last executing test programs: 4.975378219s ago: executing program 4 (id=11753): socket$inet_sctp(0x2, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$kcm(0xa, 0x2, 0x0) 4.82178849s ago: executing program 4 (id=11755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1d, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x0, 0x0, 0x8, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @exit]}, &(0x7f0000000a80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000ac0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r1, r3], &(0x7f0000000c00)=[{0x2, 0x2, 0x10, 0x7}], 0x10, 0x2}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x84041) r5 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000600)={'vlan0\x00', &(0x7f0000000540)=@ethtool_rxfh={0x46, 0x2, 0x5, 0xb131, 0x2, 't \a', 0x3ff, [0x6, 0xb, 0xb3, 0x5, 0x9, 0x7, 0x1ff]}}) sendmsg$key(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="0210ef050a0000002dbd7000ffdbdf250800120002000100b86b6e000300000006003200020700000e00000000000000fc02000000000000000000000000000000000000000000000000000000000000b898ead873bdf628821446d6e45e6c3be0e5666a74e795e4114beaa5e75c89c8284f3ddc395bd05ea73763fbe8df342d6666d1a88164be9a30cb54c18c3a9484302f6538ca26643dad476d4c2d0d69dc47574119028e046d568c79ccacdb4ae2894c55860dbc40185271af38d5e9da6994207a5d2d0d8412f6eb6c04fa7b264b4a22556b8992858bd1"], 0x50}}, 0x840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x62, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r7, 0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in=@rand_addr=0x64010102, @in6=@remote, 0x4e21, 0x7f, 0x4e22, 0x9, 0x2, 0x0, 0xf0, 0x62, r6, r8}, {0x8, 0x6, 0x426e1ef6, 0xed7, 0x5, 0x1, 0x913, 0x1}, {0x1, 0x2, 0x5, 0xfff}, 0x4, 0x6e6bc0, 0x2, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d4, 0x6c}, 0xa, @in6=@mcast1, 0x34ff, 0x3, 0x0, 0xc7, 0x10, 0x57, 0x3}}, 0xe8) 4.444156695s ago: executing program 4 (id=11760): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000001500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}], 0x48}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x44094}, 0x4004000) 4.221454163s ago: executing program 4 (id=11764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e40)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0xe0c}, 0x1, 0x0, 0x0, 0x4008847}, 0x890) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r13, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010424bd7000fbdbdf252e00000008000300", @ANYRES32=r12, @ANYBLOB="0a0034000101010101010000100049"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001240)=ANY=[@ANYBLOB=',\x00\x00\x00:', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="080026001b17000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) 3.993585623s ago: executing program 1 (id=11768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x8, 0x1, 0x2a9d, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0x110, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x8, 0x8001, 0x2, 0xd, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x3, 0x8, 0x8, 0x0, 0x4, 0x6, 0x4}}, {0xc, 0x2, [0x3, 0x7fff, 0x1, 0x1]}}, {{0x1c, 0x1, {0x4, 0x4, 0x800, 0xfffffeff, 0x1, 0x400, 0x1ff}}, {0x4}}]}]}, 0x110}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r2, r0, 0x29, 0x4, 0x0, @void, @value=r6, @void, @void, r1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r8, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200100001900010400000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000200102000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000001000000000009c58ebe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000005400080050000800003f48000469279fdfb4d61f875a85a4281346abb932025eb6acbd59dedeaef97f5bc7dfc96de5315ade683ad0653ae56641ab2e4ef656cec35705181727e04a49ade0c320770e55f35f821b0c00150000000000ff"], 0x120}}, 0x0) r11 = socket(0x10, 0x803, 0x0) write(r11, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000250000001ff80020", 0x1c) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_buf(r6, 0x107, 0x5, &(0x7f00000007c0)="7e1601e0ae86420b865dc988196cea0f76ccf574d446611adc3585054e893e2778556ade846ee2f1a105897dd3a5fd981300d1cdcf8107552f99681888621571ce158ea452db3cb7e5fd33eddbb9cce53c4ed6bff9c33dc0961c434b1e44fd1b1a68a3b3c3efa92547bf10eb0fe84437a5fc9c0ff58e053826e9790becc9c198c0cf72c94d95dcfbdb88b1a5bd4779f60ac4f96c6efd20fda04c7f6cf60b5088ac7f236adef5690df10d5e2b34d4974dce0bbc", 0xb3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@loopback, @private, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0xa, 0x8, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x66, 0x0, 0x9, 0x2a6dea1299ad97d9, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1, {[@lsrr={0x83, 0xf, 0xf2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x7, 0xd6e, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x67, 0x0, 0x9b, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0xf1, [@loopback, @local, @private=0xa010100, @loopback]}, @noop, @cipso={0x86, 0x19, 0x0, [{0x6, 0x7, '+t-w\r'}, {0x7, 0xc, "5a908f243c0a84b5ab71"}]}, @noop, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x7, 0xb, "6d1f454276dab25c0c"}, {0x5, 0x5, "13dcdb"}, {0x1, 0x6, "85ca59c2"}, {0x5, 0x4, "0a96"}, {0x7, 0xd, "03f6ca5ddc657a20bcfbc4"}, {0x7, 0x9, "5702356960e060"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r12, @ANYBLOB="00012dbd7000fcdbdf250d0000005c000180080003000300000008000100f91aa611bc5452a3b39c9be3431f93886c450ca40c9d57ef74d82183e018b72601ff656c2c87496a35b7154aa5406266a67b5d0d8c73c16b9fa7f11fe1bff81546da53604b2c5f9e6c4e11caad81b7d6ce98422c0edc951244f99b62e7b676fd3df6494a8ebd2840d2d6c0821c4975fd098cdad2a32d42154096cb3f8dbb67ad173679e5d8068181b8041f41707a8ad8622f19a6a7330609b0bddc92d5dd912f9a5f3e87829b6d08ed472173fd86d40d3a5d49c7bc", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="080003000100000014000200776c616e3100000000000000000000005c0001801400020070696d3672656700000000000000000014000200627269646765300000000000000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="140002007465616d5f736c6176655f310000000004000180"], 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.285024885s ago: executing program 2 (id=11769): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random}, 0xffffffffffffff1c) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7, 0x2, 0x10}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket(0x9, 0x5, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 1.21297623s ago: executing program 3 (id=11770): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x20, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x7f, 0x100}}}}}}}, 0x0) 1.186102871s ago: executing program 4 (id=11771): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 1.185348042s ago: executing program 1 (id=11772): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='-^\x00', 0x28000, &(0x7f0000000040)={@_ha_fsid={[0x10001, 0x1]}, {0xc1, 0xf, 0x93, 0x5}}, 0x10000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}, {[0x3, 0x9, 0xf, 0x7]}, 0x5, 0x4a, &(0x7f0000000100)=""/74}) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/167, 0xa7}], 0x1, &(0x7f0000000380)=""/184, 0xb8}, 0x10000) (async) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x218, 0x1b, 0x400, 0x70bd27, 0x25dfdbfe, {0x1c}, [@nested={0xc, 0xa5, 0x0, 0x1, [@typed={0x7, 0xc1, 0x0, 0x0, @str='-^\x00'}]}, @nested={0x28, 0x11e, 0x0, 0x1, [@nested={0x4, 0x7c}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0xda}]}, @generic="818d25ac42a1e3218f645b29e4e71d59abb0846014c419f84214d902918520e822c2238895617a35f6dcaea8e2acd58f174de5f61ffa6f8a07c106ae26a5478dac49196b2d9c6ae45d00fdf1", @typed={0x6, 0x5b, 0x0, 0x0, @str='#\x00'}, @generic="43e4acbab12e1cc85a788d7e51fdf1a5b231b96dae0fc2453f6c02440742556bdf7bb3926e79a669298f0e72369743a5ceb090746ccea797dee295ac3cde1b158419a3f692ceaf829b9641b19f8add28a847402f9b0eb8f4dd1482e1f8a7fe107a15ac66b8b1ca63eaf2f3065b2e90c107f064ca3e04d15acc7d9f64cb9ff092fd67d9d19a7c525d90205d2ccc540ed024d6dfad9b3f7f7f35099fea597499bdc5597e120ba3438f2a8abae4f7f8c0bf99b87d43696bdc4e4e8d9e5b09cff5cba7af66f5279f5491b8908a47f572ca7cf20301517131b642fab140cab845cd43ebd67da3261db6cada4ceccbdc9e78fd3af01d0cf3b90a26", @generic="5c56571a7ffdcc65edcecc47d7b7e52884c8c375c3f02e967b2c9197c15e7eb99498db218fea0de06e54c14cc4f0b85a9b945a04b98531ea20ea7c581e1e57f3bd5267f35a64f86a48754bc6aef3fbf16716f59a92c5cf0be38e4d52a1c5a678e9d61dff95c2fdff66f9a6c6f86927ba67f2bf1506bb8e00c2a9b4b8e19004300b97"]}, 0x218}, 0x1, 0x0, 0x0, 0x4000081}, 0x1) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000780)={@local, 0x8}) (async) r2 = accept4$vsock_stream(r0, &(0x7f00000007c0)={0x28, 0x0, 0x6930}, 0x10, 0x80000) getpeername(r2, &(0x7f0000000800)=@isdn, &(0x7f0000000880)=0x80) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900), 0x4) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r0, 0x3, 0x5}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x1, 0x3ff, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x68, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x7, 0xa0, [@rand_addr=0x64010101]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0xff, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0xd, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000a40)='GPL\x00', 0x2, 0x18, &(0x7f0000000a80)=""/24, 0x41000, 0xb, '\x00', r4, @fallback=0x28, r0, 0x8, &(0x7f0000000b40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xe, 0x5, 0x8dc}, 0x10, r5, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000c00)=[{0x5, 0x5, 0x7}, {0x3, 0x4, 0x0, 0xb}, {0x2, 0x3, 0xa, 0x8}, {0x2, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x7, 0x1}, {0x2, 0x4, 0x5, 0x7}], 0x10, 0xb5df}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x1}, 0x8) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb8, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000fc0)={0x0, 0x1000, "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"}, &(0x7f0000002000)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002040)={r9, @in={{0x2, 0x4e21, @local}}, 0x9fa, 0x1, 0x0, 0x5, 0xa, 0x6, 0x2}, &(0x7f0000002100)=0x9c) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000002140)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000002180)) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000022c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000002280), {[{{@arp={@loopback, @loopback, 0xff, 0xffffff00, 0x1, 0xf, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x0, 0x7, 0x9, 0x401, 0x1, 'veth0_virt_wifi\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0xa8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @loopback, 0x1}}}, {{@arp={@multicast2, @rand_addr=0x64010102, 0xffff00, 0xff, 0xa, 0xa, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xfff, 0x7, 0x6, 0x0, 0x400, 0x5c94, 'veth0_to_bond\x00', 'vlan0\x00', {}, {}, 0x0, 0x5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @private=0xa010101, @private=0xa010101, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="2c43ac8816ca", @empty, @remote, @private=0xa010101, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002780)={@remote, @broadcast, 0x0}, &(0x7f00000027c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002840)={'sit0\x00', &(0x7f0000002800)={'gretap0\x00', r4, 0xabe5e8933afb9aa4, 0x10, 0x57, 0x2, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x5, 0x0, 0x0, @empty, @empty, {[@generic={0x44, 0x4, "2abb"}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002940)={'gretap0\x00', &(0x7f0000002880)={'sit0\x00', r8, 0x1, 0x17, 0x0, 0x10001, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x67, 0x0, 0xc, 0x4, 0x0, @loopback, @empty, {[@generic={0x89, 0xd, "09616babc26d97fb83aa39"}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x1f, [@empty, @dev={0xac, 0x14, 0x14, 0xa}, @multicast1]}, @end, @timestamp={0x44, 0x24, 0x9a, 0x0, 0x2, [0x8, 0xffff, 0x7fffffff, 0x80000000, 0x5, 0x1, 0xf, 0x10]}, @end, @ssrr={0x89, 0x1f, 0x31, [@multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @private=0xa010102, @private=0xa010102, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000002b40)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002980)={0x15c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002b80)={'wlan1\x00'}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000002bc0)=r1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d00)={@cgroup=r0, 0x36, 0x1, 0x3, &(0x7f0000002c00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c80)=[0x0, 0x0], &(0x7f0000002cc0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d40)={@ifindex, r0, 0x31, 0x0, r0, @void, @value=r6, @void, @void, r13}, 0x20) 1.184573949s ago: executing program 0 (id=11773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x20008845}, 0xc000) 993.410177ms ago: executing program 2 (id=11774): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x56, 0x81, 0xa, 0x41, @private2, @local, @private1, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 0xb8f4757fc1e05f28, 0x180}}, @common=@hl={{0x28}, {0x1, 0x7}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @local, [], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002010500000000000000000002002e08648894d2aeccce219e21813e0b368baf7113ab239b9748817fc5b5c94469c9a2b9bf65dffe716cf84a8f41fcbcfd7946de890ab4fc8f18bd2934ad224a593256ea6904a8a1b1d8cdcbbe9ac643d0d0d24e0cd7aba7a4498a3810110c3fa167a60e5e5ade6e62c1e5f6b13828a3d8842c11508b873f8684b8e72ef7880be0d4fcca2ccee5982f43646eb7ee260d0b21debeaa8387652b6f516316c6c89397e4256946ed65520681d8c338637034446f6cb37c531e78baec003b8ac1734090a0"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000400", @ANYRES16=r7, @ANYBLOB="20002cbd7000fbdbdf2503000000"], 0x14}}, 0x40400c5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0xa, 0x4, 0x4) listen(r10, 0x5b91d5ed) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x100000001, 0xfffffffffffffdef) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280), 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 992.98454ms ago: executing program 1 (id=11775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r0], 0xa4}}, 0x40) 967.335783ms ago: executing program 3 (id=11776): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8937, &(0x7f00000000c0)={'bond0\x00', 0x10001}) (async) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 888.675864ms ago: executing program 0 (id=11777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00028006"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c8c768c68c2de7a50340df767770f5a2aa4b89dc52bf9907b8e71548922cd5606b5cc71113e4a19b399b1f042a6599753373408b1289296a9f87688a58d5e753dd24048d5fd489236aae87941ce645af3ba30dfcd508ee1fd98c19d74be4ced536e9f57eb284bb7d5e4ab832c4f955b7424eca0c7546cfd3037083c544bdcf7ed0567e49f1aba1978105d49bb9539c5f218c709a62a441875d4150f0f3d5c11ebfeac4f585dcc51073bd6e5ea", @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x40400f0}, 0x90) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 834.088452ms ago: executing program 1 (id=11778): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7300000000000000000000000000000000000000000000000000000076101e79027d159a4695d4f9683f"], 0x48) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r2, @ANYBLOB="0783025b8546b35b9ef9e2a3db0000f000001000b7030000000000005fcf00000c0000000000000000009500000000000041"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40440c1) 794.257837ms ago: executing program 3 (id=11779): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xa8}}, 0x20008001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 697.834662ms ago: executing program 0 (id=11780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r1 = socket(0x2b, 0x3, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) 650.249386ms ago: executing program 3 (id=11781): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 589.615207ms ago: executing program 1 (id=11782): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c0017"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000001c0)=0x3, 0x4) recvmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000001"], 0x30}}], 0x2, 0x0) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000040)={0x57}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r7, 0x952de000) syz_emit_ethernet(0x1445, &(0x7f0000000540)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x140f, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x200, "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"}, {0x18, 0x19, "7c417e9b5f4990e838f2583635ebe5fdc833789592a01265aada85407417c02b3736b578dc999bef2386fe53eb82937804b6e9d3a307f8b9f1633b87990befd4620f8a32dda52b3e40793c21b7d5e772ac7183d25b3924bad44303622bd794bb4bf3bde28cfffc19f9a32a2a547dfe14c67a3131224b2622dc9fb6d5ff01b6338a6ebc3796021a94d49d622ba24808f1f9e7902b929b884f0a9f281e28a7b1da46d34a99da2212ce0404cb2a71816d214b8601467fc8c9ef0d2fc8d50278685548d94f7fdffd43"}, {0xe, 0x4, "074a432c8f3092308a19a3e0cb742a1ac7af58c289d04478b0ff66371e9b1899074d2fdf"}, {0x0, 0x0, "664019"}, {0x3, 0x9, "a6862cf14e2f20bd2a100dbf27332131cb64cd71db96a94a25ecc7c4c356a7fdfcc67693f6ada71917e1267440bf6c5ef1db9f540ce49cd41f92fc62e4d2608768ae3121ed297b302d"}, {0x4, 0x8, "e3c8d5655d8e8d248c92d6b2399bcd471baa0fb8d6b422024c439c8ce35115a97d4d9e8a9b8882cb82f6b153642da3645a9c90727522ffdac77d2292175f"}, {0x19, 0xe, "c17a80f9a449dd947c789c2006c5ffe621e3c2cf2deda9e862ab67af024d8e83a73cd23e18df05e55d81c165538df930931754f673ceacefe1c1b6a34a9fb0b2d1ea03a58c3558ede9a83e2c4760f5d82c5250b6702a13795fa579b6040e1016c72bd7b9a823add126a34b237000b2"}, {0x22, 0x10, "17614000b230f6627caa37b63fd01a39198cf5dbe1688100dccb4d4a00cbe03eaf57d6ca0d49065e1f9e7ef4176b94d5c8f3eb775e667eb1e38437134f193f320696836128a31f82ef30522ef3c55284dd59f46d096f2052aa4516e3f9edd6b574cbc90a70d1b92c187243316c47c215b2ed771123c52c69a884d43f13641b66711a3851"}, {0x4, 0x14, "465b48c606d3816f86ce9ef9f09edb48dbf9f3582624e28a56d09d2f71077971706af43ffbf4e8c2edebc5d63f44be9881408ac9d13a31d8a81088d53f6368537362c43a9f1c96ab4ca6b7c1b85a7e291e6e088006bf2109f64f154a87353959dd6857e5ec3ec035b3a17dcd2068df54e3616106facb7628b19d5015cd91924b3917a3ce50bd74259108d6b4a85fb8c48486351fce5dbcf293cb3b0670cb43085a"}, {0xe, 0x1c, "90234af52710b5b6e1274f398f1b943bff11878ff76dcbe1c2b5cc39527f7f4c4075d15401edc5081c21a15d13837d95ea191ca02aa0ebb678b7f17aa338fba13b8f8d6018ceb5f38e053ade1360daf6d861b7d08f241d4548d8e023b0393af86e7c1d2419a18ea604c33385c4f634cac4d6cf9bddddb97340a66a8718e4b9fb94c4f29ee54a1c173147258cf78b3f9174a63e006e538ce248330ac3554bc8eb853dd6b3ec2fdcf4dac895629f011d3e29c3ac8a66c79e25edeb99ef01244f9db5856eec35514c35207bc12b2712dae8a8985f092dd06df663fb20349f1fd9d05c85"}]}}}}}}, 0x0) 586.796074ms ago: executing program 2 (id=11783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) (async) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0xb40, 0x29f, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, '\x00\x00\n\x00'}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) (async) getpeername(r1, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000440)=0x80) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bind$llc(r3, &(0x7f0000000480)={0x1a, 0x1, 0x3, 0x0, 0x9, 0x6, @remote}, 0x10) 510.448836ms ago: executing program 3 (id=11784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8ca}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x58}}, 0x0) listen(r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 491.28017ms ago: executing program 0 (id=11785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848300000005e140602bde200030e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40044) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x10001, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xb, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09000056"], 0x398}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0xc26, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0x20008005) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0xc0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40084) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x108, 0x42, 0x1, 0x0, 0x25dfdbfd, {0x3, 0x1}, [@generic="0f000000", @typed={0xe7, 0x3ffd, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00000000014ea2c4fd0101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e84673028ac2b5d4943ea13048402fa36d3bb4b2ba3cf21e4685e93f0d2da49b4ef1712a0934066cb1b762c62840ac57d08d6c978f7cccbf3af069c2de11c144ec3ac58ddd474c76671c9d5bcbac78c746379c9570b16f3391a18734b0fd5b279b06513da53cd0b895e02f2937e48c998481d7e1d6b91ef5a505fea81cac5c7a5411faa215d45dac3ae0058e01ad4a161d540070e88ee23bb3dac2cc631f0b7a73f8d696c2a377e56f340d7e930"}, @nested={0xdd, 0x8002}, @nested={0x4, 0x8003}]}, 0x108}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r13, 0x25, 0x0, @val=@netkit}, 0x1c) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r13, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) 394.292583ms ago: executing program 2 (id=11786): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)="8e00e9106c", 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x14008830) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0, 0xfffffffd}, 0x1c) (async) r4 = socket$netlink(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000002c0)=@newtaction={0x104, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0xf0, 0x1, [@m_skbedit={0xec, 0x18, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xfffffff9, 0x0, 0x0, 0xffff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0x2, 0x10000000, 0x7767d66a, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x65, 0x6, "f15d2c8d78a4cb2b9be7dc887dfa1f4d3dba91c6d2a1f17bbc5e73d6263634b3340fafd5f4b1cf57a9b55604d6d0f098828a811d17cc8783c5d9a6906a0e71c896a847d3ae2d5c6d10c6f201ebf8873ccf91a61a6b418a1fbef2c6d6d5563b6117"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x104}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) 302.930276ms ago: executing program 0 (id=11787): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='bond\x00', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 292.327997ms ago: executing program 4 (id=11788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000b40)={0x1164, r3, 0x4, 0x70bd2c, 0x800, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10d0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb1, 0x2, "a566f63e18fd128196c71de269390ed34c11c10e2e0b177b1f07c6bb03316fd1ada5e4ddf919a2a8c2ff79624599b99f6662ce3986bc8c6623006632a638152f1a4b9a786260b0b12625a823623bb6dbd583e10455f0752d9a2d8fe0f32a88027b139ecf66d99e449de0a0aae4db3f7fbac74c1aa7c386d5cbd22ede22928fca374417db5cde3bdc34e985524d2b886dad52a30180fbdb8144ff467be4270f05ea58dfda5385d08f292a8fe004"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x50, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x3b, 0x1, "7fb19a336f8bda477f8aa77192b718a4d309277f1f77774e4681867713b7178809108c33c5a6435d871c2791cb435f01d9a88d98cad370"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1164}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 173.43635ms ago: executing program 1 (id=11789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x50) close(0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000140)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r10}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={r8, r10, r11}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r14, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r15, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000800)={{r9, &(0x7f0000000600)='ingress\x00', 0x6000, &(0x7f0000000640)={@_ha_fsid={[0x4, 0x2]}, {0x54, 0xe949, 0x8, 0x3}}, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0xffffffff}, {[0x6, 0x7fffffff, 0x8, 0x5]}, 0x74, 0x98, &(0x7f0000000700)=""/152}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x1f, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x96}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @ldst={0x0, 0x2, 0x3, 0x6, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2bc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80000001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000440)='syzkaller\x00', 0xa, 0x50, &(0x7f0000000500)=""/80, 0x41100, 0x60, '\x00', r7, @fallback=0x33, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0xc, 0x7, 0x6}, 0x10, r15, r16, 0x3, &(0x7f00000008c0)=[r1, r17], &(0x7f0000000900)=[{0x1, 0x2, 0x5, 0xa}, {0x2, 0x1, 0x7, 0x8}, {0x4, 0x2, 0xc, 0xb}], 0x10, 0xfffffffb}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 171.612181ms ago: executing program 2 (id=11790): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0xa5}}, 0x3, 0xf, 0x1, 0xfffffffc, 0x80004}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x1, 0x7}, &(0x7f0000000200)=0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) listen(r0, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='P', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) close(0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100003c00010026bd700002000000010100800c000100"], 0x114}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000640)={{r10, &(0x7f0000000500)='TIPCp2\x00', 0xb8000, &(0x7f0000000540)={@align=0xd3, {0x40, 0x31, 0xfffffff8, 0x5}}, 0x200, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x80}, {[0x3, 0xf, 0xffffffff, 0x6]}, 0x1, 0x37, &(0x7f0000000600)=""/55}) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r9, r11, 0x4, r12}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000400)=0x3) syz_genetlink_get_family_id$tipc2(0x0, r8) 143.468008ms ago: executing program 3 (id=11791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) 102.056526ms ago: executing program 2 (id=11792): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket(0x2a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r3, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x28}, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000280)={&(0x7f0000000140)=[{0xfffffffffffffffb, 0x0, 0x0, {0xf, 0x41d, 0x2}}], 0x1, 0x20, 0x3, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) (rerun: 32) 0s ago: executing program 0 (id=11793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r4, 0x5421, 0x110e22fff6) kernel console output (not intermixed with test programs): .4.9400'. [ 1103.354504][ T8617] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 1103.384906][ T8617] xfrm1 (unregistering): left promiscuous mode [ 1103.704222][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.715695][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.726858][ T8617] bond0 (unregistering): Released all slaves [ 1103.741548][ T8617] bond1 (unregistering): Released all slaves [ 1103.756512][ T8617] bond2 (unregistering): Released all slaves [ 1103.773440][ T8617] bond3 (unregistering): Released all slaves [ 1103.790650][ T8617] bond4 (unregistering): Released all slaves [ 1103.811106][ T8617] bond5 (unregistering): Released all slaves [ 1103.837482][ T8617] bond6 (unregistering): Released all slaves [ 1103.856557][ T8617] bond7 (unregistering): Released all slaves [ 1103.873044][ T8617] bond8 (unregistering): Released all slaves [ 1103.888438][ T8617] bond9 (unregistering): Released all slaves [ 1104.266456][ T9290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.286006][ T9272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1104.428885][ T9274] bridge1: left allmulticast mode [ 1104.439755][ T147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.460176][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1104.488793][ T8617] tipc: Disabling bearer [ 1104.500936][ T8617] tipc: Left network mode [ 1104.752943][ T9308] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 1104.871524][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.902917][ T5614] Bluetooth: hci0: command tx timeout [ 1105.283189][ T9334] __nla_validate_parse: 1 callbacks suppressed [ 1105.283208][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1105.357379][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1105.454676][ T9336] tipc: Started in network mode [ 1105.482970][ T9336] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1105.497493][ T9336] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 1105.544337][ T9336] tipc: Enabled bearer , priority 10 [ 1105.891122][ T9363] netlink: 'syz.1.9422': attribute type 1 has an invalid length. [ 1106.054258][ T9356] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1106.126814][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.156663][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.184024][ T9151] bridge_slave_0: entered allmulticast mode [ 1106.217377][ T9151] bridge_slave_0: entered promiscuous mode [ 1106.248127][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.270116][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.288611][ T9151] bridge_slave_1: entered allmulticast mode [ 1106.307735][ T9151] bridge_slave_1: entered promiscuous mode [ 1106.528222][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1106.593160][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9429'. [ 1106.609435][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9429'. [ 1106.684156][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1106.764968][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.826574][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.854346][ T5729] tipc: Node number set to 1 [ 1106.980145][ T5614] Bluetooth: hci0: command tx timeout [ 1107.008729][ T9403] block nbd3: server does not support multiple connections per device. [ 1107.091593][ T9403] block nbd3: shutting down sockets [ 1107.104459][ T9398] syzkaller0: entered promiscuous mode [ 1107.112239][ T9398] syzkaller0: entered allmulticast mode [ 1107.130241][ T9151] team0: Port device team_slave_0 added [ 1107.168910][ T8617] hsr_slave_0: left promiscuous mode [ 1107.193677][ T8617] hsr_slave_1: left promiscuous mode [ 1107.209151][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.233818][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.474603][ T8617] team0 (unregistering): Port device team_slave_1 removed [ 1107.497159][ T8617] team0 (unregistering): Port device team_slave_0 removed [ 1107.643931][ T9151] team0: Port device team_slave_1 added [ 1107.724936][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.748758][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.802111][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.864619][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.882892][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.912539][ T9429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1107.924653][ T9429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1107.959366][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.026519][ T9433] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1108.162934][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1108.184723][ T9151] hsr_slave_0: entered promiscuous mode [ 1108.208767][ T9151] hsr_slave_1: entered promiscuous mode [ 1108.216338][ T9151] debugfs: 'hsr0' already exists in 'hsr' [ 1108.241637][ T9151] Cannot create hsr debugfs directory [ 1108.586592][ T9456] netlink: 'syz.1.9442': attribute type 8 has an invalid length. [ 1108.927752][ T9151] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.050391][ T5614] Bluetooth: hci0: command tx timeout [ 1109.090227][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9449'. [ 1109.116246][ T9151] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.211589][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9449'. [ 1109.294242][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9450'. [ 1109.472390][ T9151] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.693793][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9454'. [ 1109.753782][ T9151] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.647400][ T9151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1110.685481][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1110.705824][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1110.739767][ T9151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1110.774477][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1110.807564][ T9151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1110.886585][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1110.947223][ T9151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1110.977821][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1110.994165][ T9559] sch_fq: defrate 0 ignored. [ 1111.010665][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1111.151745][ T9569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1111.221524][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.253104][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9472'. [ 1111.377613][ T9579] gtp1: entered promiscuous mode [ 1111.391788][ T9579] gtp1: entered allmulticast mode [ 1111.445694][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.481364][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.488610][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.561834][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.569165][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.616678][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9476'. [ 1111.750506][ T9592] netlink: 'syz.1.9477': attribute type 1 has an invalid length. [ 1111.807605][ T9598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9478'. [ 1111.880859][ T9598] xt_nfacct: accounting object `' does not exist [ 1112.191320][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1112.251052][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1112.424999][ T9634] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1112.581532][ T9645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1112.653614][ T9645] Bluetooth: MGMT ver 1.23 [ 1112.680233][ T9645] Bluetooth: hci0: unsupported parameter 5135 [ 1112.713651][ T9645] Bluetooth: hci0: unsupported parameter 8192 [ 1112.821394][ T9645] Bluetooth: hci0: unsupported parameter 5135 [ 1112.883018][ T9645] Bluetooth: hci0: unsupported parameter 8192 [ 1113.334804][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.561783][ T9151] veth0_vlan: entered promiscuous mode [ 1113.624835][ T9151] veth1_vlan: entered promiscuous mode [ 1113.678958][ T9699] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1113.841853][ T9151] veth0_macvtap: entered promiscuous mode [ 1113.887048][ T9702] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1113.915767][ T9151] veth1_macvtap: entered promiscuous mode [ 1113.938793][ T9708] netlink: 'syz.2.9501': attribute type 5 has an invalid length. [ 1113.962257][ T9702] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1114.067015][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.117567][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.210045][ T358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.230124][ T358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.459976][T20766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.496298][T20766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.525666][ T9723] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1114.598963][ T9723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1114.718347][T20767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.753748][T20767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.802834][ T9735] netlink: 'syz.1.9510': attribute type 1 has an invalid length. [ 1114.858313][ T9740] netlink: 'syz.1.9510': attribute type 1 has an invalid length. [ 1114.868541][ T9735] netlink: 'syz.1.9510': attribute type 2 has an invalid length. [ 1114.893192][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.918536][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.942160][ T9740] netlink: 'syz.1.9510': attribute type 2 has an invalid length. [ 1114.990635][ T9735] ipvlan2: entered allmulticast mode [ 1115.006296][ T9735] batadv_slave_1: entered allmulticast mode [ 1115.015746][ T9735] batman_adv: batadv0: Adding interface: ipvlan2 [ 1115.043193][ T9735] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.126157][ T9735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.138733][ T9735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.149507][ T9735] batman_adv: batadv0: Interface activated: ipvlan2 [ 1115.676631][ T9773] netlink: 'syz.0.9514': attribute type 1 has an invalid length. [ 1115.749697][ T9773] __nla_validate_parse: 7 callbacks suppressed [ 1115.749717][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1115.819734][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9514'. [ 1116.187332][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9523'. [ 1116.256521][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1116.352746][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1116.368091][ T9801] hsr_slave_1 (unregistering): left promiscuous mode [ 1116.403387][ T9812] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9527'. [ 1116.427990][ T9815] xt_hashlimit: size too large, truncated to 1048576 [ 1116.477301][ T9807] bond0: entered promiscuous mode [ 1116.502520][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1116.536494][ T9807] bond_slave_0: entered promiscuous mode [ 1116.578064][ T9807] bond_slave_1: entered promiscuous mode [ 1116.603647][ T9807] bridge1: entered promiscuous mode [ 1116.628067][ T9807] gretap0: entered promiscuous mode [ 1116.658018][ T9807] debugfs: 'hsr1' already exists in 'hsr' [ 1116.672566][ T9807] Cannot create hsr debugfs directory [ 1116.700491][ T9807] hsr1: entered promiscuous mode [ 1116.771822][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.001966][ T9836] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1117.276280][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.308306][ T9845] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1117.919426][ T9878] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1117.939531][ T9878] bond1 (unregistering): Released all slaves [ 1118.275151][ T9905] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 1118.287115][ T9906] netlink: 'syz.0.9552': attribute type 2 has an invalid length. [ 1118.317700][ T9903] netlink: 'syz.2.9551': attribute type 1 has an invalid length. [ 1118.330615][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9551'. [ 1118.375541][ T9917] ip_tables: iptables: counters copy to user failed while replacing table [ 1118.421920][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1118.921614][ T9952] xt_hashlimit: size too large, truncated to 1048576 [ 1120.185175][ T9967] bond3: entered promiscuous mode [ 1120.208465][ T9967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1120.817228][T10048] __nla_validate_parse: 3 callbacks suppressed [ 1120.817246][T10048] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1120.894879][T30714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.915974][T30714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.219315][T10069] ipvlan3: entered allmulticast mode [ 1121.238132][T10069] mac80211_hwsim hwsim78 wlan0: entered allmulticast mode [ 1121.264434][T10069] batman_adv: batadv0: Adding interface: ipvlan3 [ 1121.287609][T10069] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.327143][T10069] batman_adv: batadv0: Interface activated: ipvlan3 [ 1121.408721][T10087] macvlan0: entered promiscuous mode [ 1121.425486][T10087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.487962][T10065] syzkaller0: entered promiscuous mode [ 1121.530451][T10065] syzkaller0: entered allmulticast mode [ 1121.558899][T10087] lo: entered allmulticast mode [ 1121.603676][T10087] tunl0: entered allmulticast mode [ 1121.632323][T10087] gre0: entered allmulticast mode [ 1121.641923][T10105] netlink: NAT attribute has 5 unknown bytes [ 1121.649702][T10105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1121.664128][T10087] gretap0: entered allmulticast mode [ 1121.676372][T10087] erspan0: entered allmulticast mode [ 1121.696432][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9599'. [ 1121.697043][T10087] ip_vti0: entered allmulticast mode [ 1121.715596][T10087] ip6_vti0: entered allmulticast mode [ 1121.726071][T10087] sit0: entered allmulticast mode [ 1121.737874][T10087] ip6tnl0: entered allmulticast mode [ 1121.748707][T10087] ip6gre0: entered allmulticast mode [ 1121.758629][T10087] syz_tun: entered allmulticast mode [ 1121.776851][T10087] ip6gretap0: entered allmulticast mode [ 1121.791510][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.799180][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.808451][T10087] bridge0: entered allmulticast mode [ 1121.906846][T10111] batman_adv: batadv0: Adding interface: dummy0 [ 1121.923797][T10111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.963789][ T4839] IPVS: starting estimator thread 0... [ 1121.964469][T10111] batman_adv: batadv0: Interface activated: dummy0 [ 1122.041387][T10111] batadv0: mtu less than device minimum [ 1122.049713][T10117] IPVS: using max 31 ests per chain, 74400 per kthread [ 1122.062219][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.074995][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.086780][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.098493][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.111056][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.122893][T10111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.692234][T10145] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1122.932569][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9617'. [ 1122.955253][T10157] netlink: 'syz.2.9613': attribute type 1 has an invalid length. [ 1122.963912][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9617'. [ 1122.991291][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9614'. [ 1123.228057][ T8617] IPVS: starting estimator thread 0... [ 1123.343132][T10181] IPVS: using max 30 ests per chain, 72000 per kthread [ 1123.454298][T10190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1123.552152][T10193] geneve2: entered promiscuous mode [ 1123.597501][T10193] geneve2: entered allmulticast mode [ 1123.606616][T10200] sit0: entered promiscuous mode [ 1123.618878][T10200] netlink: 'syz.4.9623': attribute type 1 has an invalid length. [ 1123.629164][T10200] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9623'. [ 1123.643559][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9626'. [ 1123.664422][T10199] ipvlan2: entered allmulticast mode [ 1123.673486][T10205] netlink: 'syz.2.9627': attribute type 10 has an invalid length. [ 1123.682427][T10199] virt_wifi0: entered allmulticast mode [ 1123.703489][T10199] batman_adv: batadv0: Adding interface: ipvlan2 [ 1123.719850][T10199] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.753438][T10199] batman_adv: batadv0: Interface activated: ipvlan2 [ 1123.820184][ T8617] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1123.829277][ T8617] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1123.846706][ T8617] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1123.871218][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9628'. [ 1123.890484][ T8617] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1124.093026][T20767] IPVS: starting estimator thread 0... [ 1124.133436][T10230] netlink: 'syz.1.9633': attribute type 39 has an invalid length. [ 1124.189654][T10228] IPVS: using max 28 ests per chain, 67200 per kthread [ 1124.289307][T10234] Cannot find add_set index 0 as target [ 1124.619763][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9641'. [ 1124.816130][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9647'. [ 1125.108543][T10279] netlink: 'syz.0.9651': attribute type 1 has an invalid length. [ 1125.200716][T10279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1125.285840][T10283] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1125.346506][T10283] bond1: (slave batadv1): making interface the new active one [ 1125.367637][T10283] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1125.910067][T10316] __nla_validate_parse: 6 callbacks suppressed [ 1125.910087][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9660'. [ 1126.143233][T10328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1126.453202][T10352] netlink: 'syz.0.9672': attribute type 2 has an invalid length. [ 1126.635028][T10357] netlink: 'syz.3.9673': attribute type 1 has an invalid length. [ 1126.656360][T10362] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1126.684028][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9677'. [ 1126.718331][T10357] bond1: option mode: invalid value (8) [ 1126.752766][T10357] bond1 (unregistering): Released all slaves [ 1127.009202][T10360] : renamed from dummy0 (while UP) [ 1127.196830][T10376] tipc: Started in network mode [ 1127.209801][T10376] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 1127.284354][T10380] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9680'. [ 1127.506311][T10386] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1127.525464][T10389] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1127.558813][T10382] netlink: 'syz.3.9681': attribute type 1 has an invalid length. [ 1127.618314][T10382] net_ratelimit: 35 callbacks suppressed [ 1127.618332][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.663364][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9685'. [ 1127.697185][T10391] bond0: (slave syz_tun): Releasing backup interface [ 1127.709065][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9686'. [ 1127.730103][T10397] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1127.741613][T10391] syz_tun (unregistering): left allmulticast mode [ 1127.994181][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9692'. [ 1128.046943][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9692'. [ 1128.060468][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9693'. [ 1128.239264][T10420] syzkaller0: entered allmulticast mode [ 1128.428337][T10433] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1128.936028][T30714] tipc: Subscription rejected, illegal request [ 1129.032461][T10469] netlink: 'syz.2.9714': attribute type 2 has an invalid length. [ 1129.085853][T10469] netlink: 'syz.2.9714': attribute type 8 has an invalid length. [ 1129.108645][T10472] bridge1: entered allmulticast mode [ 1129.244531][T10479] Bluetooth: hci0: unsupported parameter 5135 [ 1129.271398][T10479] Bluetooth: hci0: unsupported parameter 8192 [ 1129.285491][T10479] Bluetooth: hci0: unsupported parameter 5135 [ 1129.316084][T10479] Bluetooth: hci0: unsupported parameter 8192 [ 1129.988901][T10504] syzkaller0: entered promiscuous mode [ 1129.995854][T10504] syzkaller0: entered allmulticast mode [ 1130.027867][T10508] syzkaller0: entered promiscuous mode [ 1130.042349][T10508] syzkaller0: entered allmulticast mode [ 1130.135553][T10514] netlink: 'syz.0.9729': attribute type 9 has an invalid length. [ 1133.470044][T10523] __nla_validate_parse: 7 callbacks suppressed [ 1133.470076][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1133.490099][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1133.715226][T10539] netlink: 'syz.2.9736': attribute type 32 has an invalid length. [ 1133.772052][T10539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9736'. [ 1133.795052][T10547] syz_tun: entered allmulticast mode [ 1133.844163][T10551] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 1133.872175][T10551] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 1134.108872][T10571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9744'. [ 1134.123789][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9744'. [ 1134.134809][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9744'. [ 1134.377879][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9750'. [ 1134.584841][T10598] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9754'. [ 1134.676718][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.788594][T10600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.896457][T10605] erspan0: entered promiscuous mode [ 1134.939647][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9755'. [ 1134.996829][T10608] tunl0: entered promiscuous mode [ 1135.076556][T10608] netlink: 'syz.2.9755': attribute type 3 has an invalid length. [ 1135.105565][T10608] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9755'. [ 1135.372331][T10642] netlink: 'syz.0.9764': attribute type 1 has an invalid length. [ 1135.706866][T10651] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1135.724335][T10651] bond3 (unregistering): Released all slaves [ 1135.888227][T10663] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1136.103423][T10679] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 1136.430446][T10651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.063449][T10732] netlink: 'syz.0.9790': attribute type 1 has an invalid length. [ 1137.948191][T10773] ip_tables: iptables: counters copy to user failed while replacing table [ 1137.966674][T10773] ip_tables: iptables: counters copy to user failed while replacing table [ 1138.190673][T10785] : renamed from vlan1 (while UP) [ 1138.205497][T10783] syzkaller0: entered promiscuous mode [ 1138.211488][T10783] syzkaller0: entered allmulticast mode [ 1138.223344][T10783] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1138.486596][T10802] netlink: 'syz.3.9815': attribute type 1 has an invalid length. [ 1138.502402][T10802] __nla_validate_parse: 8 callbacks suppressed [ 1138.502443][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1138.773626][T10817] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1138.785566][T10817] gretap1: entered promiscuous mode [ 1138.791531][T10817] gretap1: entered allmulticast mode [ 1138.827349][T10824] netlink: 'syz.4.9822': attribute type 1 has an invalid length. [ 1138.836879][T10824] netlink: 200 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1138.847431][T10824] netlink: 'syz.4.9822': attribute type 1 has an invalid length. [ 1138.860990][T10824] netlink: 29 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1138.918344][T10824] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1139.041744][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9825'. [ 1139.164921][T10846] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1139.176816][T10839] bridge_slave_0: invalid flags given to default FDB implementation [ 1139.425240][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9832'. [ 1139.435101][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9832'. [ 1139.577026][T10865] netlink: 'syz.1.9834': attribute type 5 has an invalid length. [ 1139.757409][T10868] syzkaller0: entered promiscuous mode [ 1139.788234][T10868] syzkaller0: entered allmulticast mode [ 1139.865764][T10880] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9838'. [ 1139.901439][ T8617] bond0: (slave bridge1): link status definitely down, disabling slave [ 1140.398636][T10913] netlink: 'syz.0.9847': attribute type 11 has an invalid length. [ 1141.144960][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9856'. [ 1141.317636][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1141.330844][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1141.519879][T10981] netlink: 'syz.1.9860': attribute type 4 has an invalid length. [ 1141.555877][T10983] hsr_slave_0: left promiscuous mode [ 1141.576177][T10983] hsr_slave_1: left promiscuous mode [ 1141.724868][T10995] sock: sock_set_timeout: `syz.0.9862' (pid 10995) tries to set negative timeout [ 1141.757394][T10992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1142.298098][T11025] netlink: 'syz.4.9874': attribute type 1 has an invalid length. [ 1142.643398][T11044] vlan2: entered allmulticast mode [ 1142.665009][T11044] bond0: entered allmulticast mode [ 1142.694582][T11044] bond_slave_0: entered allmulticast mode [ 1142.722797][T11044] bond_slave_1: entered allmulticast mode [ 1142.771996][T11004] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1143.084179][T11062] syzkaller0: entered promiscuous mode [ 1143.120276][T11062] syzkaller0: entered allmulticast mode [ 1143.215161][T11062] sctp: [Deprecated]: syz.0.9884 (pid 11062) Use of int in maxseg socket option. [ 1143.215161][T11062] Use struct sctp_assoc_value instead [ 1143.329482][T11083] syzkaller0: entered promiscuous mode [ 1143.336100][T11083] syzkaller0: entered allmulticast mode [ 1143.551982][T11092] xt_CT: No such helper "snmp_trap" [ 1143.724137][T11095] syz_tun: entered promiscuous mode [ 1143.732160][T11095] vlan2: entered promiscuous mode [ 1143.748856][T11098] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1143.869275][T11103] __nla_validate_parse: 7 callbacks suppressed [ 1143.869293][T11103] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9895'. [ 1143.888794][T11101] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1143.938442][T11105] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1143.970293][T11105] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1144.013706][ T5614] Bluetooth: hci0: command 0x0401 tx timeout [ 1144.265768][T11115] sctp: [Deprecated]: syz.4.9898 (pid 11115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1144.265768][T11115] Use struct sctp_sack_info instead [ 1144.852173][T11154] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1145.148108][T11163] : renamed from bond_slave_0 (while UP) [ 1145.210967][T11175] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9917'. [ 1145.273623][T11179] Cannot find set identified by id 0 to match [ 1148.092110][T11177] netlink: 'syz.2.9918': attribute type 20 has an invalid length. [ 1148.101572][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1148.113170][T11177] netlink: 'syz.2.9918': attribute type 20 has an invalid length. [ 1148.122377][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1148.141926][T11191] syzkaller0: entered promiscuous mode [ 1148.157715][T11191] syzkaller0: entered allmulticast mode [ 1148.243556][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1148.253678][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1148.471209][T11229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9927'. [ 1148.763715][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9932'. [ 1148.783419][T11245] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9933'. [ 1148.978124][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9934'. [ 1149.162946][T11262] netlink: del zone limit has 4 unknown bytes [ 1149.224573][T11268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9938'. [ 1149.282179][T11269] netlink: 'syz.3.9938': attribute type 3 has an invalid length. [ 1149.316213][T11269] netlink: 'syz.3.9938': attribute type 4 has an invalid length. [ 1149.328345][T11269] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.9938'. [ 1149.348418][T11263] netlink: 'syz.2.9937': attribute type 2 has an invalid length. [ 1149.361243][T11275] netlink: 'syz.2.9937': attribute type 2 has an invalid length. [ 1151.510889][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9941'. [ 1151.561968][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9944'. [ 1151.588443][T11297] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9943'. [ 1151.643235][T11295] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9943'. [ 1151.657969][T11297] gretap0: entered promiscuous mode [ 1151.743766][T11295] 0{X: renamed from gretap0 [ 1151.761444][T11295] 0{X: left promiscuous mode [ 1151.777700][T11295] 0{X: entered allmulticast mode [ 1151.789156][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1151.802555][T11295] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1152.053165][T11319] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9951'. [ 1152.108321][T11323] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1152.214206][T11327] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1152.455850][T11338] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 1152.477536][T11338] tipc: Enabled bearer , priority 10 [ 1152.886851][T11358] veth1_to_bond: entered allmulticast mode [ 1153.023534][T11354] veth1_to_bond: left allmulticast mode [ 1153.191046][T10978] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.231113][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.254658][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.288408][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.594564][T10245] tipc: Node number set to 2035774871 [ 1153.808288][T10976] IPVS: starting estimator thread 0... [ 1153.937328][T11404] IPVS: using max 29 ests per chain, 69600 per kthread [ 1154.178047][T11413] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1154.190572][T11413] bond2: entered allmulticast mode [ 1154.202154][T11418] __nla_validate_parse: 7 callbacks suppressed [ 1154.202175][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1154.210977][T11419] x_tables: unsorted underflow at hook 3 [ 1154.265904][T11415] bridge2: entered promiscuous mode [ 1154.334890][T11415] bridge2: entered allmulticast mode [ 1154.380551][T11415] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1154.740735][T11436] netlink: 'syz.3.9985': attribute type 10 has an invalid length. [ 1154.760034][T11437] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9985'. [ 1154.837469][T11436] team0: Port device  added [ 1154.853079][T11442] netlink: 'syz.0.9986': attribute type 10 has an invalid length. [ 1154.872483][T11442] veth1_macvtap: left promiscuous mode [ 1154.896650][T11442] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1154.921099][T11447] netlink: 'syz.4.9987': attribute type 4 has an invalid length. [ 1154.924466][T11446] netlink: 'syz.4.9987': attribute type 4 has an invalid length. [ 1155.146281][T11458] Bluetooth: hci0: unsupported parameter 5134 [ 1155.199830][T11458] Bluetooth: hci0: unsupported parameter 8192 [ 1155.225766][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9990'. [ 1155.238805][T11458] Bluetooth: hci0: unsupported parameter 5134 [ 1155.272541][T11458] Bluetooth: hci0: unsupported parameter 8192 [ 1155.290581][T11465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9994'. [ 1155.470935][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1155.916992][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1156.723851][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10020'. [ 1157.158891][T11582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10025'. [ 1157.276945][T11588] netlink: 'syz.0.10030': attribute type 11 has an invalid length. [ 1157.502184][T11598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10034'. [ 1157.538635][T11598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10034'. [ 1157.590620][T11601] netlink: 'syz.3.10033': attribute type 34 has an invalid length. [ 1157.658726][T11601] bond1: option lacp_strict: invalid value (37) [ 1157.683261][T11601] bond1 (unregistering): Released all slaves [ 1158.050005][T11623] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1158.076156][T11625] netlink: 'syz.0.10040': attribute type 10 has an invalid length. [ 1158.088029][T11623] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1158.187355][T11633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1158.211817][T11633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1158.455146][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.174294][T11670] bond1: entered promiscuous mode [ 1159.331275][T11677] TCP: TCP_TX_DELAY enabled [ 1159.403414][T11678] __nla_validate_parse: 72 callbacks suppressed [ 1159.403434][T11678] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10055'. [ 1159.678664][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10059'. [ 1159.758401][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10059'. [ 1160.325175][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10057'. [ 1160.671081][T11732] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1160.691588][T11732] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1160.706901][T11732] netlink: 19 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1160.831873][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10071'. [ 1160.911840][T11738] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1161.372148][T11774] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10081'. [ 1161.377810][T11772] bond2: entered promiscuous mode [ 1161.387614][T11772] bond2: entered allmulticast mode [ 1161.393500][T11772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1161.414210][T11774] xt_hashlimit: size too large, truncated to 1048576 [ 1161.430021][T11774] xt_hashlimit: max too large, truncated to 1048576 [ 1161.436735][T11774] xt_hashlimit: invalid rate [ 1161.552875][T11780] syzkaller0: entered promiscuous mode [ 1161.565469][T11780] syzkaller0: entered allmulticast mode [ 1161.597874][T11791] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10087'. [ 1161.677667][T11792] netlink: 'syz.4.10084': attribute type 2 has an invalid length. [ 1164.195045][T11763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.422227][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1164.442172][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1164.478352][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10097'. [ 1164.493298][T11830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1164.536361][T11834] netlink: 'syz.4.10099': attribute type 11 has an invalid length. [ 1164.675448][T11843] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10101'. [ 1164.935388][T11857] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1165.087016][T11864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10107'. [ 1165.133154][T11864] netlink: 'syz.0.10107': attribute type 1 has an invalid length. [ 1165.219879][T11869] bond3: (slave geneve3): making interface the new active one [ 1165.229959][T11869] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1165.329910][T10977] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1165.354193][T10977] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1165.375365][T10977] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1165.388908][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10112'. [ 1165.409796][T10977] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1165.532262][T11882] tipc: Started in network mode [ 1165.548233][T11882] tipc: Node identity ac14142f, cluster identity 4711 [ 1165.564485][T11882] tipc: Enabling of bearer rejected, failed to enable media [ 1165.600601][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10116'. [ 1165.615900][T11885] vlan1: entered promiscuous mode [ 1165.631875][T11882] netlink: 'syz.0.10113': attribute type 12 has an invalid length. [ 1165.952676][T11900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1166.208124][T11912] netlink: 'syz.3.10124': attribute type 2 has an invalid length. [ 1166.212649][T11911] netlink: 'syz.3.10124': attribute type 2 has an invalid length. [ 1166.601781][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10128'. [ 1166.675719][T11929] syzkaller0: entered promiscuous mode [ 1166.689072][T11929] syzkaller0: entered allmulticast mode [ 1166.876988][T11943] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1167.584213][T11936] erspan0: entered promiscuous mode [ 1167.752466][T11979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1171.445697][T12018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1171.684836][T12048] netlink: 'syz.2.10163': attribute type 49 has an invalid length. [ 1171.705936][T12049] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 1172.558345][T12090] __nla_validate_parse: 5 callbacks suppressed [ 1172.558368][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10173'. [ 1172.732879][ C0] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 1173.084358][T12112] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1173.388240][T12132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10189'. [ 1174.063253][T12159] netlink: 'syz.4.10194': attribute type 1 has an invalid length. [ 1174.119253][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10194'. [ 1174.564922][T12180] netlink: 'syz.3.10201': attribute type 2 has an invalid length. [ 1174.856433][T12195] sctp: [Deprecated]: syz.2.10205 (pid 12195) Use of int in maxseg socket option. [ 1174.856433][T12195] Use struct sctp_assoc_value instead [ 1174.872519][T12196] sctp: [Deprecated]: syz.2.10205 (pid 12196) Use of int in maxseg socket option. [ 1174.872519][T12196] Use struct sctp_assoc_value instead [ 1175.384027][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 1175.428945][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10209'. [ 1175.692627][T12231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10213'. [ 1175.903295][T12240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10217'. [ 1175.956928][T12240] openvswitch: netlink: Multiple metadata blocks provided [ 1176.005033][T12245] x_tables: unsorted underflow at hook 2 [ 1176.496483][T12266] x_tables: duplicate entry at hook 1 [ 1176.830183][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10228'. [ 1177.006364][T12280] netlink: 'syz.1.10230': attribute type 9 has an invalid length. [ 1177.042886][T12280] netlink: 'syz.1.10230': attribute type 4 has an invalid length. [ 1177.224829][T12288] xt_hashlimit: size too large, truncated to 1048576 [ 1178.058003][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1178.887734][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10253'. [ 1179.088914][T12360] xt_HMARK: proto mask must be zero with L3 mode [ 1182.084212][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10254'. [ 1182.093946][T12359] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10254'. [ 1182.860134][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10263'. [ 1183.058074][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1183.086141][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1183.308837][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1183.371052][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10271'. [ 1183.406460][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10270'. [ 1183.481390][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1183.719700][T12440] netlink: 'syz.4.10277': attribute type 10 has an invalid length. [ 1183.732854][ T4927] block nbd3: Receive control failed (result -32) [ 1183.732854][ T5614] block nbd3: Receive control failed (result -32) [ 1183.813623][T12440] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1184.038024][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10281'. [ 1184.103465][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10281'. [ 1184.545407][T12472] bond5 (unregistering): Released all slaves [ 1184.773916][T12486] syzkaller0: entered promiscuous mode [ 1184.791786][T12486] syzkaller0: entered allmulticast mode [ 1185.098002][T12494] ksmbd: Unknown IPC event: 1, ignore. [ 1185.228717][T12511] netlink: 'syz.4.10296': attribute type 1 has an invalid length. [ 1185.320044][T12520] netlink: 'syz.3.10299': attribute type 1 has an invalid length. [ 1185.398539][T12520] bond5: entered promiscuous mode [ 1185.404646][T12520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1185.416235][T12525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1185.475513][T12520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1185.493529][T12520] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1185.504214][T12520] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1185.518477][T12520] bond5: (slave ip6gre2): making interface the new active one [ 1185.526284][T12520] ip6gre2: entered promiscuous mode [ 1185.544976][T12520] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 1186.005962][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1186.093210][T12552] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10307'. [ 1186.120633][T12552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10307'. [ 1186.228519][T12559] netlink: 'syz.0.10310': attribute type 12 has an invalid length. [ 1186.238060][T12559] netlink: 'syz.0.10310': attribute type 29 has an invalid length. [ 1186.274171][T12559] netlink: 'syz.0.10310': attribute type 3 has an invalid length. [ 1186.282898][T12559] netlink: 'syz.0.10310': attribute type 2 has an invalid length. [ 1187.053205][T12562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.318554][T12652] netlink: 'syz.0.10329': attribute type 3 has an invalid length. [ 1188.354049][T12652] __nla_validate_parse: 6 callbacks suppressed [ 1188.354068][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1188.400714][T12652] netlink: 'syz.0.10329': attribute type 3 has an invalid length. [ 1188.427879][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1188.507970][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1188.751046][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10334'. [ 1188.762409][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10334'. [ 1189.328743][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10343'. [ 1189.358442][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10343'. [ 1189.446844][T12706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10347'. [ 1189.555028][T12714] netlink: 'syz.1.10349': attribute type 2 has an invalid length. [ 1189.564328][T12714] netlink: 'syz.1.10349': attribute type 8 has an invalid length. [ 1189.573583][T12714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10349'. [ 1189.757506][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10351'. [ 1189.957198][T12736] netlink: 'syz.4.10354': attribute type 21 has an invalid length. [ 1190.306759][T12748] syzkaller0: entered promiscuous mode [ 1190.313167][T12748] syzkaller0: entered allmulticast mode [ 1190.556718][T12758] FAULT_INJECTION: forcing a failure. [ 1190.556718][T12758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.572426][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.2.10364 Not tainted syzkaller #0 PREEMPT(full) [ 1190.572457][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.572471][T12758] Call Trace: [ 1190.572480][T12758] [ 1190.572489][T12758] dump_stack_lvl+0xe8/0x150 [ 1190.572528][T12758] should_fail_ex+0x410/0x560 [ 1190.572566][T12758] _copy_from_iter+0x1d3/0x1660 [ 1190.572601][T12758] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 1190.572628][T12758] ? rcu_is_watching+0x16/0xb0 [ 1190.572650][T12758] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1190.572676][T12758] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 1190.572701][T12758] ? __pfx__copy_from_iter+0x10/0x10 [ 1190.572739][T12758] ? __alloc_skb+0x27a/0x7a0 [ 1190.572766][T12758] ? __alloc_skb+0x27a/0x7a0 [ 1190.572801][T12758] ? netlink_sendmsg+0x650/0xb40 [ 1190.572824][T12758] ? skb_put+0x112/0x210 [ 1190.572856][T12758] netlink_sendmsg+0x6c0/0xb40 [ 1190.572890][T12758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.572918][T12758] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1190.572959][T12758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.572981][T12758] sock_sendmsg_nosec+0x13a/0x180 [ 1190.573010][T12758] ____sys_sendmsg+0x54e/0x850 [ 1190.573050][T12758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1190.573093][T12758] ? import_iovec+0x73/0xa0 [ 1190.573119][T12758] ___sys_sendmsg+0x2a5/0x360 [ 1190.573152][T12758] ? __lock_acquire+0x683/0x2cf0 [ 1190.573188][T12758] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.573259][T12758] ? __fget_files+0x2a/0x420 [ 1190.573289][T12758] ? __fget_files+0x3a2/0x420 [ 1190.573329][T12758] __x64_sys_sendmsg+0x1b1/0x290 [ 1190.573366][T12758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1190.573422][T12758] do_syscall_64+0x166/0x520 [ 1190.573448][T12758] ? trace_irq_disable+0x3b/0x140 [ 1190.573477][T12758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.573500][T12758] ? clear_bhb_loop+0x70/0xc0 [ 1190.573527][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.573548][T12758] RIP: 0033:0x7f189199e0d9 [ 1190.573582][T12758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.573600][T12758] RSP: 002b:00007f1892821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.573623][T12758] RAX: ffffffffffffffda RBX: 00007f1891c25fa0 RCX: 00007f189199e0d9 [ 1190.573638][T12758] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000009 [ 1190.573652][T12758] RBP: 00007f1892821090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.573666][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.573678][T12758] R13: 00007f1891c26038 R14: 00007f1891c25fa0 R15: 00007ffdeecb8218 [ 1190.573716][T12758] [ 1191.196667][T12776] openvswitch: netlink: Flow key attr not present in new flow. [ 1191.275859][T12765] syzkaller0: entered promiscuous mode [ 1191.302608][T12765] syzkaller0: entered allmulticast mode [ 1194.584835][T12771] team0: Port device team_slave_0 removed [ 1194.897151][T12812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1194.928733][T12816] FAULT_INJECTION: forcing a failure. [ 1194.928733][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.957300][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.3.10379 Not tainted syzkaller #0 PREEMPT(full) [ 1194.957329][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1194.957341][T12816] Call Trace: [ 1194.957350][T12816] [ 1194.957360][T12816] dump_stack_lvl+0xe8/0x150 [ 1194.957395][T12816] should_fail_ex+0x410/0x560 [ 1194.957434][T12816] should_failslab+0xa8/0x100 [ 1194.957466][T12816] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 1194.957490][T12816] ? local_lock_release+0x9c/0x160 [ 1194.957521][T12816] ? __alloc_skb+0x1db/0x7a0 [ 1194.957550][T12816] ? __alloc_skb+0x1db/0x7a0 [ 1194.957585][T12816] __alloc_skb+0x1db/0x7a0 [ 1194.957616][T12816] netlink_ack+0x136/0xb30 [ 1194.957643][T12816] ? __pfx___up_read+0x10/0x10 [ 1194.957677][T12816] rdma_nl_rcv+0x40a/0xa40 [ 1194.957713][T12816] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1194.957759][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.957781][T12816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.957809][T12816] netlink_unicast+0x7bd/0x940 [ 1194.957858][T12816] netlink_sendmsg+0x813/0xb40 [ 1194.957892][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.957919][T12816] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1194.957960][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.957983][T12816] sock_sendmsg_nosec+0x13a/0x180 [ 1194.958011][T12816] ____sys_sendmsg+0x54e/0x850 [ 1194.958051][T12816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.958091][T12816] ? import_iovec+0x73/0xa0 [ 1194.958117][T12816] ___sys_sendmsg+0x2a5/0x360 [ 1194.958148][T12816] ? __lock_acquire+0x683/0x2cf0 [ 1194.958183][T12816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.958252][T12816] ? __fget_files+0x2a/0x420 [ 1194.958281][T12816] ? __fget_files+0x3a2/0x420 [ 1194.958341][T12816] __x64_sys_sendmsg+0x1b1/0x290 [ 1194.958396][T12816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1194.958452][T12816] do_syscall_64+0x166/0x520 [ 1194.958480][T12816] ? trace_irq_disable+0x3b/0x140 [ 1194.958510][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.958534][T12816] ? clear_bhb_loop+0x70/0xc0 [ 1194.958562][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.958585][T12816] RIP: 0033:0x7f5bb0d9e0d9 [ 1194.958607][T12816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.958640][T12816] RSP: 002b:00007f5bb1ba0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.958664][T12816] RAX: ffffffffffffffda RBX: 00007f5bb1025fa0 RCX: 00007f5bb0d9e0d9 [ 1194.958680][T12816] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000009 [ 1194.958695][T12816] RBP: 00007f5bb1ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.958709][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.958722][T12816] R13: 00007f5bb1026038 R14: 00007f5bb1025fa0 R15: 00007ffdf3a112a8 [ 1194.958756][T12816] [ 1195.434608][T12829] __nla_validate_parse: 7 callbacks suppressed [ 1195.434629][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10382'. [ 1195.481233][T12829] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10382'. [ 1195.615125][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10382'. [ 1195.717235][T12839] syzkaller0: entered promiscuous mode [ 1195.749945][T12839] syzkaller0: entered allmulticast mode [ 1195.780130][T12843] 0: reclassify loop, rule prio 0, protocol 800 [ 1195.883161][T12846] Bluetooth: MGMT ver 1.23 [ 1195.992072][T12846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10390'. [ 1196.368255][T12874] netlink: 'syz.3.10397': attribute type 13 has an invalid length. [ 1196.596488][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10399'. [ 1196.628587][T12885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10401'. [ 1196.735588][T12890] batadv_slave_0: entered promiscuous mode [ 1196.751810][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10402'. [ 1196.770376][T12876] batadv_slave_0: left promiscuous mode [ 1196.945490][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10404'. [ 1197.057974][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10408'. [ 1197.245826][T12920] netlink: 'syz.0.10410': attribute type 14 has an invalid length. [ 1197.266362][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10410'. [ 1197.358377][T12925] Bluetooth: hci0: unsupported parameter 5135 [ 1197.382090][ T64] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.415461][ T64] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.427370][T12925] Bluetooth: hci0: unsupported parameter 8192 [ 1197.441229][ T64] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.474617][T12925] Bluetooth: hci0: unsupported parameter 5135 [ 1197.487382][ T64] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.508627][T12925] Bluetooth: hci0: unsupported parameter 8192 [ 1197.741615][T12939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1199.365296][T13012] erspan0: entered promiscuous mode [ 1200.747883][T13097] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1200.919337][T13113] __nla_validate_parse: 12 callbacks suppressed [ 1200.919357][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10466'. [ 1201.003008][T13111] tipc: Enabling of bearer rejected, failed to enable media [ 1201.129154][T13123] netlink: 116 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1201.183906][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1201.214788][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1201.244866][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1201.594321][T13151] veth0: entered promiscuous mode [ 1201.643772][T13151] batadv_slave_1: entered promiscuous mode [ 1201.720615][T13153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1201.787133][T13153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1201.796650][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1201.808111][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1201.875344][T13151] batadv_slave_1: left promiscuous mode [ 1201.893807][T13151] veth0: left promiscuous mode [ 1201.927393][T13158] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10475'. [ 1201.976208][T13164] netlink: 'syz.4.10477': attribute type 32 has an invalid length. [ 1203.464834][T13248] tc_dump_action: action bad kind [ 1203.592538][T10969] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1203.609286][T10969] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1203.635707][ T5720] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1203.652725][T13255] openvswitch: netlink: Key type 31 is not supported [ 1204.306407][T13286] syzkaller0: entered promiscuous mode [ 1204.312420][T13286] syzkaller0: entered allmulticast mode [ 1204.410613][T10245] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1204.573816][T10245] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1207.325680][T13291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1207.941069][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1208.177449][T13311] __nla_validate_parse: 9 callbacks suppressed [ 1208.177472][T13311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10517'. [ 1208.725383][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1210.293980][T13297] gre0: entered allmulticast mode [ 1210.300322][T13301] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10513'. [ 1210.766109][T13352] netlink: 'syz.0.10526': attribute type 4 has an invalid length. [ 1210.968203][T13359] nbd: couldn't find a device at index 0 [ 1211.136968][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10530'. [ 1211.158436][T13369] nbd: couldn't find device at index 15663104 [ 1211.234558][T13374] netlink: 'syz.1.10531': attribute type 29 has an invalid length. [ 1211.337320][T13380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1211.360483][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.465850][T13386] netlink: 'syz.1.10536': attribute type 11 has an invalid length. [ 1211.480832][T13380] pim6reg: entered allmulticast mode [ 1211.490288][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1211.504429][T13380] pim6reg: left allmulticast mode [ 1211.787483][T13402] nbd: must specify an index to disconnect [ 1211.904521][T13411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1211.949387][T13411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1212.097960][T13418] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10544'. [ 1212.434731][T13434] sctp: [Deprecated]: syz.1.10546 (pid 13434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1212.434731][T13434] Use struct sctp_sack_info instead [ 1212.638138][T13443] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1212.657063][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1212.705474][T13451] openvswitch: netlink: IPv4 tun info is not correct [ 1212.730753][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10549'. [ 1213.775031][T13506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1214.705476][T13554] gretap0: entered promiscuous mode [ 1214.764897][T13554] vlan3: entered promiscuous mode [ 1214.858141][T13555] vlan3: entered promiscuous mode [ 1215.270483][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10586'. [ 1215.296141][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10587'. [ 1215.382365][T13484] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.997047][T13610] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1217.149600][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1219.790149][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1219.845218][T13633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1219.898117][T13620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1220.237333][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10601'. [ 1220.274367][T13645] syzkaller1: entered promiscuous mode [ 1220.301706][T13645] syzkaller1: entered allmulticast mode [ 1220.355875][T13656] syzkaller1: entered promiscuous mode [ 1220.379590][T13656] syzkaller1: entered allmulticast mode [ 1220.493645][T13661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.616397][T13662] batman_adv: batadv0: Interface deactivated: dummy0 [ 1220.623468][T13662] batman_adv: batadv0: Removing interface: dummy0 [ 1220.924925][T13662] bridge_slave_0: left allmulticast mode [ 1220.960221][T13662] bridge_slave_0: left promiscuous mode [ 1220.975805][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.056320][T13662] bridge_slave_1: left allmulticast mode [ 1221.074425][T13662] bridge_slave_1: left promiscuous mode [ 1221.085323][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.108185][T13662] bond0: (slave bond_slave_0): Releasing backup interface [ 1221.128761][T13662] bond0: (slave bond_slave_1): Releasing backup interface [ 1221.171001][T13662] team0: Port device team_slave_1 removed [ 1221.177692][T13662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.190457][T13662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.199309][T13662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.208516][T13662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.218987][T13662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1221.667209][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10610'. [ 1221.833613][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10614'. [ 1221.889350][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10614'. [ 1222.251425][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10621'. [ 1222.439039][T13733] team0: Port device team_slave_0 removed [ 1222.637717][T13758] netlink: 'syz.3.10630': attribute type 26 has an invalid length. [ 1222.978915][T13767] syzkaller1: entered promiscuous mode [ 1223.001601][T13767] syzkaller1: entered allmulticast mode [ 1223.029081][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1223.253334][T13787] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10637'. [ 1223.280123][T13787] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10637'. [ 1223.394840][T13795] netlink: 'syz.0.10640': attribute type 1 has an invalid length. [ 1223.408312][T13795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10640'. [ 1223.467883][T13802] netlink: 'syz.2.10641': attribute type 83 has an invalid length. [ 1223.625290][T13812] netlink: 576 bytes leftover after parsing attributes in process `syz.4.10643'. [ 1223.980817][T13828] xt_hashlimit: size too large, truncated to 1048576 [ 1224.035131][T13835] : renamed from vxcan1 (while UP) [ 1224.582648][T13849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1224.697306][T13856] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10658'. [ 1225.958963][T13901] Bluetooth: hci0: unsupported parameter 5135 [ 1225.980326][T13901] Bluetooth: hci0: unsupported parameter 8192 [ 1226.000406][T13901] Bluetooth: hci0: unsupported parameter 5135 [ 1226.016881][T13901] Bluetooth: hci0: unsupported parameter 8192 [ 1226.138979][T13909] mac80211_hwsim hwsim83 wlan0: left promiscuous mode [ 1227.869254][T13864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.879115][T13875] netlink: 'syz.0.10663': attribute type 1 has an invalid length. [ 1227.888730][T13875] __nla_validate_parse: 6 callbacks suppressed [ 1227.888750][T13875] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.10663'. [ 1228.007806][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10676'. [ 1228.102694][T13923] Bluetooth: hci0: unsupported parameter 5135 [ 1228.108970][T13923] Bluetooth: hci0: unsupported parameter 8192 [ 1228.126335][T13923] Bluetooth: hci0: unsupported parameter 5135 [ 1228.133965][T13923] Bluetooth: hci0: unsupported parameter 8192 [ 1228.154495][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10675'. [ 1228.174224][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10675'. [ 1228.184699][T13921] netlink: 'syz.0.10675': attribute type 3 has an invalid length. [ 1228.253952][T13925] syzkaller0: entered promiscuous mode [ 1228.305492][T13925] syzkaller0: entered allmulticast mode [ 1228.409195][T13933] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10681'. [ 1228.880621][T13959] macsec2: entered promiscuous mode [ 1228.899011][T13959] macsec0: entered promiscuous mode [ 1228.935875][T13959] macsec0: left promiscuous mode [ 1228.990908][T13960] macsec2: entered promiscuous mode [ 1228.996306][T13960] macsec0: entered promiscuous mode [ 1229.006903][T13960] macsec0: left promiscuous mode [ 1229.024341][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10692'. [ 1229.138163][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10694'. [ 1229.154129][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10694'. [ 1229.250520][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10696'. [ 1229.403733][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10699'. [ 1229.487713][T13983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1229.522264][T13983] vlan2: entered promiscuous mode [ 1229.527548][T13983] bond2: entered promiscuous mode [ 1229.533536][T13983] vlan2: entered allmulticast mode [ 1229.538903][T13983] bond2: entered allmulticast mode [ 1229.567168][T13991] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1229.600333][T13983] bond2: (slave gtp0): refused to change device type [ 1229.832451][T14006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1230.338908][T14038] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1230.390775][T14038] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1231.126665][T14073] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1231.308793][T14079] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1231.517036][T14090] netlink: 'syz.4.10725': attribute type 10 has an invalid length. [ 1231.726478][T14105] netlink: 'syz.3.10732': attribute type 1 has an invalid length. [ 1231.814624][T14108] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1231.830640][T14108] bond4 (unregistering): Released all slaves [ 1232.260681][T14136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1232.285405][T14131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1232.642913][T14156] ipvlan4: entered allmulticast mode [ 1232.661581][T14156] batman_adv: batadv0: Adding interface: ipvlan4 [ 1232.668077][T14156] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.720784][T14156] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 1232.739213][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.762718][T14156] batman_adv: batadv0: Interface activated: ipvlan4 [ 1233.091171][T14140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1233.273076][T14178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1233.337896][T14179] netlink: 'syz.4.10747': attribute type 75 has an invalid length. [ 1233.372913][T14184] __nla_validate_parse: 5 callbacks suppressed [ 1233.372933][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1233.456029][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10753'. [ 1233.472381][T14190] openvswitch: netlink: Message has 4 unknown bytes. [ 1233.480810][T14190] netlink: 'syz.3.10753': attribute type 2 has an invalid length. [ 1233.642658][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.751902][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.782912][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.942944][T14187] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1233.952266][T14187] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1233.975514][T14187] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1234.049835][ T64] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.070271][ T64] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.096397][ T64] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.107979][ T64] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.202357][T10976] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.217164][T10976] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.245427][T10976] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.283162][T10976] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.338198][T14225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.708395][T14244] netlink: 'syz.3.10767': attribute type 1 has an invalid length. [ 1235.062905][T14267] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1235.302385][T14280] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode [ 1235.516589][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10784'. [ 1235.654692][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1235.671871][T14299] netlink: 'syz.3.10786': attribute type 3 has an invalid length. [ 1235.672597][T14303] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10788'. [ 1235.689624][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1235.876929][T14317] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1235.899014][T14317] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1235.923810][T14317] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1235.977252][T14317] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1235.991395][T14317] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1236.025327][T14322] ksmbd: Unknown IPC event: 1, ignore. [ 1236.499293][T14347] netlink: 'syz.2.10800': attribute type 5 has an invalid length. [ 1236.561901][T14351] netlink: 'syz.1.10802': attribute type 8 has an invalid length. [ 1236.615075][T14351] sch_fq: defrate 0 ignored. [ 1236.641726][T14351] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1236.655169][T14357] netlink: 'syz.0.10805': attribute type 32 has an invalid length. [ 1236.682770][T14358] netlink: 'syz.3.10804': attribute type 1 has an invalid length. [ 1236.742535][T14358] netlink: 'syz.3.10804': attribute type 3 has an invalid length. [ 1236.802685][T14358] NCSI netlink: No device for ifindex 813332851 [ 1237.947374][T14428] netlink: zone id is out of range [ 1238.286265][T14442] x_tables: duplicate underflow at hook 3 [ 1238.623803][T14462] __nla_validate_parse: 69 callbacks suppressed [ 1238.623823][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10835'. [ 1238.697567][T14466] syzkaller0: entered promiscuous mode [ 1238.714603][T14466] syzkaller0: entered allmulticast mode [ 1238.815291][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10837'. [ 1238.855215][T14476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10840'. [ 1238.961497][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10838'. [ 1238.997335][T14480] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10841'. [ 1239.083076][T10966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.105513][T10966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.223189][T14490] team0: Device gtp3 is up. Set it down before adding it as a team port [ 1239.773013][T14508] netlink: 'syz.3.10848': attribute type 24 has an invalid length. [ 1239.822070][T14508] lo: Caught tx_queue_len zero misconfig [ 1239.901639][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10848'. [ 1239.976154][T14515] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1240.240520][T14534] tipc: Trying to set illegal importance in message [ 1240.385763][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1240.396290][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1240.411635][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1240.587211][T14555] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1240.643165][T14561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10861'. [ 1240.799230][T14570] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1240.866268][T14572] sctp: [Deprecated]: syz.2.10864 (pid 14572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1240.866268][T14572] Use struct sctp_sack_info instead [ 1241.125364][T14583] openvswitch: netlink: IP tunnel dst address not specified [ 1241.186378][T14583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.440033][T14608] veth0_to_bond: entered allmulticast mode [ 1241.764377][T14636] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1244.290090][T14598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1244.299110][T14618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1244.682731][T14683] __nla_validate_parse: 2 callbacks suppressed [ 1244.682749][T14683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10888'. [ 1244.755620][T14690] veth0_to_bond: mtu less than device minimum [ 1244.833105][T14690] ip6erspan0: entered allmulticast mode [ 1244.888185][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10892'. [ 1245.074875][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10897'. [ 1245.326426][T14729] netlink: 'syz.0.10901': attribute type 21 has an invalid length. [ 1245.476468][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10907'. [ 1245.489005][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10905'. [ 1245.513841][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10906'. [ 1245.555891][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10907'. [ 1245.760329][T10977] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.225462][T14785] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10918'. [ 1246.244114][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10918'. [ 1246.597879][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10925'. [ 1246.800378][T14823] netlink: 'syz.4.10929': attribute type 34 has an invalid length. [ 1246.825586][T14815] netlink: 'syz.2.10927': attribute type 1 has an invalid length. [ 1246.853490][T14815] netlink: 'syz.2.10927': attribute type 2 has an invalid length. [ 1246.899338][T14827] bond0: entered promiscuous mode [ 1247.030732][T14827] gretap0: entered promiscuous mode [ 1247.072183][T14827] debugfs: 'hsr1' already exists in 'hsr' [ 1247.091060][T14827] Cannot create hsr debugfs directory [ 1247.108423][T14827] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1247.161339][T14827] hsr1: entered promiscuous mode [ 1247.538088][T14853] netlink: 'syz.0.10935': attribute type 2 has an invalid length. [ 1247.817169][T14867] nbd: must specify a device to reconfigure [ 1248.041626][T14883] ip_tables: iptables: counters copy to user failed while replacing table [ 1248.550316][T14918] netlink: 'syz.4.10947': attribute type 4 has an invalid length. [ 1248.574216][T14918] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1248.977998][T14946] netlink: 'syz.2.10963': attribute type 47 has an invalid length. [ 1249.514646][T14982] openvswitch: netlink: Flow key attr not present in new flow. [ 1249.543284][T14981] netlink: 'syz.3.10973': attribute type 10 has an invalid length. [ 1250.085799][T15002] __nla_validate_parse: 13 callbacks suppressed [ 1250.085818][T15002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10979'. [ 1250.133742][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10980'. [ 1250.286068][ T30] audit: type=1107 audit(1787505825.547:30): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='}ank(OC`Si ]WUzmk赘Qxv48S;46daEdk{oXVaVK{xv[Af(R$"&%7pZ(^' [ 1250.511698][T15031] 0: reclassify loop, rule prio 0, protocol 03 [ 1250.653525][T15037] netlink: 'syz.0.10989': attribute type 83 has an invalid length. [ 1250.793735][T15043] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1250.804202][T15043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.842472][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1251.227331][T15063] bond5: (slave vlan1): Device is not bonding slave [ 1251.242751][T15067] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1251.248871][T15063] bond5: option active_slave: invalid value (vlan1) [ 1251.264132][T15063] bond5 (unregistering): Released all slaves [ 1251.474066][T15072] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.11003'. [ 1251.494936][T15072] netlink: 'syz.0.11003': attribute type 2 has an invalid length. [ 1251.572519][T15072] syzkaller0: entered promiscuous mode [ 1251.578066][T15072] syzkaller0: entered allmulticast mode [ 1251.584017][T15079] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20003 [ 1251.627780][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11005'. [ 1254.155495][T15085] veth1_virt_wifi: entered allmulticast mode [ 1254.184765][T15095] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1254.193719][T15095] gretap1: entered promiscuous mode [ 1254.198973][T15095] gretap1: entered allmulticast mode [ 1254.635058][T15107] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1254.673222][T15107] bond0: (slave bond9): Enslaving as an active interface with a down link [ 1254.694670][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11013'. [ 1254.720650][T15117] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20004 [ 1254.743400][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11014'. [ 1254.832379][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11014'. [ 1254.883879][T15110] x_tables: duplicate underflow at hook 2 [ 1255.258440][T15138] netlink: 'syz.2.11019': attribute type 12 has an invalid length. [ 1255.521754][T15148] netlink: 'syz.4.11022': attribute type 29 has an invalid length. [ 1255.548837][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11022'. [ 1255.567625][T15150] netlink: 'syz.4.11022': attribute type 29 has an invalid length. [ 1255.576194][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11022'. [ 1255.786618][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11026'. [ 1255.846062][T15165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11026'. [ 1256.257507][T15192] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11032'. [ 1256.269115][T15202] netlink: 'syz.2.11035': attribute type 1 has an invalid length. [ 1256.447189][T15202] bridge5: entered promiscuous mode [ 1256.457535][T15202] bond5: (slave bridge5): making interface the new active one [ 1256.467829][T15202] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1256.488175][T15206] syzkaller0: entered promiscuous mode [ 1256.510809][T15206] syzkaller0: entered allmulticast mode [ 1256.606405][T15206] netlink: 'syz.0.11036': attribute type 1 has an invalid length. [ 1256.670452][T15219] netlink: 'syz.4.11041': attribute type 83 has an invalid length. [ 1256.832585][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11044'. [ 1257.236838][T15242] block nbd3: NBD_DISCONNECT [ 1257.248860][T15242] block nbd3: Send disconnect failed -32 [ 1257.262228][T15242] block nbd3: Send disconnect failed -32 [ 1257.277196][T15242] block nbd3: shutting down sockets [ 1257.429251][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11049'. [ 1257.501576][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1257.511168][T15260] openvswitch: netlink: Flow actions attr not present in new flow. [ 1257.611636][T15264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11055'. [ 1257.915302][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1258.138099][T15293] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1258.272988][T15298] lo: entered promiscuous mode [ 1258.290272][T15298] lo: left allmulticast mode [ 1258.298570][T15298] tunl0: entered promiscuous mode [ 1258.318840][T15298] tunl0: left allmulticast mode [ 1258.330123][T15298] gre0: entered promiscuous mode [ 1258.346996][T15298] gre0: left allmulticast mode [ 1258.366862][T15298] gretap0: entered promiscuous mode [ 1258.386022][T15298] gretap0: left allmulticast mode [ 1258.432076][T15298] erspan0: left allmulticast mode [ 1258.448247][T15298] ip_vti0: entered promiscuous mode [ 1258.453921][T15298] ip_vti0: left allmulticast mode [ 1258.548819][T15317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.590471][T15320] netlink: 'syz.1.11074': attribute type 7 has an invalid length. [ 1258.598474][T15320] netlink: 'syz.1.11074': attribute type 8 has an invalid length. [ 1258.857925][T15333] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1258.881483][T15335] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1259.035125][T15348] netlink: 'syz.3.11080': attribute type 21 has an invalid length. [ 1259.049299][T15347] netlink: 'syz.3.11080': attribute type 21 has an invalid length. [ 1259.545147][T15378] netlink: 'syz.4.11091': attribute type 6 has an invalid length. [ 1259.608105][T15383] netlink: 'syz.4.11092': attribute type 4 has an invalid length. [ 1259.623310][T15383] netlink: 'syz.4.11092': attribute type 4 has an invalid length. [ 1260.531084][T15426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.672914][T15443] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1260.700798][T15441] syzkaller0: entered promiscuous mode [ 1260.717741][T15441] syzkaller0: entered allmulticast mode [ 1260.765350][T15448] __nla_validate_parse: 18 callbacks suppressed [ 1260.765371][T15448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1260.855483][T15454] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1260.909695][T15454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1260.952837][T15462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1261.418633][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11118'. [ 1261.504576][T15490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11119'. [ 1261.564011][T15492] syzkaller0: entered promiscuous mode [ 1261.578292][T15492] syzkaller0: entered allmulticast mode [ 1261.651637][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11122'. [ 1261.673102][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11122'. [ 1261.747031][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11124'. [ 1262.057078][T15527] netlink: 'syz.4.11128': attribute type 3 has an invalid length. [ 1262.224580][T15543] openvswitch: netlink: Flow key attr not present in new flow. [ 1262.235790][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11131'. [ 1262.574073][T15570] x_tables: duplicate underflow at hook 2 [ 1264.951017][T15525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1265.202491][T15580] netlink: 'syz.1.11140': attribute type 75 has an invalid length. [ 1265.544269][T15597] syzkaller0: entered promiscuous mode [ 1265.569939][T15597] syzkaller0: entered allmulticast mode [ 1265.879937][T15623] netlink: 'syz.0.11153': attribute type 8 has an invalid length. [ 1265.966104][T15624] __nla_validate_parse: 4 callbacks suppressed [ 1265.966121][T15624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11154'. [ 1266.159307][T15645] openvswitch: netlink: IP tunnel dst address not specified [ 1266.344582][T15659] netlink: 'syz.2.11164': attribute type 1 has an invalid length. [ 1266.444618][T10950] IPVS: starting estimator thread 0... [ 1266.543424][T15659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1266.551179][T15663] IPVS: using max 31 ests per chain, 74400 per kthread [ 1266.602108][T15673] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11166'. [ 1266.816838][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11173'. [ 1266.905180][T15700] x_tables: unsorted underflow at hook 2 [ 1267.047705][T15708] netlink: 'syz.1.11175': attribute type 1 has an invalid length. [ 1267.137199][T15708] bond4: entered promiscuous mode [ 1267.150162][T15708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1267.178692][T15718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1267.188819][T15718] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1267.205386][T15718] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1267.233283][T15718] bond4: (slave ip6gre1): making interface the new active one [ 1267.247714][T15718] ip6gre1: entered promiscuous mode [ 1267.256051][T15718] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1267.307685][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11179'. [ 1267.322457][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11179'. [ 1267.518231][T15723] netlink: ct_mark mask cannot be 0 [ 1267.524712][T15723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.803594][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11183'. [ 1267.826778][T15734] team0: Port device team_slave_0 removed [ 1269.654820][T15680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1270.331936][T15776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11192'. [ 1270.370051][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11193'. [ 1270.404196][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11193'. [ 1270.580165][T15791] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1270.889643][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1270.919241][T15815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11202'. [ 1271.138877][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11206'. [ 1271.243271][T15826] vlan4: entered allmulticast mode [ 1271.252310][T15826] bridge1: entered allmulticast mode [ 1271.267334][T15824] bridge1: port 1(erspan0) entered blocking state [ 1271.282946][T15824] bridge1: port 1(erspan0) entered disabled state [ 1271.315026][T15824] erspan0: entered allmulticast mode [ 1271.471953][T15840] team0 (unregistering): Port device team_slave_1 removed [ 1271.613446][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11213'. [ 1271.627817][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11213'. [ 1271.638308][T15847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1271.645627][T15847] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.652940][T15847] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.973853][T15866] gre0: Caught tx_queue_len zero misconfig [ 1272.028859][T15866] bridge2: entered promiscuous mode [ 1272.047500][T15872] netlink: 16203 bytes leftover after parsing attributes in process `syz.0.11220'. [ 1272.119249][T15878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11221'. [ 1272.128878][T15870] xt_NFQUEUE: number of total queues is 0 [ 1272.134966][T15878] nbd: illegal input index -8454144 [ 1272.337811][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1272.358569][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11224'. [ 1272.408408][T15892] macvtap1: entered promiscuous mode [ 1272.415547][T15892] dummy0: entered promiscuous mode [ 1272.456786][ T7167] dummy0: left promiscuous mode [ 1272.524503][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11226'. [ 1272.734295][T15908] syz_tun: entered allmulticast mode [ 1272.755501][T15908] dvmrp8: entered allmulticast mode [ 1272.769231][T15907] syz_tun: left allmulticast mode [ 1273.125491][T15909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11229'. [ 1273.401193][T15949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11236'. [ 1273.776870][T15975] netlink: 'syz.3.11244': attribute type 1 has an invalid length. [ 1274.303089][T16011] netlink: 'syz.2.11253': attribute type 1 has an invalid length. [ 1274.373025][T16011] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1274.751399][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.332475][T16088] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1275.526839][T16101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1275.822227][T16118] sctp: [Deprecated]: syz.1.11283 (pid 16118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1275.822227][T16118] Use struct sctp_sack_info instead [ 1276.166503][T16139] __nla_validate_parse: 12 callbacks suppressed [ 1276.166523][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11289'. [ 1276.280188][T16139] sctp: [Deprecated]: syz.4.11289 (pid 16139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1276.280188][T16139] Use struct sctp_sack_info instead [ 1276.394452][T16153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11292'. [ 1276.621715][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11296'. [ 1276.655442][T16160] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11296'. [ 1276.815115][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11299'. [ 1277.144471][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11307'. [ 1277.173058][T16189] netlink: 'syz.2.11307': attribute type 7 has an invalid length. [ 1277.199603][T16189] netlink: 'syz.2.11307': attribute type 8 has an invalid length. [ 1277.234047][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11307'. [ 1277.287483][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11309'. [ 1277.436125][T16210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1277.550874][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11315'. [ 1277.621015][T16214] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11315'. [ 1277.914948][T16232] netlink: 'syz.2.11320': attribute type 3 has an invalid length. [ 1278.292440][T16214] xt_l2tp: v2 doesn't support IP mode [ 1278.606602][T16273] tipc: Enabled bearer , priority 0 [ 1278.655010][T16273] syzkaller0: entered promiscuous mode [ 1278.701310][T16273] syzkaller0: entered allmulticast mode [ 1278.805500][T16273] tipc: Resetting bearer [ 1278.906741][T16273] tipc: Disabling bearer [ 1279.062465][T10977] wlan1: Trigger new scan to find an IBSS to join [ 1279.378991][T16329] pim6reg527: entered allmulticast mode [ 1279.812628][T16345] xt_ecn: cannot match TCP bits for non-tcp packets [ 1282.172123][T16315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1282.409014][T16367] __nla_validate_parse: 4 callbacks suppressed [ 1282.409033][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11354'. [ 1282.763608][T16390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11361'. [ 1283.142442][T16403] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1283.177461][T16403] bond5 (unregistering): Released all slaves [ 1283.397783][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11369'. [ 1283.671256][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11375'. [ 1283.758585][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11375'. [ 1283.868114][T16452] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.11376'. [ 1283.917595][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1283.966797][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11378'. [ 1283.992219][T10977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.004106][T10977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.015032][T10966] wlan1: Trigger new scan to find an IBSS to join [ 1284.021738][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.097930][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11379'. [ 1284.132017][T16460] nbd: couldn't find a device at index 458752 [ 1284.294310][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11385'. [ 1284.303767][T16481] netlink: 'syz.1.11385': attribute type 8 has an invalid length. [ 1284.307578][T16485] netlink: 'syz.1.11385': attribute type 8 has an invalid length. [ 1284.864371][T16502] ip_tables: iptables: counters copy to user failed while replacing table [ 1285.443858][T16530] netlink: Unknown conntrack attr (type=774, max=9) [ 1285.452485][T16530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1285.465735][T16530] netlink: Unknown conntrack attr (type=774, max=9) [ 1285.476253][T16530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.369798][T10976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.203728][T16469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1287.433386][T16553] SET target dimension over the limit! [ 1287.656045][T16567] netlink: 'syz.3.11405': attribute type 21 has an invalid length. [ 1287.675945][T16567] __nla_validate_parse: 1 callbacks suppressed [ 1287.675961][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11405'. [ 1287.968364][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11410'. [ 1288.116810][T16596] netlink: 'syz.2.11411': attribute type 1 has an invalid length. [ 1288.129312][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11411'. [ 1288.304491][T16605] netlink: 'syz.2.11413': attribute type 10 has an invalid length. [ 1288.354727][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11414'. [ 1288.575151][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1288.603541][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1288.659192][T16624] veth0: entered promiscuous mode [ 1288.673307][T16623] veth0: left promiscuous mode [ 1289.151389][T16643] netlink: 'syz.2.11424': attribute type 1 has an invalid length. [ 1289.181400][T16643] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1289.204607][T16643] bond10: (slave gretap2): making interface the new active one [ 1289.213465][T16643] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1290.712351][T16571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.725303][T16607] netlink: 'syz.0.11414': attribute type 1 has an invalid length. [ 1290.761859][T16607] netlink: 'syz.0.11414': attribute type 3 has an invalid length. [ 1290.780611][T16607] netlink: 212 bytes leftover after parsing attributes in process `syz.0.11414'. [ 1291.045190][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11430'. [ 1291.066726][T16661] xt_hashlimit: size too large, truncated to 1048576 [ 1291.527549][T16687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11436'. [ 1291.683912][T16690] xt_hashlimit: size too large, truncated to 1048576 [ 1291.734983][T16700] xt_hashlimit: size too large, truncated to 1048576 [ 1291.934555][T16707] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11442'. [ 1292.028276][T16711] gre0: entered promiscuous mode [ 1292.052245][T16711] gre0: entered allmulticast mode [ 1292.649195][T16737] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1292.880115][T16756] __nla_validate_parse: 2 callbacks suppressed [ 1292.880134][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1292.978634][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11452'. [ 1293.155267][T16766] dvmrp1: entered allmulticast mode [ 1293.326689][T16780] netlink: Unknown nat attribute (0) [ 1293.336527][T16780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.505171][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11460'. [ 1293.656030][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11463'. [ 1293.701100][T16814] batadv0: entered promiscuous mode [ 1293.709285][T16814] macsec2: entered promiscuous mode [ 1293.741933][T16814] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1293.773042][T16814] batadv0: left promiscuous mode [ 1294.103435][T13484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1294.121651][T13484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1294.131856][T13484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1294.144429][T13484] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1294.156135][T13484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1294.312859][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11468'. [ 1294.323129][T16828] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1294.515858][T16818] netlink: 'syz.1.11466': attribute type 29 has an invalid length. [ 1295.103581][T16853] ipvlan5: entered allmulticast mode [ 1295.114705][T16853] batman_adv: batadv0: Adding interface: ipvlan5 [ 1295.121578][T16853] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.161692][T16853] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 1295.187046][T16853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.221282][T16853] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 1295.254025][T16853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.282651][T16853] batman_adv: batadv0: Interface activated: ipvlan5 [ 1295.307860][T16860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11474'. [ 1295.517559][T16866] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1295.538408][T16864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11476'. [ 1295.634744][T16869] netlink: 'syz.0.11478': attribute type 83 has an invalid length. [ 1296.077225][T16892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11483'. [ 1296.204716][T16821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.220162][T16821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.227464][T16821] bridge_slave_0: entered allmulticast mode [ 1296.236333][T16821] bridge_slave_0: entered promiscuous mode [ 1296.245501][T16821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.254204][ T5614] Bluetooth: hci4: command tx timeout [ 1296.257645][T16821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.293523][T16821] bridge_slave_1: entered allmulticast mode [ 1296.302761][T16821] bridge_slave_1: entered promiscuous mode [ 1296.355101][T16821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.374962][T16821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.470076][T16821] team0: Port device team_slave_0 added [ 1296.484019][T16821] team0: Port device team_slave_1 added [ 1296.542299][T16821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.549282][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.601986][T16821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.614864][T16821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.622209][T16821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.658350][T16821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.758787][T16821] hsr_slave_0: entered promiscuous mode [ 1296.776395][T16821] hsr_slave_1: entered promiscuous mode [ 1296.800529][T16821] debugfs: 'hsr0' already exists in 'hsr' [ 1296.817963][T16821] Cannot create hsr debugfs directory [ 1296.902152][T16913] gtp0: entered promiscuous mode [ 1296.907206][T16913] gtp0: entered allmulticast mode [ 1297.000633][T16914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11491'. [ 1297.242807][T16821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.257462][T16821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.466865][T16821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.477588][T16821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.487895][T16934] --map-set only usable from mangle table [ 1297.636511][T16821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.649261][T16821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.705165][T16947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1297.774865][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11502'. [ 1297.805308][T16821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.816031][T16821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.028668][T16965] netlink: 'syz.3.11508': attribute type 1 has an invalid length. [ 1298.065530][T16965] __nla_validate_parse: 2 callbacks suppressed [ 1298.065550][T16965] netlink: 756 bytes leftover after parsing attributes in process `syz.3.11508'. [ 1298.166071][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11509'. [ 1298.212351][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11512'. [ 1298.277910][T16821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1298.294652][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1298.312224][T16821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1298.328639][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1298.337060][ T5614] Bluetooth: hci4: command tx timeout [ 1298.356075][T16821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1298.394500][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1298.424743][T16821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1298.463658][T16821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1298.575872][T16821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.601982][T16821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.620998][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.628191][T10982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.652649][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.659931][T10958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.902393][T17012] netlink: 'syz.1.11519': attribute type 1 has an invalid length. [ 1298.996703][T17012] bond5: entered promiscuous mode [ 1299.002303][T17012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1299.162751][T17031] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11523'. [ 1299.177364][T17032] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11523'. [ 1299.450386][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11525'. [ 1299.468353][T17048] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1299.477995][T17048] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1299.487180][T17048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.508408][T17048] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11525'. [ 1299.613022][T16821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.663441][T16821] veth0_vlan: entered promiscuous mode [ 1299.676037][T16821] veth1_vlan: entered promiscuous mode [ 1299.714814][T16821] veth0_macvtap: entered promiscuous mode [ 1299.725158][T16821] veth1_macvtap: entered promiscuous mode [ 1299.745407][T16821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.759833][T16821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.810054][T10978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.828032][T10978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.867333][T10978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.883086][T10978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.410011][ T5614] Bluetooth: hci4: command tx timeout [ 1301.601062][T16996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.811332][T10964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.813385][T17064] veth1_to_bond: entered allmulticast mode [ 1301.825773][T10964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.875581][T17062] veth1_to_bond: left allmulticast mode [ 1301.917889][T10978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.952894][T10978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.045425][T17070] xt_CT: No such helper "snmp" [ 1302.274520][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11536'. [ 1302.491326][ T5614] Bluetooth: hci4: command tx timeout [ 1302.606288][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11542'. [ 1302.806259][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11544'. [ 1302.976358][T17129] netlink: 'syz.2.11549': attribute type 1 has an invalid length. [ 1303.028067][T17133] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1303.040544][T17133] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1303.423861][T17151] x_tables: duplicate underflow at hook 2 [ 1303.517204][T17163] netlink: 'syz.3.11557': attribute type 21 has an invalid length. [ 1303.532982][T17160] openvswitch: netlink: Multiple metadata blocks provided [ 1303.535790][T17162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.543253][T17161] openvswitch: netlink: Multiple metadata blocks provided [ 1303.575613][T17163] __nla_validate_parse: 4 callbacks suppressed [ 1303.575632][T17163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11557'. [ 1303.616290][T17165] netlink: 'syz.1.11560': attribute type 1 has an invalid length. [ 1303.662798][T17165] bond6: entered promiscuous mode [ 1303.669102][T17165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1303.748679][T17165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1303.767464][T17165] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1303.790737][T17165] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1303.827032][T17165] bond6: (slave ip6gre2): making interface the new active one [ 1303.874564][T17165] ip6gre2: entered promiscuous mode [ 1303.907569][T17165] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1304.287848][T17201] syzkaller0: entered promiscuous mode [ 1304.303687][T17201] syzkaller0: entered allmulticast mode [ 1304.342273][T17201] openvswitch: netlink: Flow key attribute not present in set flow. [ 1304.568766][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11574'. [ 1304.586960][T17222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.588631][T17223] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11575'. [ 1304.646782][T17223] sctp: [Deprecated]: syz.3.11575 (pid 17223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.646782][T17223] Use struct sctp_sack_info instead [ 1305.516277][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11590'. [ 1305.705032][T17273] hsr_slave_1 (unregistering): left promiscuous mode [ 1305.785724][T17286] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11593'. [ 1305.814912][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11593'. [ 1305.985171][T17300] netlink: 'syz.4.11598': attribute type 32 has an invalid length. [ 1306.021857][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11598'. [ 1306.056101][T17300] bond4: option coupled_control: invalid value (4) [ 1306.078951][T17300] bond4 (unregistering): Released all slaves [ 1306.387256][T17324] netlink: 'syz.0.11604': attribute type 2 has an invalid length. [ 1306.422878][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11607'. [ 1306.471640][T17334] xt_nat: multiple ranges no longer supported [ 1306.606046][T17342] netlink: 'syz.3.11610': attribute type 1 has an invalid length. [ 1306.614490][T17342] netlink: 500 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1306.954655][T17363] netlink: 'syz.0.11619': attribute type 1 has an invalid length. [ 1306.963305][T17363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11619'. [ 1307.012933][T17367] netlink: 'syz.2.11618': attribute type 1 has an invalid length. [ 1307.023086][T17367] 8021q: VLANs not supported on ipvlan0 [ 1307.243957][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.251312][T17381] IPv6: NLM_F_CREATE should be set when creating new route [ 1307.258589][T17381] IPv6: NLM_F_CREATE should be set when creating new route [ 1307.265896][T17381] IPv6: NLM_F_CREATE should be set when creating new route [ 1307.280767][T17382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.290755][T17381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1307.298535][T17383] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 1308.128487][T17404] netlink: 'syz.1.11630': attribute type 16 has an invalid length. [ 1308.236486][ T30] audit: type=1800 audit(1787505883.497:31): pid=17408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11631" name=0A dev="tmpfs" ino=139 res=0 errno=0 [ 1310.145392][T17388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.325656][T17410] __nla_validate_parse: 2 callbacks suppressed [ 1310.325688][T17410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11632'. [ 1310.513347][T17418] macsec2: entered promiscuous mode [ 1310.531859][T17418] macsec0: entered promiscuous mode [ 1310.582187][T17418] macsec0: left promiscuous mode [ 1310.611469][T10958] nci: nci_ntf_packet: unknown ntf opcode 0xe23 [ 1310.801546][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11638'. [ 1310.814646][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11638'. [ 1311.226825][T17432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1311.421669][T17480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11647'. [ 1311.431571][T17484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11649'. [ 1311.455325][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11650'. [ 1311.477505][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11650'. [ 1311.605305][T17495] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1311.632056][T17501] Unsupported ieee802154 address type: 0 [ 1311.676720][T17498] tipc: New replicast peer: 255.255.255.255 [ 1311.712213][T17498] tipc: Enabled bearer , priority 10 [ 1311.899093][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11662'. [ 1311.938801][T17522] netlink: 'syz.1.11662': attribute type 30 has an invalid length. [ 1311.987978][T17522] bond7: option arp_missed_max: invalid value (0) [ 1311.997669][T17522] bond7: option arp_missed_max: allowed values 1 - 255 [ 1312.018365][T17522] bond7 (unregistering): Released all slaves [ 1312.062454][T17528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11663'. [ 1312.083563][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11663'. [ 1312.126541][T17528] netlink: 'syz.2.11663': attribute type 8 has an invalid length. [ 1312.191123][T17531] netlink: 'syz.3.11666': attribute type 3 has an invalid length. [ 1312.213982][T17534] hsr_slave_0: left promiscuous mode [ 1312.223233][T17534] hsr_slave_1: left promiscuous mode [ 1312.329040][T17531] bond10: option all_slaves_active: invalid value (222) [ 1312.352857][T17531] bond10 (unregistering): Released all slaves [ 1312.388222][T17546] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1312.854807][T10245] tipc: Node number set to 2886997039 [ 1312.981613][T17577] bond4 (unregistering): Released all slaves [ 1313.084259][T17574] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1313.116489][T17588] syzkaller0: entered promiscuous mode [ 1313.122880][T17588] syzkaller0: entered allmulticast mode [ 1313.204561][T17596] x_tables: duplicate underflow at hook 4 [ 1314.331620][T13484] Bluetooth: hci4: command 0x0405 tx timeout [ 1315.933874][T17616] v: renamed from veth0_vlan (while UP) [ 1315.961002][T17617] ip6erspan1: entered allmulticast mode [ 1316.224894][T17640] __nla_validate_parse: 6 callbacks suppressed [ 1316.224912][T17640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11698'. [ 1316.303871][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11699'. [ 1316.348538][T17642] team0 (unregistering): Port device team_slave_0 removed [ 1316.366849][T17642] team0 (unregistering): Port device team_slave_1 removed [ 1316.388760][T17649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11702'. [ 1316.403302][T17646] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1316.415451][T17654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11702'. [ 1316.425163][T17647] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1316.550949][T17659] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 1316.565834][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11703'. [ 1316.586989][T17661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11705'. [ 1316.641471][T17659] syzkaller0: entered promiscuous mode [ 1316.658653][T17659] syzkaller0: entered allmulticast mode [ 1316.674511][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11707'. [ 1316.754235][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11707'. [ 1316.856629][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11710'. [ 1316.896017][T17680] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11710'. [ 1317.211109][T17696] netlink: 'syz.1.11714': attribute type 2 has an invalid length. [ 1317.239228][T17699] netlink: 'syz.4.11716': attribute type 9 has an invalid length. [ 1317.258947][T17701] netlink: 'syz.3.11717': attribute type 17 has an invalid length. [ 1317.272875][T17696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.287314][T17701] netlink: 'syz.3.11717': attribute type 14 has an invalid length. [ 1317.314923][T17701] netlink: 'syz.3.11717': attribute type 13 has an invalid length. [ 1317.600829][T17720] netlink: 'syz.1.11721': attribute type 29 has an invalid length. [ 1317.947023][T17738] gre2: entered promiscuous mode [ 1317.955404][T17738] gre2: entered allmulticast mode [ 1318.082151][T17745] macvlan4: entered promiscuous mode [ 1318.088789][T17745] macvlan4: entered allmulticast mode [ 1318.118066][T17745] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 1318.276310][T17754] tipc: Started in network mode [ 1318.282038][T17754] tipc: Node identity ac14140f, cluster identity 4711 [ 1318.290040][T17754] tipc: New replicast peer: 255.255.255.255 [ 1318.296664][T17754] tipc: Enabled bearer , priority 10 [ 1318.929067][T17784] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1318.947001][T17784] bond2: (slave lo): Enslaving as an active interface with an up link [ 1318.959726][T17784] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1319.414292][ T5749] tipc: Node number set to 2886997007 [ 1319.533667][T10978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1319.615983][T17816] bond0: entered promiscuous mode [ 1319.630944][T17816] : entered promiscuous mode [ 1319.650824][T17816] bond_slave_1: entered promiscuous mode [ 1319.664474][T17816] bond9: entered promiscuous mode [ 1319.688865][T17816] batadv0: entered promiscuous mode [ 1319.712390][T17816] debugfs: 'hsr1' already exists in 'hsr' [ 1319.718221][T17816] Cannot create hsr debugfs directory [ 1319.726133][T17816] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1319.741473][T17816] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1319.976092][T17841] syz_tun: entered allmulticast mode [ 1320.015335][T17841] dvmrp8: entered allmulticast mode [ 1320.024505][T17839] syz_tun: left allmulticast mode [ 1322.963891][T17844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.162587][T17876] __nla_validate_parse: 13 callbacks suppressed [ 1323.162605][T17876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11769'. [ 1323.179374][T17876] veth0: entered promiscuous mode [ 1323.194712][T17874] veth0: left promiscuous mode [ 1323.204941][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11770'. [ 1323.347547][T17888] ip6t_srh: unknown srh match flags 5F28 [ 1323.548042][T17901] xt_hashlimit: size too large, truncated to 1048576 [ 1323.673923][T17906] IPv6: NLM_F_CREATE should be specified when creating new route [ 1323.912870][ T30] audit: type=1800 audit(1787505899.177:32): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11782" name="0" dev="tmpfs" ino=2897 res=0 errno=0 [ 1323.981854][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11786'. [ 1324.145250][T17936] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11790'. [ 1324.286740][ C0] ------------[ cut here ]------------ [ 1324.292295][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1324.302214][ C0] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: syz.4.11788/17940 [ 1324.313044][ C0] Modules linked in: [ 1324.316972][ C0] CPU: 0 UID: 0 PID: 17940 Comm: syz.4.11788 Not tainted syzkaller #0 PREEMPT(full) [ 1324.326496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.336604][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1324.342903][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1324.362583][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010246 [ 1324.368699][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1324.376734][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7d20 [ 1324.384770][ C0] RBP: ffff88807bf50f40 R08: 0000000000000000 R09: 0000000000000000 [ 1324.392808][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88802f4c28e8 [ 1324.400828][ C0] R13: dffffc0000000000 R14: ffffffff906a7d20 R15: ffff88807bf53258 [ 1324.408836][ C0] FS: 0000000000000000(0000) GS:ffff888124f23000(0000) knlGS:0000000000000000 [ 1324.417827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.424476][ C0] CR2: 00007fa7b71f0078 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1324.432681][ C0] Call Trace: [ 1324.435991][ C0] [ 1324.438885][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1324.444255][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1324.449611][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1324.455474][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1324.461884][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 1324.468005][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 1324.473803][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 1324.479511][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1324.485544][ C0] ? kasan_save_free_info+0x40/0x50 [ 1324.490835][ C0] ? lock_acquire+0x106/0x350 [ 1324.495561][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1324.501193][ C0] ? ieee80211_get_buffered_bc+0xc4/0x8a0 [ 1324.506951][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1324.512571][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 1324.518155][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1324.523790][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1324.529304][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1324.535470][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1324.541105][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1324.548352][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1324.553627][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1324.559762][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1324.566999][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1324.573171][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1324.580278][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1324.586141][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1324.591420][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1324.597268][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1324.602548][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1324.607700][ C0] handle_softirqs+0x226/0x860 [ 1324.612586][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1324.617387][ C0] __irq_exit_rcu+0xcb/0x220 [ 1324.622054][ C0] irq_exit_rcu+0x9/0x30 [ 1324.626327][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1324.632033][ C0] [ 1324.634991][ C0] [ 1324.637968][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1324.644034][ C0] RIP: 0010:pfn_valid+0x269/0x490 [ 1324.649089][ C0] Code: 00 00 00 e8 49 b1 96 09 89 c5 31 ff 89 c6 e8 5e f9 84 ff 85 ed 74 68 80 3d a5 d4 ff 0d 01 75 66 e8 4c f4 84 ff e9 80 00 00 00 42 f4 84 ff 41 bf 01 00 00 00 e9 b9 00 00 00 e8 32 f4 84 ff 4d [ 1324.668766][ C0] RSP: 0018:ffffc9000e5bf318 EFLAGS: 00000202 [ 1324.674902][ C0] RAX: ffffffff8242186d RBX: ffffffff8242175a RCX: ffff888028761f40 [ 1324.682954][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1324.690996][ C0] RBP: 0000000000000002 R08: ffffffff8242175a R09: 0000000000000000 [ 1324.698997][ C0] R10: 0000000000000000 R11: ffffffff8eb5a2a0 R12: dffffc0000000000 [ 1324.707018][ C0] R13: 0000000000000008 R14: 000000000005c820 R15: ffff88813fe53160 [ 1324.715057][ C0] ? pfn_valid+0xba/0x490 [ 1324.719468][ C0] ? pfn_valid+0xba/0x490 [ 1324.723841][ C0] ? pfn_valid+0x1cd/0x490 [ 1324.728307][ C0] ? pfn_valid+0x1cd/0x490 [ 1324.732785][ C0] page_table_check_clear+0x21/0x500 [ 1324.738109][ C0] ? vm_normal_page+0x12c/0x280 [ 1324.743025][ C0] __zap_vma_range+0x39b9/0x4f20 [ 1324.748082][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1324.753454][ C0] ? mas_find+0xab1/0xcf0 [ 1324.757827][ C0] ? unmap_vmas+0x1b9/0x550 [ 1324.762396][ C0] unmap_vmas+0x390/0x550 [ 1324.766770][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1324.771700][ C0] exit_mmap+0x293/0x9f0 [ 1324.775987][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1324.780836][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1324.785594][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1324.790878][ C0] __mmput+0x118/0x420 [ 1324.794988][ C0] exit_mm+0x221/0x2d0 [ 1324.799110][ C0] do_exit+0x6cd/0x2360 [ 1324.803333][ C0] ? __pfx_do_exit+0x10/0x10 [ 1324.807964][ C0] ? cgroup1_freezing+0x20/0x350 [ 1324.812960][ C0] ? cgroup1_freezing+0x20/0x350 [ 1324.817930][ C0] do_group_exit+0x22d/0x2f0 [ 1324.822565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1324.827802][ C0] get_signal+0x121b/0x12c0 [ 1324.832392][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1324.837986][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1324.844202][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1324.849623][ C0] ? rcu_is_watching+0x16/0xb0 [ 1324.854414][ C0] do_syscall_64+0x328/0x520 [ 1324.859035][ C0] ? trace_irq_disable+0x3b/0x140 [ 1324.864102][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.870216][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1324.874926][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.880883][ C0] RIP: 0033:0x7f55ba39e0d9 [ 1324.885303][ C0] Code: Unable to access opcode bytes at 0x7f55ba39e0af. [ 1324.892370][ C0] RSP: 002b:00007f55b85f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1324.900836][ C0] RAX: fffffffffffffe00 RBX: 00007f55ba626098 RCX: 00007f55ba39e0d9 [ 1324.908828][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55ba626098 [ 1324.916860][ C0] RBP: 00007f55ba626090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.924874][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.932926][ C0] R13: 00007f55ba626128 R14: 00007fff20f62d30 R15: 00007fff20f62e18 [ 1324.940958][ C0] [ 1324.943989][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1324.951262][ C0] CPU: 0 UID: 0 PID: 17940 Comm: syz.4.11788 Not tainted syzkaller #0 PREEMPT(full) [ 1324.960717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.970778][ C0] Call Trace: [ 1324.974073][ C0] [ 1324.976942][ C0] vpanic+0x56d/0xa60 [ 1324.980950][ C0] ? __pfx__printk+0x10/0x10 [ 1324.985568][ C0] ? __pfx_vpanic+0x10/0x10 [ 1324.990110][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1324.995438][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1325.000685][ C0] panic+0xc5/0xd0 [ 1325.004460][ C0] ? __pfx_panic+0x10/0x10 [ 1325.008981][ C0] __warn+0x315/0x4c0 [ 1325.013035][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1325.018701][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1325.024345][ C0] __report_bug+0x276/0x570 [ 1325.028900][ C0] ? __kernel_text_address+0xd/0x30 [ 1325.034100][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1325.039755][ C0] ? __pfx___report_bug+0x10/0x10 [ 1325.044813][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.050627][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1325.056437][ C0] report_bug_entry+0x19b/0x290 [ 1325.061289][ C0] ? __rate_control_send_low+0x638/0x8a0 [ 1325.066942][ C0] ? __rate_control_send_low+0x63d/0x8a0 [ 1325.072604][ C0] handle_bug+0xce/0x200 [ 1325.076864][ C0] exc_invalid_op+0x1a/0x50 [ 1325.081369][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1325.086215][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1325.092456][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1325.112071][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010246 [ 1325.118165][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1325.126151][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7d20 [ 1325.134127][ C0] RBP: ffff88807bf50f40 R08: 0000000000000000 R09: 0000000000000000 [ 1325.142094][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88802f4c28e8 [ 1325.150085][ C0] R13: dffffc0000000000 R14: ffffffff906a7d20 R15: ffff88807bf53258 [ 1325.158094][ C0] ? __rate_control_send_low+0x600/0x8a0 [ 1325.163736][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1325.169022][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1325.174314][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1325.180145][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1325.186499][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 1325.192580][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 1325.198307][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 1325.203954][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1325.209960][ C0] ? kasan_save_free_info+0x40/0x50 [ 1325.215198][ C0] ? lock_acquire+0x106/0x350 [ 1325.219908][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1325.225490][ C0] ? ieee80211_get_buffered_bc+0xc4/0x8a0 [ 1325.231278][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1325.236879][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 1325.242459][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1325.248024][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1325.253500][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1325.259592][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1325.265163][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1325.272375][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1325.277572][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1325.283636][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1325.290847][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1325.296931][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1325.303984][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1325.309821][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1325.315031][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1325.320855][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1325.326087][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1325.331238][ C0] handle_softirqs+0x226/0x860 [ 1325.336026][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1325.340816][ C0] __irq_exit_rcu+0xcb/0x220 [ 1325.345415][ C0] irq_exit_rcu+0x9/0x30 [ 1325.349669][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1325.355314][ C0] [ 1325.358265][ C0] [ 1325.361209][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1325.367221][ C0] RIP: 0010:pfn_valid+0x269/0x490 [ 1325.372268][ C0] Code: 00 00 00 e8 49 b1 96 09 89 c5 31 ff 89 c6 e8 5e f9 84 ff 85 ed 74 68 80 3d a5 d4 ff 0d 01 75 66 e8 4c f4 84 ff e9 80 00 00 00 42 f4 84 ff 41 bf 01 00 00 00 e9 b9 00 00 00 e8 32 f4 84 ff 4d [ 1325.391971][ C0] RSP: 0018:ffffc9000e5bf318 EFLAGS: 00000202 [ 1325.398063][ C0] RAX: ffffffff8242186d RBX: ffffffff8242175a RCX: ffff888028761f40 [ 1325.406031][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1325.414007][ C0] RBP: 0000000000000002 R08: ffffffff8242175a R09: 0000000000000000 [ 1325.422018][ C0] R10: 0000000000000000 R11: ffffffff8eb5a2a0 R12: dffffc0000000000 [ 1325.430012][ C0] R13: 0000000000000008 R14: 000000000005c820 R15: ffff88813fe53160 [ 1325.438001][ C0] ? pfn_valid+0xba/0x490 [ 1325.442370][ C0] ? pfn_valid+0xba/0x490 [ 1325.446724][ C0] ? pfn_valid+0x1cd/0x490 [ 1325.451169][ C0] ? pfn_valid+0x1cd/0x490 [ 1325.455627][ C0] page_table_check_clear+0x21/0x500 [ 1325.460977][ C0] ? vm_normal_page+0x12c/0x280 [ 1325.465862][ C0] __zap_vma_range+0x39b9/0x4f20 [ 1325.470857][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1325.476178][ C0] ? mas_find+0xab1/0xcf0 [ 1325.480535][ C0] ? unmap_vmas+0x1b9/0x550 [ 1325.485065][ C0] unmap_vmas+0x390/0x550 [ 1325.489423][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1325.494320][ C0] exit_mmap+0x293/0x9f0 [ 1325.498568][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1325.503348][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1325.508056][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 1325.513273][ C0] __mmput+0x118/0x420 [ 1325.517350][ C0] exit_mm+0x221/0x2d0 [ 1325.521424][ C0] do_exit+0x6cd/0x2360 [ 1325.525599][ C0] ? __pfx_do_exit+0x10/0x10 [ 1325.530212][ C0] ? cgroup1_freezing+0x20/0x350 [ 1325.535181][ C0] ? cgroup1_freezing+0x20/0x350 [ 1325.540155][ C0] do_group_exit+0x22d/0x2f0 [ 1325.544779][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.550017][ C0] get_signal+0x121b/0x12c0 [ 1325.554623][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1325.560214][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1325.566407][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1325.571819][ C0] ? rcu_is_watching+0x16/0xb0 [ 1325.576594][ C0] do_syscall_64+0x328/0x520 [ 1325.581196][ C0] ? trace_irq_disable+0x3b/0x140 [ 1325.586228][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.592302][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1325.596990][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.602896][ C0] RIP: 0033:0x7f55ba39e0d9 [ 1325.607329][ C0] Code: Unable to access opcode bytes at 0x7f55ba39e0af. [ 1325.614358][ C0] RSP: 002b:00007f55b85f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1325.622775][ C0] RAX: fffffffffffffe00 RBX: 00007f55ba626098 RCX: 00007f55ba39e0d9 [ 1325.630766][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55ba626098 [ 1325.638763][ C0] RBP: 00007f55ba626090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.646740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.654730][ C0] R13: 00007f55ba626128 R14: 00007fff20f62d30 R15: 00007fff20f62e18 [ 1325.662730][ C0] [ 1325.666382][ C0] Kernel Offset: disabled [ 1325.670744][ C0] Rebooting in 86400 seconds..