiscuous mode [ 265.911705][T10721] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1201'. [ 266.204685][T10451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.314097][T10735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.495856][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1206'. [ 267.366025][T10774] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1212'. [ 267.644218][T10787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 267.933633][T10795] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 268.166812][T10802] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 268.171543][T10804] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 268.209752][T10802] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 268.330752][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 268.343328][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 268.453422][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'. [ 268.463361][T10816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 268.484542][T10816] bridge0: port 1(vlan0) entered blocking state [ 268.491431][T10816] bridge0: port 1(vlan0) entered disabled state [ 268.498051][T10816] vlan0: entered allmulticast mode [ 268.506051][T10816] bridge0: entered allmulticast mode [ 268.535107][T10816] vlan0: left allmulticast mode [ 268.540703][T10816] bridge0: left allmulticast mode [ 268.715939][T10826] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 269.154790][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'. [ 269.322126][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 269.348722][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 269.447383][T10858] tipc: Failed to remove unknown binding: 66,1,1/0:3131746393/3131746395 [ 269.505091][T10858] tipc: Failed to remove unknown binding: 66,1,1/0:3131746393/3131746395 [ 269.558553][T10858] tipc: Failed to remove unknown binding: 66,1,1/0:3131746393/3131746395 [ 269.658186][T10869] sctp: [Deprecated]: syz.1.1240 (pid 10869) Use of int in max_burst socket option. [ 269.658186][T10869] Use struct sctp_assoc_value instead [ 269.662322][T10871] sctp: [Deprecated]: syz.4.1241 (pid 10871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.662322][T10871] Use struct sctp_sack_info instead [ 269.820649][T10874] veth1_to_batadv: entered promiscuous mode [ 269.833918][T10875] syzkaller0: entered promiscuous mode [ 269.841847][T10875] syzkaller0: entered allmulticast mode [ 269.855861][T10874] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1242'. [ 269.864736][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 269.965325][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 270.148229][T10879] tipc: Enabling of bearer rejected, failed to enable media [ 270.201872][T10891] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 270.276671][T10891] bond5: entered promiscuous mode [ 270.286870][T10891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.418914][T10905] netlink: 'syz.4.1251': attribute type 9 has an invalid length. [ 270.768037][T10927] sctp: [Deprecated]: syz.1.1258 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.768037][T10927] Use struct sctp_sack_info instead [ 270.787317][T10930] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 270.983367][T10930] bond0: entered promiscuous mode [ 271.101334][T10930] bond0: entered allmulticast mode [ 271.150614][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.426751][T10950] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 271.543258][T10956] netlink: 'syz.4.1265': attribute type 13 has an invalid length. [ 271.577008][T10956] netlink: 'syz.4.1265': attribute type 17 has an invalid length. [ 271.745769][T10956] erspan0: left allmulticast mode [ 271.921510][T10968] openvswitch: netlink: Message has 8 unknown bytes. [ 271.939349][T10970] openvswitch: netlink: Message has 8 unknown bytes. [ 271.961820][T10956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.219365][T10976] sctp: [Deprecated]: syz.4.1271 (pid 10976) Use of int in max_burst socket option. [ 272.219365][T10976] Use struct sctp_assoc_value instead [ 272.319314][T10981] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.431543][T10981] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.540072][T10992] tipc: Enabled bearer , priority 0 [ 272.564760][T10981] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.609750][T10992] syzkaller0: entered promiscuous mode [ 272.618554][T10992] syzkaller0: entered allmulticast mode [ 272.728270][T10981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.756011][T10992] tipc: Resetting bearer [ 272.756491][T11005] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 272.773286][T11002] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 272.804962][T10990] tipc: Resetting bearer [ 272.822392][T10990] tipc: Disabling bearer [ 272.843111][T11007] syzkaller0: entered promiscuous mode [ 272.860370][T11007] syzkaller0: entered allmulticast mode [ 272.927055][T10451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.986201][T10451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.053143][T11014] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 273.086247][T10451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.201547][T10451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.226546][T11029] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.484110][T11045] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0 [ 273.615412][T11051] __nla_validate_parse: 13 callbacks suppressed [ 273.615433][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1287'. [ 273.764802][T11056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1291'. [ 273.774545][T11049] erspan0: left allmulticast mode [ 273.774749][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 273.968155][T11066] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1287'. [ 274.237069][T11049] macsec0: left promiscuous mode [ 274.356225][T11049] bond1: left promiscuous mode [ 274.365094][T11049] bridge0: left promiscuous mode [ 274.375592][T11049] vti0: left promiscuous mode [ 274.381352][T11049] vti0: left allmulticast mode [ 274.388298][T11049] veth5: left promiscuous mode [ 274.484320][ T24] C speed is unknown, defaulting to 1000 [ 274.490177][ T24] syz0: Port: 1 Link DOWN [ 274.494616][ T24] C speed is unknown, defaulting to 1000 [ 274.518644][ T6068] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.546212][ T6068] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.567032][ T6068] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.587510][ T6068] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.641701][ T6068] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.661425][ T6068] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.681181][T11068] C speed is unknown, defaulting to 1000 [ 274.692953][ T6068] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.709735][ T6068] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.811949][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 274.921754][T11099] validate_nla: 1 callbacks suppressed [ 274.921776][T11099] netlink: 'syz.2.1302': attribute type 23 has an invalid length. [ 275.204610][T11114] syzkaller1: entered promiscuous mode [ 275.213812][T11114] syzkaller1: entered allmulticast mode [ 275.305882][T11110] C speed is unknown, defaulting to 1000 [ 275.344019][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 275.807186][T11111] netlink: 'syz.1.1304': attribute type 13 has an invalid length. [ 275.894377][T11111] erspan0: left promiscuous mode [ 276.070890][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.083244][T11111] bridge0: port 3(0!) entered blocking state [ 276.089870][T11111] bridge0: port 3(0!) entered forwarding state [ 276.103314][T11111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.121114][T11128] C speed is unknown, defaulting to 1000 [ 276.947072][T11151] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 277.460269][T11160] raw_sendmsg: syz.0.1315 forgot to set AF_INET. Fix it! [ 277.593785][T11166] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1317'. [ 278.077761][T11178] veth1_vlan: left allmulticast mode [ 278.112269][T11178] team0: Port device macvlan0 removed [ 278.420757][T11200] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1325'. [ 278.589900][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 279.125012][T11224] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 279.252735][T11229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1332'. [ 280.190887][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1337'. [ 280.229766][T11235] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 280.257799][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 280.276571][T11235] tipc: Enabled bearer , priority 0 [ 280.298574][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 280.318314][T11235] syzkaller0: entered promiscuous mode [ 280.325076][T11235] syzkaller0: entered allmulticast mode [ 280.381480][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1340'. [ 280.441944][T11235] tipc: Resetting bearer [ 280.481149][T11254] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 280.494607][T11234] tipc: Resetting bearer [ 280.523226][T11254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1339'. [ 280.538896][T11234] tipc: Disabling bearer [ 280.611053][T11255] bridge0: port 3(0!) entered disabled state [ 280.665431][T11255] bridge_slave_0: left allmulticast mode [ 280.675215][T11255] bridge_slave_0: left promiscuous mode [ 280.682026][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.719802][T11255] bridge_slave_1: left allmulticast mode [ 280.725600][T11255] bridge_slave_1: left promiscuous mode [ 280.741873][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.774773][T11255] team0: Port device team_slave_0 removed [ 280.794852][T11255] team0: Port device team_slave_1 removed [ 280.809751][T11255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.822588][T11255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.855761][T11255] bond0: (slave gretap1): Releasing active interface [ 280.879653][T11255] team0: Port device bridge2 removed [ 280.943430][T11252] syzkaller1: entered allmulticast mode [ 281.065823][T11266] C speed is unknown, defaulting to 1000 [ 281.321918][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 281.349869][T11276] lo: entered allmulticast mode [ 281.355261][T11276] tunl0: entered allmulticast mode [ 281.364202][T11276] gre0: entered allmulticast mode [ 281.387155][T11276] gretap0: entered allmulticast mode [ 281.427699][T11276] erspan0: entered allmulticast mode [ 281.437993][T11276] ip_vti0: entered allmulticast mode [ 281.446314][T11276] ip6_vti0: entered allmulticast mode [ 281.469975][T11276] sit0: entered allmulticast mode [ 281.499216][T11276] ip6tnl0: entered allmulticast mode [ 281.532201][T11276] ip6gre0: entered allmulticast mode [ 281.586107][T11276] ip6gretap0: entered allmulticast mode [ 281.622605][T11276] bridge0: entered allmulticast mode [ 281.632598][T11276] vcan0: entered allmulticast mode [ 281.640034][T11276] dummy0: entered allmulticast mode [ 281.657259][T11276] nlmon0: entered allmulticast mode [ 281.665603][T11276] caif0: entered allmulticast mode [ 281.671468][T11276] batadv0: entered allmulticast mode [ 281.680825][T11276] vxcan0: entered allmulticast mode [ 281.687574][T11276] vxcan1: entered allmulticast mode [ 281.694573][T11276] veth0: entered allmulticast mode [ 281.703184][T11276] veth1: entered allmulticast mode [ 281.706156][T11282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 281.722809][T11276] wg0: entered allmulticast mode [ 281.739711][T11276] wg1: entered allmulticast mode [ 281.750647][T11276] wg2: entered allmulticast mode [ 281.762826][T11276] veth0_to_bridge: entered allmulticast mode [ 281.783973][T11276] bridge_slave_0: entered allmulticast mode [ 281.812475][T11276] veth1_to_bridge: entered allmulticast mode [ 281.853270][T11276] bridge_slave_1: entered allmulticast mode [ 281.882618][T11276] veth0_to_bond: entered allmulticast mode [ 281.914335][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 281.926120][T11276] bond_slave_0: entered allmulticast mode [ 281.933365][T11276] veth1_to_bond: entered allmulticast mode [ 281.943470][T11276] bond_slave_1: entered allmulticast mode [ 281.963061][T11276] veth0_to_team: entered allmulticast mode [ 281.974699][T11276] team_slave_0: entered allmulticast mode [ 281.990286][T11276] veth1_to_team: entered allmulticast mode [ 282.013248][T11276] team_slave_1: entered allmulticast mode [ 282.020067][T11276] veth0_to_batadv: entered allmulticast mode [ 282.042047][T11276] batadv_slave_0: entered allmulticast mode [ 282.074965][T11276] veth1_to_batadv: entered allmulticast mode [ 282.129019][T11276] batadv_slave_1: entered allmulticast mode [ 282.158271][T11276] xfrm0: entered allmulticast mode [ 282.184626][T11276] veth0_to_hsr: entered allmulticast mode [ 282.201585][T11276] hsr_slave_0: entered allmulticast mode [ 282.210574][T11276] veth1_to_hsr: entered allmulticast mode [ 282.219677][T11276] hsr_slave_1: entered allmulticast mode [ 282.227382][T11276] hsr0: entered allmulticast mode [ 282.235882][T11276] veth1_virt_wifi: entered allmulticast mode [ 282.245363][T11276] veth0_virt_wifi: entered allmulticast mode [ 282.253759][T11276] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 282.262263][T11276] veth1_vlan: entered allmulticast mode [ 282.273348][T11276] veth0_vlan: entered allmulticast mode [ 282.288351][T11276] vlan0: entered allmulticast mode [ 282.294081][T11276] vlan1: entered allmulticast mode [ 282.300729][T11276] macvlan0: entered allmulticast mode [ 282.309420][T11276] macvlan1: entered allmulticast mode [ 282.319158][T11276] ipvlan0: entered allmulticast mode [ 282.324641][T11276] ipvlan1: entered allmulticast mode [ 282.330545][T11276] veth1_macvtap: entered allmulticast mode [ 282.339894][T11276] veth0_macvtap: entered allmulticast mode [ 282.348937][T11276] macvtap0: entered allmulticast mode [ 282.356788][T11276] geneve0: entered allmulticast mode [ 282.363337][T11276] geneve1: entered allmulticast mode [ 282.382145][T11276] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 282.391229][T11276] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 282.398948][T11276] bridge1: entered allmulticast mode [ 282.404823][T11276] sit1: entered allmulticast mode [ 282.436784][T11276] : entered allmulticast mode [ 282.442158][T11276] bridge0.0: entered allmulticast mode [ 282.447831][T11276] batadv1: entered allmulticast mode [ 282.453605][T11276] bridge2: entered allmulticast mode [ 282.459245][T11276] syztnl0: entered allmulticast mode [ 282.464782][T11276] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 282.474939][T11276] macsec0: entered allmulticast mode [ 282.482778][T11276] vxlan0: entered allmulticast mode [ 282.488213][T11276] ip6tnl1: entered allmulticast mode [ 282.494092][T11276] vxcan2: entered allmulticast mode [ 282.500105][T11276] vxcan3: entered allmulticast mode [ 282.505983][T11276] vxcan4: entered allmulticast mode [ 282.516246][T11276] vxcan5: entered allmulticast mode [ 282.522044][T11276] bridge3: entered allmulticast mode [ 282.527697][T11276] vlan2: entered allmulticast mode [ 282.534465][T11276] bond0: left promiscuous mode [ 282.540889][T11276] netdevsim netdevsim0 eth0: entered allmulticast mode [ 282.547957][T11276] netdevsim netdevsim0 eth1: entered allmulticast mode [ 282.555388][T11276] netdevsim netdevsim0 eth2: entered allmulticast mode [ 282.562644][T11276] netdevsim netdevsim0 eth3: entered allmulticast mode [ 282.569919][T11276] syzkaller0: entered allmulticast mode [ 282.609648][ T8853] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.623261][ T8853] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.635141][T11273] lo speed is unknown, defaulting to 1000 [ 282.673164][ T8853] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.698605][ T8853] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.745736][T11273] lo speed is unknown, defaulting to 1000 [ 282.756278][T11273] lo speed is unknown, defaulting to 1000 [ 282.804195][T11303] netlink: 'syz.0.1354': attribute type 4 has an invalid length. [ 283.418163][T11327] netlink: 'syz.0.1359': attribute type 13 has an invalid length. [ 283.536952][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 283.567363][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 283.580555][T11332] nbd: socks must be embedded in a SOCK_ITEM attr [ 283.713445][T11273] infiniband syz2: set active [ 283.718631][ T6013] lo speed is unknown, defaulting to 1000 [ 283.738248][T11273] infiniband syz2: added lo [ 283.753740][T11273] syz2: rxe_create_cq: returned err = -12 [ 283.783115][T11273] infiniband syz2: Couldn't create ib_mad CQ [ 283.793006][T11273] infiniband syz2: Couldn't open port 1 [ 283.825304][T11342] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 283.879228][T11273] RDS/IB: syz2: added [ 283.883339][T11273] smc: adding ib device syz2 with port count 1 [ 283.901643][T11342] bridge3: entered promiscuous mode [ 283.908802][T11273] smc: ib device syz2 port 1 has pnetid [ 283.919012][T11342] bridge3: entered allmulticast mode [ 283.941825][T11342] team0: Port device bridge3 added [ 283.962936][T11341] C speed is unknown, defaulting to 1000 [ 283.962963][ T6013] lo speed is unknown, defaulting to 1000 [ 284.022929][T11273] lo speed is unknown, defaulting to 1000 [ 284.368925][T11358] __nla_validate_parse: 2 callbacks suppressed [ 284.368946][T11358] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1370'. [ 284.698567][T11343] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1364'. [ 284.729253][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 284.779471][T11369] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1373'. [ 285.015505][T11273] lo speed is unknown, defaulting to 1000 [ 285.043257][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 285.144706][T11389] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 285.153821][T11382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.177424][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 285.237369][T11389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.370957][T11395] geneve0: entered promiscuous mode [ 285.402186][ T8848] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.435000][ T8848] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.471174][ T8848] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.494664][ T8848] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.519677][T11399] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1381'. [ 285.602175][T11341] lo speed is unknown, defaulting to 1000 [ 285.662357][T11411] netlink: 'syz.2.1384': attribute type 39 has an invalid length. [ 285.916737][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 285.999368][T11273] lo speed is unknown, defaulting to 1000 [ 286.444266][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'. [ 286.467921][T11437] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1392'. [ 286.479774][T11273] lo speed is unknown, defaulting to 1000 [ 286.517915][T11438] syzkaller1: entered promiscuous mode [ 286.523748][T11438] syzkaller1: entered allmulticast mode [ 286.665595][T11443] syzkaller1: entered promiscuous mode [ 286.678574][T11443] syzkaller1: entered allmulticast mode [ 286.703479][T11445] netlink: 'syz.3.1395': attribute type 83 has an invalid length. [ 286.792591][T11448] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 286.821086][T11448] dummy0: left allmulticast mode [ 286.949143][T11273] lo speed is unknown, defaulting to 1000 [ 286.968198][T11451] batman_adv: batadv0: Adding interface: ip6gretap1 [ 287.065362][T11451] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.178351][T11451] batman_adv: batadv0: Interface activated: ip6gretap1 [ 287.698021][T11483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.031822][T11498] atomic_op ffff888021f25198 conn xmit_atomic 0000000000000000 [ 288.043296][T11498] atomic_op ffff888021f22198 conn xmit_atomic 0000000000000000 [ 288.277289][T11510] netlink: 'syz.4.1409': attribute type 21 has an invalid length. [ 288.303805][T11510] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 288.561446][T11516] IPVS: Unknown mcast interface: vcan0 [ 289.413833][T11579] pim6reg9: entered allmulticast mode [ 289.457648][T11579] sctp: [Deprecated]: syz.1.1426 (pid 11579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.457648][T11579] Use struct sctp_sack_info instead [ 289.745082][T11598] netlink: 'syz.3.1430': attribute type 21 has an invalid length. [ 289.761196][T11598] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 289.770207][T11600] __nla_validate_parse: 10 callbacks suppressed [ 289.770538][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 289.777823][T11598] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1430'. [ 289.811286][T11598] rdma_rxe: rxe_newlink: failed to add lo [ 289.939563][T11607] pim6reg: entered allmulticast mode [ 290.006043][T11610] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 290.151065][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 290.193045][T11610] veth3: entered promiscuous mode [ 290.243789][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 290.890906][T11651] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1448'. [ 290.901626][T11649] syzkaller0: entered promiscuous mode [ 290.907153][T11649] syzkaller0: entered allmulticast mode [ 291.443150][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 291.480760][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 291.510208][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 291.559141][T11696] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 291.626949][T11690] bond6: entered promiscuous mode [ 291.632611][T11690] bond6: entered allmulticast mode [ 291.640059][T11690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.654457][T11696] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 291.891544][T11719] netlink: 'syz.3.1466': attribute type 13 has an invalid length. [ 292.124541][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.208239][T11719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.249743][T11732] tipc: New replicast peer: 255.255.255.255 [ 292.283636][T11732] tipc: Enabled bearer , priority 9 [ 293.008113][T11742] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 293.037677][T11753] syz_tun: entered allmulticast mode [ 293.044046][T11753] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 293.184756][T11760] vlan4: entered allmulticast mode [ 293.195753][T11760] veth1: entered allmulticast mode [ 293.388848][ T5950] tipc: Node number set to 720490162 [ 293.446372][T11766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1480'. [ 293.648047][T11774] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 293.838154][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 294.260448][T11802] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 294.288743][T11802] netlink: 'syz.2.1489': attribute type 2 has an invalid length. [ 294.314867][T11802] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 294.326707][T11802] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.369860][ T1156] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 294.423502][T11805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.447825][T11804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.750388][T11825] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 294.806705][T11827] __nla_validate_parse: 9 callbacks suppressed [ 294.806726][T11827] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1498'. [ 294.863826][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 295.013057][T11844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1502'. [ 295.048816][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 295.073063][T11844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1502'. [ 295.162881][T11858] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.185123][T11859] netlink: 'syz.2.1507': attribute type 11 has an invalid length. [ 295.332676][T11868] macvlan0: left allmulticast mode [ 295.432872][T11870] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1509'. [ 295.601058][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 296.161016][T11898] C speed is unknown, defaulting to 1000 [ 296.956622][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.964707][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.532339][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.589141][T11922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.823546][T11922] veth0_vlan: left allmulticast mode [ 297.918739][T11922] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 297.957642][T11922] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 297.967500][T11922] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 298.025905][T11922] geneve3: left promiscuous mode [ 298.032886][T11922] geneve3: left allmulticast mode [ 298.095434][T11922] bridge3: left allmulticast mode [ 298.104434][T11922] bridge4: left promiscuous mode [ 298.115778][T11922] bridge4: left allmulticast mode [ 298.126808][T11922] veth3: left promiscuous mode [ 298.157222][ T9259] lo speed is unknown, defaulting to 1000 [ 298.185946][ T9259] syz2: Port: 1 Link DOWN [ 298.197128][ T1156] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.423236][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.458954][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 298.479014][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.487944][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 298.521551][T11954] lo speed is unknown, defaulting to 1000 [ 298.521543][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.521580][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 298.598460][T11964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1525'. [ 298.613316][T11898] lo speed is unknown, defaulting to 1000 [ 298.619838][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.640333][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 298.718034][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.735035][T11967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 298.760813][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.786203][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.812924][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.833224][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1527'. [ 299.276121][T11992] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1530'. [ 299.525516][T11999] geneve1: entered promiscuous mode [ 299.533117][T11999] geneve1: entered allmulticast mode [ 299.672823][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.706689][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.730427][ T6068] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.902458][ T6068] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.924346][T12025] __nla_validate_parse: 3 callbacks suppressed [ 299.924368][T12025] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1539'. [ 300.063163][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 300.359490][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 300.565013][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 300.582947][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 300.732618][T12059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1551'. [ 300.944837][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 300.977605][T12073] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 301.103468][T12078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1556'. [ 301.154625][T12083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.312271][T12095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1562'. [ 301.334205][T12096] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1561'. [ 301.446171][T12104] wireguard0: entered promiscuous mode [ 301.452860][T12104] wireguard0: entered allmulticast mode [ 301.957479][T12138] IPv6: sit2: Disabled Multicast RS [ 302.733091][T12183] netlink: 'syz.2.1587': attribute type 16 has an invalid length. [ 302.902498][T12199] IPVS: Error joining to the multicast group [ 303.457407][T12240] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 303.655631][T12250] tipc: Enabled bearer , priority 10 [ 303.792298][T12250] tipc: Resetting bearer [ 303.830818][T12251] !: renamed from dummy0 [ 304.414649][T12287] pimreg: entered allmulticast mode [ 304.486309][T12249] tipc: Resetting bearer [ 304.650310][T12302] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 304.669806][T12302] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 304.785860][ T1109] tipc: Node number set to 3401538142 [ 306.323838][T12249] tipc: Disabling bearer [ 306.542052][T12328] __nla_validate_parse: 16 callbacks suppressed [ 306.542073][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 306.586408][T12328] ip6gretap1: entered promiscuous mode [ 306.811424][T12340] C speed is unknown, defaulting to 1000 [ 307.113240][T12361] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1633'. [ 307.155062][T12363] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1632'. [ 307.164293][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1633'. [ 307.164332][T12367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1633'. [ 307.259301][T12359] veth7: entered promiscuous mode [ 307.310266][T12367] bridge0: port 3(vlan2) entered blocking state [ 307.316719][T12367] bridge0: port 3(vlan2) entered disabled state [ 307.409538][T12367] vlan2: entered allmulticast mode [ 307.414727][T12367] bridge0: entered allmulticast mode [ 307.436566][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 307.458080][T12367] vlan2: left allmulticast mode [ 307.465784][T12367] bridge0: left allmulticast mode [ 307.779581][T12389] tipc: Enabled bearer , priority 0 [ 307.795485][T12389] syzkaller0: entered promiscuous mode [ 307.806281][T12389] syzkaller0: entered allmulticast mode [ 307.852769][T12389] tipc: Resetting bearer [ 307.895939][T12387] tipc: Resetting bearer [ 307.951162][T12387] tipc: Disabling bearer [ 307.994570][T12340] lo speed is unknown, defaulting to 1000 [ 308.136646][T12398] batadv_slave_1: entered promiscuous mode [ 308.158758][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1643'. [ 308.386443][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 308.472079][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 308.827014][T12421] netlink: 'syz.1.1650': attribute type 6 has an invalid length. [ 308.943977][T12398] batadv_slave_1: left promiscuous mode [ 309.128338][T12428] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 ! [ 309.563696][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 309.814668][ T6068] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.848656][ T6068] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.857801][ T6068] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.908511][ T6068] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.505850][T12492] 8021q: VLANs not supported on ip6_vti0 [ 310.922768][T12515] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 311.028014][T12515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.082885][T12519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.095733][T12519] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 311.112359][T12519] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 311.361561][T12515] veth3: entered promiscuous mode [ 311.432799][T12515] bond2: (slave veth3): Enslaving as an active interface with a down link [ 311.472530][T12524] erspan0: entered allmulticast mode [ 311.680365][T12544] __nla_validate_parse: 8 callbacks suppressed [ 311.680386][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 312.154314][T12574] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1693'. [ 312.337552][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1694'. [ 312.578311][T12588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1698'. [ 312.644054][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 313.088302][T12606] C speed is unknown, defaulting to 1000 [ 313.110591][T12609] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 313.201714][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 313.243356][T12615] netlink: 'syz.1.1702': attribute type 7 has an invalid length. [ 313.252703][T12609] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.352592][T12620] smc: net device bond0 erased user defined pnetid SYZ2 [ 313.377368][T12620] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1705'. [ 313.380539][T12616] bond7: (slave gretap2): making interface the new active one [ 313.433092][T12616] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 313.552623][T12616] syz.3.1703 (12616) used greatest stack depth: 17496 bytes left [ 313.661379][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 314.096022][T12606] lo speed is unknown, defaulting to 1000 [ 314.119391][T12643] lo: left allmulticast mode [ 314.149351][T12643] tunl0: left allmulticast mode [ 314.164104][T12643] gre0: left allmulticast mode [ 314.203131][T12643] gretap0: left allmulticast mode [ 314.226982][T12643] erspan0: left promiscuous mode [ 314.249264][T12643] erspan0: left allmulticast mode [ 314.267867][T12643] ip_vti0: left allmulticast mode [ 314.291989][T12643] ip6_vti0: left allmulticast mode [ 314.329552][T12643] sit0: left allmulticast mode [ 314.375299][T12643] ip6tnl0: left allmulticast mode [ 314.415597][T12643] ip6gre0: left allmulticast mode [ 314.425313][ T30] audit: type=1800 audit(1753833648.889:3): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1709" name="memory.events" dev="tmpfs" ino=1831 res=0 errno=0 [ 314.435956][T12643] ip6gretap0: left allmulticast mode [ 314.499195][ T5863] Bluetooth: hci4: link tx timeout [ 314.503402][T12643] nlmon0: left allmulticast mode [ 314.505839][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.532164][ T5168] Bluetooth: hci4: link tx timeout [ 314.537382][ T5168] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.545929][ T5168] Bluetooth: hci4: link tx timeout [ 314.552056][ T5168] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.560595][T12643] caif0: left allmulticast mode [ 314.565586][T12643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.914765][T12656] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1714'. [ 315.025756][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 315.095667][T12656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.168014][T12666] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 315.318284][T12666] !: entered promiscuous mode [ 315.326192][T12666] team0: Port device 0! added [ 315.806657][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.826402][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.114067][T12684] veth0_to_team: entered promiscuous mode [ 316.154241][T12684] veth0_to_team: entered allmulticast mode [ 316.589705][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 316.730219][T12727] netlink: 'syz.0.1735': attribute type 31 has an invalid length. [ 317.096183][T12712] __nla_validate_parse: 5 callbacks suppressed [ 317.096205][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'. [ 317.392144][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.592825][T12748] C speed is unknown, defaulting to 1000 [ 317.644685][T12750] IPv4: Oversized IP packet from 127.202.26.0 [ 318.012505][T12771] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1745'. [ 318.037767][T12771] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 318.161632][T12774] Can't find ip_set type hash€ [ 318.280100][T12748] lo speed is unknown, defaulting to 1000 [ 318.388014][T12785] netlink: 'syz.0.1749': attribute type 282 has an invalid length. [ 318.921572][T12801] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 319.103189][T12807] C speed is unknown, defaulting to 1000 [ 319.262449][T12817] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 319.289234][T12817] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1760'. [ 319.861936][T12814] C speed is unknown, defaulting to 1000 [ 320.222654][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1761'. [ 320.277210][T12825] C speed is unknown, defaulting to 1000 [ 320.284623][T12814] lo speed is unknown, defaulting to 1000 [ 320.716408][T12807] lo speed is unknown, defaulting to 1000 [ 321.311445][T12847] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 321.376590][T12847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.483556][T12825] lo speed is unknown, defaulting to 1000 [ 321.609456][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 322.155174][T12872] netlink: 'syz.4.1774': attribute type 4 has an invalid length. [ 322.277846][T12876] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 322.299669][T10451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.320850][T10451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.411026][T12876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.447629][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 322.685748][T12883] veth3: entered promiscuous mode [ 322.736046][T12883] bond1: (slave veth3): Enslaving as an active interface with a down link [ 322.811016][T12879] erspan0: entered allmulticast mode [ 322.882425][T12899] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1779'. [ 323.533436][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 323.737372][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 323.767608][T12924] ip6tnl2: entered promiscuous mode [ 323.773858][T12924] ip6tnl2: entered allmulticast mode [ 323.799485][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 324.194400][T12937] syzkaller0: entered promiscuous mode [ 324.226012][T12937] syzkaller0: entered allmulticast mode [ 324.295462][T12939] pimreg: entered allmulticast mode [ 324.716164][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1787'. [ 324.757846][T12934] netlink: 724 bytes leftover after parsing attributes in process `syz.4.1787'. [ 324.786533][T12934] netlink: 724 bytes leftover after parsing attributes in process `syz.4.1787'. [ 326.969168][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 327.037456][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 327.581999][T13004] tipc: Enabled bearer , priority 0 [ 327.620969][T13004] syzkaller0: entered promiscuous mode [ 327.640767][T13004] syzkaller0: entered allmulticast mode [ 327.857035][T13004] tipc: Resetting bearer [ 327.864299][T13009] __nla_validate_parse: 3 callbacks suppressed [ 327.864318][T13009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 327.913851][T13004] tipc: Disabling bearer [ 328.054679][T13016] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 328.282010][T13026] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 328.327350][T13026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.351182][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 328.445858][T13026] vlan2: entered allmulticast mode [ 328.464393][T13026] veth1: entered allmulticast mode [ 328.525576][T13040] tipc: Enabled bearer , priority 0 [ 328.546008][T13043] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 328.557411][T13045] netlink: 'syz.2.1818': attribute type 64 has an invalid length. [ 328.558173][T13040] syzkaller0: entered promiscuous mode [ 328.605037][T13040] syzkaller0: entered allmulticast mode [ 328.670538][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 328.753372][T13043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.792641][T13040] tipc: Resetting bearer [ 328.811899][T13062] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1819'. [ 328.823649][T13058] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1819'. [ 328.860805][T10451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.870135][T13039] tipc: Resetting bearer [ 328.886077][T10451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.935133][T13039] tipc: Disabling bearer [ 329.134936][ T9261] IPVS: starting estimator thread 0... [ 329.242643][T13081] IPVS: using max 27 ests per chain, 64800 per kthread [ 329.953363][T13120] netlink: 'syz.4.1838': attribute type 58 has an invalid length. [ 329.983314][T13120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1838'. [ 330.067105][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 330.327943][T13132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 330.481304][T13124] pim6reg: entered allmulticast mode [ 330.487829][T13132] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1841'. [ 330.732577][ T6014] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 330.892031][T13156] C speed is unknown, defaulting to 1000 [ 331.021091][T13164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1852'. [ 331.086736][T13161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.137923][T10451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.161481][T10451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.227871][T10451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.255425][T10451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 331.739462][T13156] lo speed is unknown, defaulting to 1000 [ 333.118101][T13243] C speed is unknown, defaulting to 1000 [ 334.047776][T13270] bridge: RTM_NEWNEIGH with invalid ether address [ 334.110390][T13274] syzkaller0: entered allmulticast mode [ 334.500484][T13243] lo speed is unknown, defaulting to 1000 [ 334.710142][T13303] __nla_validate_parse: 22 callbacks suppressed [ 334.710166][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 334.881057][T13305] nbd: must specify at least one socket [ 334.956781][T13315] syzkaller1: entered promiscuous mode [ 334.963534][T13315] syzkaller1: entered allmulticast mode [ 334.974845][T13315] netlink: 'syz.2.1896': attribute type 15 has an invalid length. [ 335.103511][T13322] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 335.119561][T13322] netlink: 'syz.4.1899': attribute type 2 has an invalid length. [ 335.161488][T13324] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1897'. [ 335.243881][T13318] C speed is unknown, defaulting to 1000 [ 335.676252][T13318] lo speed is unknown, defaulting to 1000 [ 335.896375][T13354] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1906'. [ 335.978150][T13360] netlink: 'syz.2.1909': attribute type 1 has an invalid length. [ 335.991098][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 336.001286][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 336.063037][T13361] veth1: entered promiscuous mode [ 336.220921][T13360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.331326][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 336.362669][T13362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.374750][T13362] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 336.388047][T13362] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 336.570127][T13364] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 336.702335][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1916'. [ 336.936914][T13385] @˙: renamed from bond_slave_0 [ 336.999675][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1919'. [ 337.327775][T13406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1922'. [ 337.516080][T13412] netlink: 'syz.4.1923': attribute type 13 has an invalid length. [ 337.540969][T13412] netlink: 'syz.4.1923': attribute type 17 has an invalid length. [ 337.742979][T13425] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1926'. [ 337.774437][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.839319][T13412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.897703][ T6014] lo speed is unknown, defaulting to 1000 [ 337.910923][ T6014] syz2: Port: 1 Link ACTIVE [ 337.957835][ T5950] lo speed is unknown, defaulting to 1000 [ 338.023984][T13411] C speed is unknown, defaulting to 1000 [ 338.211428][ T8855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.651785][T13463] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 338.843651][T13411] lo speed is unknown, defaulting to 1000 [ 339.310296][T13484] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 339.362588][T13484] team0: Device bond0 is already an upper device of the team interface [ 339.483050][T13498] netlink: 'syz.1.1948': attribute type 15 has an invalid length. [ 340.031486][T13523] tipc: Enabled bearer , priority 0 [ 340.053486][T13523] syzkaller0: entered promiscuous mode [ 340.076938][T13523] syzkaller0: entered allmulticast mode [ 340.103429][T13529] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 340.119421][T13529] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 340.217479][T13523] tipc: Resetting bearer [ 340.352490][T13522] tipc: Resetting bearer [ 340.493291][T13522] tipc: Disabling bearer [ 340.643156][T13545] netlink: 'syz.0.1961': attribute type 3 has an invalid length. [ 341.091150][T13568] __nla_validate_parse: 3 callbacks suppressed [ 341.091170][T13568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1968'. [ 341.103558][T13557] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.117150][T13557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.134682][T13557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.267361][T13569] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'. [ 341.304829][T13557] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.344945][T13557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.357189][T13557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.396054][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 341.400882][T13570] C speed is unknown, defaulting to 1000 [ 341.413487][T13581] netlink: 'syz.0.1972': attribute type 39 has an invalid length. [ 341.472231][T13557] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.508722][T13557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.524107][T13557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.597671][T13557] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.620296][T13557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 341.639471][T13557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 341.786202][ T1156] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.808496][ T1156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.817076][ T1156] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.924419][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.934829][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.943574][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.973593][T13570] lo speed is unknown, defaulting to 1000 [ 341.973676][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.987976][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.996404][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.048474][ T8855] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.087208][ T8855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.107454][ T8855] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.188822][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.400727][T13604] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 342.435632][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 342.504611][T13604] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 342.520636][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 342.883591][T13623] tipc: Enabled bearer , priority 0 [ 342.930166][T13622] syzkaller0: entered promiscuous mode [ 342.939209][T13622] syzkaller0: entered allmulticast mode [ 342.979118][T13622] tipc: Resetting bearer [ 343.048224][T13620] tipc: Resetting bearer [ 343.097611][T13620] tipc: Disabling bearer [ 343.459479][T13638] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1989'. [ 343.496222][T13639] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1989'. [ 343.536499][T13638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1989'. [ 343.593755][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 343.712272][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1994'. [ 345.567396][T13729] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 345.720807][T13735] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 345.810220][T13741] nbd: must specify a size in bytes for the device [ 346.246344][T13759] __nla_validate_parse: 11 callbacks suppressed [ 346.246367][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 346.720786][T13769] C speed is unknown, defaulting to 1000 [ 347.217546][T13788] dvmrp8: entered allmulticast mode [ 347.260592][T13783] dvmrp8: left allmulticast mode [ 347.296295][T13792] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 347.353969][T13792] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2031'. [ 347.605253][T13769] lo speed is unknown, defaulting to 1000 [ 347.912266][T13801] Bluetooth: MGMT ver 1.23 [ 348.428060][T13824] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2042'. [ 348.497682][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 348.571172][T13832] IPv6: Can't replace route, no match found [ 349.390699][T13855] wg0: left allmulticast mode [ 349.644968][T13861] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2057'. [ 349.690362][T13860] pimreg: entered allmulticast mode [ 349.736099][T13860] pimreg: left allmulticast mode [ 350.678587][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.502482][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.533215][T13884] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 351.584132][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.604432][T13886] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 351.644308][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.674179][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.729046][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.752862][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.781338][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.816576][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.845736][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 351.876129][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 352.715745][T13915] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 352.923365][T13920] C speed is unknown, defaulting to 1000 [ 353.570692][T13920] lo speed is unknown, defaulting to 1000 [ 354.438168][T13970] C speed is unknown, defaulting to 1000 [ 354.852406][T14002] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 354.906568][T14003] bond1: (slave veth3): Releasing active interface [ 355.014386][T14010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.040734][T14010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.430946][T13970] lo speed is unknown, defaulting to 1000 [ 355.556665][T14036] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 355.583565][T14036] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 355.759345][T14034] C speed is unknown, defaulting to 1000 [ 356.247402][T14034] lo speed is unknown, defaulting to 1000 [ 357.349713][T14067] C speed is unknown, defaulting to 1000 [ 357.400628][T14074] __nla_validate_parse: 61 callbacks suppressed [ 357.400652][T14074] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2109'. [ 357.447474][T14074] netlink: zone id is out of range [ 357.466082][T14074] netlink: zone id is out of range [ 357.485522][T14074] netlink: zone id is out of range [ 357.507564][T14074] netlink: zone id is out of range [ 357.520204][T14074] netlink: zone id is out of range [ 357.525613][T14074] netlink: zone id is out of range [ 357.535606][T14074] netlink: zone id is out of range [ 357.572902][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2110'. [ 357.982241][T14067] lo speed is unknown, defaulting to 1000 [ 358.324563][T14092] C speed is unknown, defaulting to 1000 [ 358.973722][T14103] netlink: 'syz.4.2116': attribute type 6 has an invalid length. [ 358.982459][T14092] lo speed is unknown, defaulting to 1000 [ 359.069533][T14104] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2117'. [ 359.093467][T14104] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2117'. [ 359.177959][T14108] netlink: 'syz.2.2118': attribute type 10 has an invalid length. [ 359.206982][T14108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2118'. [ 359.328101][T14106] erspan0: left allmulticast mode [ 359.420657][T14106] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.434415][T14106] !: left promiscuous mode [ 359.440139][T14106] !: left allmulticast mode [ 359.478859][T14104] rdma_rxe: rxe_newlink: failed to add lo [ 360.931394][T14140] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2126'. [ 360.982004][T14143] netlink: 'syz.0.2128': attribute type 10 has an invalid length. [ 361.141795][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 361.191897][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'. [ 361.213138][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 361.279318][T14147] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2129'. [ 361.653186][T14161] net_ratelimit: 7 callbacks suppressed [ 361.653209][T14161] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 361.673487][T14161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.120466][T14178] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 362.180146][T14181] xfrm1: entered promiscuous mode [ 362.185768][T14181] xfrm1: entered allmulticast mode [ 362.196390][T14178] nbd: socks must be embedded in a SOCK_ITEM attr [ 362.205604][T14178] block nbd1: shutting down sockets [ 362.443293][T14187] __nla_validate_parse: 7 callbacks suppressed [ 362.443315][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2141'. [ 362.533893][T14189] C speed is unknown, defaulting to 1000 [ 362.646070][T14197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2144'. [ 362.921385][T14208] tipc: New replicast peer: 255.255.255.255 [ 362.936380][T14208] tipc: Enabled bearer , priority 9 [ 363.315184][T14225] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003 [ 363.368237][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2155'. [ 363.398740][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 363.544134][T14234] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 363.606892][T14233] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 363.617705][T14233] dvmrp1: linktype set to 805 [ 363.724349][T14189] lo speed is unknown, defaulting to 1000 [ 363.874922][T14247] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2162'. [ 363.923078][T14249] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2163'. [ 364.230904][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 364.284472][T14264] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2168'. [ 364.297362][T14264] 8021q: VLANs not supported on ip_vti0 [ 365.327563][T14283] C speed is unknown, defaulting to 1000 [ 365.562008][T14291] syzkaller0: entered promiscuous mode [ 365.567627][T14291] syzkaller0: entered allmulticast mode [ 365.595819][ T6014] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 365.618845][ T6014] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 365.664577][ T6014] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 366.313153][T14304] tipc: Enabled bearer , priority 0 [ 366.329542][T14304] syzkaller0: entered promiscuous mode [ 366.337928][T14304] syzkaller0: entered allmulticast mode [ 366.439726][T14307] tipc: Resetting bearer [ 366.446239][T14283] lo speed is unknown, defaulting to 1000 [ 366.464279][T14304] syzkaller0: left promiscuous mode [ 366.478885][T14304] syzkaller0: left allmulticast mode [ 366.561497][T14306] netlink: 'syz.2.2179': attribute type 1 has an invalid length. [ 366.606329][T14306] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2179'. [ 366.668599][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 366.733921][T14312] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2180'. [ 366.755426][T14303] tipc: Resetting bearer [ 366.829240][T14303] tipc: Disabling bearer [ 367.407871][T14336] netlink: 'syz.0.2184': attribute type 5 has an invalid length. [ 368.126018][T14337] team0 (unregistering): Port device team_slave_0 removed [ 368.180911][T14337] team0 (unregistering): Port device team_slave_1 removed [ 368.915956][T14355] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2191'. [ 368.929520][T14355] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2191'. [ 368.944364][T14355] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2191'. [ 369.004111][T14361] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2191'. [ 369.020078][T14361] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2191'. [ 369.033973][T14361] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2191'. [ 369.078857][T14357] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2192'. [ 369.764505][T14357] batadv0: left promiscuous mode [ 369.786002][T14357] macsec0: left promiscuous mode [ 369.794791][T14357] vlan3: left promiscuous mode [ 369.801671][T14357] gretap0: left promiscuous mode [ 369.807155][T14357] bridge2: left promiscuous mode [ 369.814671][T14357] veth3: left promiscuous mode [ 369.870075][T14378] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2197'. [ 369.984723][T14368] C speed is unknown, defaulting to 1000 [ 369.989967][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'. [ 370.002096][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2198'. [ 370.409672][T14368] lo speed is unknown, defaulting to 1000 [ 370.780519][T14380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.979470][T14452] C speed is unknown, defaulting to 1000 [ 372.984660][T14460] netlink: 'syz.4.2215': attribute type 21 has an invalid length. [ 373.660285][T14472] C speed is unknown, defaulting to 1000 [ 373.671355][T14452] lo speed is unknown, defaulting to 1000 [ 374.056997][T14488] __nla_validate_parse: 9 callbacks suppressed [ 374.057018][T14488] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2225'. [ 374.178245][T14472] lo speed is unknown, defaulting to 1000 [ 374.829698][T14525] netlink: 'syz.1.2233': attribute type 11 has an invalid length. [ 374.841991][T14525] netlink: 'syz.1.2233': attribute type 11 has an invalid length. [ 374.850363][T14525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2233'. [ 374.899674][T14518] C speed is unknown, defaulting to 1000 [ 374.926092][T14528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2233'. [ 374.949448][T14528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2233'. [ 375.934317][T14518] lo speed is unknown, defaulting to 1000 [ 376.860836][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2243'. [ 376.864167][T14560] C speed is unknown, defaulting to 1000 [ 377.977777][T14560] lo speed is unknown, defaulting to 1000 [ 378.154021][T14605] C speed is unknown, defaulting to 1000 [ 378.817074][T14621] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 378.833674][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.878948][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2255'. [ 378.976769][T14621] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.003208][T14623] tipc: Enabled bearer , priority 0 [ 379.129380][T14626] syzkaller0: entered promiscuous mode [ 379.134924][T14626] syzkaller0: entered allmulticast mode [ 379.157111][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 379.428955][T14623] tipc: Resetting bearer [ 379.503809][T14623] tipc: Disabling bearer [ 379.521378][T14639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2259'. [ 379.523584][T14605] lo speed is unknown, defaulting to 1000 [ 379.690743][T14643] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2260'. [ 379.717228][T14644] pim6reg: entered allmulticast mode [ 379.745615][T14644] pim6reg: left allmulticast mode [ 379.826996][T14646] netlink: zone id is out of range [ 379.836029][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 379.859528][T14646] netlink: zone id is out of range [ 379.859751][T14643] tipc: Disabling bearer [ 379.865224][T14646] netlink: zone id is out of range [ 379.890924][T14646] netlink: zone id is out of range [ 379.919166][T14646] netlink: zone id is out of range [ 379.994842][T14646] netlink: zone id is out of range [ 380.019195][T14646] netlink: zone id is out of range [ 380.030995][T14646] netlink: zone id is out of range [ 380.036437][T14646] netlink: zone id is out of range [ 380.576550][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2267'. [ 380.666217][T14669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2265'. [ 380.712778][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'. [ 380.724884][T14670] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 380.739228][T14670] netlink: 'syz.0.2267': attribute type 2 has an invalid length. [ 380.753793][T14670] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2267'. [ 381.027280][T14685] tipc: Enabled bearer , priority 0 [ 381.175218][T14691] netlink: 'syz.1.2272': attribute type 10 has an invalid length. [ 381.227378][T14691] team0: Port device 0! added [ 381.239986][T14694] netlink: 'syz.1.2272': attribute type 10 has an invalid length. [ 381.302236][T14694] team0: Port device 0! removed [ 381.309160][T14693] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2273'. [ 381.485767][T14703] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2276'. [ 381.963778][T14726] tipc: Enabling of bearer rejected, failed to enable media [ 382.161876][T14733] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 382.780005][T14767] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 382.820277][T14767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.883747][T14767] vlan3: entered allmulticast mode [ 382.894407][T14767] bond2: (slave vlan3): Opening slave failed [ 383.284671][T14794] netlink: 'syz.2.2302': attribute type 178 has an invalid length. [ 383.764428][T14821] ------------[ cut here ]------------ [ 383.771194][T14821] WARNING: CPU: 1 PID: 14821 at fs/exec.c:119 path_noexec+0x1af/0x200 [ 383.780277][T14821] Modules linked in: [ 383.784558][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.3.2306 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 383.798269][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.809175][T14821] RIP: 0010:path_noexec+0x1af/0x200 [ 383.814467][T14821] Code: 02 31 ff 48 89 de e8 10 b0 8b ff d1 eb eb 07 e8 27 ab 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 86 3b 09 cc e8 12 ab 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 383.835009][T14821] RSP: 0018:ffffc90002ef7bd8 EFLAGS: 00010283 [ 383.841409][T14821] RAX: ffffffff82347d1e RBX: ffff888030e57040 RCX: 0000000000080000 [ 383.849503][T14821] RDX: ffffc9000e412000 RSI: 0000000000000312 RDI: 0000000000000313 [ 383.857550][T14821] RBP: 0000000000080000 R08: ffff888029d0bc00 R09: 0000000000000003 [ 383.866603][T14821] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000013 [ 383.875582][T14821] R13: 1ffff920005def90 R14: 0000000000000000 R15: dffffc0000000000 [ 383.884409][T14821] FS: 00007f82205256c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 383.894525][T14821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.902040][T14821] CR2: 00007f8220524f98 CR3: 00000000448da000 CR4: 00000000003526f0 [ 383.910768][T14821] Call Trace: [ 383.914114][T14821] [ 383.917176][T14821] do_mmap+0xa43/0x10d0 [ 383.922508][T14821] ? exc_int3+0xe/0x80 [ 383.926635][T14821] ? __pfx_do_mmap+0x10/0x10 [ 383.931984][T14821] ? vm_mmap_pgoff+0x201/0x4c0 [ 383.936813][T14821] vm_mmap_pgoff+0x31b/0x4c0 [ 383.942368][T14821] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 383.947560][T14821] ? __fget_files+0x2a/0x420 [ 383.953557][T14821] ? __fget_files+0x3a0/0x420 [ 383.958317][T14821] ? __fget_files+0x2a/0x420 [ 383.963839][T14821] ksys_mmap_pgoff+0x51f/0x760 [ 383.969480][T14821] do_syscall_64+0xfa/0x3b0 [ 383.974146][T14821] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.980533][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.986677][T14821] ? clear_bhb_loop+0x60/0xb0 [ 383.992246][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.998222][T14821] RIP: 0033:0x7f821f78e9a9 [ 384.003497][T14821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.024459][T14821] RSP: 002b:00007f8220525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 384.033975][T14821] RAX: ffffffffffffffda RBX: 00007f821f9b6080 RCX: 00007f821f78e9a9 [ 384.042785][T14821] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000 [ 384.052035][T14821] RBP: 00007f821f810d69 R08: 0000000000000008 R09: 00000000ffffe000 [ 384.060855][T14821] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 384.069666][T14821] R13: 0000000000000000 R14: 00007f821f9b6080 R15: 00007ffffa741b48 [ 384.077747][T14821] [ 384.082046][T14821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.089383][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.3.2306 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 384.101679][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.111962][T14821] Call Trace: [ 384.115287][T14821] [ 384.118300][T14821] dump_stack_lvl+0x99/0x250 [ 384.122946][T14821] ? __asan_memcpy+0x40/0x70 [ 384.127591][T14821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.133011][T14821] ? __pfx__printk+0x10/0x10 [ 384.137650][T14821] panic+0x2db/0x790 [ 384.141660][T14821] ? __pfx_panic+0x10/0x10 [ 384.146119][T14821] __warn+0x31b/0x4b0 [ 384.150137][T14821] ? path_noexec+0x1af/0x200 [ 384.154757][T14821] ? path_noexec+0x1af/0x200 [ 384.159373][T14821] report_bug+0x2be/0x4f0 [ 384.163750][T14821] ? path_noexec+0x1af/0x200 [ 384.168464][T14821] ? path_noexec+0x1af/0x200 [ 384.173127][T14821] ? path_noexec+0x1b1/0x200 [ 384.177742][T14821] handle_bug+0x84/0x160 [ 384.182016][T14821] exc_invalid_op+0x1a/0x50 [ 384.186539][T14821] asm_exc_invalid_op+0x1a/0x20 [ 384.191423][T14821] RIP: 0010:path_noexec+0x1af/0x200 [ 384.196655][T14821] Code: 02 31 ff 48 89 de e8 10 b0 8b ff d1 eb eb 07 e8 27 ab 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 48 86 3b 09 cc e8 12 ab 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 384.216550][T14821] RSP: 0018:ffffc90002ef7bd8 EFLAGS: 00010283 [ 384.222643][T14821] RAX: ffffffff82347d1e RBX: ffff888030e57040 RCX: 0000000000080000 [ 384.230644][T14821] RDX: ffffc9000e412000 RSI: 0000000000000312 RDI: 0000000000000313 [ 384.238720][T14821] RBP: 0000000000080000 R08: ffff888029d0bc00 R09: 0000000000000003 [ 384.246702][T14821] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000013 [ 384.254771][T14821] R13: 1ffff920005def90 R14: 0000000000000000 R15: dffffc0000000000 [ 384.262860][T14821] ? path_noexec+0x1ae/0x200 [ 384.267483][T14821] ? path_noexec+0x1ae/0x200 [ 384.272093][T14821] do_mmap+0xa43/0x10d0 [ 384.276294][T14821] ? exc_int3+0xe/0x80 [ 384.280396][T14821] ? __pfx_do_mmap+0x10/0x10 [ 384.285013][T14821] ? vm_mmap_pgoff+0x201/0x4c0 [ 384.289794][T14821] vm_mmap_pgoff+0x31b/0x4c0 [ 384.294408][T14821] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 384.299537][T14821] ? __fget_files+0x2a/0x420 [ 384.304151][T14821] ? __fget_files+0x3a0/0x420 [ 384.308849][T14821] ? __fget_files+0x2a/0x420 [ 384.313527][T14821] ksys_mmap_pgoff+0x51f/0x760 [ 384.318321][T14821] do_syscall_64+0xfa/0x3b0 [ 384.322844][T14821] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.328235][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.334339][T14821] ? clear_bhb_loop+0x60/0xb0 [ 384.339046][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.345052][T14821] RIP: 0033:0x7f821f78e9a9 [ 384.349488][T14821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.369280][T14821] RSP: 002b:00007f8220525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 384.377727][T14821] RAX: ffffffffffffffda RBX: 00007f821f9b6080 RCX: 00007f821f78e9a9 [ 384.385736][T14821] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000 [ 384.393827][T14821] RBP: 00007f821f810d69 R08: 0000000000000008 R09: 00000000ffffe000 [ 384.401812][T14821] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 384.409973][T14821] R13: 0000000000000000 R14: 00007f821f9b6080 R15: 00007ffffa741b48 [ 384.417982][T14821] [ 384.423802][T14821] Kernel Offset: disabled [ 384.428137][T14821] Rebooting in 86400 seconds..