last executing test programs: 3m53.307978896s ago: executing program 0 (id=423): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r5, 0x29, 0xb, 0x4, 0x10000, 0x70, @empty, @empty, 0x700, 0x7, 0x6}}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="71358ccaeec23f649d60047175aa1e1fb88c6b93fd73fa12e1456f50112edf5e6885766c243309a81d96478354792ab163ce5cc2b3e05431bbf23626766aa92bad8ef157702f5aa53597a43d859732e619b94a3b90dd1ae32b62e6c7003a0cc7329270db4a05f6aaabfddc907468ea277dc1c2efe2900266a706a5630f3dbcb325dc4f433cad1250ebe90d0b8eaf7b", 0x8f}, 0x1, 0x0, 0x0, 0x800}, 0x50d0) 3m53.141960091s ago: executing program 0 (id=425): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x4000010, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0x200, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 3m52.992237074s ago: executing program 0 (id=426): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}}, 0x90) unshare(0x4000400) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000180)={@random="f5abdc971d92", @empty, @void, {@mpls_uc={0x8847, {[{0x800, 0x0, 0x1}, {0xf7, 0x0, 0x1}], @llc={@llc={0xf0, 0xbc, "a299", "51826c47ec8a3f1a0391b04e9031a7cc51fadceb706007474e55dec84a6e1b191dd29f1537f6f41d2a3b7193e7cbaf9cd1c839f323206d6e1b2ce386177d3074c079da1245210365a63a75ff43b81c"}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xdcf, 0x973, 0x85a, 0xcd6]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000100)={0x6, 'pim6reg1\x00', {0xa2}, 0xd11}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bind$rds(r5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x800, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x351849d6, 0x7, 0x650, 0xffffffffffffffff, 0x7204, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xb}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x30, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, 0x0, 0x0) 3m52.092011681s ago: executing program 0 (id=437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x68}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x6}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @datasec={0x10, 0x9, 0x0, 0xf, 0x1, [{0x3, 0x6, 0x1}, {0x2, 0x25d, 0x4}, {0x3, 0x400, 0x1}, {0x3, 0x0, 0x6}, {0x2, 0x1ff, 0xa}, {0x5, 0x2, 0x6}, {0x4, 0x1, 0x3}, {0x3, 0xcf0, 0x9}, {0x4, 0x5000, 0x7}], "06"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x401}}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000600)=""/210, 0xfd, 0xd2, 0x0, 0x3, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000002000000000000000000000090d40c5f00000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0xa, 0x6, 0x101}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x68}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x6}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @datasec={0x10, 0x9, 0x0, 0xf, 0x1, [{0x3, 0x6, 0x1}, {0x2, 0x25d, 0x4}, {0x3, 0x400, 0x1}, {0x3, 0x0, 0x6}, {0x2, 0x1ff, 0xa}, {0x5, 0x2, 0x6}, {0x4, 0x1, 0x3}, {0x3, 0xcf0, 0x9}, {0x4, 0x5000, 0x7}], "06"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x401}}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000600)=""/210, 0xfd, 0xd2, 0x0, 0x3, 0x10000, @value=r1}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000002000000000000000000000090d40c5f00000000"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0xa, 0x6, 0x101}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) 3m51.940265574s ago: executing program 0 (id=440): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000400000003000000400001802c00083c4adb4cec40fc04001400010002000000ac14140f00000000000000001400020002000000ffffffff000000000053a3d4ee83a5079b06003a73797a3000000000000000"], 0x54}}, 0x0) 3m51.708516661s ago: executing program 0 (id=444): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) r1 = socket(0x2, 0x3, 0x7b) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x800, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 3m51.455099726s ago: executing program 32 (id=444): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) r1 = socket(0x2, 0x3, 0x7b) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x800, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 11.159847314s ago: executing program 3 (id=3188): r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x5, 0x4) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x4) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x20, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0xfa11, 0x8, 0x6}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x1, 0x1, 0x32d5, 0x5}) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x32) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000300)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b4, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xa20}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x16c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, "4c65f21c65b04f2a01316c8dfe13223ec7bf5a4328387c35a5c64df0224dca0fdd7ed67e11ee76883db8f995e22558fc6171dcb0b971469954dcf07517406017779ec65e79308445a5974dab945f77672691e600ab456c2bc4ccda6e6b770d79887e587547a29a165299eda3e6e55849dd7b05ad6516d8b4"}, @NL80211_BAND_2GHZ={0x92, 0x0, "47c33367499901f251d5adc5b74fef8d0a3fef4e4407119f75893e1697d77a854d59fed4a896df42983b185d7b2392819e7c3f697bf1aba99c1de489f81b352133852be763940d71fde7d97ed4cc9f6a01d6f813bb30c3aab1feddf36b0a06e65256f23048cd34c1ddf546967cccd20d5984d2a4b366362b0d1a3e04635ae395701c053c3ecaffe17674ed5a6882"}, @NL80211_BAND_2GHZ={0x58, 0x0, "ef4f8ca17b2560f33c02fde44b7114df8f8e372c72355d75c0337eb58439634ff438fee5699ea1593fa1477e198b679524daa21818c35d00b65ff36e1c6cafc4ad4edeff8fe4779bce5f6b7aed1f363c49be198e"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x487}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44}, 0x20000001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)={0x0, r0, 0x3cd, 0x0, 0x4, 0x3}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000600)=0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x40, 0x20, 0x4, 0x2, {{0x1a, 0x4, 0x2, 0x3c, 0x68, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @rr={0x7, 0xb, 0xd4, [@rand_addr=0x64010100, @local]}, @rr={0x7, 0xb, 0xe7, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_addr={0x44, 0x1c, 0x8a, 0x1, 0x3, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x8, [{@private=0xa010100, 0x81}, {@loopback, 0xbc5}]}, @cipso={0x86, 0xb, 0x2, [{0x7, 0x5, "f4c73a"}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x12, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1, 0x0, 0x80, 0x10, {0x4e21, 0x4e23, [0xffff, 0x3, 0x4, 0x5], [0x7, 0x54, 0x5, 0x8], r2, [0x4]}, 0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "88f65ede25a91bfb15bc87f6f19a2364a3e6634141bc7a8c87"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) recvfrom$netrom(r1, &(0x7f0000000880)=""/177, 0xb1, 0x40000100, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000940)={0x0, 0x7, "ab1d80299927f9"}, &(0x7f0000000980)=0xf) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)={r3, 0x1400, 0x1, [0x10]}, &(0x7f0000000a00)=0xa) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000a40)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = accept(r4, &(0x7f0000000a80)=@alg, &(0x7f0000000b00)=0x80) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050085}, 0x8044) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000c80)=0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000cc0)={r3, @in6={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}}}, &(0x7f0000000d80)=0x84) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000dc0)={0x2, 0x33, '\x00', [@generic={0xfb, 0xb2, "f75baabc2795722f1a8bc688412a9b3fdb8cfc9ef25adae5da3b1e764e51eb0dccbf033c932dbed84cfe9228c8518a5c8102a9d56d23ee563f6ffe34dc91ed7845c7690749307dffd62b896de314b6915355186293fefbf0a4352ea8eef59830967648a488fce8a7d49f798f339070ccb4e542d0dfb5f7256ad907801e423cfcc08fdf61ea04b07c871860a4f3f3781e3d0dc088ba5299dddf0a88509f8fdb0870588ca769eb75ff84144ffe797a55b2ba49"}, @generic={0xb5, 0xe0, "e0ac6c2773f704dfaf619db97cac21f98d7fa42232fc74a29c93599ecbde17db2d9b08d4c10e7b10e20dabb19e5c564c274ddd2d3bfecc0d84ea83580ad346a9b8c89ebe861b8f6b29501b11c3ae29d9bc30a58e19169b420efe6951edbba147c58294db1b10ddd44baf3dcb791c0f7c8d0d43c82825b23e92aa328a7c993d6c47a31bdb0faf67285a936cef83c560269d9da8b235cc1a3215a3a02a82f27133428cb648ded5511a06da7f6cf580fb04f6b24d5d79b869c88ff88fa70627fd39a088792d4aa917c5ad0a5763e6b1a720d49b02e6176fb0bc7928eb79d2323fc7"}, @pad1]}, 0x1a8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r6, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008042) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001100)={0x6, 0x2, 0x200, 0xff, 0xfffffe00, 0x2, 0x3, 0x400, r3}, &(0x7f0000001140)=0x20) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000001180)=0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000001240)={0x1, 0x2, 0xe6}) 11.086066027s ago: executing program 3 (id=3189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0800370001"], 0x7c}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4884}, 0x24008000) 10.721787522s ago: executing program 3 (id=3191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 8.301897853s ago: executing program 3 (id=3199): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0xc2, 0xa) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = socket$inet6(0xa, 0x80000, 0x5f53c28d) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000002c0)=""/31, &(0x7f0000000300)=0x1f) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000340)={0x3, 'veth0_vlan\x00', {0x4}, 0x2}) (async) r2 = socket$inet6(0xa, 0x4, 0x1) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x67f6a90064edcf48, &(0x7f0000000380)={@rand_addr, @private, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={@local, 0x5d, r3}) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x453, 0x20, 0x70bd28, 0x25dfdbfb, "c934a82a742c906b7ba6ec87f6d834583a8add412e3f9cdd4173511d066a5f74ca05a2a6eeca7f151320dc40406cbdf270886e44da5abf3fce8968718a27dc0cc206e11128e5839346473641423e96ab26fd34d1b0377f22313242ab98f6e027fef58edd53b2658b4c40744685f7f260f3a163f66305f845dd959f4eb67bc050b12f63a45bad2b7d6cf27c123c93614f2183eb", ["", "", "", "", ""]}, 0xa4}}, 0x40891) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x28}, r3}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", ""]}, 0x14}}, 0x8010) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa870, 0x63}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "9c63ffe8fb7dc73a85c8fedbd5"}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x10) (async) recvmsg(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/35, 0x23}, {&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/223, 0xdf}], 0x6, &(0x7f0000001b80)=""/203, 0xcb}, 0x120c1) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r8, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20046010}, 0x92717976c749702f) (async) r9 = socket$inet6(0xa, 0x0, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001e00)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000001f00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001f40)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@broadcast, 0x4e23, 0x0, 0x4e21, 0x5a, 0xa, 0x20, 0x80, 0x87, 0x0, r10}, {0x2, 0xc, 0xffff, 0x7, 0x9, 0x7, 0x9, 0x582b}, {0x5, 0x8, 0x4, 0xe}, 0x6, 0x6e6bb8, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x3c}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0xc, 0x9, 0xff42, 0x200}}, 0xe8) (async) recvmsg(r4, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/48, 0x30}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004100)=""/240, 0xf0}, 0x0) (async) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000004240)=0x9, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000004380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004280)=""/183, 0xb7, 0x1, &(0x7f0000004340)=""/40, 0x28}, &(0x7f00000043c0)=0x40) (async) getsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000004400), &(0x7f0000004440)=0x4) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000004480)=@netrom={'nr', 0x0}, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) accept$unix(r6, &(0x7f00000045c0), &(0x7f0000004640)=0x6e) 8.06142117s ago: executing program 3 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x7, '\x00', r5, r7, 0x1, 0x5, 0x3}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x7, '\x00', r5, r7, 0x1, 0x5, 0x3}, 0x50) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.249487694s ago: executing program 5 (id=3255): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="5c04db54f460ba80b606f1daa08d9103fcddbd1e22d21bbea4b5ac16ee6538ceb90e88fcbe6a0b1c147555e9d61159607eda2c7d0307c75b0da9b05db7e476332c", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000004000000852000000100000018240000", @ANYRES32=0x1, @ANYBLOB="0000000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000002c0)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x1, 0x7, 0x7}, {0x2, 0x1, 0x5, 0x9}], 0x10, 0x6405}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) (async) r3 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'vlan0\x00', 0x57e7}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r5, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev}, &(0x7f00000001c0)=0xc) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x2bc, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x148, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x957}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5be7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x26d}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "b15812518ebde4632dd1750dc6ebdce24623f687c08d427571de453523c1e22b40bfd11863e97c0f0e5219a53f9330e97e052b5fb42ca4073f82ae442d99b8859fde51516bf0f00257a5e6f8d3002120c7e5e0f68d7a65599a2b4a5a46df54943155fb31e2089c413f751ba13249843826fef66bb5566566b813a036640dda903911aee75c572e7f1767f0c3d539920bd4561cc01f261db564c15c583dba2f3dbf942bfbf705967c537edab02d6fb26965eef21c4745c9c9116c922bb3c075a1c11ff97cc420ec53fcf41a37191b027a39f2353b852b7125"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) (async) listen(r1, 0x7) (async) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r5, 0x823, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="580100001000130428bd700000000000ac1e0101000000000000000000000000ac1e0101000000000000000000000000002000074e240000020020201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000600000000004000ffffffffffffffff06000000000000007f0000000000000000000000000000000000000000000000ffffffffffffffff04000000000000000000000000000000f6000000040000000800000000000000ff340000020001be000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000000000", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.062739925s ago: executing program 5 (id=3260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r4, 0x28543634fae43ad}, 0x14}}, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="001342b615fb5051c20000000000000007000000cf00000003000000000000000500000000000000ff7f00000000000001000000000000000000000000000000000000000000000001000000000000000000000000000000ffff0000000000000100000000000000000000000040000000000000000000000000000000000000030000000000000000000000000000000700000000000000ff0f000000000000ff7f00"/200]) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "75802c5a402bf08bb0a8b23f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x86) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 2.429542182s ago: executing program 4 (id=3269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = socket(0x10, 0x3, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x8) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) read(r4, &(0x7f0000000540)=""/4096, 0x1000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000000088a8000081"], 0x3e) 1.940306546s ago: executing program 5 (id=3272): socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x8000000000000000, 0x80, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x8000000000000000, 0x80, 0x6}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x700, 0x20000000, &(0x7f00000004c0)=@rc={0x1f, @none, 0x4}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1}) 1.77168122s ago: executing program 1 (id=3273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4da, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x18}}], 0x2, 0x4c040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xb8, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x2, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x43, 0x0, 0x0, 0xc}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r10, 0x0, 0x15, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xd}, {0x0, 0xd}, {0x4, 0x9}}, [{0x8, 0xb, 0xf8}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x88894}, 0x20000800) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r5) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r5) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="3c00000010008de2620c66ea91ffc1d2b974052b", @ANYRES32=0x0, @ANYBLOB="0800040040010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r11, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r11, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r11, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c081) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r11, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c081) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000002, 0x1852, r3, 0xffffe000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000002, 0x1852, r3, 0xffffe000) 1.581570092s ago: executing program 5 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r2, 0xf13}, 0x14}}, 0x0) 1.514388855s ago: executing program 1 (id=3276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) unshare(0x22020400) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd70005fe53a4a538507000000edf80975250000", @ANYRES32=0x0, @ANYBLOB="05000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6(0xa, 0xa, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}], 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="4001000010001304fffffffffbdbdf250a010100000000000000000000000000ac1414bb000000000000000000000000000000004e2200100000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000640)=""/251, &(0x7f0000000080)=0xfb) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1.490023882s ago: executing program 4 (id=3277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7d2a0011000000007110a600000000958b2dd3000100000000002e0b9a2860342623a072460ff09192eed712e90855eee8d86a60b6ef921be054f60cb084296e531960e0c7e8b8b415da2871ef91d6341a708dc6ea3ac399243dd840789f0bc081ceaf139f3c1819cbeb732814391cccbf32759d9977c323f5355699ecc14efd48e6baa7c49ee248e5567c1db859dceed204c6cb7d63f4dedd527c35efa3b22841febeda8394dba5cc63a4d5bf77c74ff482ff4bd00b87c6295a7d9add"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x31000018}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x1, 0xb2fe, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4055) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044884}, 0x40000c4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000380)=""/14, 0xe, 0x0, &(0x7f0000000540)=""/174, 0xae}}, 0x10) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000740)='syzkaller\x00', 0xa08e, 0x53, &(0x7f0000000780)=""/83, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x1, 0x7, 0xcf9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1f92c43}, [@generic={0x0, 0x1, 0x8, 0x9, 0x3}]}, &(0x7f0000000280)='GPL\x00', 0x1d9983c0, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x2, '\x00', r6, @fallback=0x8, r8, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0xd7, 0x2}, 0x10, r9, r10, 0x7, 0x0, &(0x7f0000000980)=[{0x5, 0x5, 0xb, 0x1}, {0x1, 0x1, 0x6, 0x3}, {0x1, 0x1, 0x5, 0x2}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x1, 0x7, 0x5}, {0x1, 0x1, 0x3, 0x2}, {0x2, 0x5, 0x8, 0xc}], 0x10, 0x7}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffd, 0x39}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "202730db53"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8b76183d65"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008010) 1.348158216s ago: executing program 5 (id=3278): syz_emit_ethernet(0x1a6, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "02a27f", 0x170, 0x4, 0xff, @rand_addr=' \x01\x00', @private0, {[@srh={0x11, 0xa, 0x4, 0x5, 0xff, 0x14, 0x6, [@dev={0xfe, 0x80, '\x00', 0x13}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote]}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0xa9, [0x3]}}, @generic={0x50, 0x4, "4465a975"}]}, @srh={0x63, 0xe, 0x4, 0x7, 0x0, 0x70, 0xff, [@private1, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x1c}, @loopback, @loopback]}], "27b17d1de39eb6f51c81e793d83a532825d7706eb977442b409a7179d0ee349536bd14c3fd5dd00957f17c814d745a1bfb59814d5fce0610d9fac80ac3796bda2d46b1c2299a0ccc4441f1e45dbe3cf9"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 1.348038077s ago: executing program 2 (id=3279): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000001080)=""/4089, &(0x7f0000000040)=0xff9) 1.285381474s ago: executing program 4 (id=3280): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) 1.11711455s ago: executing program 2 (id=3281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007710fefff0ffffff0f9c0600ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x4d, &(0x7f00000001c0)=""/77, 0x1f00, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x6ff, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x1, 0xf, 0x4}, {0x3, 0x5, 0xb, 0x8}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x15, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000200000000000000ff03000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000f294d749b9dcec0601b77a31e051a529016246e42d50733be481b973b7992345379b53e69f8b9c71fb4ba5687002bcfcf43ef0a52bad31955a82cda2e56da8770431a510741fe24db77838e228582bba6150c726504c02ce3d6f9efd00eadc47b4d48705d33c5f0f8c91c66631", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000a1000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 1.016107745s ago: executing program 4 (id=3282): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000040), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x8000, 0xe, 0x7f, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x65, 0x0, 0x7f, 0x4, 0x0, @local, @local, {[@timestamp={0x44, 0x14, 0xb2, 0x0, 0x2, [0x9, 0x8, 0x2, 0x200]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x3b, [@initdev={0xac, 0x1e, 0x6, 0x0}, @empty, @loopback, @empty, @remote, @remote, @remote]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0xd, [{@broadcast, 0x80000000}, {@empty, 0x6}, {@multicast1, 0x5}]}, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2}, [""]}, 0x1c}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 952.000117ms ago: executing program 1 (id=3283): syz_emit_ethernet(0x56, &(0x7f0000002300)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@x25={0x805, {0x0, 0x8, 0x0, "2b644b8da7a57353aee82d9f7b4dce7efd50f6ba47533a782677344165741e420d8cfdbefd5d703cea92da5f47eff47ee471609136c5878f13f3a5a3e2f4ba0f61eb1ff30beccf9b2628e8e97bf3d12e987c701c4fb183d20a5b837836a0950dce0f6b10cebfd67a08969787301a658464eb17a0917a54a8867bd33e3ee93ce4bd985b1fc3260d28e8f5ea44e1d6eaccb559f436c0bb9747c246b875eac8335072d0fe4054fc434178093d0fbd1eb0b24e8bc8b1d3da1f71ee777d61fe6af89f41c8f7ba00ed9e2471747b43d72ce5ff7d12cadad5d885d5accaab967e1218a1bb2834db65b12bd7cf0fd83861d067a55f1e5ab76bc38403e5f644a303f085546bcf18fbb53b40e2c49078fc19546f60cfce588312fe4c38f0834237fbe2efa9fa812c91dd8a318cd8b0cf4565774f22e3e1bbfaf967d66a96e8cb2fc93cd0dd060540b8358e8829ded884c7bdd4cc2b0dfbea1c0c9436b1e7d27f0f854a430b15103ae50a74889ca24f67b5e45c3c72572d3ee59ef4d93abd10d206a7057af374802b8ffb0956c2d8cb89f39ebf5408a419820ff3bbd8bce4ec6d9692c839e5359c2325d4900a592d0298397f269fc0b9bc654471a2b7c807c3f9912dbd10b7b966c7184814e2f57bd457332b2ab7fa52c97b96b4026bf4760362676a035a6b9baacd7d16b1fed5bea88f28246013ddc1035e72d2db176eddc7ebad36288c2cd515c82059cb88ad31a7a5596505179c0e62f6e4c7ef84f1e7e3cd31e98d33ecf46eda986673b1d1aa7c918a054331e186015b6963986f175a16a44d35a40a02fb813b36982062246c10720ceb7dbaee4f7175a09303da0cf7ee8f2b7ec23df790588892c280e7e49a1572fb5d54c8415c0cca813944ecae13d690cd2a039f4afe55eb3c420e31c4cd98701af59b835f64d5116254829969b57e6e6be858cfb5f3c40d8dfbc257fee5ccd5e88a64f7d261a6b872d7586315b4b07acfda15346ed025cd3404471cbf5f9e4b2aab924274a2d00659939dbc69704e12961c680f7592aee83fbcc22a54ea6147443d54cf0fc590e18e39adf8c11c771e79f157b186adbf43b26f161c90781bd6a8cce6dadbb89ec69cfb783c7624af09a4c35da45965051cf7d16614f5666227a45ece8cb1ffbe48af71eb485d9c5613109d1de5ec0abadcc01b8f6f3e27334f061e9c496a205638a7fa1d23481bb0b476fc71d126be676c2adbd4e59e9d6feba880ee220cc5e8dc9b910eb9d867dd4c6ddd4cfdc3c2889da70c6bd1c45fe31bf6447925832bb950e4a31979c7ac98c73a57c6798a64a48d46f0dcab77423a462c40b483dcb1dee1192231743fd164dc5b33cd6f0ce29b8bc2e660f405641c665f2c16878c9b0f0a6b29de82dad032a4f22f2686b7f5ce5f0263e95f9535fa42b1567170b48e15bddbfa957e0e4057f8da0c773905ace8b5b61f440725c3b4b09da090186b421304b45426df235471ac0366dc9d94417fb60fb0de6eb84b7ce234cf7b58f622e19bd1f93d5a8bf8c9c991a7b83a285bcd3c5e616fc107052b7f3771b0faa6f0682daf9b33fe4c0612e1852eaac91f7fe977917282ca55f0c009197b130ddf88b44c341a5fc6cc826aa0d435b4db167b9f81420e42e06354f96751b10e2e84c51df101407b822bda0430519a4f7c200467f0e905053de5d71fa4b3b712b4c8fcd945214acae9a366d265c4ef7dac14353a70a39909160f54435f39affb0ecb18ac1dc507d20f08dcf5e99062cb6085e1874b4c7a5aa24f72414c9a8eb385eb8c0730b484fc531413a4652a09252763799ca3b89e529363da163f823f03499bab645a8d0e8259bbd63d848ab2d5ffe8900f4809fc71e63ec19f9c5796a951406448d949ac6d47df075e12ff9cdff1eaa40a205893239244ec400d07e577c8ffb83d5b750c5a30dd7e23a5708f2237a866341b9cc5b8c37668dcbbad6c098681bd4685720aaff8ef04f965cd77206c73e4a4ac1d9a2f552c2ea90effa3c265dbd5c44ff32d57a07cba6809046f97fb383fa1de0c91afbaaa5f2a0a4feee3b99d773d0eea07284e58958c95a12488387330680420f52f698612517be6b3128a71fd11d502b252e27eeca0b13c86adbfd154b5542930d8976eebf7eb2e0a874e8c3f326cee66f3214ee8397ba460073de9901a4e20913073964e59d1a5df8d02d8415ab5c5ea139164c8b771734fae102b36372741ed0287bed83d9cb0a139619bf79a7b71e77f4bb7706691cb7d1d60460ec44a3c330b037dd9490f69700c94800062e61bed1232d29ce41a1a7e1f7d74e76ef37ab91480f4922ec14601a88e79bc6be970c3a4db17e814e0228a0a9dc701735536507967446be62d3549cf178e548075a55bf5ba4df5f83bb6b7ddebc1a91123b162ef5ea6a739a07ab56a3eeba16d517a408ffcc0bd40b039fab7033986eecf806cd17d3e199fa511b53267c0277c9d1f80bcfbecf1b325b09a8e2806117e54e34592b6377753f2624bb43285ef45b694a5b20472721c49867d86a752f32f1b71f4a3d8f96d8ded32b615cf3ac3d53b98eb7ad3d968b41ec0238ba13712b2fe4fcf0022e5a827f1216f5e7a28d854fc2e14fc0b63b3c1cdfe7b02be422342e7f5cb89cfbef8bc00207f0308ed4d3f78cf38872016213e74188e97700d1ca41a856d81760de8dc66591ec7ba28d942fb01fd13cf563116b9731b00901e890475e5e2aae29db7846b77cbdb4b0210dabd02a498586ea27ee5c9143ababc9975d809c9ed3aa68e0300212e7fdda3fe0486300b93ccdcca4da92f9dec13a520bd0916320306649c78ee1c438038c0800c60d92f65c181377f6c1d3122a54c64d49a374ed5e82a9600b2c873006afeca6171823ae50f719f815861fa46ed7127cd5247445f5d639c7d6b376937231e8f021a229942fc6e86022e11baee8800a2c7f631c75501e52be39bd1d2aefd9e49e7b5b0a2b17e0f85596477cf2e30cede2c7d2d06ab6bf65b9ef0d886ca8ffd748f314de9edd8b7f873606127bdec99079b5f09ffac1d6f70f3e453a6906fb167d2690599fee53ec45a4fb6082ef3f1600083e90484d1a794cec75bac7c9c88b805765c652e6152034950e9942c2159c75b17f10ea71532b8b1e755d6a8babb1e8090c61bfcc0d68ba81d7e40abf4c512f17f40448b875e0b8b93aad72b66cf10092dcdba0e1bef797d9b7827e0483a34d643b05397aa2c6865b4b5ed48b0facdda7af52d0823de23d2b669a65fc1130fee12d471988bb7aa3ffb0ecb38328fde784892d740201aa44cb665ef6d71aa0d5f8287f41680160d2c13e34422aeb07c40e676edc341f39950943560fbb40e1d9dcbfa4359e9f66377bcaf2c01b31f1495c122e00a1dde13a4256d5e2d1d822d900025f1c2e74544e5a51776f7f7b06e43334b84d38586248fb308df47c8826466213905bbe38e65b57bbe158357cb455d2e98e50fe8846962cc435d6bbfc0cba0fb42e634ec5a0f0469d0ed9d1a6f993f2a4f782ebe37712dca76ed46b6d75f3906fe479209a9b3f2023b46fbd4cd070ef37c5314e2b975c5feaeab684af0d485ef10779cabd274e5f4665372e35814f2d8e748ab054cab4d2fc9f0a8044a6fa6e443e367afb1e123f3e5e98303bf17961e1e683d755504546f99fadedd524ce88e7a96dea5bd939269f9e6272ef1b66d38b2edb598b7967a494505ea6f13841678344cd6eed8f34b190836caf97f708e2005e052ca8877bbd9b6f61a73daed67dd05823d6eb95b7fdc8fa5814cad8548b39a67ee306d4873f76005fef79a776474fba086b9b06abf6086b6dce6116a1917c4eb84cb69e7ca2d4aed455235f8c38a354351064323593a530ded69344ffcede430beebe5ce7065908dd936210bf9492afb969d2e2a558070075df81da9c93e9ffd2dd0cd0302a80b6939ed34cd8bf7f70124bc77873c20ab2b48f003f54be2543ed9efaf1bc5cf899375ccaab32be3e68f5dddbefd93a30571ab6323cb006cff3fa33e3b5afea23490de4815b197d662aaef9c80e197ff46c461aeee5b7ab64888b1cd1e3a2e0a91da2e6162c8f91d8b4997e2001d4a30368db6e43cedfe0ca53d70b411aaaab5bf67f7dd096d8263919e6c0974c873caa5ee29a9525235fab546a258120612e4cbfc162b590c07d0a7b1e8043d995c563b82b3ae73da5edb61bfe2795201fff4c1826beb03ae35145a1dd47b2ee1a37a5a4ba06467cbb9e66b3f602f19e848c798812a7096c45021dfa6180430ca7387dc88858aa4653f44cefd811cc1bdde5d60b8cfdf5c84cb02445be1bb36837ec0be8fc1053392fc23dd07e9a825d9547f7e16ea08bba3f18dc9892b34feb38495bc26aee465eade7b5c154d954eebc709904b2782c25cd2feb391494cf12d5d3ae82f64ab5023a41429768da91145df46abaf0f5183744b8a2ee5348441042e955d03be867655a1e166374fe38d4e4c1320de920153e2d142f00ded2196359d8f9f436ab7f59f8ca1cbcf13c20ec9370cc483cc7cf53ae1b09193eb5feba5700ccaf32a08e2c745babd5d49a09ab7e3a15c25f1c7338a52932838adbb6d9d1a072b8b7bea5b92ce3bf5ade85cf3eaba597174bf7b52cea8be69a8ae1a8a99c5d76c1acdd7f5df78ea89cdd6854ca3c1d48cda7f1f0109d93ae554b73287801e65143c9ee049769b90edc8264ba200b0c8ae03e1f6fdf71c31672e0d2dcc7f13a78d6b801e58b891d6be877410026e181523965cd0f05e330877f2b27cc0a46c3810ee44452b8b9a71fce1621650f4d668a4221d9879dc1b9c154e3304304e668b71f49f1247ce569fc907d4e39f07d3b729d3d0683aa2398871c4150ee121f25185cb42b5cd544ed181944c287b95d7d21f7d8c80688d75ee4cbb6b94a3a6c87ed12632bad86ff1293842610a9919af01e7f9558dd0dce4d10455404abde5e71a2f130a2eb43197f7d098edbf651753da6f22698458def560d961b75d2466b460489a1d11ce87c85d050b00c1219c7d91d3824627e4fdaf1f9c71d2141fa9fafd574089f3f960e43bfac7cd09338675e0e77f27a28f7f8af5adc144542c467b0a144f6848c1b7dd8771c75d27161546ac28b8db17e3a8d9707cd68ca5db76f6f59da82001352fa30106f80f743a9e02ccf0e0cda0c9f78edecddd9c999aceb594f76527502b7500f9a3fff758dd85cee5a15bfc5bb5395c1f28f53cd396249c8fded7b73653191d959dbe5964f9a92a839dad4e04119f520263cbe13e55d9cfc0028428dca40da19f65d9647dda83ec742de078b52e23fa1f0e6cc7a30ec8ae0d05a580cce271bd4b085438ce9809f908f8c2155d1086738805beb983f403a7f21ddada5f24e47fc02fed24c5265c7279e31416134caf3759f0f16bec6691a94885fe8b29ef29b76d7de6116dcb024b56224907bc7d4cf30c73a7823aa74e8ea06c636983345eba80a3961e373fe79fec7fd3caba166a7646301fe2e8c0dcecb3c6f690d0f65b93633e535bd8489c4a83cf1cc7220a0e6a8856be2b96f5590316098fc0171764877ba7f3283f9a4a976398d95b254748a76727b12dc3d8f12c5b50217a5513470f1aa79d063e42af3abf253aa7a89487229487503b190866e13b71e1f27a90ac114fe4c6e131322c4173e21f1da2b9bfa9b7ee98de95cb410e5d68ccf2bf8385c3c327e34f67aae280d7e0d50eba6e1bf92f0f1e621aef8a5a7ed33b77e2b15f58f51c51e63519ccd5c66fa95b42ec9ad2cc7c9b82c76befda449f15cfef833dd9709c51fb050516939041db8b5b05"}}}}, &(0x7f00000022c0)={0x1, 0x4, [0xa5c, 0x813, 0x78d, 0xdfa]}) syz_emit_ethernet(0x11d6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 839.672238ms ago: executing program 1 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}}, 0x50}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0x458, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0xffffffffffffffd0, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0xffffffffffffffd0, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r13, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "a7"}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004211002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020800"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004211002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020800"], 0x4c}}, 0x0) 764.128845ms ago: executing program 2 (id=3285): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x28, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x5, 0x7, 0x4, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x75, &(0x7f0000000200)=""/117, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000002c0)=[{0x2, 0x4, 0x6}, {0x3, 0x4, 0x4, 0xa}, {0x0, 0x5, 0xa, 0xc}, {0x3, 0x5, 0xe, 0x6}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0x9, 0x7}, {0x0, 0x2, 0x2, 0x4}, {0x3, 0x1, 0xf, 0x2}, {0x1, 0x3, 0xa, 0x9}], 0x10, 0x80000000}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 609.270667ms ago: executing program 4 (id=3286): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x9, 0x7, 0x8, 0x7, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @remote}}]}, 0x38}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, r1, 0xffffffffffffffff, 0x3, 0x0, 0x9, "5271cfb45bd291ea6c49377b310eca24b30267e382d0a4791efbc8259c3648def2c311193b49db09cdcead4c02d22805ba967134f796631fe43395f94daffe", 0x19}, 0x60) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0xd, 0x2, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0xc, 0x7, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb3a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x2b, &(0x7f0000000380)=""/43, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0xd1f, 0xffffff67}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x2, 0x10}, {0x3, 0x2, 0x5, 0x5}, {0x80, 0x1, 0x9, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000200)='ishtp_dump\x00', r2, 0x0, 0x8}, 0x18) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1ff, 0x2, 0xffff, 0x7}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e22, 0x10001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}, 0x1, 0x10, 0x0, 0x7ff, 0xfffffc01}, &(0x7f0000000780)=0x98) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x90, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2, 0x7, 0x9, 0x9, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x10, 0x0, "d3e9"}, @sadb_x_sec_ctx={0xc, 0x18, 0x5, 0x96, 0x56, "542c90eeb809d9b7fe4f5cd8887a5cc60085c0941a0769d9cb735e69964643096ff6e73d54900fb0c05ef8c746aed79ffeaa6348a98d8d75bd878a72065363d9e8dd73daa4f9d8193715dffb09f8607e14064c32a830"}]}, 0x80}}, 0x84) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r5) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x98, r10, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x44800) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000c80)={r4}, 0x8) (async, rerun: 32) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x20, 0x700, 0x3, 0x9, {{0x13, 0x4, 0x2, 0x9, 0x4c, 0x66, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x20, 0x3, [{0x0, 0x6, "6e6c7dc4"}, {0x0, 0xb, "d95c2191af96a5764b"}, {0x2, 0x9, "3d6d14d60f5d27"}]}, @ra={0x94, 0x4}, @end, @generic={0x82, 0x10, "6d58c383f4657b7fa9d528bbea8b"}]}}}}}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000f40)={0x0, @multicast1}, &(0x7f0000000f80)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001040)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x5da6, 0x81, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x52, 0xde2e27997f9e429c, [{0x6, 0x3, "c4"}, {0x6, 0x10, "5f86119b7c1fbfb66dd289ccb322"}, {0x2, 0x8, "c78268c7c7ac"}, {0x7, 0x5, "a25c63"}, {0x2, 0x11, "2c7ff815a56e0ae0341fb3bc7a4a0e"}, {0x1, 0xc, "bab886a157089d2689ef"}, {0x1, 0xf, "782b293acee8ae4b3ac6ce4df3"}]}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001500)={0x8d4, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r12}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9e, 0x3, 0x5, 0x8}, {0x5, 0x9, 0x80}, {0x8, 0x8, 0x1, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x65a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x801}, 0x40) 557.800786ms ago: executing program 2 (id=3287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'vlan0\x00', {}, 0x3}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000040)) 483.914742ms ago: executing program 2 (id=3288): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 465.708356ms ago: executing program 3 (id=3209): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x1007e, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r3, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x800) recvmmsg$unix(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r0, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) 376.21143ms ago: executing program 1 (id=3289): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000300)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10060) 136.22945ms ago: executing program 4 (id=3290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffa) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@null, 0xd, 'wg2\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r3) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000180029001600000980221b629c49fff6fb9d5ffccc8f0e1cb9d4d48ad3ea04168d8b43fc247c1ae5fd3e19bd94f8a7eb79534c39822b0c5084551cff3289ff85e90971247388a3e9434a7e4100000000000000"], 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'macvlan0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x46, 0x6, 0x8d, 0x9a6a, 0x8, "e4fd6c", 0x80000001, [0x3]}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) sendmmsg(r8, &(0x7f0000000240), 0x0, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 53.398056ms ago: executing program 2 (id=3291): setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001008210404000000070000000000000036099dc6b82074ccff7cd8ef6df6", @ANYRES32=0x0, @ANYBLOB="adffa888d2260000240012"], 0x50}}, 0xc080) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}}, 0x24}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1}}], 0x1, 0x60, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 326.214µs ago: executing program 1 (id=3292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f2, 0x800, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 0s ago: executing program 5 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): ous mode [ 176.387578][T10680] gre1: entered allmulticast mode [ 176.421876][T10682] netlink: 'syz.5.1324': attribute type 11 has an invalid length. [ 176.456139][T10682] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1324'. [ 176.479214][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 176.511628][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1326'. [ 176.581447][T10690] delete_channel: no stack [ 176.604737][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 176.654462][T10690] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 176.671731][T10690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.792816][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'. [ 177.091803][T10730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.119772][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 177.435976][ T30] audit: type=1800 audit(1762466944.142:3): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1341" name="memory.events" dev="tmpfs" ino=1417 res=0 errno=0 [ 177.471353][ T30] audit: type=1804 audit(1762466944.162:4): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1341" name="/newroot/275/memory.events" dev="tmpfs" ino=1417 res=1 errno=0 [ 177.577485][T10768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 177.645095][T10773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1347'. [ 177.705520][T10776] x_tables: duplicate underflow at hook 1 [ 177.756266][T10776] netlink: 'syz.2.1350': attribute type 2 has an invalid length. [ 177.773515][T10776] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 177.781923][T10776] netlink: 'syz.2.1350': attribute type 2 has an invalid length. [ 177.790066][T10776] netlink: 'syz.2.1350': attribute type 2 has an invalid length. [ 177.801361][T10776] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 177.946573][T10790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.953856][T10790] IPv6: NLM_F_CREATE should be set when creating new route [ 177.961134][T10790] IPv6: NLM_F_CREATE should be set when creating new route [ 177.968348][T10790] IPv6: NLM_F_CREATE should be set when creating new route [ 177.982258][T10788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.028892][T10795] tipc: Enabled bearer , priority 0 [ 178.042388][T10795] syzkaller0: MTU too low for tipc bearer [ 178.063561][T10795] tipc: Disabling bearer [ 178.104984][T10795] syzkaller0: entered promiscuous mode [ 178.122734][T10795] syzkaller0: entered allmulticast mode [ 178.462021][T10817] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1361'. [ 178.473907][T10820] vlan4: entered promiscuous mode [ 178.527155][T10820] bridge0: entered promiscuous mode [ 178.810023][T10845] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 179.069255][T10861] syzkaller0: entered promiscuous mode [ 179.086512][T10861] syzkaller0: entered allmulticast mode [ 179.204274][T10871] tipc: Enabled bearer , priority 0 [ 179.244525][T10859] tipc: Resetting bearer [ 179.293487][T10859] tipc: Disabling bearer [ 179.749278][T10899] netlink: 'syz.1.1388': attribute type 22 has an invalid length. [ 179.840683][T10899] netlink: 'syz.1.1388': attribute type 22 has an invalid length. [ 180.333292][T10932] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 180.444828][T10147] hid-generic 0005:15C2:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz1] on aa:aa:aa:aa:aa:aa [ 180.604916][T10932] bond5 (unregistering): Released all slaves [ 180.835125][T10950] bond0: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 180.907173][T10950] bond0: entered promiscuous mode [ 180.942654][T10950] bond0: entered allmulticast mode [ 180.962367][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.995900][T10955] tipc: Enabling of bearer rejected, failed to enable media [ 181.126135][T10929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.159899][T10929] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 181.262738][T10929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.268684][T10929] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 181.432464][T10929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.469503][T10929] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 181.566937][T11008] __nla_validate_parse: 10 callbacks suppressed [ 181.566954][T11008] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1418'. [ 181.610704][T10929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.616648][T10929] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.844423][T11020] netlink: 'syz.3.1421': attribute type 9 has an invalid length. [ 181.868417][T11020] netlink: 'syz.3.1421': attribute type 6 has an invalid length. [ 181.890440][T11020] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1421'. [ 182.036997][T11032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.082216][T11037] IPVS: length: 26 != 8 [ 182.176180][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 182.402123][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1428'. [ 182.413001][T11050] tipc: Enabled bearer , priority 0 [ 182.487946][T11050] tipc: Disabling bearer [ 182.669661][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 182.816681][T11073] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 182.894166][T11078] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 182.898487][T11073] bridge0: port 3(team0) entered blocking state [ 182.915338][T11073] bridge0: port 3(team0) entered disabled state [ 182.956791][T11073] team0: entered allmulticast mode [ 182.979546][T11073] team_slave_0: entered allmulticast mode [ 182.995835][T11073] team_slave_1: entered allmulticast mode [ 183.014236][T11073] geneve0: entered allmulticast mode [ 183.028217][T11073] team0: entered promiscuous mode [ 183.035554][T11073] team_slave_0: entered promiscuous mode [ 183.043774][T11073] team_slave_1: entered promiscuous mode [ 183.051012][T11073] geneve0: entered promiscuous mode [ 183.089192][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 183.092701][T11086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.106646][T11086] bond5: (slave bond6): making interface the new active one [ 183.115344][T11086] bond5: (slave bond6): Enslaving as an active interface with an up link [ 183.244979][T11099] Cannot find add_set index 1 as target [ 183.444580][T11114] syzkaller1: entered promiscuous mode [ 183.450577][T11114] syzkaller1: entered allmulticast mode [ 183.557449][T11121] Cannot find del_set index 49151 as target [ 183.616121][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1445'. [ 184.108404][T11166] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1456'. [ 184.147163][T11166] vlan2: entered allmulticast mode [ 184.152921][T11166] erspan0: entered allmulticast mode [ 184.406864][T11182] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 184.727206][T11139] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 184.958382][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 185.292685][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 185.409985][T11238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.931550][T11272] netlink: 'syz.5.1480': attribute type 5 has an invalid length. [ 186.376374][T11290] sctp: [Deprecated]: syz.4.1482 (pid 11290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.376374][T11290] Use struct sctp_sack_info instead [ 186.485971][T11291] team0: No ports can be present during mode change [ 186.709001][T11305] rdma_op ffff88807feb59f0 conn xmit_rdma 0000000000000000 [ 186.804636][T11324] __nla_validate_parse: 7 callbacks suppressed [ 186.804653][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 186.880632][T11324] netlink: 'syz.1.1492': attribute type 5 has an invalid length. [ 186.895328][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1492'. [ 186.933415][T11324] geneve3: entered promiscuous mode [ 186.938664][T11324] geneve3: entered allmulticast mode [ 186.974039][ T1320] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 187.010090][ T1320] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 187.018360][ T1320] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 187.030699][T11330] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1494'. [ 187.053486][T11332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1495'. [ 187.062041][ T1320] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 187.072389][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1493'. [ 187.125025][T11338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1495'. [ 187.137291][T11328] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1493'. [ 187.912752][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 188.030954][T11383] macvtap1: entered promiscuous mode [ 188.036297][T11383] macvtap1: entered allmulticast mode [ 194.324921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.359566][T10160] page_pool_release_retry() stalled pool shutdown: id 41, 1 inflight 60 sec [ 212.803615][T11400] lo: entered promiscuous mode [ 212.838586][T11400] netlink: 'syz.4.1515': attribute type 2 has an invalid length. [ 212.868840][T11400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.919580][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'. [ 213.067990][T11424] netlink: 'syz.1.1520': attribute type 8 has an invalid length. [ 213.156126][T11429] netlink: 'syz.5.1521': attribute type 1 has an invalid length. [ 213.184123][T11432] sctp: [Deprecated]: syz.1.1523 (pid 11432) Use of int in max_burst socket option. [ 213.184123][T11432] Use struct sctp_assoc_value instead [ 213.201034][T11432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1523'. [ 213.208877][T11429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.238362][T11434] bond3: (slave veth7): Enslaving as an active interface with a down link [ 213.265525][T11429] bond3: (slave veth0_to_bond): making interface the new active one [ 213.275898][T11429] veth0_to_bond: entered promiscuous mode [ 213.282649][T11429] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 213.384510][T11437] ip6erspan0: entered promiscuous mode [ 213.834032][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'. [ 213.862214][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'. [ 214.171995][T11489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.203859][T11489] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1541'. [ 214.349023][T11503] lo: left promiscuous mode [ 214.499591][T11514] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 214.520935][T11503] batadv0: left promiscuous mode [ 214.670957][T11503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.706912][T11503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.831373][T11503] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 214.853111][T11503] bond3: left promiscuous mode [ 214.891205][T11503] geneve2: left promiscuous mode [ 214.899778][T11503] gtp0: left promiscuous mode [ 214.918110][T11503] bond0: left promiscuous mode [ 214.930719][T11530] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.933086][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.984632][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.016572][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.061408][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.084212][T11540] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 215.115683][T11540] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1552'. [ 215.622749][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 215.678565][T11579] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1564'. [ 215.730234][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 215.766902][T11585] netlink: 'syz.2.1567': attribute type 178 has an invalid length. [ 215.784238][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 215.927078][T11596] netlink: 'syz.3.1570': attribute type 3 has an invalid length. [ 218.481419][T11657] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 218.491093][T11657] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 218.937899][T11657] team0: Device ipvlan1 failed to register rx_handler [ 218.996104][T11660] __nla_validate_parse: 3 callbacks suppressed [ 218.996121][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 219.050769][T11665] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.084475][T11665] bridge0: port 3(veth0_to_bridge) entered disabled state [ 219.114944][T11665] veth0_to_bridge: entered allmulticast mode [ 219.143862][T11665] veth0_to_bridge: entered promiscuous mode [ 219.171907][T11665] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.221535][T11665] bridge0: port 3(veth0_to_bridge) entered blocking state [ 219.229055][T11665] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 219.301320][T11671] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 219.557177][T11697] openvswitch: netlink: IP tunnel dst address not specified [ 219.993406][T11732] tc_dump_action: action bad kind [ 220.116855][T11735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'. [ 220.289976][T11739] syzkaller0: entered promiscuous mode [ 220.296673][T11739] syzkaller0: entered allmulticast mode [ 220.310236][T10147] IPVS: starting estimator thread 0... [ 220.318982][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1614'. [ 220.330035][T11749] veth0_to_bridge: entered promiscuous mode [ 220.349274][T11747] veth0_to_bridge: left promiscuous mode [ 220.401888][T11750] IPVS: using max 33 ests per chain, 79200 per kthread [ 220.448767][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1615'. [ 220.577349][T11758] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1616'. [ 220.757647][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1620'. [ 221.211073][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1626'. [ 222.549610][T11823] netlink: 'syz.5.1631': attribute type 16 has an invalid length. [ 222.764052][T11849] Bluetooth: MGMT ver 1.23 [ 222.883339][T11848] tipc: Enabled bearer , priority 0 [ 222.904189][T11856] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1640'. [ 222.916917][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 223.022123][T11848] tipc: Disabling bearer [ 223.088243][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 223.184980][T11869] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20004 [ 223.375479][T11878] netlink: 'syz.3.1650': attribute type 11 has an invalid length. [ 223.766334][T11903] syzkaller0: entered promiscuous mode [ 223.788895][T11903] syzkaller0: entered allmulticast mode [ 223.840648][T11905] erspan0: entered promiscuous mode [ 223.927930][T11909] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 223.979244][T11909] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 223.992325][T11909] netlink: 'syz.2.1658': attribute type 7 has an invalid length. [ 224.006707][T11909] netlink: 'syz.2.1658': attribute type 8 has an invalid length. [ 224.025559][T11925] __nla_validate_parse: 4 callbacks suppressed [ 224.025574][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1662'. [ 224.041165][T11909] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1658'. [ 224.050699][T11909] NCSI netlink: No device for ifindex 131092 [ 224.450452][T11957] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1670'. [ 224.741227][ T13] veth0_to_bond: left promiscuous mode [ 224.854899][T11970] bond4: entered allmulticast mode [ 224.878207][T11970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.892897][T11970] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.965112][T11988] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 225.021184][T11980] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 225.051377][T11980] bond7 (unregistering): Released all slaves [ 225.476615][T12024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'. [ 225.684397][T12039] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1695'. [ 225.768506][T12045] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 225.866587][T12048] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 225.878192][T12048] netlink: 'syz.3.1699': attribute type 2 has an invalid length. [ 226.066518][T12057] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1701'. [ 226.101365][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 226.112961][T12057] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1701'. [ 226.125723][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1701'. [ 226.143379][T12057] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1701'. [ 226.972737][T12099] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 226.996796][T12110] sctp: [Deprecated]: syz.4.1716 (pid 12110) Use of int in maxseg socket option. [ 226.996796][T12110] Use struct sctp_assoc_value instead [ 227.071876][T12116] IPVS: set_ctl: invalid protocol: 145 10.1.1.1:20004 [ 227.971299][T12174] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 228.059653][T12174] netlink: 'syz.3.1727': attribute type 4 has an invalid length. [ 228.105662][T12174] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 228.202795][T12179] netlink: zone id is out of range [ 228.215147][T12179] netlink: zone id is out of range [ 228.500621][T12204] mac80211_hwsim hwsim15 wlan0: Caught tx_queue_len zero misconfig [ 228.680417][T12211] netlink: ct family unspecified [ 228.695676][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.715370][T12216] netlink: 'syz.4.1745': attribute type 16 has an invalid length. [ 228.782431][T12216] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.806847][T12216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.302119][T12255] validate_nla: 1 callbacks suppressed [ 229.302135][T12255] netlink: 'syz.4.1756': attribute type 4 has an invalid length. [ 229.331559][T12256] __nla_validate_parse: 16 callbacks suppressed [ 229.331575][T12256] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1755'. [ 229.332767][T12255] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1756'. [ 229.427662][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1757'. [ 229.735746][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1760'. [ 229.766497][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 229.808837][T12281] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1760'. [ 230.035928][T12295] xt_l2tp: unknown flags: 10 [ 230.177869][T12303] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1768'. [ 230.197219][T12303] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 230.434040][T12314] bond0: Caught tx_queue_len zero misconfig [ 230.523998][T12323] sctp: [Deprecated]: syz.4.1777 (pid 12323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.523998][T12323] Use struct sctp_sack_info instead [ 230.590292][T12325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.674677][T12332] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1779'. [ 230.684318][T12332] block nbd0: not configured, cannot reconfigure [ 230.691136][T12333] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1779'. [ 230.700518][T12333] block nbd0: not configured, cannot reconfigure [ 230.712129][T12331] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 230.725304][T12332] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 231.337812][T12337] IPVS: set_ctl: invalid protocol: 256 0.32.0.0:25600 [ 232.084007][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 232.421583][T12357] bridge0: port 3(veth0_to_bridge) entered disabled state [ 232.429112][T12357] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.437264][T12357] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.700210][T12395] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 232.952050][T12415] netlink: 'syz.3.1801': attribute type 10 has an invalid length. [ 233.426087][T12448] ip6gre1: entered promiscuous mode [ 233.465004][T12448] ip6gre1: entered allmulticast mode [ 233.533128][T12463] ipt_REJECT: TCP_RESET invalid for non-tcp [ 233.568959][T12453] syzkaller0: entered promiscuous mode [ 233.574595][T12453] syzkaller0: entered allmulticast mode [ 233.589677][T12467] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 233.707944][T12461] bond7 (unregistering): Released all slaves [ 235.213238][T12501] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 235.239292][T12501] __nla_validate_parse: 4 callbacks suppressed [ 235.239308][T12501] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1817'. [ 235.396526][T12507] netlink: 'syz.4.1820': attribute type 4 has an invalid length. [ 235.562256][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1822'. [ 235.579770][T12523] : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.617462][T12523] : Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.653755][T12528] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1825'. [ 235.679007][T12521] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1825'. [ 235.904954][T12540] netlink: 'syz.5.1830': attribute type 23 has an invalid length. [ 236.013041][T12546] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1832'. [ 236.040190][T12545] syzkaller0: refused to change device tx_queue_len [ 236.175905][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1835'. [ 236.343369][T12572] tipc: Enabled bearer , priority 0 [ 236.513375][T12572] syzkaller0: entered promiscuous mode [ 236.530070][T12572] syzkaller0: entered allmulticast mode [ 236.551188][T12572] tipc: Resetting bearer [ 236.573005][T12586] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1842'. [ 236.590889][T12586] netlink: 'syz.5.1842': attribute type 1 has an invalid length. [ 236.656603][T12586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.664665][T12567] tipc: Resetting bearer [ 236.675166][T12592] netlink: 'syz.4.1841': attribute type 15 has an invalid length. [ 236.683906][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 238.060197][T12567] tipc: Disabling bearer [ 238.131584][T12610] tipc: Enabling of bearer rejected, failed to enable media [ 238.176303][T12623] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1849'. [ 238.477965][T12642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'. [ 238.996565][T12674] block nbd5: NBD_DISCONNECT [ 239.379083][T12699] syzkaller1: entered promiscuous mode [ 239.385152][T12699] syzkaller1: entered allmulticast mode [ 239.421283][T12704] wg1: entered promiscuous mode [ 239.438375][T12704] wg1: entered allmulticast mode [ 239.505368][T12709] netlink: 'syz.1.1872': attribute type 16 has an invalid length. [ 239.551954][T12709] netlink: 'syz.1.1872': attribute type 17 has an invalid length. [ 239.603752][T12717] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 239.641398][T12712] ip6gre2: entered allmulticast mode [ 239.745211][T12709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.225028][T12749] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 240.347876][T12749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.403763][T12752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.423049][T12749] __nla_validate_parse: 7 callbacks suppressed [ 240.423066][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 240.445437][T12752] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.457661][T12752] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 240.475452][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 240.505965][T12758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.816842][T12789] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 240.888734][T12799] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1894'. [ 240.914174][T12789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.921673][T12799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1894'. [ 241.013446][T12802] vlan3: entered promiscuous mode [ 241.018710][T12802] vlan3: entered allmulticast mode [ 241.045150][T12802] hsr_slave_1: entered allmulticast mode [ 241.074533][T12784] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 241.114126][T12784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.127692][T12806] netlink: 'syz.4.1893': attribute type 4 has an invalid length. [ 241.263623][T12815] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1898'. [ 241.273438][T12815] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1898'. [ 241.547406][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'. [ 241.594723][T12834] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 242.269283][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 242.295906][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 242.516188][T12896] veth0: entered promiscuous mode [ 242.564651][T12897] tipc: Enabled bearer , priority 0 [ 242.637098][T12898] syzkaller0: entered promiscuous mode [ 242.673675][T12898] syzkaller0: entered allmulticast mode [ 242.782447][T12898] tipc: Resetting bearer [ 242.885108][T12898] tipc: Disabling bearer [ 242.941165][T12898] veth0: left promiscuous mode [ 243.002653][T12933] netlink: 'syz.4.1926': attribute type 1 has an invalid length. [ 243.053620][T12933] bond9: (slave gretap2): making interface the new active one [ 243.062425][T12933] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 243.228739][T12947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1929'. [ 243.485000][T12960] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 243.557374][T12960] veth5: entered promiscuous mode [ 243.578230][T12960] bond10: (slave veth5): Enslaving as a backup interface with a down link [ 243.983167][T12999] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.114913][T13009] tipc: Enabled bearer , priority 0 [ 244.135401][T13009] syzkaller0: entered promiscuous mode [ 244.149681][T13009] syzkaller0: entered allmulticast mode [ 244.188741][T13013] tipc: Resetting bearer [ 244.198518][T13008] tipc: Resetting bearer [ 244.244612][T13008] tipc: Disabling bearer [ 244.271834][T13017] tipc: Enabled bearer , priority 0 [ 244.281059][T13017] syzkaller0: entered promiscuous mode [ 244.286662][T13017] syzkaller0: entered allmulticast mode [ 244.305611][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.330753][T13017] tipc: Resetting bearer [ 244.367808][T13016] tipc: Resetting bearer [ 244.392914][T13016] tipc: Disabling bearer [ 244.608809][T13037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.640072][T13037] syzkaller0: entered promiscuous mode [ 244.645583][T13037] syzkaller0: entered allmulticast mode [ 244.656973][T13040] netlink: 'syz.2.1960': attribute type 4 has an invalid length. [ 245.043863][T13066] netlink: 'syz.4.1969': attribute type 2 has an invalid length. [ 245.240336][T13082] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 245.248107][T13082] netlink: 'syz.1.1974': attribute type 2 has an invalid length. [ 245.526510][T13104] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.664748][T13112] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 245.673165][T13112] netlink: 'syz.2.1985': attribute type 2 has an invalid length. [ 245.826320][T13121] netlink: 'syz.5.1987': attribute type 8 has an invalid length. [ 245.854533][T13121] bridge0: entered promiscuous mode [ 246.178896][T13142] xt_CT: No such helper "syz1" [ 246.467030][T13161] dummy0: Caught tx_queue_len zero misconfig [ 246.517358][T13164] __nla_validate_parse: 9 callbacks suppressed [ 246.517374][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 246.565293][T13164] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 246.683190][T13175] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 246.703587][T13175] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 246.718394][T13179] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2005'. [ 246.722704][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 246.734486][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2005'. [ 246.736871][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 246.776684][T13179] tipc: Enabled bearer , priority 0 [ 246.836049][T13178] tipc: Disabling bearer [ 246.914025][T13188] netlink: 'syz.2.2008': attribute type 16 has an invalid length. [ 246.922278][T13188] netlink: 'syz.2.2008': attribute type 3 has an invalid length. [ 246.931747][T13188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2008'. [ 247.266322][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2014'. [ 247.300621][T13211] tipc: Enabled bearer , priority 0 [ 247.308183][T13211] syzkaller0: entered promiscuous mode [ 247.314556][T13211] syzkaller0: entered allmulticast mode [ 247.324213][T13211] tipc: Resetting bearer [ 247.413355][T13211] tipc: Disabling bearer [ 247.424098][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'. [ 247.539331][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 247.570858][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 247.666290][T13233] sctp: [Deprecated]: syz.1.2020 (pid 13233) Use of int in max_burst socket option. [ 247.666290][T13233] Use struct sctp_assoc_value instead [ 247.888503][T13248] tipc: Enabled bearer , priority 0 [ 248.003157][T13248] syzkaller0: entered promiscuous mode [ 248.010605][T13248] syzkaller0: entered allmulticast mode [ 248.156585][T13255] syzkaller0: entered promiscuous mode [ 248.167405][T13255] syzkaller0: entered allmulticast mode [ 248.175840][T13248] tipc: Resetting bearer [ 248.200905][T13247] tipc: Resetting bearer [ 248.263687][T13247] tipc: Disabling bearer [ 249.816092][T13306] tipc: Enabling of bearer rejected, failed to enable media [ 249.876221][T13323] bridge9: entered promiscuous mode [ 249.889962][T13323] bridge9: entered allmulticast mode [ 250.123382][T13331] team0: Port device team_slave_0 removed [ 250.133656][T13331] team0: Port device team_slave_1 removed [ 250.162445][T13331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.210658][T13331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.232593][T13331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.332171][T13347] syzkaller0: entered promiscuous mode [ 250.337692][T13347] syzkaller0: entered allmulticast mode [ 250.352644][T13346] tipc: Enabled bearer , priority 0 [ 250.470323][T13356] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 250.476368][T13358] validate_nla: 5 callbacks suppressed [ 250.476384][T13358] netlink: 'syz.5.2051': attribute type 4 has an invalid length. [ 250.503800][T13348] tipc: Resetting bearer [ 250.567535][T13348] tipc: Disabling bearer [ 250.670770][T13358] `: renamed from bond0 (while UP) [ 250.777358][T13372] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 250.864194][T13388] netlink: 'syz.1.2057': attribute type 2 has an invalid length. [ 250.936948][T13388] netlink: 'syz.1.2057': attribute type 8 has an invalid length. [ 251.117717][T13402] xt_bpf: check failed: parse error [ 251.211270][T13407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.245991][T13407] netlink: 'syz.5.2063': attribute type 11 has an invalid length. [ 251.909008][T13451] netlink: 'syz.4.2077': attribute type 10 has an invalid length. [ 251.939929][T13451] __nla_validate_parse: 11 callbacks suppressed [ 251.939945][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 252.324961][T13466] netlink: 'syz.2.2080': attribute type 7 has an invalid length. [ 252.353405][T13466] netlink: 'syz.2.2080': attribute type 8 has an invalid length. [ 252.530554][T13483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2083'. [ 252.650936][T13498] xt_CONNSECMARK: invalid mode: 0 [ 252.705919][T13493] syzkaller1: entered promiscuous mode [ 252.719580][T13493] syzkaller1: entered allmulticast mode [ 253.152169][T13517] bond0: entered promiscuous mode [ 253.446314][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 253.597037][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 253.656163][T13555] nft_compat: unsupported protocol 0 [ 253.754208][T13562] lo: entered promiscuous mode [ 253.766773][T13562] tunl0: entered promiscuous mode [ 253.778306][T13562] gre0: entered promiscuous mode [ 253.796155][T13562] gretap0: entered promiscuous mode [ 253.814358][T13562] erspan0: entered promiscuous mode [ 253.834231][T13562] ip_vti0: entered promiscuous mode [ 254.112440][T13589] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2113'. [ 254.156753][T13592] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2114'. [ 254.176074][T13592] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 254.570742][T13621] tipc: Enabling of bearer rejected, failed to enable media [ 254.580699][T13623] netlink: 'syz.5.2121': attribute type 33 has an invalid length. [ 254.588620][T13623] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2121'. [ 254.600480][T13620] syzkaller0: entered promiscuous mode [ 254.605969][T13620] syzkaller0: entered allmulticast mode [ 254.652493][T13620] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 254.660574][T13625] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 254.725404][T13632] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2123'. [ 254.848784][T13640] netlink: 'syz.1.2127': attribute type 10 has an invalid length. [ 255.106208][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 255.166657][T13653] bridge0: port 4(batadv0) entered blocking state [ 255.201379][T13653] bridge0: port 4(batadv0) entered disabled state [ 255.209866][T13653] batadv0: entered allmulticast mode [ 255.240911][T13653] batadv0: entered promiscuous mode [ 255.473473][T13673] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2138'. [ 255.497363][T13673] nbd: illegal input index -8454144 [ 255.661631][ T1320] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 255.671249][ T1320] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 255.765175][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.957573][T13701] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 256.065230][T13701] bond11: entered promiscuous mode [ 256.070553][T13701] bond11: entered allmulticast mode [ 256.076173][T13701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 256.095709][T13709] : renamed from veth1_vlan [ 256.128876][T13701] macvlan2: entered promiscuous mode [ 256.136312][T13701] macvlan2: entered allmulticast mode [ 256.347891][T13719] hsr_slave_0 (unregistering): left promiscuous mode [ 256.358757][T13732] netlink: 'syz.2.2152': attribute type 4 has an invalid length. [ 256.556672][T13741] tipc: Enabled bearer , priority 0 [ 256.564439][T13741] syzkaller0: entered promiscuous mode [ 256.577710][T13741] syzkaller0: entered allmulticast mode [ 256.588653][T13741] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 256.624976][T13741] tipc: Resetting bearer [ 256.637528][T13740] tipc: Resetting bearer [ 256.659161][T13740] tipc: Disabling bearer [ 256.673589][T13746] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 256.814057][T13756] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 256.842661][T13756] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 257.383782][T13789] __nla_validate_parse: 4 callbacks suppressed [ 257.383800][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 257.431742][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 257.463813][T13789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2174'. [ 257.616564][T13800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2178'. [ 257.625953][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 257.636931][T13800] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2178'. [ 257.649032][T13761] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 257.657600][T13761] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 257.701483][T13800] netlink: 'syz.3.2178': attribute type 2 has an invalid length. [ 257.703580][T13810] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2178'. [ 257.749692][T13800] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2178'. [ 257.955724][T13820] netlink: 'syz.1.2183': attribute type 3 has an invalid length. [ 257.974444][T13820] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2183'. [ 258.065166][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 258.168772][T13823] x_tables: duplicate underflow at hook 1 [ 258.521257][T13836] lo: Caught tx_queue_len zero misconfig [ 258.635105][T13840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.059541][T13865] v: renamed from veth1_vlan [ 259.181326][T13879] netlink: 'syz.1.2200': attribute type 11 has an invalid length. [ 259.202029][T13876] netlink: 'syz.3.2199': attribute type 6 has an invalid length. [ 259.252469][T13880] netlink: 'syz.3.2199': attribute type 6 has an invalid length. [ 259.807316][T13903] netlink: 'syz.5.2205': attribute type 39 has an invalid length. [ 260.105410][T13917] bond7: option min_links: invalid value (18446744073709551614) [ 260.139419][T13917] bond7: option min_links: allowed values 0 - 2147483647 [ 260.167251][T13917] bond7 (unregistering): Released all slaves [ 260.495807][ T5493] v: left promiscuous mode [ 262.465029][T14070] netlink: 'syz.5.2244': attribute type 9 has an invalid length. [ 262.481494][T14072] __nla_validate_parse: 6 callbacks suppressed [ 262.481511][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 262.515471][T14077] vxcan1: tx address claim with dest, not broadcast [ 262.534104][T14075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.735338][T14085] bridge6: entered promiscuous mode [ 262.750050][T14085] bridge6: entered allmulticast mode [ 262.775540][T14083] FAULT_INJECTION: forcing a failure. [ 262.775540][T14083] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.815151][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.2.2249 Not tainted syzkaller #0 PREEMPT(full) [ 262.815177][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.815189][T14083] Call Trace: [ 262.815196][T14083] [ 262.815204][T14083] dump_stack_lvl+0x189/0x250 [ 262.815232][T14083] ? __pfx____ratelimit+0x10/0x10 [ 262.815256][T14083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.815278][T14083] ? __pfx__printk+0x10/0x10 [ 262.815296][T14083] ? __might_fault+0xb0/0x130 [ 262.815330][T14083] should_fail_ex+0x414/0x560 [ 262.815360][T14083] _copy_from_user+0x2d/0xb0 [ 262.815383][T14083] __sys_sendto+0x25c/0x520 [ 262.815403][T14083] ? __pfx___sys_sendto+0x10/0x10 [ 262.815425][T14083] ? count_memcg_event_mm+0x21/0x260 [ 262.815468][T14083] ? exc_page_fault+0x82/0x100 [ 262.815492][T14083] ? do_user_addr_fault+0xc85/0x1380 [ 262.815515][T14083] __x64_sys_sendto+0xde/0x100 [ 262.815535][T14083] do_syscall_64+0xfa/0xfa0 [ 262.815557][T14083] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.815578][T14083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.815596][T14083] ? clear_bhb_loop+0x60/0xb0 [ 262.815617][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.815634][T14083] RIP: 0033:0x7f23aaf9155c [ 262.815658][T14083] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 262.815673][T14083] RSP: 002b:00007f23abe97ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 262.815698][T14083] RAX: ffffffffffffffda RBX: 00007f23abe97fc0 RCX: 00007f23aaf9155c [ 262.815711][T14083] RDX: 0000000000000020 RSI: 00007f23abe98010 RDI: 0000000000000004 [ 262.815721][T14083] RBP: 0000000000000000 R08: 00007f23abe97f14 R09: 000000000000000c [ 262.815732][T14083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 262.815743][T14083] R13: 00007f23abe97f68 R14: 00007f23abe98010 R15: 0000000000000000 [ 262.815772][T14083] [ 262.871846][T14096] netlink: 'syz.1.2255': attribute type 15 has an invalid length. [ 263.013044][T14101] tipc: Failed to remove unknown binding: 66,1,1/3824472619:3275597196/3275597198 [ 263.030480][T14101] tipc: Failed to remove unknown binding: 66,1,1/3824472619:3275597196/3275597198 [ 263.338054][T14122] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2259'. [ 263.348517][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 263.360062][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 263.876064][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2268'. [ 263.927593][T14159] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 263.997109][T14165] tipc: Enabled bearer , priority 0 [ 264.017813][T14165] syzkaller0: entered promiscuous mode [ 264.041173][T14165] syzkaller0: entered allmulticast mode [ 264.192144][T14176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.247286][T14165] tipc: Resetting bearer [ 264.366625][T14163] tipc: Resetting bearer [ 264.413720][T14192] netlink: 'syz.5.2278': attribute type 4 has an invalid length. [ 264.436429][T14163] tipc: Disabling bearer [ 264.491035][T14194] bridge0: port 5(batadv1) entered blocking state [ 264.508093][T14194] bridge0: port 5(batadv1) entered disabled state [ 264.529266][T14194] batadv1: entered allmulticast mode [ 264.547338][T14194] batadv1: entered promiscuous mode [ 264.607234][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2281'. [ 264.630699][T14209] net veth1_virt_wifi .: renamed from virt_wifi0 [ 264.770441][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 264.780489][T14224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2284'. [ 264.830182][T14224] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2284'. [ 264.885388][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2287'. [ 264.952392][T14224] xt_connbytes: Forcing CT accounting to be enabled [ 264.989494][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 264.998784][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 265.266719][T14247] tipc: Enabled bearer , priority 0 [ 265.274885][T14240] syzkaller0: entered promiscuous mode [ 265.280976][T14240] syzkaller0: entered allmulticast mode [ 265.335792][T14240] tipc: Resetting bearer [ 265.365064][T14238] tipc: Resetting bearer [ 265.400903][T14238] tipc: Disabling bearer [ 265.617343][T14264] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.853976][T14273] tipc: Enabling of bearer rejected, failed to enable media [ 265.954552][T14277] FAULT_INJECTION: forcing a failure. [ 265.954552][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.969071][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.3.2302 Not tainted syzkaller #0 PREEMPT(full) [ 265.969092][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.969102][T14277] Call Trace: [ 265.969108][T14277] [ 265.969114][T14277] dump_stack_lvl+0x189/0x250 [ 265.969140][T14277] ? __pfx____ratelimit+0x10/0x10 [ 265.969161][T14277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.969180][T14277] ? __pfx__printk+0x10/0x10 [ 265.969195][T14277] ? __might_fault+0xb0/0x130 [ 265.969225][T14277] should_fail_ex+0x414/0x560 [ 265.969250][T14277] _copy_from_iter+0x1de/0x1790 [ 265.969272][T14277] ? rcu_is_watching+0x15/0xb0 [ 265.969291][T14277] ? kmalloc_reserve+0xbd/0x290 [ 265.969305][T14277] ? __pfx__copy_from_iter+0x10/0x10 [ 265.969324][T14277] ? __build_skb_around+0x262/0x3f0 [ 265.969355][T14277] ? netlink_sendmsg+0x642/0xb30 [ 265.969368][T14277] ? skb_put+0x11b/0x210 [ 265.969384][T14277] netlink_sendmsg+0x6b2/0xb30 [ 265.969406][T14277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.969423][T14277] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.969448][T14277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.969464][T14277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.969479][T14277] __sock_sendmsg+0x21c/0x270 [ 265.969501][T14277] __sys_sendto+0x3bd/0x520 [ 265.969519][T14277] ? __pfx___sys_sendto+0x10/0x10 [ 265.969540][T14277] ? count_memcg_event_mm+0x21/0x260 [ 265.969591][T14277] ? rcu_is_watching+0x15/0xb0 [ 265.969615][T14277] __x64_sys_sendto+0xde/0x100 [ 265.969636][T14277] do_syscall_64+0xfa/0xfa0 [ 265.969657][T14277] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.969680][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.969705][T14277] ? clear_bhb_loop+0x60/0xb0 [ 265.969727][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.969744][T14277] RIP: 0033:0x7fa80179155c [ 265.969761][T14277] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 265.969777][T14277] RSP: 002b:00007fa8026f8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 265.969797][T14277] RAX: ffffffffffffffda RBX: 00007fa8026f8fc0 RCX: 00007fa80179155c [ 265.969810][T14277] RDX: 0000000000000020 RSI: 00007fa8026f9010 RDI: 0000000000000004 [ 265.969821][T14277] RBP: 0000000000000000 R08: 00007fa8026f8f14 R09: 000000000000000c [ 265.969831][T14277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 265.969841][T14277] R13: 00007fa8026f8f68 R14: 00007fa8026f9010 R15: 0000000000000000 [ 265.969869][T14277] [ 266.523693][T14291] netlink: 'syz.3.2307': attribute type 2 has an invalid length. [ 266.622391][T14288] tipc: Enabled bearer , priority 0 [ 267.181818][T14284] tipc: Disabling bearer [ 267.216870][T14318] netlink: 'syz.1.2314': attribute type 1 has an invalid length. [ 267.270704][T14318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.317081][T14318] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 267.342933][T14318] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 267.355557][T14318] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 268.387885][T14401] __nla_validate_parse: 10 callbacks suppressed [ 268.387902][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 268.405956][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2337'. [ 268.415823][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2337'. [ 268.677198][T14419] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 268.688106][T14419] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.776764][T14426] openvswitch: netlink: IP tunnel dst address not specified [ 268.807945][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'. [ 268.882063][T14433] openvswitch: netlink: IP tunnel dst address not specified [ 269.091982][T14449] veth0: entered promiscuous mode [ 269.108227][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 269.310153][T14458] netlink: 'syz.5.2354': attribute type 10 has an invalid length. [ 269.354479][T14458] team0: Port device dummy0 added [ 269.388100][T14458] netlink: 'syz.5.2354': attribute type 10 has an invalid length. [ 269.431135][T14458] team0: Failed to send options change via netlink (err -105) [ 269.452123][T14458] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 269.462099][T14458] team0: Port device dummy0 removed [ 269.477006][T14458] `: (slave dummy0): Enslaving as an active interface with an up link [ 269.723113][T14483] netlink: 'syz.5.2362': attribute type 1 has an invalid length. [ 270.402813][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2369'. [ 270.412261][T14510] pimreg3: entered allmulticast mode [ 270.460962][T14512] Unsupported ieee802154 address type: 0 [ 270.626450][T14523] netlink: 'syz.3.2374': attribute type 23 has an invalid length. [ 270.830161][T14532] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 270.846652][T14532] netlink: 'syz.1.2377': attribute type 11 has an invalid length. [ 270.856438][T14532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2377'. [ 271.197594][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 271.218136][T14552] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 271.393850][T14552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.474946][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 271.717715][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 271.942458][T14594] netlink: 'syz.1.2396': attribute type 10 has an invalid length. [ 272.364182][T14624] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.644319][T14636] __nla_validate_parse: 4 callbacks suppressed [ 273.644335][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 273.747954][T14651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2411'. [ 274.370115][T14667] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2415'. [ 274.403067][T14689] netlink: 'syz.4.2419': attribute type 2 has an invalid length. [ 274.421593][T14678] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.439074][T14678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.446374][T14678] IPv6: NLM_F_CREATE should be set when creating new route [ 275.642595][T14680] veth0: entered promiscuous mode [ 275.647717][T14680] veth0: left promiscuous mode [ 275.764997][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 275.909853][T14713] netlink: 'syz.4.2427': attribute type 6 has an invalid length. [ 275.918951][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2427'. [ 276.073656][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'. [ 276.219017][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2434'. [ 276.302656][T14737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.375421][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 276.562428][T14752] syzkaller0: entered promiscuous mode [ 276.572019][T14752] syzkaller0: entered allmulticast mode [ 276.584656][T14752] tipc: Enabled bearer , priority 0 [ 276.624242][T14751] tipc: Resetting bearer [ 276.717444][T14751] tipc: Disabling bearer [ 277.048005][T14778] veth3: left allmulticast mode [ 277.053416][T14778] veth5: left allmulticast mode [ 277.061023][T14778] veth7: left allmulticast mode [ 277.067483][T14778] vlan0: left allmulticast mode [ 277.073030][T14778] veth0_vlan: left allmulticast mode [ 277.078323][T14778] vlan0: left promiscuous mode [ 277.084299][T14778] macvtap0: left promiscuous mode [ 277.090002][T14778] macvtap0: left allmulticast mode [ 277.102721][T14778] gre1: left promiscuous mode [ 277.107573][T14778] gre1: left allmulticast mode [ 277.258170][T14781] syzkaller0: entered promiscuous mode [ 277.268119][T14781] syzkaller0: entered allmulticast mode [ 277.277018][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 277.289175][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 277.315394][T14797] netlink: 'syz.2.2456': attribute type 1 has an invalid length. [ 278.526120][T14797] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 278.620462][T14809] SET target dimension over the limit! [ 278.671262][T14811] veth0: entered promiscuous mode [ 278.705945][T14811] veth0: left promiscuous mode [ 278.846447][T14827] ip6t_srh: unknown srh invflags 4000 [ 279.645242][T14858] __nla_validate_parse: 1 callbacks suppressed [ 279.645259][T14858] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2474'. [ 279.697177][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2474'. [ 279.707359][T14861] netlink: 'syz.3.2475': attribute type 4 has an invalid length. [ 279.902599][T14880] x_tables: duplicate underflow at hook 3 [ 279.936123][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 279.958532][T14884] x_tables: duplicate underflow at hook 1 [ 280.113574][T14893] x_tables: duplicate underflow at hook 1 [ 280.132081][T14888] sctp: [Deprecated]: syz.1.2483 (pid 14888) Use of int in maxseg socket option. [ 280.132081][T14888] Use struct sctp_assoc_value instead [ 280.162218][T14897] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2484'. [ 280.473585][T14915] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2488'. [ 280.741129][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.748437][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.771095][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.778215][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.786989][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.795964][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.839674][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.861360][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.868198][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.883869][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.894809][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.912262][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.924766][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.932434][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.940024][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.946915][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.954529][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.955298][T14943] syzkaller1: entered promiscuous mode [ 280.973497][T14943] syzkaller1: entered allmulticast mode [ 280.975172][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 280.989038][T14945] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 281.011670][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.018955][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.054044][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.065668][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.072819][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.081272][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.088553][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.114413][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.145494][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.174836][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.205429][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.226909][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.234077][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.242886][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.251462][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.258423][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.265775][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.292934][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.301236][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.308175][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.315521][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.343677][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.352569][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.383008][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.397621][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.422128][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.441057][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.458617][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.482178][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 281.482745][T14973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2508'. [ 281.530804][T14932] xt_cgroup: xt_cgroup: no path or classid specified [ 282.000054][T15010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2522'. [ 282.062919][T15009] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.086232][T15016] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 282.102128][T15016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2525'. [ 282.141927][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 282.173207][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'. [ 282.210874][T15022] ksmbd: Unknown IPC event: 1, ignore. [ 282.256839][T15020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.439237][T15036] netlink: 'syz.4.2531': attribute type 8 has an invalid length. [ 282.902009][T15067] 8021q: adding VLAN 0 to HW filter on device bond12 [ 282.906897][T15074] netlink: 'syz.5.2542': attribute type 9 has an invalid length. [ 282.918160][T15071] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 282.934571][T15074] netlink: 'syz.5.2542': attribute type 6 has an invalid length. [ 282.985223][T15071] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.996362][T15071] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.317990][T15089] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 283.375497][T15089] bond13: option packets_per_slave: allowed values 0 - 65535 [ 283.416427][T15089] bond13 (unregistering): Released all slaves [ 284.178108][T15136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.311899][T15146] team0: Caught tx_queue_len zero misconfig [ 284.620540][T15155] xfrm1: entered promiscuous mode [ 284.633370][T15155] xfrm1: entered allmulticast mode [ 284.814541][T15183] netlink: 'syz.1.2570': attribute type 27 has an invalid length. [ 284.834256][T15185] __nla_validate_parse: 10 callbacks suppressed [ 284.834273][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2569'. [ 284.912243][T15189] tipc: Enabled bearer , priority 0 [ 284.955120][T15191] syzkaller0: entered promiscuous mode [ 284.972455][T15191] syzkaller0: entered allmulticast mode [ 285.021771][T15191] tipc: Resetting bearer [ 285.111009][T15191] tipc: Disabling bearer [ 285.208782][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2575'. [ 285.373006][T15224] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2579'. [ 285.833345][T15261] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2586'. [ 285.878777][T15250] syzkaller0: entered promiscuous mode [ 285.904816][T15250] syzkaller0: entered allmulticast mode [ 285.945227][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 286.133436][T15276] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2592'. [ 286.165225][T15276] ksmbd: Unknown IPC event: 3, ignore. [ 286.182933][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2593'. [ 286.200028][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2593'. [ 286.215422][T15278] netlink: 'syz.5.2593': attribute type 14 has an invalid length. [ 286.240727][T15278] netlink: 'syz.5.2593': attribute type 13 has an invalid length. [ 287.560502][T15300] nbd: illegal input index 2958377 [ 287.730013][T15316] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.822854][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 288.007008][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2606'. [ 288.489886][T15370] nbd: device at index 4 is going down [ 288.666972][T15366] pim6reg1: entered promiscuous mode [ 288.689527][T15366] pim6reg1: entered allmulticast mode [ 288.702286][T11404] udevd[11404]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 288.808318][T15386] tipc: Enabled bearer , priority 0 [ 288.816447][T15386] syzkaller0: entered promiscuous mode [ 288.822523][T15386] syzkaller0: entered allmulticast mode [ 288.832023][T15386] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 288.932260][T15386] tipc: Resetting bearer [ 288.952526][T15385] tipc: Resetting bearer [ 289.012574][T15385] tipc: Disabling bearer [ 289.035960][T15400] tipc: Enabled bearer , priority 0 [ 289.056353][T15395] syzkaller0: entered promiscuous mode [ 289.068034][T15395] syzkaller0: entered allmulticast mode [ 289.138847][T15395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 289.168788][T15395] tipc: Resetting bearer [ 289.183736][T15391] tipc: Resetting bearer [ 289.214949][T15391] tipc: Disabling bearer [ 289.502517][T15427] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 289.522639][T15428] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.850106][T15444] nbd0: detected capacity change from 0 to 127 [ 289.884788][ T5837] block nbd0: Receive control failed (result -104) [ 289.978277][T15466] tipc: Enabled bearer , priority 10 [ 290.090060][T15472] __nla_validate_parse: 5 callbacks suppressed [ 290.090077][T15472] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2644'. [ 290.132010][T15472] ksmbd: Unknown IPC event: 3, ignore. [ 290.211001][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 290.654255][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2652'. [ 290.998863][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 291.018332][T15535] Cannot find del_set index 49151 as target [ 291.090258][ T10] tipc: Node number set to 2740779714 [ 291.154839][T15539] syzkaller1: entered promiscuous mode [ 291.188973][T15539] syzkaller1: entered allmulticast mode [ 291.203292][T15545] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 291.294881][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 291.360815][T15545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.393819][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 291.678342][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2676'. [ 291.722786][T15587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2679'. [ 291.937579][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 292.097890][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2685'. [ 292.214592][T15617] netlink: 'syz.2.2686': attribute type 39 has an invalid length. [ 292.373130][T15624] syzkaller0: entered promiscuous mode [ 292.400626][T15624] syzkaller0: entered allmulticast mode [ 292.409834][T15624] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 292.477465][T15639] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 292.607669][T15630] hsr_slave_0 (unregistering): left promiscuous mode [ 292.663942][T15650] netlink: 'syz.1.2697': attribute type 10 has an invalid length. [ 292.699995][T15651] syzkaller0: entered promiscuous mode [ 292.705610][T15651] syzkaller0: entered allmulticast mode [ 292.742043][T15650] tipc: Enabled bearer , priority 0 [ 292.904270][T15649] tipc: Resetting bearer [ 292.947581][T15649] tipc: Disabling bearer [ 293.666854][T15688] netlink: 'syz.2.2706': attribute type 27 has an invalid length. [ 293.739230][T15688] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4 [ 294.148877][T15718] sctp: [Deprecated]: syz.3.2713 (pid 15718) Use of int in max_burst socket option deprecated. [ 294.148877][T15718] Use struct sctp_assoc_value instead [ 294.167519][T15715] team0: Device gtp1 is of different type [ 294.436896][T15736] syzkaller0: entered promiscuous mode [ 294.447957][T15736] syzkaller0: entered allmulticast mode [ 294.511400][T15736] batadv_slave_0: entered allmulticast mode [ 294.845251][T15758] netlink: 'syz.5.2722': attribute type 4 has an invalid length. [ 295.194735][T15771] __nla_validate_parse: 7 callbacks suppressed [ 295.194752][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 295.219783][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 295.239070][T15771] batadv1: left allmulticast mode [ 295.259233][T15771] batadv1: left promiscuous mode [ 295.268957][T15771] bridge0: port 5(batadv1) entered disabled state [ 295.291453][T15771] batadv0: left allmulticast mode [ 295.296743][T15771] batadv0: left promiscuous mode [ 295.302652][T15771] bridge0: port 4(batadv0) entered disabled state [ 295.314637][T15771] team0: left allmulticast mode [ 295.320702][T15771] team_slave_0: left allmulticast mode [ 295.326260][T15771] team_slave_1: left allmulticast mode [ 295.332508][T15771] geneve0: left allmulticast mode [ 295.337567][T15771] team0: left promiscuous mode [ 295.342684][T15771] team_slave_0: left promiscuous mode [ 295.348325][T15771] team_slave_1: left promiscuous mode [ 295.354067][T15771] geneve0: left promiscuous mode [ 295.360549][T15771] bridge0: port 3(team0) entered disabled state [ 295.369988][T15771] bridge_slave_1: left allmulticast mode [ 295.375641][T15771] bridge_slave_1: left promiscuous mode [ 295.381628][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.391179][T15771] bridge_slave_0: left allmulticast mode [ 295.397058][T15771] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.629863][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 295.645952][T15784] syzkaller0: entered promiscuous mode [ 295.652089][T15784] syzkaller0: entered allmulticast mode [ 295.910099][T15798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 295.960106][T15798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 296.019622][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 296.030381][T15805] netlink: 'syz.5.2735': attribute type 5 has an invalid length. [ 296.102460][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2735'. [ 296.268490][T15828] netlink: 'syz.5.2741': attribute type 1 has an invalid length. [ 296.321221][T15828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.381390][T15837] bond7: (slave veth9): Enslaving as an active interface with a down link [ 296.413882][T15828] bond3: (slave veth0_to_bond): Releasing active interface [ 296.480945][T15828] bond7: (slave veth0_to_bond): making interface the new active one [ 296.514377][T15828] veth0_to_bond: entered promiscuous mode [ 296.523682][T15828] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 296.601299][T15838] syzkaller0: entered promiscuous mode [ 296.607298][T15838] syzkaller0: entered allmulticast mode [ 296.673165][T15837] bond7: (slave veth11): Enslaving as an active interface with a down link [ 296.787193][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 296.928588][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 297.278085][T15885] openvswitch: netlink: Flow key attr not present in new flow. [ 298.267937][T15860] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 298.268546][T15864] veth0: entered promiscuous mode [ 298.295640][T15866] veth0: left promiscuous mode [ 298.369510][T15878] tipc: Enabling of bearer rejected, failed to enable media [ 298.562646][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2761'. [ 298.872876][T15916] ip6gre1: entered promiscuous mode [ 298.906531][T15916] ip6gre1: entered allmulticast mode [ 299.273223][T15940] netlink: 'syz.4.2771': attribute type 4 has an invalid length. [ 299.282203][T15938] veth1: entered promiscuous mode [ 299.308862][T15940] netlink: 'syz.4.2771': attribute type 22 has an invalid length. [ 299.513418][ T30] audit: type=1804 audit(1762467066.222:5): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2778" name="/newroot/561/cgroup.controllers" dev="tmpfs" ino=2865 res=1 errno=0 [ 299.628162][ T30] audit: type=1800 audit(1762467066.252:6): pid=15957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2778" name="cgroup.controllers" dev="tmpfs" ino=2865 res=0 errno=0 [ 299.715658][T15964] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.728090][T15959] xt_limit: Overflow, try lower: 604147548/4200216962 [ 299.739716][T15970] xt_limit: Overflow, try lower: 604147548/4200216962 [ 299.987661][T15976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.005812][T15976] bond8: entered promiscuous mode [ 300.020818][T15976] bond0: (slave bond8): Enslaving as an active interface with an up link [ 300.215083][T15998] __nla_validate_parse: 8 callbacks suppressed [ 300.215100][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 300.233386][T16000] netlink: 'syz.2.2791': attribute type 4 has an invalid length. [ 300.241271][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 300.733304][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 300.795625][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2803'. [ 300.922062][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'. [ 300.963273][T16051] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 300.979467][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.775501][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 301.916522][T16118] netlink: 'syz.3.2825': attribute type 1 has an invalid length. [ 302.045956][T16118] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.074188][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2827'. [ 302.189497][T16130] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2827'. [ 302.278627][T16144] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 302.311932][T16120] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 302.326942][T16144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.380830][T16149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2829'. [ 302.724964][T16162] tipc: Enabling of bearer rejected, failed to enable media [ 302.754388][T16162] syzkaller0: entered allmulticast mode [ 302.819169][T16162] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 302.925987][T16186] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2838'. [ 303.187729][T16198] netlink: 'syz.3.2842': attribute type 10 has an invalid length. [ 303.321366][T16208] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 303.445552][T16208] 8021q: adding VLAN 0 to HW filter on device bond13 [ 303.568687][T16216] bond13: (slave veth11): Enslaving as an active interface with a down link [ 303.733361][T16208] syzkaller1: entered promiscuous mode [ 303.739267][T16208] syzkaller1: entered allmulticast mode [ 304.543068][T16286] team0: Device ip6gre3 is of different type [ 304.638478][T16287] openvswitch: netlink: Duplicate or invalid key (type 0). [ 304.666203][T16287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.034181][T16322] netlink: 'syz.4.2875': attribute type 10 has an invalid length. [ 305.744211][T16353] netlink: zone id is out of range [ 305.753048][T16353] netlink: zone id is out of range [ 305.764150][T16353] netlink: set zone limit has 8 unknown bytes [ 305.847685][T16355] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.869899][T16357] netlink: zone id is out of range [ 305.875065][T16357] netlink: zone id is out of range [ 305.889669][T16355] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.903475][T16357] netlink: set zone limit has 8 unknown bytes [ 306.095682][T16355] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.131084][T16355] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.160930][T16367] __nla_validate_parse: 142 callbacks suppressed [ 306.160949][T16367] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2888'. [ 306.265019][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.274489][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.282724][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.310057][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.318265][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.369905][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.381740][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.392455][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.402078][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.412875][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.425561][T16355] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.449991][T16355] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.617939][T16355] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.632252][T16355] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.848085][T16391] syzkaller1: entered promiscuous mode [ 306.855706][T16391] syzkaller1: entered allmulticast mode [ 306.925117][ T75] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.944696][ T75] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.955870][T16400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2896'. [ 307.047542][ T75] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.057299][ T75] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.096423][ T75] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.106305][ T75] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.124786][T16369] chnl_net:caif_netlink_parms(): no params data found [ 307.145775][ T75] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.154420][ T75] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.246033][T16413] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2900'. [ 307.255789][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 307.388650][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.408687][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.429478][T16369] bridge_slave_0: entered allmulticast mode [ 307.446772][T16369] bridge_slave_0: entered promiscuous mode [ 307.455698][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.463979][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.473874][T16369] bridge_slave_1: entered allmulticast mode [ 307.482021][T16369] bridge_slave_1: entered promiscuous mode [ 307.540360][T16430] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2904'. [ 307.595769][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.630568][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.772816][T16369] team0: Port device team_slave_0 added [ 307.788186][T16369] team0: Port device team_slave_1 added [ 307.794834][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 307.864750][ T5846] block nbd1: Receive control failed (result -107) [ 307.902281][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.909576][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.936050][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.971049][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.013157][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.078791][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.332019][T16369] hsr_slave_0: entered promiscuous mode [ 308.339103][T16369] hsr_slave_1: entered promiscuous mode [ 308.361427][T16369] debugfs: 'hsr0' already exists in 'hsr' [ 308.374328][T16369] Cannot create hsr debugfs directory [ 308.479882][ T5846] Bluetooth: hci5: command tx timeout [ 308.981898][ T36] veth0_to_bond: left promiscuous mode [ 309.220576][T16522] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 309.235442][T16522] nbd: error processing sock list [ 309.241536][T16522] block nbd2: shutting down sockets [ 309.291484][T16530] netlink: 'syz.5.2926': attribute type 21 has an invalid length. [ 309.315469][T16369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.386113][T16369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.465767][T16369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.527919][T16369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.676020][T16557] netlink: 'syz.5.2935': attribute type 11 has an invalid length. [ 309.702176][T16557] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.2935'. [ 309.716815][T16560] netlink: zone id is out of range [ 309.727522][T16560] netlink: zone id is out of range [ 309.733153][T16560] netlink: zone id is out of range [ 309.734258][T16559] netlink: 'syz.1.2934': attribute type 29 has an invalid length. [ 309.738374][T16560] netlink: zone id is out of range [ 309.753359][T16560] netlink: zone id is out of range [ 309.762818][T16560] netlink: zone id is out of range [ 309.767943][T16560] netlink: zone id is out of range [ 309.803950][T16567] netlink: 'syz.1.2934': attribute type 29 has an invalid length. [ 309.832156][T16560] netlink: zone id is out of range [ 309.837308][T16560] netlink: zone id is out of range [ 309.876449][T16560] netlink: zone id is out of range [ 309.936209][T16570] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2937'. [ 310.030390][T16577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2938'. [ 310.043075][T16581] netlink: 'syz.3.2940': attribute type 7 has an invalid length. [ 310.107057][T16369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.195082][ T1345] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.217943][ T1345] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.235171][ T1345] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.267953][ T1345] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.318791][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.364644][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.371845][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.399007][T16595] netlink: 'syz.3.2942': attribute type 4 has an invalid length. [ 310.413849][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.421040][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.463630][T16597] netlink: 'syz.3.2942': attribute type 4 has an invalid length. [ 310.562377][ T5846] Bluetooth: hci5: command tx timeout [ 311.246216][T16369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.365520][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 311.501837][T16653] sctp: [Deprecated]: syz.1.2956 (pid 16653) Use of int in maxseg socket option. [ 311.501837][T16653] Use struct sctp_assoc_value instead [ 311.545786][T16369] veth0_vlan: entered promiscuous mode [ 311.546275][T16653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2956'. [ 311.578468][T16369] veth1_vlan: entered promiscuous mode [ 311.688379][T16369] veth0_macvtap: entered promiscuous mode [ 311.735643][T16369] veth1_macvtap: entered promiscuous mode [ 311.803703][T16680] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 311.823230][T16369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.834744][T16680] x_tables: duplicate underflow at hook 1 [ 311.860416][T16369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.902908][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.918326][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.929988][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 311.974338][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 312.002742][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.040523][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.416964][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.442454][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.561710][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2970'. [ 312.576806][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'. [ 312.589227][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.602309][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.639569][ T5846] Bluetooth: hci5: command tx timeout [ 312.670165][T16723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2973'. [ 312.700011][T16723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2973'. [ 313.184664][T16752] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 313.226969][T16752] gretap1: entered promiscuous mode [ 313.712830][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2984'. [ 313.837820][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.852739][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.861229][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.873970][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.882283][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.966902][T16779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2987'. [ 314.143170][T16778] smc: net device geneve0 applied user defined pnetid SYZ0 [ 314.278529][T16790] netlink: 'syz.3.2991': attribute type 1 has an invalid length. [ 314.695262][T16810] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 314.719530][ T5846] Bluetooth: hci5: command tx timeout [ 314.761333][T16810] team1: entered promiscuous mode [ 314.780256][T16810] team1: entered allmulticast mode [ 314.814785][T16772] chnl_net:caif_netlink_parms(): no params data found [ 315.111802][T16838] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 315.154488][T16772] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.169027][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.178601][T16842] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 315.196963][T16772] bridge_slave_0: entered allmulticast mode [ 315.207488][T16772] bridge_slave_0: entered promiscuous mode [ 315.232886][T16838] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 315.277844][T16772] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.309838][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.317546][T16772] bridge_slave_1: entered allmulticast mode [ 315.327795][T16772] bridge_slave_1: entered promiscuous mode [ 315.337802][T16850] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 315.521309][T16772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.544323][T16869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.560107][T16772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.639694][T16772] team0: Port device team_slave_0 added [ 315.658669][T16772] team0: Port device team_slave_1 added [ 315.712100][T16871] netlink: 'syz.1.3015': attribute type 23 has an invalid length. [ 315.746419][T16772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.756733][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.786596][T16772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.800185][T16772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.807153][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.844142][T16772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.886844][T16880] netlink: 'syz.5.3019': attribute type 9 has an invalid length. [ 315.920468][ T5846] Bluetooth: hci1: command tx timeout [ 315.951496][T16772] hsr_slave_0: entered promiscuous mode [ 315.958416][T16772] hsr_slave_1: entered promiscuous mode [ 315.965382][T16772] debugfs: 'hsr0' already exists in 'hsr' [ 315.971317][T16772] Cannot create hsr debugfs directory [ 315.981132][T16885] veth0_to_bridge: entered promiscuous mode [ 316.005822][T16883] veth0_to_bridge: left promiscuous mode [ 316.156571][T16897] netlink: 'syz.5.3024': attribute type 2 has an invalid length. [ 316.449319][T16910] netlink: 'syz.2.3029': attribute type 6 has an invalid length. [ 316.475078][T16910] netlink: 'syz.2.3029': attribute type 6 has an invalid length. [ 316.791594][T16927] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 316.808073][T16927] __nla_validate_parse: 21 callbacks suppressed [ 316.808090][T16927] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3035'. [ 316.855246][T16928] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 316.870082][T16928] bond1: entered promiscuous mode [ 316.893802][T16928] bond1: entered allmulticast mode [ 316.902240][T16928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.919308][T16772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.934855][T16772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.951678][T16772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.963277][T16772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.067036][T16947] netlink: 'syz.5.3042': attribute type 1 has an invalid length. [ 317.073363][T16949] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3039'. [ 317.084498][T16949] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3039'. [ 317.144024][T16947] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.155768][T16956] tipc: Enabled bearer , priority 0 [ 317.170814][T16949] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3039'. [ 317.204829][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235535][T16947] bond9: entered allmulticast mode [ 317.251748][T16956] syzkaller0: entered promiscuous mode [ 317.257336][T16956] syzkaller0: entered allmulticast mode [ 317.275781][T16956] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.426701][T16967] tipc: Resetting bearer [ 317.462655][T16938] tipc: Resetting bearer [ 317.487194][T16938] tipc: Disabling bearer [ 317.538538][T16980] bridge1: entered promiscuous mode [ 317.550562][T16980] bridge1: entered allmulticast mode [ 317.677753][T16772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.702320][T16772] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.718576][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.725813][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.777843][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.785088][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.999727][ T5846] Bluetooth: hci1: command tx timeout [ 318.279064][T17027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3057'. [ 318.498528][T16772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.540475][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 318.571924][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 318.792830][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.820933][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.922922][T17073] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3064'. [ 318.975576][T17073] net_ratelimit: 6 callbacks suppressed [ 318.975593][T17073] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 319.318027][ T30] audit: type=1800 audit(1762467086.022:7): pid=17057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3061" name="memory.events" dev="tmpfs" ino=2701 res=0 errno=0 [ 319.388993][T16772] veth0_vlan: entered promiscuous mode [ 319.425472][T16772] veth1_vlan: entered promiscuous mode [ 319.497998][T16772] veth0_macvtap: entered promiscuous mode [ 319.518529][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3068'. [ 319.555120][T16772] veth1_macvtap: entered promiscuous mode [ 319.570576][T17092] block nbd2: server does not support multiple connections per device. [ 319.581463][T17092] block nbd2: shutting down sockets [ 319.583185][T16772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.620338][T16772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.657848][ T3483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.701060][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.718139][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.744370][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 319.777571][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.794825][T17109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.802149][T17109] IPv6: NLM_F_CREATE should be set when creating new route [ 319.809432][T17109] IPv6: NLM_F_CREATE should be set when creating new route [ 319.816659][T17109] IPv6: NLM_F_CREATE should be set when creating new route [ 319.987814][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.016067][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.086780][ T5846] Bluetooth: hci1: command tx timeout [ 320.133326][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.150072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.486299][T17190] Bluetooth: MGMT ver 1.23 [ 321.559849][T17190] Bluetooth: hci1: too big key_count value 32778 [ 321.662404][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.686903][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.695224][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.706606][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.718188][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.768531][T17188] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.779523][T17188] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.789318][T17188] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.812639][T17202] batadv_slave_0: entered allmulticast mode [ 321.812815][T17197] __nla_validate_parse: 4 callbacks suppressed [ 321.812827][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3093'. [ 321.824637][T17202] batadv_slave_0: left allmulticast mode [ 321.866198][T17188] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.885590][T17188] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.897543][T17188] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 321.922966][T17205] validate_nla: 3 callbacks suppressed [ 321.922984][T17205] netlink: 'syz.5.3095': attribute type 25 has an invalid length. [ 321.942741][T17197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.988325][T17197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.037292][T17188] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.048333][T17188] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.061162][T17188] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 322.164838][ T5846] Bluetooth: hci1: command tx timeout [ 322.180601][T17188] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.190733][T17188] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.200675][T17188] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 322.281828][T17214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3097'. [ 322.559318][T17233] nftables ruleset with unbound chain [ 322.580853][T17234] netlink: 'syz.4.3102': attribute type 5 has an invalid length. [ 322.680936][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3103'. [ 322.689703][T17192] chnl_net:caif_netlink_parms(): no params data found [ 322.710758][T17234] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3102'. [ 323.352753][T17188] team0: Port device geneve0 removed [ 323.759516][ T5846] Bluetooth: hci2: command tx timeout [ 323.802549][T17188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.815307][T17188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.827597][T17188] bond0 (unregistering): Released all slaves [ 323.845790][T17188] bond1 (unregistering): Released all slaves [ 323.859474][T17188] bond2 (unregistering): Released all slaves [ 323.875904][T17188] bond3 (unregistering): Released all slaves [ 323.970245][T17188] bond4 (unregistering): Released all slaves [ 323.983300][T17188] bond5 (unregistering): (slave bond6): Releasing backup interface [ 323.991929][T17188] bond5 (unregistering): Released all slaves [ 324.082601][T17188] bond6 (unregistering): Released all slaves [ 324.099564][T17188] bond7 (unregistering): Released all slaves [ 324.112034][T17188] bond8 (unregistering): Released all slaves [ 324.125241][T17188] bond9 (unregistering): Released all slaves [ 324.164071][T17248] syzkaller0: entered promiscuous mode [ 324.172280][T17248] syzkaller0: entered allmulticast mode [ 324.229639][T17270] tipc: Enabled bearer , priority 0 [ 324.253107][T17273] syzkaller0: entered promiscuous mode [ 324.286335][T17273] syzkaller0: entered allmulticast mode [ 324.548711][T17273] tipc: Resetting bearer [ 324.583091][T17273] tipc: Disabling bearer [ 324.733742][T17192] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.766041][T17192] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.788932][T17192] bridge_slave_0: entered allmulticast mode [ 324.815033][T17192] bridge_slave_0: entered promiscuous mode [ 324.855858][T17192] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.870057][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.877439][T17192] bridge_slave_1: entered allmulticast mode [ 324.921650][T17192] bridge_slave_1: entered promiscuous mode [ 324.995276][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3117'. [ 325.032300][T17320] IPVS: Unknown mcast interface: vcan0 [ 325.055990][T17192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.087259][T17192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.238687][T17192] team0: Port device team_slave_0 added [ 325.248058][T17192] team0: Port device team_slave_1 added [ 325.257373][T17324] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3119'. [ 325.287182][T17329] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 325.340769][T17329] netlink: 'syz.2.3120': attribute type 11 has an invalid length. [ 325.445287][T17192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.473986][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.537592][T17192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.566977][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 325.600014][T17192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.624056][T17192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.709632][T17192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.782456][T17353] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 325.839963][ T5846] Bluetooth: hci2: command tx timeout [ 325.903436][T17358] tipc: Started in network mode [ 325.908492][T17358] tipc: Node identity 8a1ae08dddea, cluster identity 4711 [ 325.915904][T17358] tipc: Enabled bearer , priority 0 [ 325.928543][T17188] tipc: Left network mode [ 325.929738][T17358] syzkaller0: entered promiscuous mode [ 325.938992][T17358] syzkaller0: entered allmulticast mode [ 325.982841][T17192] hsr_slave_0: entered promiscuous mode [ 326.012310][T17192] hsr_slave_1: entered promiscuous mode [ 326.028500][T17192] debugfs: 'hsr0' already exists in 'hsr' [ 326.040314][T17188] IPVS: stopping backup sync thread 12467 ... [ 326.049071][T17192] Cannot create hsr debugfs directory [ 326.197882][T17366] !: renamed from bond_slave_0 (while UP) [ 326.215437][T17367] tipc: Resetting bearer [ 326.257986][T17355] tipc: Resetting bearer [ 326.327783][T17355] tipc: Disabling bearer [ 326.363357][T17390] netlink: 'syz.3.3136': attribute type 10 has an invalid length. [ 326.793025][T17410] netlink: 'syz.2.3142': attribute type 3 has an invalid length. [ 326.824905][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3142'. [ 326.914600][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 327.166484][T17188] hsr_slave_0: left promiscuous mode [ 327.227379][T17188] veth1_macvtap: left promiscuous mode [ 327.240873][T17188] veth0_vlan: left promiscuous mode [ 327.309745][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'. [ 327.322758][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3150'. [ 327.324992][T17437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3148'. [ 327.350028][T17443] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 327.920352][ T5846] Bluetooth: hci2: command tx timeout [ 327.998278][T17188] team0 (unregistering): Port device team_slave_1 removed [ 328.036499][T17188] team0 (unregistering): Port device team_slave_0 removed [ 328.456090][T17456] netlink: 'syz.2.3154': attribute type 10 has an invalid length. [ 328.476766][T17459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.499975][T17456] veth1_macvtap: left promiscuous mode [ 328.609135][T17467] sctp: [Deprecated]: syz.5.3158 (pid 17467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.609135][T17467] Use struct sctp_sack_info instead [ 328.892185][T17483] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 329.360813][ T5846] Bluetooth: hci0: command tx timeout [ 329.474880][T17188] IPVS: stop unused estimator thread 0... [ 329.644675][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 329.721417][T17523] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 329.729589][T17192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.740759][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 329.816047][T17192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.837201][T17192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.891015][T17192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.005743][ T5846] Bluetooth: hci2: command tx timeout [ 330.022063][T17537] tipc: Enabling of bearer rejected, media not registered [ 330.104584][T17537] ip6erspan0: entered promiscuous mode [ 330.123040][T17537] ip6erspan0: entered allmulticast mode [ 330.396910][T17568] netlink: 'syz.3.3177': attribute type 3 has an invalid length. [ 330.507710][T17574] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3178'. [ 330.528023][T17192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.572246][T17192] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.593621][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.600870][T17186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.658226][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.665468][T17186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.965966][T17591] warn_alloc: 1 callbacks suppressed [ 330.965982][T17591] syz.2.3182: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.033577][T17591] CPU: 0 UID: 0 PID: 17591 Comm: syz.2.3182 Not tainted syzkaller #0 PREEMPT(full) [ 331.033602][T17591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.033627][T17591] Call Trace: [ 331.033634][T17591] [ 331.033642][T17591] dump_stack_lvl+0x189/0x250 [ 331.033674][T17591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.033697][T17591] ? __pfx__printk+0x10/0x10 [ 331.033714][T17591] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.033737][T17591] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.033762][T17591] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 331.033787][T17591] warn_alloc+0x214/0x310 [ 331.033812][T17591] ? stack_depot_save_flags+0x40/0x860 [ 331.033841][T17591] ? __pfx_warn_alloc+0x10/0x10 [ 331.033867][T17591] ? kasan_save_track+0x3e/0x80 [ 331.033889][T17591] ? __kasan_kmalloc+0x93/0xb0 [ 331.033913][T17591] ? xsk_setsockopt+0x4dc/0x8d0 [ 331.033932][T17591] ? do_sock_setsockopt+0x17c/0x1b0 [ 331.033949][T17591] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 331.033965][T17591] ? do_syscall_64+0xfa/0xfa0 [ 331.033986][T17591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.034014][T17591] __vmalloc_node_range_noprof+0x125/0x12d0 [ 331.034070][T17591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.034098][T17591] ? __kasan_kmalloc+0x93/0xb0 [ 331.034128][T17591] vmalloc_user_noprof+0xad/0xf0 [ 331.034151][T17591] ? xskq_create+0xbf/0x170 [ 331.034174][T17591] xskq_create+0xbf/0x170 [ 331.034198][T17591] xsk_init_queue+0xb0/0x110 [ 331.034222][T17591] xsk_setsockopt+0x4dc/0x8d0 [ 331.034246][T17591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.034269][T17591] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.034295][T17591] ? aa_sock_opt_perm+0xff/0x1b0 [ 331.034323][T17591] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.034340][T17591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.034362][T17591] do_sock_setsockopt+0x17c/0x1b0 [ 331.034386][T17591] __x64_sys_setsockopt+0x13f/0x1b0 [ 331.034410][T17591] do_syscall_64+0xfa/0xfa0 [ 331.034431][T17591] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.034454][T17591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.034472][T17591] ? clear_bhb_loop+0x60/0xb0 [ 331.034494][T17591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.034511][T17591] RIP: 0033:0x7f188f78f6c9 [ 331.034532][T17591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.034548][T17591] RSP: 002b:00007f189070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.034568][T17591] RAX: ffffffffffffffda RBX: 00007f188f9e5fa0 RCX: 00007f188f78f6c9 [ 331.034582][T17591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 331.034593][T17591] RBP: 00007f188f811f91 R08: 0000000000000004 R09: 0000000000000000 [ 331.034604][T17591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.034615][T17591] R13: 00007f188f9e6038 R14: 00007f188f9e5fa0 R15: 00007ffdfd944868 [ 331.034647][T17591] [ 331.034654][T17591] Mem-Info: [ 331.135068][T17599] IPv6: NLM_F_REPLACE set, but no existing node found! [ 331.159582][T17591] active_anon:6475 inactive_anon:0 isolated_anon:0 [ 331.159582][T17591] active_file:3275 inactive_file:40009 isolated_file:0 [ 331.159582][T17591] unevictable:768 dirty:61 writeback:0 [ 331.159582][T17591] slab_reclaimable:11868 slab_unreclaimable:110811 [ 331.159582][T17591] mapped:29497 shmem:1366 pagetables:1325 [ 331.159582][T17591] sec_pagetables:0 bounce:0 [ 331.159582][T17591] kernel_misc_reclaimable:0 [ 331.159582][T17591] free:1310343 free_pcp:14544 free_cma:0 [ 331.395522][T17591] Node 0 active_anon:25700kB inactive_anon:0kB active_file:13100kB inactive_file:159836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117888kB dirty:244kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15008kB pagetables:5356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.437053][T17192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.450129][T17608] netlink: 'syz.5.3185': attribute type 1 has an invalid length. [ 331.489811][T17591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.536373][T17610] gretap1: entered promiscuous mode [ 331.589648][T17591] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.625101][T17591] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 331.682141][T17591] Node 0 DMA32 free:1329192kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25700kB inactive_anon:0kB active_file:13100kB inactive_file:159836kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:39232kB local_pcp:20932kB free_cma:0kB [ 331.791489][T17591] lowmem_reserve[]: 0 0 0 0 0 [ 331.796408][T17591] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.877071][T17192] veth0_vlan: entered promiscuous mode [ 331.878805][T17591] lowmem_reserve[]: [ 331.884461][T17626] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3189'. [ 331.905664][T17192] veth1_vlan: entered promiscuous mode [ 331.925924][T17591] 0 0 0 0 0 [ 331.929294][T17591] Node 1 Normal free:3896820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17856kB local_pcp:10576kB free_cma:0kB [ 331.971214][T17591] lowmem_reserve[]: 0 0 0 0 0 [ 331.991780][T17192] veth0_macvtap: entered promiscuous mode [ 331.999958][T17591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.010518][T17629] netlink: 'syz.4.3190': attribute type 23 has an invalid length. [ 332.022232][T17192] veth1_macvtap: entered promiscuous mode [ 332.028248][T17591] Node 0 DMA32: 1098*4kB (UME) 574*8kB (UME) 181*16kB (UME) 114*32kB (UME) 52*64kB (UM) 20*128kB (UM) 9*256kB (UM) 7*512kB (UM) 23*1024kB (UM) 4*2048kB (UM) 310*4096kB (UM) = 1328808kB [ 332.080673][T17591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.092613][T17591] Node 1 Normal: 203*4kB (UE) 65*8kB (UME) 52*16kB (UME) 108*32kB (UME) 30*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (UM) = 3896820kB [ 332.116992][T17629] tipc: Enabled bearer , priority 0 [ 332.133189][T17591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.143129][T17591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.154326][T17192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.163675][T17591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.176539][T17629] syzkaller0: entered promiscuous mode [ 332.183995][T17591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.189552][T17629] syzkaller0: entered allmulticast mode [ 332.194410][T17591] 44647 total pagecache pages [ 332.206187][T17591] 0 pages in swap cache [ 332.215901][T17591] Free swap = 124996kB [ 332.227732][T17591] Total swap = 124996kB [ 332.233185][T17591] 2097051 pages RAM [ 332.242456][T17192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.253086][T17591] 0 pages HighMem/MovableOnly [ 332.272785][T17629] tipc: Resetting bearer [ 332.284320][T17184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.296555][T17591] 424117 pages reserved [ 332.301230][T17184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.302829][T17591] 0 pages cma reserved [ 332.326969][T17628] tipc: Resetting bearer [ 332.358912][T17628] tipc: Disabling bearer [ 332.385061][T17184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.399657][ T5846] Bluetooth: hci2: command tx timeout [ 332.419767][T17184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.456549][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 332.520317][T17640] syzkaller0: create flow: hash 4117255300 index 2 [ 332.714734][T17653] geneve2: entered promiscuous mode [ 332.835138][T17640] syzkaller0: delete flow: hash 4117255300 index 2 [ 332.884566][T17186] syzkaller0: tun_net_xmit 76 [ 332.907523][T17186] syzkaller0: tun_net_xmit 48 [ 332.914071][ T5947] syzkaller0: tun_net_xmit 76 [ 333.010758][T17669] ip6t_REJECT: ECHOREPLY is not supported [ 334.459332][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 334.482096][T17184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.502540][T17184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.616225][T17184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.634673][T17184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.723089][T17703] !: renamed from dummy0 (while UP) [ 335.116130][T17728] xt_hashlimit: overflow, try lower: 3/0 [ 335.608962][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.615671][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 335.628303][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 335.630207][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.645955][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.654447][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.662449][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.732856][T17755] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3219'. [ 335.991643][T17767] netlink: 'syz.5.3222': attribute type 6 has an invalid length. [ 336.025686][T17769] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 336.138574][T17773] x_tables: duplicate underflow at hook 3 [ 336.353600][T17749] chnl_net:caif_netlink_parms(): no params data found [ 336.515993][T17749] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.524083][T17749] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.532208][T17749] bridge_slave_0: entered allmulticast mode [ 336.541375][T17749] bridge_slave_0: entered promiscuous mode [ 336.553556][T17749] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.562056][T17749] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.569308][T17749] bridge_slave_1: entered allmulticast mode [ 336.577746][T17749] bridge_slave_1: entered promiscuous mode [ 336.623476][T17749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.638946][T17749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.718593][T17749] team0: Port device team_slave_0 added [ 336.735201][T17749] team0: Port device team_slave_1 added [ 336.813248][T17749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.829487][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.858271][T17749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.872887][T17749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.880896][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.907809][T17749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.005649][T17749] hsr_slave_0: entered promiscuous mode [ 337.017481][T17749] hsr_slave_1: entered promiscuous mode [ 337.064793][T17781] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 337.130588][T17816] netlink: 'syz.5.3238': attribute type 27 has an invalid length. [ 337.233247][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 337.762966][ T5846] Bluetooth: hci3: command tx timeout [ 337.877155][T17851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3247'. [ 337.952686][T17854] netlink: 'syz.5.3250': attribute type 2 has an invalid length. [ 337.965358][T17749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.983017][T17749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.040269][T17854] 9: entered promiscuous mode [ 338.152337][T17749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.165686][T17749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.533068][T17749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.543477][T17749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.688263][T17749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.721082][T17749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.839575][ T5846] Bluetooth: hci3: command tx timeout [ 340.043914][T17891] syzkaller1: entered promiscuous mode [ 340.057685][T17891] syzkaller1: entered allmulticast mode [ 340.159253][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 340.214890][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3265'. [ 340.220979][T17749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.277201][T17749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.308641][T17749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.339003][T17749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.346127][T17910] syz.2.3267 (17910) used obsolete PPPIOCDETACH ioctl [ 340.439176][T17919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.447819][T17919] bond0: (slave bond1): Enslaving as an active interface with an up link [ 340.582219][T17749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.616873][T17749] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.645377][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.652591][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.704389][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.711604][T17188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.726370][T17930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3271'. [ 341.081027][T17942] nbd: device at index 5 is going down [ 341.243304][T17749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.402822][T16372] udevd[16372]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 341.447290][T17749] veth0_vlan: entered promiscuous mode [ 341.519123][T17749] veth1_vlan: entered promiscuous mode [ 341.565850][T17749] veth0_macvtap: entered promiscuous mode [ 341.592590][T17749] veth1_macvtap: entered promiscuous mode [ 341.649573][T17749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.697312][T17749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.747894][T17186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.778277][T17186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.821541][T17186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.867991][T17186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.919831][ T5846] Bluetooth: hci3: command tx timeout [ 341.940689][T17980] netlink: 'syz.4.3282': attribute type 3 has an invalid length. [ 341.958806][T17980] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3282'. [ 342.096537][T17188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.124938][T17188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.216139][T17186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.255481][T17186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.264295][T10158] hid-generic 0005:0458:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 342.396958][T18004] netlink: 'syz.2.3288': attribute type 4 has an invalid length. [ 342.800844][ C0] ------------[ cut here ]------------ [ 342.806643][ C0] ODEBUG: free active (active state 0) object: ffff88805744f490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 342.820133][ C0] WARNING: CPU: 0 PID: 17192 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 342.829750][ C0] Modules linked in: [ 342.833953][ C0] CPU: 0 UID: 0 PID: 17192 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 342.843559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.853658][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 342.859518][ C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 37 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 342.879177][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 342.885290][ C0] RAX: e1a26e9ad7edaf00 RBX: dffffc0000000000 RCX: ffff888030148000 [ 342.893352][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 342.901368][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 342.909378][ C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a3907e0 [ 342.917385][ C0] R13: ffffffff8bbf1100 R14: ffff88805744f490 R15: ffffffff8b6cf600 [ 342.925421][ C0] FS: 000055555f02a500(0000) GS:ffff88812613c000(0000) knlGS:0000000000000000 [ 342.934388][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.941039][ C0] CR2: 00007ff60c9156c0 CR3: 000000005f638000 CR4: 00000000003526f0 [ 342.949034][ C0] Call Trace: [ 342.952365][ C0] [ 342.955223][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 342.960857][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 342.965991][ C0] kfree+0x115/0x6d0 [ 342.969960][ C0] rose_timer_expiry+0x4cb/0x600 [ 342.974926][ C0] call_timer_fn+0x17e/0x5f0 [ 342.979580][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 342.985057][ C0] ? call_timer_fn+0xbe/0x5f0 [ 342.989786][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 342.994918][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.000176][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.005413][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 343.010936][ C0] __run_timer_base+0x61a/0x860 [ 343.015821][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 343.021255][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 343.027532][ C0] run_timer_softirq+0xb7/0x180 [ 343.032450][ C0] handle_softirqs+0x286/0x870 [ 343.037238][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 343.042063][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 343.047371][ C0] __irq_exit_rcu+0xca/0x1f0 [ 343.052072][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 343.057295][ C0] irq_exit_rcu+0x9/0x30 [ 343.061606][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 343.067263][ C0] [ 343.070230][ C0] [ 343.073183][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.079173][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 343.084490][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ec d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 343.104165][ C0] RSP: 0018:ffffc90005076db8 EFLAGS: 00000206 [ 343.110283][ C0] RAX: e1a26e9ad7edaf00 RBX: 0000000000000000 RCX: e1a26e9ad7edaf00 [ 343.118273][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f401b RDI: ffffffff8bbf05e0 [ 343.126288][ C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 343.134335][ C0] R10: ffffc90005076f78 R11: ffffffff81ac2d30 R12: 0000000000000002 [ 343.142363][ C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 343.150479][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.155620][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.161831][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.166988][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.172156][ C0] ? copy_process+0x1706/0x3c00 [ 343.177027][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.182189][ C0] unwind_next_frame+0xc2/0x2390 [ 343.187151][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.192328][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.197467][ C0] ? copy_mm+0x13c/0x4b0 [ 343.202265][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.208499][ C0] arch_stack_walk+0x11c/0x150 [ 343.213316][ C0] ? copy_process+0x1706/0x3c00 [ 343.218192][ C0] stack_trace_save+0x9c/0xe0 [ 343.222901][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.228298][ C0] ? __lock_acquire+0xab9/0xd20 [ 343.233195][ C0] kasan_save_track+0x3e/0x80 [ 343.237900][ C0] ? kasan_save_track+0x3e/0x80 [ 343.242775][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 343.247839][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 343.253495][ C0] ? __pmd_alloc+0xc2/0x540 [ 343.258009][ C0] ? copy_pmd_range+0x7ae9/0x7f00 [ 343.263149][ C0] ? copy_page_range+0xc14/0x1270 [ 343.268189][ C0] ? dup_mmap+0xf4c/0x1b10 [ 343.272671][ C0] ? copy_mm+0x13c/0x4b0 [ 343.276928][ C0] ? copy_process+0x1706/0x3c00 [ 343.281866][ C0] __kasan_slab_alloc+0x6c/0x80 [ 343.286734][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 343.292225][ C0] ? __pmd_alloc+0xc2/0x540 [ 343.296745][ C0] __pmd_alloc+0xc2/0x540 [ 343.301104][ C0] copy_pmd_range+0x7ae9/0x7f00 [ 343.305978][ C0] ? percpu_ref_get_many+0x19/0x140 [ 343.311205][ C0] ? percpu_ref_get_many+0x19/0x140 [ 343.316412][ C0] ? rcu_is_watching+0x15/0xb0 [ 343.321199][ C0] ? trace_mm_page_alloc+0x3e/0x150 [ 343.326411][ C0] ? __lock_acquire+0xab9/0xd20 [ 343.331288][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 343.336509][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 343.341735][ C0] ? _raw_spin_unlock+0x28/0x50 [ 343.346603][ C0] ? __pud_alloc+0x342/0x450 [ 343.351239][ C0] copy_page_range+0xc14/0x1270 [ 343.356145][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 343.361509][ C0] dup_mmap+0xf4c/0x1b10 [ 343.365795][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 343.370548][ C0] ? mm_init+0xd74/0xfa0 [ 343.374816][ C0] copy_mm+0x13c/0x4b0 [ 343.378914][ C0] copy_process+0x1706/0x3c00 [ 343.383669][ C0] ? copy_process+0x97f/0x3c00 [ 343.388445][ C0] ? __pfx_copy_process+0x10/0x10 [ 343.393538][ C0] kernel_clone+0x21e/0x840 [ 343.398051][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 343.403184][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 343.408223][ C0] ? count_memcg_event_mm+0x21/0x260 [ 343.413534][ C0] __x64_sys_clone+0x18b/0x1e0 [ 343.418321][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 343.423641][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 343.428941][ C0] ? do_syscall_64+0xbe/0xfa0 [ 343.433649][ C0] do_syscall_64+0xfa/0xfa0 [ 343.438175][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.443425][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.449534][ C0] ? clear_bhb_loop+0x60/0xb0 [ 343.454216][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.460124][ C0] RIP: 0033:0x7ff60bb85e13 [ 343.464550][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 343.484191][ C0] RSP: 002b:00007fff941181f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 343.492651][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff60bb85e13 [ 343.500763][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 343.508744][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 343.516740][ C0] R10: 000055555f02a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 343.524742][ C0] R13: 00000000000927c0 R14: 0000000000053a98 R15: 00007fff94118390 [ 343.532755][ C0] [ 343.535780][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.543046][ C0] CPU: 0 UID: 0 PID: 17192 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 343.552568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.562614][ C0] Call Trace: [ 343.565890][ C0] [ 343.568728][ C0] dump_stack_lvl+0x99/0x250 [ 343.573322][ C0] ? __asan_memcpy+0x40/0x70 [ 343.577906][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.583090][ C0] ? __pfx__printk+0x10/0x10 [ 343.587674][ C0] vpanic+0x237/0x6d0 [ 343.591650][ C0] ? __pfx_vpanic+0x10/0x10 [ 343.596161][ C0] panic+0xb9/0xc0 [ 343.599874][ C0] ? __pfx_panic+0x10/0x10 [ 343.604326][ C0] __warn+0x31b/0x4b0 [ 343.608332][ C0] ? debug_print_object+0x16b/0x1e0 [ 343.613536][ C0] ? debug_print_object+0x16b/0x1e0 [ 343.618725][ C0] report_bug+0x2be/0x4f0 [ 343.623043][ C0] ? debug_print_object+0x16b/0x1e0 [ 343.628227][ C0] ? debug_print_object+0x16b/0x1e0 [ 343.633416][ C0] ? debug_print_object+0x16d/0x1e0 [ 343.638602][ C0] handle_bug+0x84/0x160 [ 343.642829][ C0] exc_invalid_op+0x1a/0x50 [ 343.647317][ C0] asm_exc_invalid_op+0x1a/0x20 [ 343.652155][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 343.657954][ C0] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 37 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 343.677547][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 343.683611][ C0] RAX: e1a26e9ad7edaf00 RBX: dffffc0000000000 RCX: ffff888030148000 [ 343.691588][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 343.699548][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 343.707501][ C0] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a3907e0 [ 343.715466][ C0] R13: ffffffff8bbf1100 R14: ffff88805744f490 R15: ffffffff8b6cf600 [ 343.723435][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 343.729070][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 343.734621][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 343.739731][ C0] kfree+0x115/0x6d0 [ 343.743620][ C0] rose_timer_expiry+0x4cb/0x600 [ 343.748551][ C0] call_timer_fn+0x17e/0x5f0 [ 343.753124][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 343.758569][ C0] ? call_timer_fn+0xbe/0x5f0 [ 343.763232][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 343.768341][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.773527][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.778713][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 343.784159][ C0] __run_timer_base+0x61a/0x860 [ 343.789012][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 343.794461][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 343.800701][ C0] run_timer_softirq+0xb7/0x180 [ 343.805542][ C0] handle_softirqs+0x286/0x870 [ 343.810790][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 343.815541][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 343.820842][ C0] __irq_exit_rcu+0xca/0x1f0 [ 343.825448][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 343.830654][ C0] irq_exit_rcu+0x9/0x30 [ 343.834882][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 343.840500][ C0] [ 343.843415][ C0] [ 343.846329][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.852296][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 343.857563][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ec d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 343.877153][ C0] RSP: 0018:ffffc90005076db8 EFLAGS: 00000206 [ 343.883210][ C0] RAX: e1a26e9ad7edaf00 RBX: 0000000000000000 RCX: e1a26e9ad7edaf00 [ 343.891172][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f401b RDI: ffffffff8bbf05e0 [ 343.899130][ C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 343.907100][ C0] R10: ffffc90005076f78 R11: ffffffff81ac2d30 R12: 0000000000000002 [ 343.915055][ C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 343.923033][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.928145][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.934289][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.939414][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.944514][ C0] ? copy_process+0x1706/0x3c00 [ 343.949357][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.954464][ C0] unwind_next_frame+0xc2/0x2390 [ 343.959391][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.964493][ C0] ? unwind_next_frame+0xa5/0x2390 [ 343.969595][ C0] ? copy_mm+0x13c/0x4b0 [ 343.973836][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.979986][ C0] arch_stack_walk+0x11c/0x150 [ 343.984751][ C0] ? copy_process+0x1706/0x3c00 [ 343.989591][ C0] stack_trace_save+0x9c/0xe0 [ 343.994260][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.999637][ C0] ? __lock_acquire+0xab9/0xd20 [ 344.004484][ C0] kasan_save_track+0x3e/0x80 [ 344.009155][ C0] ? kasan_save_track+0x3e/0x80 [ 344.013995][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 344.019010][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 344.024634][ C0] ? __pmd_alloc+0xc2/0x540 [ 344.029125][ C0] ? copy_pmd_range+0x7ae9/0x7f00 [ 344.034139][ C0] ? copy_page_range+0xc14/0x1270 [ 344.039145][ C0] ? dup_mmap+0xf4c/0x1b10 [ 344.043549][ C0] ? copy_mm+0x13c/0x4b0 [ 344.047812][ C0] ? copy_process+0x1706/0x3c00 [ 344.052680][ C0] __kasan_slab_alloc+0x6c/0x80 [ 344.057524][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 344.062975][ C0] ? __pmd_alloc+0xc2/0x540 [ 344.067472][ C0] __pmd_alloc+0xc2/0x540 [ 344.071796][ C0] copy_pmd_range+0x7ae9/0x7f00 [ 344.076636][ C0] ? percpu_ref_get_many+0x19/0x140 [ 344.081820][ C0] ? percpu_ref_get_many+0x19/0x140 [ 344.087010][ C0] ? rcu_is_watching+0x15/0xb0 [ 344.091766][ C0] ? trace_mm_page_alloc+0x3e/0x150 [ 344.096958][ C0] ? __lock_acquire+0xab9/0xd20 [ 344.101804][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 344.107000][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 344.112193][ C0] ? _raw_spin_unlock+0x28/0x50 [ 344.117034][ C0] ? __pud_alloc+0x342/0x450 [ 344.121617][ C0] copy_page_range+0xc14/0x1270 [ 344.126472][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 344.131754][ C0] dup_mmap+0xf4c/0x1b10 [ 344.136002][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 344.140675][ C0] ? mm_init+0xd74/0xfa0 [ 344.144908][ C0] copy_mm+0x13c/0x4b0 [ 344.148965][ C0] copy_process+0x1706/0x3c00 [ 344.153647][ C0] ? copy_process+0x97f/0x3c00 [ 344.158407][ C0] ? __pfx_copy_process+0x10/0x10 [ 344.163426][ C0] kernel_clone+0x21e/0x840 [ 344.167920][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 344.173020][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 344.178039][ C0] ? count_memcg_event_mm+0x21/0x260 [ 344.183318][ C0] __x64_sys_clone+0x18b/0x1e0 [ 344.188080][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 344.193365][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 344.198640][ C0] ? do_syscall_64+0xbe/0xfa0 [ 344.203313][ C0] do_syscall_64+0xfa/0xfa0 [ 344.207813][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.213002][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.219053][ C0] ? clear_bhb_loop+0x60/0xb0 [ 344.223720][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.229601][ C0] RIP: 0033:0x7ff60bb85e13 [ 344.234011][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 344.253601][ C0] RSP: 002b:00007fff941181f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 344.262002][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff60bb85e13 [ 344.269957][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 344.277912][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 344.285875][ C0] R10: 000055555f02a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 344.293932][ C0] R13: 00000000000927c0 R14: 0000000000053a98 R15: 00007fff94118390 [ 344.301919][ C0] [ 344.305207][ C0] Kernel Offset: disabled [ 344.309516][ C0] Rebooting in 86400 seconds..