last executing test programs: 2.546358085s ago: executing program 2 (id=2518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd9, 0x68}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe9e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x400, 0xfffc, 0x5, 0xdc, 0x3, 0x8, 0x163b]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x40000) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000004c0)={0xa, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}]}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7a46, 0x4e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff18}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xe}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xb}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc000000, 0x10}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xd0c}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc0, 0x67}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x810) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000680)={r4}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000001500)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000740)={0xd68, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd}, @NL80211_ATTR_FRAME={0x55c, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @random="6de856ffe039", {0x8}}, 0x3, @random=0x86, 0x1040, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x8, 0x1}}, @void, @void, @val={0x25, 0x3, {0x0, 0xb2, 0x7}}, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x7c, 0xa}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x40}}, @val={0x76, 0x6, {0x0, 0x2, 0x5fc3, 0x800}}, [{0xdd, 0x93, "bc6fb4a8ada6e48cb37932344d1c9711f457bf146fa47fbf5ebd5ac1b6d800298f10303fbe8c2694fcf2fa98c800adff2b1515634821b8cf6aa400c0158b918020ff1510e38814162bb9f95e43570b1ebb99b90312abe80889c61246464839762cb1ce222a253a3e57c1039a27f41e1a29b3e8ec35510c95a4a6b0ea18382dfa8e3a945dd736510d6ff66262f48fdd7b1fb02f"}, {0xdd, 0xd0, "5e218c83287e99ce79b2cbbedca9fae8a29a02789ae4b81e1ca454d26885ca5c2d5836a1f48881a917d5536ff89da33d1b25ac417cf0aaf01dc745df09d572d0e51a574510900a1c164e7631171519766b0c2128bcfdb1c9d7c477f80f4e7f0b322118d5bd86efee4e23738c56e5ae07b3b2db6d4cf6689fab1c7987c37c5a3cfec181c29f21c08371ed0dc8c7e0ad98516800a4937d9b9985201f7c9b7266233204d5904007ee3d2da96dd669216645f41ffaa6576d72a502e86fed3ab8aabae9847bde3dce7dc04b2485345132f391"}, {0xdd, 0xad, "77e4b842efe051a7d2e131c9e99307a7c40eb14495dd751a0aed7c20562425cb69e64ff3c76d5dd0173cfe19532cf0f1f952dbfbb7576cbde8aab072d1614a7fa5cd32f012eaf609b14b7d46745c6bac20db7d2ed8300b6896db830b8980f1fa2d29b25f7e3818a65629d959467d121d6c536a779d6f43443334ec48f3fa91dcc421dbc32d258e366320290b45525dcd6c33bcb074030dfceeae030ece25aaf5772db0532c54eead8242f4de1d"}, {0xdd, 0xfb, "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"}, {0xdd, 0x10, "5b4be900af596b01a85ea620e531fa42"}, {0xdd, 0x62, "11380216ad39bcb9fe781644a11cb4fc20fd0a6e78bf28f308eb00f793eb1c257fc69fc92acd2aeb1f7dcd12046183f9218d4ae24ceff561ec5c57761078eb53ee47bfa0359a461ba0ef245e51c95f9eced30e5d02de084225f65928dc516296a4d4"}, {0xdd, 0x69, "39ecfc4a77c3f0f453213aa84b14df9b03dff351d47b91f92035213a9ca1dd6db87b979ed2d970b2e436e7b9d4567e2b5a4758a9df4fbca0a763f44a2e035c7a30e989099d5f36885a783b61ff994fc10c64adcda367f93deb8d7dfa0a0a58e949de8f39cd543c9c45"}, {0xdd, 0x3d, "caff51c1d6789f23086ee7f0952de23732cd9433e9a29790538f6f188c74b2e57ec30bd881eebce87e02e02c2088759c5f2d9283a8fe887f7a2caf0d5f"}, {0xdd, 0xd3, "89d6725af16cf1a5466b10d67de0d6d7e42a30fcae22481d1330535460574fe2303ba3d727bbd8ef2d4bf2bdf9d9b1a975b99fd1fa723756ca79686c519a7865e72db47de4c34c600076eacd3c59518c26fd5653dfd1dacdb07d241b45d4776c973b8a483e0aebbe2a5a0d9e30efbf973c749148a6098d431431180f001714422eb5c29cc5dc1080fd61210cb1924971a4ea28bea69e90198053a07aa4cf9c8fdb711cccdb07fa29c78dddc682fbd51313f22f584c3cd2e36b7d8d8807b8b779d59052e7472f06aebffbbe9546313ef28ed1d5"}]}}, @NL80211_ATTR_FRAME={0x7e0, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @device_a, {0xc, 0x688}, @device_b, @value={0x7, 0x1, 0x1, 0x0, 0x2}, @value=@ver_80211n={0x0, 0xd37, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0xd68}, 0x1, 0x0, 0x0, 0x4810}, 0x2000e084) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x51) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x108, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffc01}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3cc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x35}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000001900)={&(0x7f0000001840), 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, 0x140d, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40400a1}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000001940)={0x6, 0x7, 0xfffff801, 0xde6, 0x100}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xa}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001b00)) bind$inet(r6, &(0x7f0000001b40)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x88, r7, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x3}, 0x8, 0x9, @broadcast, 0x5bb9, 0x3, 0x1}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_IE={0x33, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe3, 0x5, @device_a, 0x948a, @value=@broadcast, 0x400, 0x5, @device_a, 0x2}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x81}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d80), r6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r11, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000004) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000001e80), &(0x7f0000001ec0)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r12, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x32ba273d, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc8c4}, 0x8d0) 2.359444684s ago: executing program 2 (id=2520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 2.068426795s ago: executing program 2 (id=2526): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x1b0, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x180, 0x2, [@TCA_CGROUP_ACT={0x17c, 0x1, [@m_mpls={0x178, 0x1f, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6002}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x64c, 0xe, 0x1, 0x7, 0x4}, 0x781353b4f6e68fb}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xee871}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}}, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) 1.576635453s ago: executing program 1 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r6], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) close(r3) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002c00128008000100687372002000028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 1.566520719s ago: executing program 2 (id=2533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00693efb15a8fb018600000000000000000000003960b2b753eaf2e4126271df03a0ba05d72d85dff137be0fba6c83606f72c864137f8bdc1d45c4f7a7fe3d55bd8af3c39e5f11fdf49925a6e199f7e5316dda0dd383be3fe4585c8f5c7d5b50c1cbba550244ead13e548d20f3425a9637b542966acedb03fae68bcfba424f82669dd73293eb00e1def3721c3c11fec6f7696d34cbcbf6ed52ddfeb82b64421a2c98759587f6d2734c3a34f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000100"/28], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x80000000}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) 1.480611726s ago: executing program 0 (id=2535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.39096369s ago: executing program 2 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'cpuacct'}, {0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'io'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2d, 'cpuset'}]}, 0x3d) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) 1.362092981s ago: executing program 4 (id=2537): ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x9000}, @void, @llc={@snap={0xaa, 0x1, '8z', "559402", 0x86dd, "4c91a36dc3623feb050af5ce0a0c9cc4c449781e36e8e3b75fa9d42144ce345d140ac7e07c4748eb06f5507f867ecb8e1db5ab81364ea4be6e5c617383651566f3dc3257752283a3ed6f654459c596f0c3a5680baf238aa780266052051647ddd6f1d83a85d28c9a56c4e9a868d82ff1315bcd9b5f68f87d3639c3961434647717b335d017727388cf1611ad95e3da21c6dc449e3d2924ba4027d5f8bda905f49521d18307e022fe1755f3001f9f80d234e4a955acb0214ab50cefc6b830b76377c61f8d7e39c893d9472d510da36aef0e07aa0dc8c7f846661c19c070522063da297c65352047444f6501e3ee4b2a49e0980c"}}}, 0x100) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000240)) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$inet_icmp(0x2, 0x2, 0x1) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000002c0)={'\x00', {0x2, 0x0, @local}}) bind$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x3b, 0x2c, &(0x7f0000000340)="f23fd25d14a58e6d1312b015b161a32d11eabba14be53cab7a9af15feb88b671155b13cf8166b802e9052aa89d80cbc385f907068cdca83b57eb9b", &(0x7f0000000380)=""/44, 0xd556, 0x0, 0x34, 0xd9, &(0x7f00000003c0)="338913753738da7c950e0072c0a8175a3fa00a378550d3ce0f57c36c20a744d238fd5552add94ba5b9845fb7fc44844da33bb769", &(0x7f0000000400)="13ffe91f662889c7998160733fc8fe6742b40415f5887e59a2397e7c9cafa4abcf968778137ab895aa308b94094a16f4f2e82166857c112279dd58b6b9794cc86f709c2149debf97305e9bdd886b4aa287ecf391ebf8ba2b20d927f4a7ca7b069897957e9262d2b099e438f027da0581d22b6c318438c04a5dd803daaf8f056dc35fe0d094d2b3b10d1ccd12067dbfa2736c3ec8c46a39910bfb966998a5ae35d17eae1ee136ea46a048a5fdfbaf4cffe93492fcb239c661d70b4af8dcfb94d58a66764f4e77e39e8bd7721a2bdc49e72ffc972095ccb6b863", 0x2, 0x0, 0xc}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r2, &(0x7f0000000580)={@void, @val={0x0, 0x3, 0x0, 0x2, 0xb, 0xfffe}, @x25={0x3, 0xfb, 0xfd, "58946a4fce6257bd7681f06dd4b19dcebae06ba3ee3599fee037c675ef0189849367167afcf7368bad3172c51c4d429393cc87f716cb94ece310c2156b2c5a7ed1015971e7cb5e97d883b0a65f5c76d8c8efca5a558a118ab52efe37618d78c988254b40c64f04f86f9e7a6e4258ec008cae2b3d897658da396e6cb1f680"}}, 0x8b) (async) write$tun(r2, &(0x7f0000000580)={@void, @val={0x0, 0x3, 0x0, 0x2, 0xb, 0xfffe}, @x25={0x3, 0xfb, 0xfd, "58946a4fce6257bd7681f06dd4b19dcebae06ba3ee3599fee037c675ef0189849367167afcf7368bad3172c51c4d429393cc87f716cb94ece310c2156b2c5a7ed1015971e7cb5e97d883b0a65f5c76d8c8efca5a558a118ab52efe37618d78c988254b40c64f04f86f9e7a6e4258ec008cae2b3d897658da396e6cb1f680"}}, 0x8b) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000640)="b5c23b304489949c86fed4dae3011dd346ff6426426cd2b1eaba56075b91f0fd25e871129d248b45a5173b27015aacc5243ac9ca14bc6850cc093cffc8765616c0c228b26efe83ed57985f5250a940e105168ad3cfccdb9467f309c42be6cb33948caaf409555a3f19df77ba789f6d9874e593f614430ccc10", 0x79) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000006c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000006c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xea}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20000014) (async) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xea}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20000014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={0xffffffffffffffff, 0x0, 0xb0, 0x16, &(0x7f0000000880)="d7f58ee0b02a0905478ba865c91e16ffb645c4607d540dff02dabbaee6578d00066271586cf9333a578293e44c5c79a767ee951dc8a9d6283c7d6f3a7a3542173218816624813688010f74529835394f2c493aad026ce8f7249d3053dc9656e64913526c70fa2d319ecd1f4fc17e557213b6b2557d9570663d6d6530a1c1f84fd675d7176418c1be8e0d6f8fadfd66d58fe55ce47c430d7345f037923db3df0d6e43c40a3b4641f1843315eee9bd4091", &(0x7f0000000940)=""/22, 0x7, 0x0, 0x1000, 0x99, &(0x7f0000000980)="1d0620286a9df2027c009b2d0b778234a42b63d11fca781eb42393aefdc5b33fd6c58b9d5f4a1688cf4fb5702af70342516d682aa5523b30b675f3463c24cf060861d48d4fdeb9dc9c03792013d156d1ecf74117264f5f0332175608054273b33c9fe52522538e7962b0b582df1f757910f7d5600d503b37a7fbec0880320f3165940120a3780c8d3001f07a93917e44d9012b785a2a8844b6a5f26a274ec42811cfff5e5a7418f75df7155339f2342465a6aaf256180ffb8150f05e51c690f11dc990a3836cfce7867f3111fc637001984cfbd55584f9ca7f2c72a331a13549850ffc46724c6985f99ff149539ed08d9b4ad175e576c0424e1e1022eed237157a462fbb02531e27420e4e6ffba63b5190f3ac1ef6727efd53ad675d617138b49089aed99e7af7c7061f7a274051ea78060126407638bf5161bdd230746da01d7a70e03f5913c55b87a4d4c86ebbcce625a748de173be0bd8093834271d5b064e87c8378c3bd0c6bca4c2838aa8304cd1380805e3b51b0f5637443d40370ca8385c4c45fad73ac5ca0dcac5baa88030f797a1a57b434d449b74d1c5231eb0f342c0427ee293220172466d0fb6f6ed96d8ddbee165d10b9dd57db4b23523bcdf0d24cfe37f25c7b8053ee4a2498a94824d56a26094aeb5a92054e28073a39e1df3c13813eec889d7a30a3aea82c32b0aa9c1e4536959e96a433fc0cd941783b00e077e0285c2e8912aebf193d548da056653cc4852e1509d17dbfa3bed53913a18131b4a46dcce85515b7c6291cf07ea8443d8715af2d6053ab8362879b8541220a44b4064ee47b845c9c041322f9a0b50c642e21d169eddb69122d317ece01e9ec46cfb27b093d5cbd1cc08fb9f40955904b4ea2433cdcc18f5efa26fe5ec3db939f1de0a951da804419e56ecc07b31cf1edee6ab2e8a462d19423e9807a8e0b714d0769356e11714d316d302487bcfc2c6e1c4d3d8835532e7b6fd53de222150c73001069ec891c8e0d5e2b43c8b4dde7a8ac0b882e94227b40f7ca56a8dbaeb9d68bc98257798b93f5c8bc99b97ebae0678bdc6975cc5320220ed5f7f15bc1799b7d9fabae96f49c485045cb769ca1a78b6936406b290b639e1d6b04e57ebe1ff5df48f12bfc8f50aed1a022463baced7d060a2967976882875bf8ca513904b74084f96219b35af39cccb6256b13dc6cdcba997c0e27c9a26cbff2e6590e1bfc3c203074f0912fe9b78128d8b91f91dd9964c525f907900a247a2201f2a89ade3f25ec1d3a03e3e109853b77e8d6cadcb9df941868a33b3e174959db6c252e8dd12d487d77432b07a65c91a44c60b3b2b92b1ea4162b9105d074df06d5eca578afe6e00a4af4009f57b41a5942b036968dd23b611ae1ed91d1e2619c0d4b39a2ac08597f348a35fe289ca15259b85428d32e3ffd57a031d8b048faa7a9edabbe0755b50e898cf1baf01d7d44d05fe99c67b1dbb0648bedcfe76ca28098666feda6c35c93bbeb7df9adc2b6144c09542945ff2a344bbd02de78b60bda032577bf6fbcf292c6e2c70c3030882b7bfcd523fc771997f8bee656ff760e2e616cf4544c0416c70521d588bcaa148086b07357c1c14e467ec10fef8d765761eb5ba1c2913ed2920e4f1c48d04d9612809aecd86555d5197d8eaf67449021c1b90ae10e91bf2e7993ecffd8422b6b537c223193bbf2feb26a52ad3e35d7db60a5354df9826ca728e272e8adc6602ed3102a7df1c7522a1ce70b835e9a7db2781c1d44d5b46d7b8d3b9a2606763fae684f2a3c279116ba4223975cc921111c1be06429a22f3c64ae0ec9ee6245e16c8264a51919da54933d44dcba6c29c65b6067e66b5c9d771bc73a8119fb2d12af6a35764e189ab24b8a27de67bef078195eeffac22ab40f8181add651f7a73550c458bd06de4b4b25685f1a03ea1a05277a863d7570a09c22c72dec5a2ea6444184cb02147fbe824581f1118474a628aef9ff45cf69370ab37a430e11bdc02d989e9d98491ec99c673a2976d2a3a4c818e84c84512d5c5eb7efccd7814c34fab68cd49576bec82b3c3ca05d8f6c973511c561981f6db3eb66ee439a3c65c05daf957f3612e65e4891a12f737c0d27e861207caa08bd16b36f6520cbec8de4d6f59b4fe6fafdb54986e43177d93e50d01b1b8d7db70e55da9432864e9f0226b3b6687b9417e2ce4ee17ad9a0cfbfd624e7426f091ec900ba5fdd31447c1221441f9e119d7cf92fd8d835a92812ebdd8faebdb66f18fa21f43180155cdd905a92cb721644239659f40cd922deae0140a1dcf9b1037c0d34005aaef451d5f308974af7d96fd9dd227c4c87531bbc429b49c5d9eb3bf0ba421a15016d6f0b32375c3cfb03536e1568623efe3745ec8a74cb089cc31458b8dabc2f2e1cf18203d32df393e421a84ea575f6b0adb32e81c2422818f9c8eac3c2def3425d76e64c16acb59875d5f0e02f0232e5af5289cadb18bf9bf020f9a42430dba0f04cbc4d5bbefbe1bb68826e12eccdedf3cf32301e0597aea631f58bbde3c21ad1314f1b69bc24983ebf107200538cfe85338cd4da01145c9ec98d9a4f7577c4ecc24e951f05f8f76cedfae51b2ad747e9b5a3168fd4bc3cbc55723066ab6614d0d02e892b8cf8fee7f397a911dc3654187126fea276adabd73fe652d3bda21ba21041f4e3ad24419ecb1d5762c73e9e8aafbeffb964f8b1dd45cc77543d4387096d16ea554ab4fa5039538a6c8ea43ddfd52dfcab50ba2cf6c57e2225e9e3ebd5883d93bfc5906059caf3a304ff248e4920dc9d09fba879d0599248eac83d249d08e2d4c503c6f41a0d48a8450860e453e2ea8c74c5a5b5dd453e27eae27c75f3c1104af774b65c333a3fc3418c6a0516c3ef601573a647660c96decdcadb99c4751c662bd4916c441defbdb6f91f6377619de7507a8185305d2dc45e6742d099c2984d3289979392b1afebe2e116a73769d0757e812574a275aa11988b8ff712d64287ed856f0b22b6532779ed8f978ba90e7e5a46a8867b9e01ec83a50ebca3b7744cb258df2940ef22b5a1b5387bbb71cf1819caef944abd941d11c2a570e307c1df43d903094e593efb502d73ecaf1c58f37903076a696834757e9e0eba9abc65878e76c2d171195cd71631c206ca848a7d359cbe4264d6d727a45eae19e01f13e53553f281e8aa36b4c537509040594a7d1e8addb12f0bc88bc25b09cd545f1421e8b1c0a8084b5ba78928e1b4bbdf4b8516ff1179718bf21a7f70bb87f699c6c38e09078a690e5b3b54c47a884df2f6dea854ec8b352ee0b29ca93b7dda5dadb4930612f65b203e5cc6904cf222228c7465f12487b48c56d41cbe8107f3f3b62b337a63e0dc24e3bdfd667883c74507618c8434163d1742100a3c0761c8dbc5783a7edfe6458b1101400fa494f0308c4e4dc6b47df2ce89712a1879253e0906ef1d11c25b8144a2b048e9098f26861d51b30015bf5fc08aa5a6b64244bcdda684807201ef5d00114551b5f3272bc0bb07fe3c229a11576b2f95b84d65160b796d2a59dd5c0d812d3aefe3fd39c89e1ecd492d04cfc7b4218bf208be59fe57449fc7d2852deb839535196799e9a2815bbf72a3deb66e866d80906d14b63df8730b4aa6606b44642ff61aa4ff04a7d337d0be3683d7e4fb57450491e818902fc7bbe26f4807997ed626bafc8e8f5fc4e9227939bbf03c9a48293e43063fb4336d84e91b4e58c1f450976086c398cbe354cc9fdac1c9ed7303b188d8003cf9e3ab32351ef178332cd5f80a2aa07ec365c216f3bc040f44724f6f6982e03d56897dbed7e45a472ea2ba6c5241bfb08e0e7f8570438564d02b553b3cd8e11c66690d0ad6230c3775b2e80492364ecdeecb5c00cb28f87d8e5eed94ea5f7196df9f0d6e5fdd656289340d0ce4cd3409d6e62492381aed271aa29f3ffc9554e0408a7d62a64c37522906b072b966f56d75564bbea3cf3def9620f914d3282134a60809ea3634744fd0ca5d84b25373de3bc776a8a708e8c4411b8bd454c8bddf23bbb86c23b1b86c821bb01c7c54222972dbace546c021781261099982c4cae2ee74e6d2d33ae1c43b9741d1521ff7c21f00b98383fa95bfe4b40ecf081b0eba3292a6e2d6a6642bd849af577502604d2fefc2548722a927a714df71a246a87adc7119561d06b3602f83cf1600b6750360e2fde3b0fc6c0fd48476d62ad449b2a3453ab3ffd3246289b4e953a1b45ba8616dca9a8f0b39494fb8c3f3419a9716a9b343977faa0e3d099f602da48ef462c76bee5a35145b583012a537255df37312ddd542a3fb756f6cbd53e72806247a665edb3163bb0c9613b4ac5628fbaab14b1bdbcb30a5bf9af0a7664ac9c64f4df5610f072658ce86a73bfaf33dffb98aeab535a1028565f6466e567bb85101867e4288029927807f20a4a6a3243bad2080b67b74b8ccee0dfca89723001bad6c6449345875b2f14f4aa817d23f66d635bb920b0429e465d92313aa28740720b58d69626518597e48272f8eb3e95e1bf17cf6aba4c3cf2a42a57e3a996e31d5073fc693938fd9f6effa77ac0d5907f62936cd66e7feff542e03241cd65ded6c1495f712d98dc19d12d58c66712ba1f1548c0da0ffb881836d7625b1cd1ee1195b7c6cc9365483b953b0590fcab084cc4aeb452ac63f905b89faea7ff879e40d8282926346852960469bc2f98fbf09228ae37469b2546ff38248fcb83f8d76c8987da81ca6f328224df9dd3c51aa3b5d2eec02d06fe58bba58bab448dec171088f700f476dbbf0ad8099e5ae53100c324210fba52f4fd07aaa86d1165f091aa82377cb741f44f5bb842df5bc6a4c225053756d346a8dea01c11aa82dca26b34512fc313ab30c12a8a7f5afe8fff131e7447046d58516d0c50063d74c0b070c878dcd29dcf264e5483da4af18bc5d3814c47b269867cd719d31863c49ff2d51ca1529f050eae193be39e311f324f26ba89fa73cd9e880f1ec755b84e4db748cef21444e61272262a82b8155965313c65cf6cc96c2e73c07e4e9d67f6f108026872c2de928dbc2ac9f300e70c0aacdc397b1c7bc466219aa8be9fb84159a441bb284f8ad0ff9bd8eb8433a0beff9d9248d724cc13f9b5002662ced5a0be1e09e9d259adb5c058340e3eb6b60ec6e3cb4e51b6d4651eb68305f193decccd659358699a0ec2d08ea5b668e5f32273e5bb4ccf43f5396a5c40390ab2b934086319c6f45b584755ac25c70a8fc149b6ac9df3d30c731d23d387209ee154b2aa051f3b86586f9486ead9750e6a40a7b7146b52c0743499e95be53f245e53bd218d80ba5780daf7f0e19bec1e7da9e0f8965048685a735f47ace476de24c8d3a672b1221350809a1f241fe3a14a5ea38cd3a8f7e6b18eff325f74ca54daabcee0585e9cd9cbc5f2952c032f6de61838dc918764fbefa94d026da17dba2542b471e983ad82da9da96d324b6bc617661f6403c36703e9299acc87a41fb2e68ebd90ddbf38009de16f7931f0a551785fd24bb65ace9886ac4a19c95dfcaddd5ea586552493667aed08cd714c877fadc367c8ce07cc0690e099e8277dedeaf8a1871b4b5244c499c5bf989cde7518a8968e5eac18fcb5c4785f45be57db42b5c45f35cdcd26fae400f9f8d2de5f2a2d4c39f3bac8435c9612c28983f2742d7b7ba6a848befd8a4d2b868e28b7ad7203aa2a61e3b285f1ae6411a0df91a7fdb900768363cab1683b6e2e8018d77ee6291358d2b991356917bdd8eb8c306ff9eecf1f53fd9c11c4b95f5e1580b3f894afdc279", &(0x7f0000001980)="ad49c355c7f7c35d647d1bab82bb1be28b79ae4b7eb1ba9850beb4484f398940d97f6983c216c5112c18e65a3d6bcc2c57b48df4c0cf2a226d7d84ff3fedd437e94c9fa0fd349a03f42c97f40da5e1edd91672929f6448340fd94e96942629eafbfd23f433a6829fb2727ff1d1c1a79201b8161d025c10302218ba7a114ad94296990adbf74a8c34133ee49449c5885fb46537a48a789cc968", 0x3, 0x0, 0x2}, 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000001ac0)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x9}, @in6={0xa, 0x4e21, 0x401, @local, 0xdbd}, @in6={0xa, 0x4e24, 0x20000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x6, &(0x7f0000001b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbe0f}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x5, 0x100, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x7, 0xe8, &(0x7f0000001c00)=""/232, 0x1e00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001d00)=[{0x1, 0x2, 0x10, 0x5}, {0x4, 0x1, 0xa, 0x8}, {0x5, 0x3, 0x5, 0x5}, {0x3, 0x1, 0x7, 0x2}, {0x3, 0x157e, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001e40)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001e40)=r9, 0x4) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001fc0)={'syztnl0\x00', &(0x7f0000001f40)={'syztnl1\x00', r1, 0x4, 0x0, 0xd, 0x2, 0x40, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xf052c823093b06c7, 0x8, 0x63}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000002000)={@private, @rand_addr, 0x0}, &(0x7f0000002040)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002ec0)={&(0x7f0000001e80), 0xc, &(0x7f0000002e80)={&(0x7f0000002100)={0xd5c, r10, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x2a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1c00, 0x47, 0x1d, 0x9}, {0x9, 0x3f, 0xff, 0x5}, {0x1, 0x0, 0xde, 0x10001}, {0xfff5, 0x7, 0x2, 0x2}, {0x0, 0x9, 0x8, 0x90}, {0x7, 0x6, 0x3, 0x44}, {0x6, 0x1, 0x7e, 0x8}, {0x8, 0x2, 0xc5, 0x7}, {0x7, 0x1, 0x5, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb0b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0xf7, 0x4, 0x7}]}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x8, 0x3, 0x8}]}}}]}}, {{0x8, 0x1, r1}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc000}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x84}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1d8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x5, 0x80, 0x4}, {0x0, 0x65, 0x5, 0xb}, {0xdfae, 0x4, 0x7f, 0x1}, {0x3ff, 0x9, 0x24, 0x6}, {0xfc00, 0x9, 0xec, 0xc}, {0x27, 0x7, 0x3, 0x5}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x3, 0x3, 0xff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc66d}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0xd5c}, 0x1, 0x0, 0x0, 0x6}, 0x40000) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002ec0)={&(0x7f0000001e80), 0xc, &(0x7f0000002e80)={&(0x7f0000002100)={0xd5c, r10, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x2a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1c00, 0x47, 0x1d, 0x9}, {0x9, 0x3f, 0xff, 0x5}, {0x1, 0x0, 0xde, 0x10001}, {0xfff5, 0x7, 0x2, 0x2}, {0x0, 0x9, 0x8, 0x90}, {0x7, 0x6, 0x3, 0x44}, {0x6, 0x1, 0x7e, 0x8}, {0x8, 0x2, 0xc5, 0x7}, {0x7, 0x1, 0x5, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb0b}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0xf7, 0x4, 0x7}]}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x8, 0x3, 0x8}]}}}]}}, {{0x8, 0x1, r1}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc000}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x84}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1d8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x5, 0x80, 0x4}, {0x0, 0x65, 0x5, 0xb}, {0xdfae, 0x4, 0x7f, 0x1}, {0x3ff, 0x9, 0x24, 0x6}, {0xfc00, 0x9, 0xec, 0xc}, {0x27, 0x7, 0x3, 0x5}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x3, 0x3, 0xff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc66d}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0xd5c}, 0x1, 0x0, 0x0, 0x6}, 0x40000) 1.27648138s ago: executing program 3 (id=2538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r2}, 0x20) ppoll(&(0x7f00000000c0)=[{r2, 0x9004}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) splice(r3, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) close(r3) 1.139904316s ago: executing program 0 (id=2539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, 0xfff3) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) 1.1390491s ago: executing program 3 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00', 0x1000}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.105764646s ago: executing program 4 (id=2541): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e23, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 992.467045ms ago: executing program 2 (id=2542): r0 = socket$isdn(0x22, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000900000000000000000000000000000000000000000000c28597da3ed7fbecdac71b5d147df5fe67b54c18839fd26aa6501ef92860d8d4a2adc904527de814d9d8a0bf69e3f8ee590af2c1f6e0c8ad2d929d68446ef8e9c6e17045d9cab8f6d71c24509eb633cb3de01682bd50127f487b709e855c13c3217fa61dd991ff481602b5e08f709ffd8c0796d9c0cdc8fcbc353a832ed6a825227a6c918f936609507a0f554dab7b2e4151ddad305cc0e129978df4c8bf252c71b27f94d017609a5c503d50debb33"], 0x17) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(r2) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000140)={0x8}) 990.619565ms ago: executing program 1 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x510, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x40, 0x3, 0x5, {{0x35, 0x4, 0x3, 0x1c, 0xd4, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp={0x44, 0x20, 0xbc, 0x0, 0x2, [0x8, 0x1800, 0x7, 0xb12, 0x3, 0x4, 0x40]}, @noop, @timestamp_prespec={0x44, 0xc, 0xd1, 0x3, 0x3, [{@loopback, 0x4}]}, @cipso={0x86, 0x6b, 0x3, [{0x1, 0xd, "9e9db3b1e3fbbdd919c449"}, {0x0, 0x8, "b0c734c5dfec"}, {0x1, 0x8, "d3e7ed517dfe"}, {0x1, 0xd, "228e03f9bce888ba0227ac"}, {0x0, 0x6, "4167b10b"}, {0x6, 0x8, "5a596cf1eae0"}, {0x7, 0xb, "5e49c9e756f85dd194"}, {0x6, 0xf, "b573edf56f53dc792c4c737c0f"}, {0x1, 0x2}, {0x5, 0x11, "665050cee2944b3eb9bbcda165a7ab"}]}, @rr={0x7, 0x27, 0x31, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x80, 0x10, 0x40, 0x2, {{0x16, 0x4, 0x2, 0x4, 0x58, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xe8, 0x1, 0x9, [{@empty, 0xb}, {@local, 0x2}, {@local, 0xfbd}]}, @noop, @rr={0x7, 0x27, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @loopback, @empty, @broadcast, @multicast2, @private=0xa010101, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x336b672dfaba8996) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0xc24, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x805) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20004004) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x604}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040010) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e00)={'syztnl1\x00', r3, 0x40, 0x8000, 0x0, 0xfffffffb, {{0x2c, 0x4, 0x2, 0x3, 0xb0, 0x64, 0x0, 0x95, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x7, 0x92, [@empty]}, @noop, @timestamp={0x44, 0x8, 0x90, 0x0, 0x3, [0x6]}, @timestamp_addr={0x44, 0x14, 0x47, 0x1, 0x6, [{@multicast2, 0x3}, {@local, 0x9}]}, @cipso={0x86, 0x41, 0x3, [{0x3, 0xa, "18e77aaaf66ead99"}, {0x5, 0x10, "55b84f4ef758bea0c56882bb2b18"}, {0x1, 0x2}, {0x6, 0x10, "725d51c591aaf94c2547cde94cd1"}, {0x6, 0xf, "187debd90f59f6175684138ce9"}]}, @timestamp={0x44, 0x14, 0xc3, 0x0, 0x0, [0x40, 0xcbf, 0x3, 0xfffffff9]}, @rr={0x7, 0xf, 0x8c, [@local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x8, 0x6, "bba3aba2"}, @rr={0x7, 0xb, 0x7f, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000f40)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001180)={&(0x7f0000000dc0), 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1bc, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xba7c55e34af07db9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) (async) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x110, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'gretap0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}]}]}, 0x110}}, 0x4000004) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000016c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001440)={0x240, r14, 0x804, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x59, 0x3, "8cbf27899e3074277edaa3110a3ec912f957dd53d69e16ee07b5bf58d4596d034f1038988ec77f5172f8f584e31aef82133fd920e403b84ea35fef0662fd5953e8ae3bb258e63d01e00ade1fdb73c375d63a076c3f"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff1d4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87e1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff18a}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x342a6f10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa64}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x761}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x240}}, 0x40010) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001800)={'filter\x00', 0x4}, 0x68) (async) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x36, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x6, 0x8, 0x8, 0x9, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x9, 0x3, 0x0, 0x1, 0x1ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, @map_fd={0x18, 0x7}, @ldst={0x1, 0x1, 0x0, 0x2, 0xa, 0xfffffffffffffef0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x3, 0x1, 0xb, 0x9}, {0x2, 0x1, 0xc}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002cc0)={r15, 0x0, 0x3b, 0x0, &(0x7f0000001c00)="0b6626990ef9da2fc7cf3bc4f9b5218dff4fdb6f68e6c623450279638b84fd14177d9fd34ffb7ad394d806ac2db1ef67104148454ccda4386d4239", &(0x7f0000001c40), 0x4, 0x0, 0x1000, 0x0, &(0x7f0000001c80)="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", &(0x7f0000002c80), 0x3}, 0x50) 987.950485ms ago: executing program 3 (id=2544): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0xd}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)=@phonet={0x23, 0x8, 0x7, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000000480)="06bc5abdd609f5ed298e387aa6b7d408acd7fa08be050345bff49e823176b82d59096014f69fa30fb47fbf34b28acf7627aa8a555658fd106a5f38eb97cf4b", 0x3f}], 0x2}, 0x1) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x10000000, 0x1, 0x7}}]}}]}, 0x44}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, &(0x7f0000000100)="02c0bac63597cf8109adae8e21a6f8a33a965151944bbf925370ee84c118d1a1ec7df7241c83c84c958e6df0829a8d07f6d9d908097edd3ab043071dcf4817764900"/76, 0x0, 0x2, 0x0, 0x1}, 0x33) 948.248565ms ago: executing program 0 (id=2545): socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 849.183796ms ago: executing program 1 (id=2546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x10c, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x18}, [@generic="b95febf651c588f80003f2050b1ab679850d1626593468161880cec2053bacb7c6dbd0217475f0a68e19d3155f40780e14d12e2c7e283fad4d3a354ba03ee39393eaa5b843c4f85c254aa560f5e8673a6a1dcb20a2b5749cc8d443cfb1ecd883edace411f9c2970fe47473cb857f10c92c39511de08d1cc90fee4f88cb78e5e5aa9ce1c5a51117686dd81a2c3e07c897704a134769c0357c231ea6217528", @typed={0x8, 0x9c, 0x0, 0x0, @str='-*:\x00'}, @generic="b79d4505086c942eb693948f83e1c922e87243c6c31f846602a5e89d229f1bce6114d7957b70baa261bd773f7c9a8f3dc1beb70570297e85a66c8c09c08cd6fd6336fcbf47cef3a5af36", @typed={0x5, 0x63, 0x0, 0x0, @str='\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x84}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 800.603817ms ago: executing program 3 (id=2547): r0 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0xc, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x11e, 0x80, 0x0, 0x1c6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010000000000000000000000000010000300686173683a69702c6d6163000900020073797a32000000000c0007800800080000000000050001000700000005000400000000000500050002000000504d3f6eb2f9887dafc49c03e6400d045123936f60ee35d2ef917a51c4c29805e1439c2bde22e98739c61f08edc9859a3270c5abe62f2f392342a3d2d62ad52e7b9a9233fed635d0780cbc43c09a43d91bbcbc5e8c726ed9aa31f597c5228d8c94d0cbfb9cb2783a06eb171309"], 0x54}}, 0x0) 798.975622ms ago: executing program 4 (id=2548): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r1, 0x7, 0x3, 0x80}) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) r4 = epoll_create1(0x0) (async) epoll_create1(0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket(0x40000000015, 0x5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000003c0)={0x1008}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x6c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x37}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfffffbba}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x845) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x30, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(r1) listen(r0, 0x0) 714.747852ms ago: executing program 1 (id=2549): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 705.070492ms ago: executing program 4 (id=2550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000140), &(0x7f0000000000)='%pI4 \x00'}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@ipv6_delroute={0x38, 0x19, 0x2, 0x70bd28, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x1, 0xfd, 0x3, 0xc8, 0xa, 0x1800}, [@RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_GATEWAY={0x14, 0x5, @local}]}, 0x38}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="200404000300000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x5, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 699.316227ms ago: executing program 0 (id=2551): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x88103, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) vmsplice(r0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000004000001800128008000100736974000c000280c1d2e5817f00000108001f0009000000"], 0x40}}, 0x0) 620.056417ms ago: executing program 3 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0x5) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r1, @ANYRES32=r5, @ANYBLOB="0c0098e9ff070004700000001400040073797a6b616c6c657230000000000000080005001e"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 554.178373ms ago: executing program 1 (id=2553): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x7, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c9892f", 0xe}], 0x5b}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) socket$key(0xf, 0x3, 0x2) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x7, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c9892f", 0xe}], 0x5b}, 0x0) (async) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) (async) 509.906158ms ago: executing program 0 (id=2554): r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000440), &(0x7f0000000480)=0x30) sendmsg$AUDIT_USER(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x3ed, 0xd3c27201f41b6837, 0x70bd26, 0x25dfdbff, "5bfb7bb454efe49bc11940fdda3288b5117cdce91ac3d5512d0944dea41bc7195e3ed947021ad530f07f8f805ff21d", ["", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x4000031) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000090000000000000001000013020000000000000000005cd2b1280000000000007da1300b2e2e613000"], 0x0, 0x39}, 0x20) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000340)) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x78bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8101}, 0x20040080) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000400)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 424.664612ms ago: executing program 4 (id=2555): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) 269.459132ms ago: executing program 0 (id=2556): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @mcast1, @loopback, 0x9, 0x0, 0x0, 0x0, 0x780000000, 0x272001b}) sendmsg$802154_dgram(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) 93.609158ms ago: executing program 1 (id=2557): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0xa4}}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x9005}, 0x0) 653.54碌s ago: executing program 3 (id=2558): ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x7, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff, 0x0, @empty=0xac1414aa, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x5}, {@private}, {@local}, {@remote}, {@remote}, {@remote, 0x1}]}, @generic={0x89, 0xd, "5c33b1f4ee187524e6c995"}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=2559): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}]}]}}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.988506][ T7019] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.005956][ T7019] 45100 total pagecache pages [ 125.011215][ T7019] 0 pages in swap cache [ 125.015415][ T7019] Free swap = 124996kB [ 125.067650][ T7019] Total swap = 124996kB [ 125.090960][ T7019] 2097051 pages RAM [ 125.094934][ T7019] 0 pages HighMem/MovableOnly [ 125.122972][ T7019] 425645 pages reserved [ 125.133251][ T7019] 0 pages cma reserved [ 125.139087][ T7034] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 125.176266][ T7034] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 125.229860][ T7034] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 125.826845][ T10] IPVS: starting estimator thread 0... [ 125.932573][ T7066] IPVS: using max 23 ests per chain, 55200 per kthread [ 126.049032][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.066173][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.360930][ T1154] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.395803][ T1154] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.450643][ T1154] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.519092][ T1154] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.527110][ T7079] __nla_validate_parse: 18 callbacks suppressed [ 126.527135][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 126.616469][ T7085] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 126.629850][ T7082] netlink: 'syz.1.301': attribute type 8 has an invalid length. [ 126.656181][ T7085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.304'. [ 126.723778][ T7089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.731407][ T7089] IPv6: NLM_F_CREATE should be set when creating new route [ 126.836416][ T7096] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.846194][ T1154] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.090264][ T7106] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 127.227609][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 127.237278][ T7106] ip6_vti0: entered promiscuous mode [ 127.245821][ T7106] ip6_vti0: entered allmulticast mode [ 127.458104][ T7121] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 127.514673][ T7121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'. [ 128.020602][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.226805][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.465691][ T7158] netlink: 'syz.3.326': attribute type 23 has an invalid length. [ 128.471751][ T7159] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 128.512422][ T7159] bond1: entered promiscuous mode [ 128.517782][ T7159] bond1: entered allmulticast mode [ 128.525663][ T7159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.861998][ T7174] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 128.917106][ T7178] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 128.965536][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 129.530464][ T7202] bridge0: entered allmulticast mode [ 129.646223][ T7202] pim6reg: entered allmulticast mode [ 129.783639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.266295][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 130.445640][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.500216][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.530971][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 130.850253][ T7264] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 131.437267][ T7300] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 131.456154][ T7300] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 131.469855][ T7300] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 131.477753][ T7300] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 131.582074][ T7306] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 131.589974][ T7305] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 131.634438][ T7305] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002 [ 131.924957][ T7322] netlink: 'syz.1.373': attribute type 21 has an invalid length. [ 131.935904][ T7322] __nla_validate_parse: 33 callbacks suppressed [ 131.935921][ T7322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.373'. [ 132.104670][ T7328] openvswitch: netlink: IP tunnel dst address not specified [ 132.342041][ T7336] netlink: 104 bytes leftover after parsing attributes in process `syz.4.378'. [ 132.514886][ T7345] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 132.690032][ T7354] nbd: must specify an index to disconnect [ 132.791781][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 132.907158][ T7362] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 133.236352][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 133.878416][ T7398] dvmrp0: entered allmulticast mode [ 133.974177][ T7404] dvmrp0: left allmulticast mode [ 134.310313][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 134.374667][ T7424] netlink: 'syz.0.403': attribute type 16 has an invalid length. [ 134.375167][ T7419] veth3: entered allmulticast mode [ 134.408895][ T7424] netlink: 'syz.0.403': attribute type 17 has an invalid length. [ 134.429197][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 134.467785][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.476831][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.486760][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.487812][ T7426] tipc: Started in network mode [ 134.496136][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 134.510461][ T7426] tipc: Node identity , cluster identity 4711 [ 134.516562][ T7426] tipc: Failed to obtain node identity [ 134.523155][ T7426] tipc: Enabling of bearer rejected, failed to enable media [ 134.622181][ T7424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.785999][ T7430] syzkaller0: entered promiscuous mode [ 134.796450][ T7430] syzkaller0: entered allmulticast mode [ 135.132909][ T7464] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.145694][ T7465] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.441734][ T7478] syzkaller0: entered promiscuous mode [ 136.476956][ T7478] syzkaller0: entered allmulticast mode [ 136.491998][ T7478] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 136.725892][ T7491] nbd: must specify an index to disconnect [ 136.967573][ T7501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.426'. [ 136.991085][ T7512] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 136.998982][ T7512] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 137.492490][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 137.906289][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 137.965845][ T7539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.105867][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.221329][ T7549] bond1: entered promiscuous mode [ 138.248914][ T7549] bond1: entered allmulticast mode [ 138.251065][ T7561] netlink: 260 bytes leftover after parsing attributes in process `syz.4.441'. [ 138.279471][ T7549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.414280][ T7563] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 138.460419][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 138.503876][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.446'. [ 138.722862][ T7574] syzkaller1: entered promiscuous mode [ 138.728401][ T7574] syzkaller1: entered allmulticast mode [ 138.834631][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 138.851683][ T7583] syzkaller1: entered promiscuous mode [ 138.898553][ T7583] syzkaller1: entered allmulticast mode [ 138.980903][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'. [ 139.122230][ T7594] netlink: zone id is out of range [ 139.127775][ T7594] netlink: zone id is out of range [ 139.168490][ T7594] netlink: zone id is out of range [ 139.184902][ T7594] netlink: zone id is out of range [ 139.211617][ T7594] netlink: zone id is out of range [ 139.234351][ T7594] netlink: zone id is out of range [ 139.243091][ T7594] netlink: zone id is out of range [ 139.277900][ T7594] netlink: zone id is out of range [ 139.513352][ T7614] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 139.542780][ T7614] nbd: error processing sock list [ 139.548139][ T7614] block nbd0: shutting down sockets [ 140.146706][ T7656] netlink: 'syz.3.471': attribute type 18 has an invalid length. [ 140.358318][ T7642] team0 (unregistering): Port device team_slave_0 removed [ 140.393889][ T7642] team0 (unregistering): Port device team_slave_1 removed [ 140.483497][ T7653] netlink: 96 bytes leftover after parsing attributes in process `syz.1.468'. [ 140.526898][ T1154] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.568832][ T1154] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.619727][ T1154] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.662308][ T1154] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.718514][ T7680] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 140.732754][ T7680] netlink: 224 bytes leftover after parsing attributes in process `syz.2.479'. [ 141.010729][ T7691] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:21 [ 141.394287][ T7713] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 141.859533][ T7733] veth0_to_bridge: entered promiscuous mode [ 141.878651][ T7734] tipc: Enabling of bearer rejected, failed to enable media [ 141.912272][ T7734] tipc: Enabling of bearer rejected, failed to enable media [ 142.216591][ T7741] veth0_to_bridge: left promiscuous mode [ 142.345689][ T7765] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 142.418183][ T7768] netlink: 'syz.2.508': attribute type 2 has an invalid length. [ 142.456220][ T7769] __nla_validate_parse: 10 callbacks suppressed [ 142.456240][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 142.469188][ T7768] netlink: 84 bytes leftover after parsing attributes in process `syz.2.508'. [ 142.647595][ T7776] netlink: 284 bytes leftover after parsing attributes in process `syz.2.511'. [ 142.715895][ T7782] netlink: 'syz.0.512': attribute type 11 has an invalid length. [ 142.726146][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 142.729865][ T7782] netlink: 'syz.0.512': attribute type 11 has an invalid length. [ 142.743584][ T7782] netlink: 152 bytes leftover after parsing attributes in process `syz.0.512'. [ 142.812810][ T7785] netlink: 'syz.2.514': attribute type 3 has an invalid length. [ 142.994244][ T7791] net_ratelimit: 12 callbacks suppressed [ 142.994265][ T7791] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 143.015871][ T7792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.164214][ T7794] tipc: Enabling of bearer rejected, failed to enable media [ 143.182750][ T7796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.518'. [ 143.364685][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 143.788811][ T7828] netlink: 100 bytes leftover after parsing attributes in process `syz.4.528'. [ 143.789532][ T7824] bridge_slave_0: left allmulticast mode [ 143.805510][ T7824] bridge_slave_0: left promiscuous mode [ 143.821169][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.874969][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 143.921062][ T7824] bridge_slave_1: left allmulticast mode [ 143.947359][ T7824] bridge_slave_1: left promiscuous mode [ 143.970100][ T7843] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.992744][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.029533][ T7824] bond0: (slave bond_slave_0): Releasing backup interface [ 144.058408][ T7824] bond0: (slave bond_slave_1): Releasing backup interface [ 144.090645][ T7824] team0: Port device team_slave_0 removed [ 144.138557][ T7824] team0: Port device team_slave_1 removed [ 144.155776][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.164329][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.175255][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.183201][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.202969][ T7824] bond0: (slave wlan1): Releasing backup interface [ 144.240116][ T7839] team0: Mode changed to "activebackup" [ 144.256431][ T7840] netlink: 240 bytes leftover after parsing attributes in process `syz.1.527'. [ 144.509262][ T7856] netlink: zone id is out of range [ 144.538199][ T7856] netlink: zone id is out of range [ 144.558059][ T7856] netlink: get zone limit has 8 unknown bytes [ 144.677089][ T7856] tipc: Enabled bearer , priority 0 [ 144.722221][ T7856] syzkaller0: entered promiscuous mode [ 144.779732][ T7856] syzkaller0: entered allmulticast mode [ 144.995072][ T7869] tipc: Resetting bearer [ 145.027938][ T7888] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 145.101801][ T7855] tipc: Resetting bearer [ 145.228868][ T7855] tipc: Disabling bearer [ 145.564121][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.572101][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.694355][ T7924] openvswitch: netlink: Flow key attr not present in new flow. [ 145.772021][ T7902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.791358][ T7902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.933222][ T1154] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.947285][ T1154] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.958838][ T7905] syzkaller1: entered promiscuous mode [ 145.969628][ T7905] syzkaller1: entered allmulticast mode [ 146.047080][ T7928] syzkaller1: left promiscuous mode [ 146.055905][ T7928] syzkaller1: left allmulticast mode [ 146.078669][ T1154] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.359284][ T7942] IPv4: Oversized IP packet from 172.20.20.24 [ 146.367486][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 146.374321][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 146.388701][ T7947] netlink: 'syz.0.558': attribute type 4 has an invalid length. [ 146.488278][ T7951] sit2: entered promiscuous mode [ 146.498366][ T7951] sit2: entered allmulticast mode [ 146.668693][ T7951] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 146.974405][ T7972] pim6reg1: entered promiscuous mode [ 146.980466][ T7972] pim6reg1: entered allmulticast mode [ 147.561062][ T7986] __nla_validate_parse: 5 callbacks suppressed [ 147.561181][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 147.731755][ T7994] netlink: 187476 bytes leftover after parsing attributes in process `syz.3.570'. [ 147.773214][ T7986] batadv1: entered allmulticast mode [ 147.826504][ T7987] syz.0.569 (7987) used greatest stack depth: 17896 bytes left [ 148.024216][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 148.070155][ T8001] pim6reg1: entered promiscuous mode [ 148.075970][ T8001] pim6reg1: entered allmulticast mode [ 148.188008][ T8007] dvmrp1: entered allmulticast mode [ 148.244954][ T8011] unknown channel width for channel at 909000KHz? [ 148.506158][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 148.560345][ T8026] netlink: 92 bytes leftover after parsing attributes in process `syz.1.583'. [ 148.573846][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.580'. [ 148.628779][ T8018] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 148.763218][ T8033] netlink: 80 bytes leftover after parsing attributes in process `syz.4.585'. [ 148.890592][ T8034] netlink: 3 bytes leftover after parsing attributes in process `syz.4.585'. [ 148.950844][ T8044] dvmrp1: entered allmulticast mode [ 149.168375][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 149.670775][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 149.862017][ T8080] veth7: entered promiscuous mode [ 149.869741][ T8080] veth7: entered allmulticast mode [ 149.895735][ T8083] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 150.272348][ T8102] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 150.708442][ T8139] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 150.725588][ T8116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.466239][ T8175] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 152.284629][ T8201] xfrm1: entered promiscuous mode [ 152.292476][ T8201] xfrm1: entered allmulticast mode [ 152.614147][ T8236] x_tables: ip_tables: helper.0 match: invalid size 40 (kernel) != (user) 48 [ 152.649363][ T8233] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 152.973005][ T8248] __nla_validate_parse: 14 callbacks suppressed [ 152.973024][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 153.404665][ T8263] netlink: 'syz.4.642': attribute type 3 has an invalid length. [ 153.412755][ T8263] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.642'. [ 154.545633][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.644'. [ 154.630450][ T8286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.647'. [ 154.772300][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 154.900211][ T8301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 154.930903][ T8303] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 154.956697][ T8303] netlink: 'syz.2.653': attribute type 2 has an invalid length. [ 155.282086][ T8318] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 155.308343][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 155.440815][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.501450][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 155.540867][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 155.559452][ T8330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.661'. [ 155.735013][ T8335] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 155.756268][ T8336] macvlan0: entered promiscuous mode [ 155.770052][ T8336] macvlan0: entered allmulticast mode [ 155.910798][ T8340] bond3: (slave bridge2): making interface the new active one [ 155.933046][ T8340] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 156.182152][ T8362] pim6reg1: entered promiscuous mode [ 156.203687][ T8362] pim6reg1: entered allmulticast mode [ 156.620254][ T8380] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.480929][ T8425] tun1: tun_chr_ioctl cmd 1074025675 [ 157.486727][ T8425] tun1: persist disabled [ 157.615500][ T8425] ipvlan0: entered promiscuous mode [ 157.693787][ T8425] bridge0: port 3(ipvlan0) entered blocking state [ 157.752436][ T8425] bridge0: port 3(ipvlan0) entered disabled state [ 157.793814][ T8425] ipvlan0: entered allmulticast mode [ 157.813761][ T8425] bridge0: entered allmulticast mode [ 157.846385][ T8425] ipvlan0: left allmulticast mode [ 157.868229][ T8425] bridge0: left allmulticast mode [ 158.370408][ T8454] geneve2: entered promiscuous mode [ 158.388038][ T8454] geneve2: entered allmulticast mode [ 158.416892][ T6078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.466600][ T6078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.517767][ T6078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.543304][ T6078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.898411][ T8477] __nla_validate_parse: 6 callbacks suppressed [ 158.898431][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 158.916255][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 158.940388][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 158.993721][ T8477] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 158.999466][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'. [ 159.008120][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 159.027474][ T8482] netlink: 'syz.3.703': attribute type 21 has an invalid length. [ 159.040993][ T8482] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.046468][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 159.165849][ T8491] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 159.173755][ T8491] netlink: 119 bytes leftover after parsing attributes in process `syz.1.708'. [ 159.305501][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 159.576156][ T8513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.613515][ T8513] netlink: 'syz.2.713': attribute type 11 has an invalid length. [ 159.683005][ T8516] netlink: 3 bytes leftover after parsing attributes in process `syz.1.717'. [ 159.789926][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 160.007293][ T8530] wireguard0: entered promiscuous mode [ 160.013615][ T8530] wireguard0: entered allmulticast mode [ 160.708846][ T8561] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 161.165695][ T8587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.192139][ T8592] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 161.216015][ T8592] netlink: 'syz.2.740': attribute type 58 has an invalid length. [ 161.256793][ T8590] bond0: (slave bond_slave_0): Releasing backup interface [ 161.714095][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 161.742882][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 161.761890][ T8612] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 161.783027][ T8612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.870795][ T8617] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 161.916755][ T8617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.407047][ T8649] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 162.419949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.645615][ T8666] netlink: 'syz.4.761': attribute type 39 has an invalid length. [ 162.682183][ T8665] netlink: 'syz.4.761': attribute type 39 has an invalid length. [ 163.117320][ T8679] veth0: entered promiscuous mode [ 163.198213][ T8679] veth0: left promiscuous mode [ 163.367650][ T8692] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 163.372632][ T8690] netlink: 'syz.4.769': attribute type 23 has an invalid length. [ 163.464093][ T8699] bond4: (slave bridge4): making interface the new active one [ 163.472436][ T8699] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 163.728695][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802f671000: rx timeout, send abort [ 163.737403][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802f671000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 164.019857][ T8720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.055805][ T8721] __nla_validate_parse: 14 callbacks suppressed [ 164.055824][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 164.158565][ T8721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.165267][ T5233] udevd[5233]: worker [6898] terminated by signal 33 (Unknown signal 33) [ 164.165334][ T5233] udevd[5233]: worker [6898] failed while handling '/devices/virtual/block/loop1' [ 164.185290][ T8725] netlink: 44 bytes leftover after parsing attributes in process `syz.2.779'. [ 164.341069][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 164.682473][ T8753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.785'. [ 164.974223][ T8764] veth1_macvtap: mtu less than device minimum [ 165.081615][ T8764] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 165.221310][ T8773] netlink: 112 bytes leftover after parsing attributes in process `syz.3.792'. [ 165.462171][ T8788] netlink: 80 bytes leftover after parsing attributes in process `syz.0.801'. [ 165.494244][ T8790] netlink: 80 bytes leftover after parsing attributes in process `syz.0.801'. [ 165.639028][ T8795] netlink: 208 bytes leftover after parsing attributes in process `syz.4.802'. [ 165.746904][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 165.878187][ T8807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.803'. [ 166.093569][ T8818] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 166.172878][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.808'. [ 166.404765][ T8828] xfrm1: entered promiscuous mode [ 166.441368][ T8828] xfrm1: entered allmulticast mode [ 166.481835][ T8833] veth0: entered promiscuous mode [ 166.606157][ T8826] veth0: left promiscuous mode [ 166.660296][ T8839] tipc: Enabled bearer , priority 0 [ 166.881372][ T8839] syzkaller0: entered promiscuous mode [ 166.889840][ T8839] syzkaller0: entered allmulticast mode [ 166.896325][ T8839] tipc: Resetting bearer [ 166.926880][ T8843] team0: Unable to change to the same mode the team is in [ 166.996182][ T8838] tipc: Resetting bearer [ 167.715345][ T5927] tipc: Node number set to 2159711008 [ 168.113596][ T8838] tipc: Disabling bearer [ 168.145169][ T8843] vlan0: entered promiscuous mode [ 168.167025][ T8843] team0: Port device vlan0 added [ 168.181550][ T8858] validate_nla: 31 callbacks suppressed [ 168.181570][ T8858] netlink: 'syz.4.816': attribute type 3 has an invalid length. [ 168.330888][ T8867] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 168.501587][ T8867] veth5: entered promiscuous mode [ 168.521207][ T8867] veth5: entered allmulticast mode [ 168.655148][ T8871] veth7: entered promiscuous mode [ 168.668476][ T8871] veth7: entered allmulticast mode [ 168.678570][ T8891] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 168.697944][ T8891] v: entered promiscuous mode [ 168.717003][ T8891] bridge0: port 3(v) entered blocking state [ 168.724265][ T8891] bridge0: port 3(v) entered disabled state [ 168.736472][ T8891] v: entered allmulticast mode [ 168.754340][ T8891] bridge0: port 3(v) entered blocking state [ 168.761255][ T8891] bridge0: port 3(v) entered forwarding state [ 168.778459][ T8879] tipc: Enabled bearer , priority 0 [ 168.861058][ T8885] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 168.905069][ T8900] netlink: 'syz.3.826': attribute type 10 has an invalid length. [ 168.983990][ T8900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 169.067229][ T8884] syzkaller0: entered promiscuous mode [ 169.072957][ T8884] syzkaller0: entered allmulticast mode [ 169.080725][ T8884] tipc: Resetting bearer [ 169.250718][ T8914] __nla_validate_parse: 10 callbacks suppressed [ 169.250738][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.283031][ T8873] tipc: Resetting bearer [ 169.301916][ T8917] netlink: 'syz.1.831': attribute type 5 has an invalid length. [ 169.498492][ T8929] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 169.849801][ T5927] tipc: Node number set to 3198523256 [ 170.736063][ T8873] tipc: Disabling bearer [ 170.870967][ T8949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.838'. [ 170.916891][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 170.946173][ T8951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.839'. [ 170.947201][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.839'. [ 171.004558][ T8957] delete_channel: no stack [ 171.385317][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 171.418947][ T8977] 8021q: VLANs not supported on sit0 [ 171.474895][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 171.563217][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.848'. [ 172.104869][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'. [ 172.336894][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 172.465464][ T9000] netlink: 'syz.4.852': attribute type 5 has an invalid length. [ 172.880576][ T9013] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 173.026636][ T9013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.133457][ T9020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.154590][ T9020] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 173.174719][ T9020] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 173.418272][ T9017] veth3: entered promiscuous mode [ 173.730736][ T9058] IPVS: set_ctl: invalid protocol: 232 172.20.20.51:20001 [ 174.001052][ T9074] blkio.reset_stats is deprecated [ 174.382322][ T5961] IPVS: starting estimator thread 0... [ 174.406866][ T9092] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 174.499755][ T9093] IPVS: using max 24 ests per chain, 57600 per kthread [ 174.539074][ T9095] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 174.647443][ T9097] __nla_validate_parse: 2 callbacks suppressed [ 174.647463][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'. [ 174.726508][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.763087][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.825279][ T9104] syz.2.885: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.869216][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.2.885 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 174.869247][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.869260][ T9104] Call Trace: [ 174.869269][ T9104] [ 174.869279][ T9104] dump_stack_lvl+0x189/0x250 [ 174.869315][ T9104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.869342][ T9104] ? __pfx__printk+0x10/0x10 [ 174.869380][ T9104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.869406][ T9104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.869435][ T9104] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.869464][ T9104] warn_alloc+0x214/0x310 [ 174.869498][ T9104] ? stack_depot_save_flags+0x40/0x860 [ 174.869526][ T9104] ? __pfx_warn_alloc+0x10/0x10 [ 174.869566][ T9104] ? kasan_save_track+0x4f/0x80 [ 174.869594][ T9104] ? xskq_create+0x56/0x170 [ 174.869618][ T9104] ? xsk_init_queue+0xb0/0x110 [ 174.869638][ T9104] ? xsk_setsockopt+0x4dc/0x8d0 [ 174.869658][ T9104] ? do_sock_setsockopt+0x17c/0x1b0 [ 174.869687][ T9104] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 174.869714][ T9104] ? do_syscall_64+0xfa/0x3b0 [ 174.869740][ T9104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.869771][ T9104] __vmalloc_node_range_noprof+0x125/0x12f0 [ 174.869837][ T9104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.869895][ T9104] ? __kasan_kmalloc+0x93/0xb0 [ 174.869930][ T9104] vmalloc_user_noprof+0xad/0xf0 [ 174.869963][ T9104] ? xskq_create+0xbf/0x170 [ 174.869990][ T9104] xskq_create+0xbf/0x170 [ 174.870019][ T9104] xsk_init_queue+0xb0/0x110 [ 174.870047][ T9104] xsk_setsockopt+0x4dc/0x8d0 [ 174.870075][ T9104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.870099][ T9104] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.870131][ T9104] ? aa_sock_opt_perm+0xff/0x1b0 [ 174.870166][ T9104] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 174.870189][ T9104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.870215][ T9104] do_sock_setsockopt+0x17c/0x1b0 [ 174.870251][ T9104] __x64_sys_setsockopt+0x13f/0x1b0 [ 174.870288][ T9104] do_syscall_64+0xfa/0x3b0 [ 174.870311][ T9104] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.870333][ T9104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.870350][ T9104] ? clear_bhb_loop+0x60/0xb0 [ 174.870383][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.870401][ T9104] RIP: 0033:0x7f6e1558ebe9 [ 174.870418][ T9104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.870434][ T9104] RSP: 002b:00007f6e1641b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.870454][ T9104] RAX: ffffffffffffffda RBX: 00007f6e157b5fa0 RCX: 00007f6e1558ebe9 [ 174.870467][ T9104] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 174.870477][ T9104] RBP: 00007f6e15611e19 R08: 0000000000000004 R09: 0000000000000000 [ 174.870488][ T9104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.870498][ T9104] R13: 00007f6e157b6038 R14: 00007f6e157b5fa0 R15: 00007ffcec407308 [ 174.870525][ T9104] [ 175.186459][ T9104] Mem-Info: [ 175.190164][ T9104] active_anon:6735 inactive_anon:0 isolated_anon:0 [ 175.190164][ T9104] active_file:1155 inactive_file:39860 isolated_file:0 [ 175.190164][ T9104] unevictable:768 dirty:67 writeback:0 [ 175.190164][ T9104] slab_reclaimable:10571 slab_unreclaimable:102062 [ 175.190164][ T9104] mapped:30120 shmem:1356 pagetables:1077 [ 175.190164][ T9104] sec_pagetables:0 bounce:0 [ 175.190164][ T9104] kernel_misc_reclaimable:0 [ 175.190164][ T9104] free:1326073 free_pcp:15168 free_cma:0 [ 175.260939][ T9104] Node 0 active_anon:26940kB inactive_anon:0kB active_file:4620kB inactive_file:159236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120380kB dirty:268kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.294508][ T9104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.325218][ T9104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.354336][ T9104] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 175.363476][ T9104] Node 0 DMA32 free:1402500kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26892kB inactive_anon:0kB active_file:4620kB inactive_file:157660kB unevictable:1536kB writepending:268kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:42208kB local_pcp:23108kB free_cma:0kB [ 175.401701][ T9104] lowmem_reserve[]: 0 0 1 1 1 [ 175.406562][ T9104] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 175.435993][ T9104] lowmem_reserve[]: 0 0 0 0 0 [ 175.440962][ T9104] Node 1 Normal free:3886420kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:8616kB free_cma:0kB [ 175.472761][ T9104] lowmem_reserve[]: 0 0 0 0 0 [ 175.477587][ T9104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.490832][ T9104] Node 0 DMA32: 785*4kB (UME) 266*8kB (UE) 107*16kB (UME) 80*32kB (M) 40*64kB (UME) 9*128kB (UME) 7*256kB (ME) 4*512kB (UME) 5*1024kB (UM) 6*2048kB (M) 334*4096kB (M) = 1402564kB [ 175.509776][ T9104] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 175.522260][ T9104] Node 1 Normal: 121*4kB (UE) 48*8kB (UME) 41*16kB (UME) 95*32kB (UME) 38*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3886420kB [ 175.657501][ T9104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.672472][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 175.708980][ T9104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.788379][ T9104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.829340][ T9104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.861796][ T9104] 42368 total pagecache pages [ 175.879660][ T9104] 0 pages in swap cache [ 175.907882][ T9104] Free swap = 124996kB [ 175.932040][ T9104] Total swap = 124996kB [ 175.949843][ T9104] 2097051 pages RAM [ 175.953729][ T9104] 0 pages HighMem/MovableOnly [ 175.994691][ T9104] 425645 pages reserved [ 175.998918][ T9104] 0 pages cma reserved [ 176.225736][ T9155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.898'. [ 176.271200][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.290866][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 176.302108][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.674719][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.906'. [ 176.894507][ T9198] netlink: 15 bytes leftover after parsing attributes in process `syz.2.906'. [ 176.903556][ T9187] gretap1: entered promiscuous mode [ 177.105679][ T9204] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 177.129893][ T9204] netlink: 208 bytes leftover after parsing attributes in process `syz.3.910'. [ 177.203850][ T9204] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 177.242722][ T9204] netlink: 'syz.3.910': attribute type 2 has an invalid length. [ 177.448990][ T9216] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.566494][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.914'. [ 177.769938][ T9228] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.142118][ T1154] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.189094][ T1154] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.197239][ T982] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.470355][ T5947] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.030956][ T5947] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 180.400185][ T9337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.420853][ T9344] __nla_validate_parse: 6 callbacks suppressed [ 180.420872][ T9344] netlink: 284 bytes leftover after parsing attributes in process `syz.2.954'. [ 180.784218][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 181.318971][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 181.350571][ T9388] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 181.550674][ T9397] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.562728][ T9397] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 181.644325][ T9401] gretap1: entered promiscuous mode [ 181.689367][ T9401] bond2: (slave gretap1): making interface the new active one [ 181.695473][ T9410] netlink: 256 bytes leftover after parsing attributes in process `syz.4.967'. [ 181.731324][ T9401] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 181.784038][ T9388] macvlan2: entered promiscuous mode [ 181.799838][ T9388] macvlan2: entered allmulticast mode [ 181.815807][ T9388] bond2: entered promiscuous mode [ 181.836318][ T9388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.879940][ T9388] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 181.937832][ T9388] bond2: left promiscuous mode [ 182.083983][ T9411] syzkaller0: entered promiscuous mode [ 182.090778][ T9411] syzkaller0: entered allmulticast mode [ 182.270313][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 182.294912][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 182.363501][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 182.417697][ T9427] netlink: 156 bytes leftover after parsing attributes in process `syz.4.977'. [ 182.432522][ T9435] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.978'. [ 182.446280][ T9435] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.621521][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 183.659517][ T9446] netlink: 260 bytes leftover after parsing attributes in process `syz.0.983'. [ 183.951651][ T9457] syzkaller1: entered promiscuous mode [ 183.957580][ T9457] syzkaller1: entered allmulticast mode [ 184.438310][ T9483] netlink: 'syz.1.994': attribute type 3 has an invalid length. [ 185.182911][ T9515] netlink: 'syz.3.1004': attribute type 5 has an invalid length. [ 185.448550][ T9529] __nla_validate_parse: 4 callbacks suppressed [ 185.448570][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 185.676782][ T9529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.728388][ T9548] IPVS: stopping master sync thread 9550 ... [ 185.736186][ T9550] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 185.990495][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1016'. [ 186.185592][ T9570] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 186.215678][ T9569] netlink: 'syz.4.1018': attribute type 11 has an invalid length. [ 186.234110][ T9569] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1018'. [ 186.277077][ T9573] sctp: [Deprecated]: syz.4.1018 (pid 9573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.277077][ T9573] Use struct sctp_sack_info instead [ 186.297027][ T9578] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 186.297188][ T9569] sctp: [Deprecated]: syz.4.1018 (pid 9569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.297188][ T9569] Use struct sctp_sack_info instead [ 186.412640][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 186.449293][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 186.809180][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1027'. [ 187.058848][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'. [ 187.104085][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 187.112185][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 187.156210][ T1154] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.173011][ T1154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.193361][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 187.204308][ T1154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.223854][ T1154] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.264638][ T9628] team_slave_0: entered promiscuous mode [ 187.270630][ T9628] team_slave_1: entered promiscuous mode [ 187.483544][ T6076] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 187.504935][ T9636] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 187.593893][ T9639] ipvlan2: entered promiscuous mode [ 187.621161][ T9639] bridge0: port 2(ipvlan2) entered blocking state [ 187.638173][ T9639] bridge0: port 2(ipvlan2) entered disabled state [ 187.648589][ T9639] ipvlan2: entered allmulticast mode [ 187.656438][ T9639] bridge0: entered allmulticast mode [ 187.665877][ T9639] ipvlan2: left allmulticast mode [ 187.673752][ T9639] bridge0: left allmulticast mode [ 187.693227][ T9642] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 187.761680][ T9652] tipc: Enabled bearer , priority 0 [ 187.925609][ T9652] tipc: Disabling bearer [ 188.018363][ T9669] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 188.280530][ T9675] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.297225][ T9675] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 188.391731][ T9681] gretap1: entered promiscuous mode [ 188.405424][ T9681] bond3: (slave gretap1): making interface the new active one [ 188.417257][ T9681] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 188.441801][ T9669] macvlan2: entered promiscuous mode [ 188.447307][ T9669] macvlan2: entered allmulticast mode [ 188.473094][ T9669] bond3: entered promiscuous mode [ 188.484738][ T9669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.496151][ T9669] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 188.513919][ T9669] bond3: left promiscuous mode [ 188.741025][ T9713] tipc: Enabling of bearer rejected, failed to enable media [ 188.771496][ T9715] veth0: entered promiscuous mode [ 188.775026][ T9716] openvswitch: netlink: Duplicate or invalid key (type 0). [ 188.788580][ T9716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.896522][ T9709] veth0: left promiscuous mode [ 189.405475][ T9746] openvswitch: netlink: IP tunnel dst address not specified [ 189.660734][ T9756] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 189.686929][ T9760] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 189.695542][ T9760] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 189.928999][ T9774] netlink: 'syz.4.1070': attribute type 10 has an invalid length. [ 189.953049][ T9774] macvtap0: left allmulticast mode [ 190.187594][ T9783] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.274748][ T9790] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 190.501145][ T9791] bond3 (unregistering): Released all slaves [ 190.558272][ T9807] __nla_validate_parse: 4 callbacks suppressed [ 190.558291][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 190.581385][ T9809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.627671][ T9790] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 190.636376][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 191.119146][ T9833] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 191.155402][ T9833] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 191.403710][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 191.500868][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 191.666298][ T9848] macvtap1: entered allmulticast mode [ 191.672108][ T9848] veth0_macvtap: entered allmulticast mode [ 191.679135][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'. [ 191.955118][ T9860] dvmrp1: entered allmulticast mode [ 191.967507][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'. [ 192.017328][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 192.242289][ T9876] tipc: Enabling of bearer rejected, failed to enable media [ 192.495591][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 192.505101][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 192.522043][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 192.542593][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 193.125577][ T9910] tipc: Started in network mode [ 193.130588][ T9910] tipc: Node identity cea59454dcf2, cluster identity 4711 [ 193.138249][ T9910] tipc: Enabled bearer , priority 0 [ 193.197764][ T9910] tipc: Resetting bearer [ 193.483103][ T9932] netlink: 'syz.2.1114': attribute type 3 has an invalid length. [ 193.536914][ T9936] IPVS: stopping master sync thread 9942 ... [ 193.544942][ T9942] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 193.604359][ T9947] openvswitch: netlink: Flow key attr not present in new flow. [ 193.680418][ T9908] tipc: Disabling bearer [ 194.257755][ T9981] netlink: 'syz.1.1123': attribute type 83 has an invalid length. [ 194.322681][ T9983] netlink: 'syz.3.1124': attribute type 83 has an invalid length. [ 194.406192][ T9990] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !蹇$蘒L匘ｘ逥寃榼漽R3怆p(@ [ 194.520049][ T9997] sctp: [Deprecated]: syz.4.1127 (pid 9997) Use of int in maxseg socket option. [ 194.520049][ T9997] Use struct sctp_assoc_value instead [ 194.544598][T10002] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 3, id = 0 [ 195.042039][T10019] tipc: Enabled bearer , priority 0 [ 195.091789][T10019] syzkaller0: entered promiscuous mode [ 195.126309][T10019] syzkaller0: entered allmulticast mode [ 195.271095][T10035] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 195.280415][T10034] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 195.292195][T10018] tipc: Resetting bearer [ 195.337659][T10018] tipc: Disabling bearer [ 195.358586][T10035] netlink: 'syz.2.1135': attribute type 4 has an invalid length. [ 195.623139][T10044] syzkaller1: entered promiscuous mode [ 195.644013][T10044] syzkaller1: entered allmulticast mode [ 195.785934][T10058] __nla_validate_parse: 11 callbacks suppressed [ 195.785956][T10058] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1144'. [ 196.281158][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.310745][T10081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.488081][T10089] sctp: [Deprecated]: syz.4.1153 (pid 10089) Use of int in max_burst socket option deprecated. [ 196.488081][T10089] Use struct sctp_assoc_value instead [ 196.517808][T10089] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 196.619985][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.744540][T10101] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1154'. [ 196.764424][T10102] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 196.785504][T10099] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 196.814324][T10099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.830812][T10073] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 196.912457][T10093] batadv1: entered allmulticast mode [ 197.460178][T10125] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1162'. [ 197.475218][T10132] 8021q: VLANs not supported on caif0 [ 197.737319][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 199.121762][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 199.135323][T10159] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 199.367955][T10171] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1176'. [ 199.544761][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.851524][T10197] dvmrp0: entered allmulticast mode [ 199.884579][T10197] dvmrp0: left allmulticast mode [ 199.890696][T10197] dvmrp1: left allmulticast mode [ 200.004458][T10202] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 200.018090][T10199] openvswitch: netlink: IPv4 tun info is not correct [ 200.024661][T10202] team0: Device ipvlan1 failed to register rx_handler [ 200.031671][T10199] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 200.113282][T10202] IPVS: Unknown mcast interface: vcan0 [ 200.120878][T10202] netlink: 'syz.3.1181': attribute type 8 has an invalid length. [ 200.676556][T10231] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 200.717973][T10231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.235719][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 201.469673][T10269] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1201'. [ 201.596437][T10271] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 201.647690][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.692934][T10271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.087894][T10287] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 202.350994][T10301] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 202.666869][T10312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 202.823078][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 203.141015][T10335] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1217'. [ 203.891856][T10352] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 204.265595][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1226'. [ 204.453203][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 204.932599][T10397] netlink: 'syz.4.1235': attribute type 16 has an invalid length. [ 204.943189][T10397] netlink: 'syz.4.1235': attribute type 17 has an invalid length. [ 205.126364][T10397] ip6_vti0: left promiscuous mode [ 205.161307][T10397] ip6_vti0: left allmulticast mode [ 205.239842][T10414] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 205.247659][T10414] netlink: 'syz.0.1240': attribute type 2 has an invalid length. [ 205.263635][T10418] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 205.271715][T10418] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1238'. [ 205.287035][T10397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.538459][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 205.580365][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 205.746289][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 205.779070][T10436] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 205.796329][ T6076] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.820420][ T6076] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.842575][ T6076] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.856088][ T6076] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.135721][T10453] veth5: entered promiscuous mode [ 206.257881][T10469] __nla_validate_parse: 1 callbacks suppressed [ 206.257901][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 206.305974][T10469] netlink: 'syz.4.1254': attribute type 2 has an invalid length. [ 206.407610][T10472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1254'. [ 206.468162][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 206.492187][T10476] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1257'. [ 206.688723][T10486] netlink: 'syz.1.1259': attribute type 11 has an invalid length. [ 206.732732][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 207.020176][T10504] batman_adv: batadv0: Adding interface: dummy0 [ 207.035735][T10504] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 207.065109][T10504] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 207.128058][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 207.163258][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 207.173464][T10504] netlink: 'syz.2.1265': attribute type 13 has an invalid length. [ 207.211061][T10504] C: entered promiscuous mode [ 207.215905][T10504] C: entered allmulticast mode [ 207.239028][T10504] tunl0: entered promiscuous mode [ 207.257400][T10504] tunl0: entered allmulticast mode [ 207.274862][T10504] gre0: entered promiscuous mode [ 207.291775][T10504] gre0: entered allmulticast mode [ 207.312657][T10504] gretap0: entered promiscuous mode [ 207.330666][T10504] gretap0: entered allmulticast mode [ 207.354243][T10504] gretap0: refused to change device tx_queue_len [ 207.383114][T10504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.469018][T10512] pim6reg1: entered promiscuous mode [ 207.500650][T10512] pim6reg1: entered allmulticast mode [ 207.813151][T10541] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1272'. [ 208.015424][T10569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.565251][T10584] tunl0: left allmulticast mode [ 208.608941][T10584] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 208.633825][T10584] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1276'. [ 208.896748][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 208.932814][T10601] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 209.229853][T10608] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 209.722566][T10635] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 209.780751][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 210.182336][T10658] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.946894][T10696] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 210.996871][T10697] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20004 [ 211.306559][ T5869] Bluetooth: hci4: link tx timeout [ 211.314009][ T5869] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.326728][ T5869] Bluetooth: hci4: link tx timeout [ 211.335371][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.344439][ T5869] Bluetooth: hci4: link tx timeout [ 211.350470][ T5869] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.358149][ T5869] Bluetooth: hci4: link tx timeout [ 211.364239][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.666861][T10728] netlink: 'syz.4.1318': attribute type 5 has an invalid length. [ 211.938510][T10738] __nla_validate_parse: 5 callbacks suppressed [ 211.938529][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 212.341509][T10748] sctp: [Deprecated]: syz.1.1323 (pid 10748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.341509][T10748] Use struct sctp_sack_info instead [ 212.391734][T10748] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 212.441170][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 212.464771][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 213.061095][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 213.125991][T10782] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1336'. [ 213.165111][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 213.206732][T10783] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 213.279806][T10783] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 213.287676][T10783] netlink: 'syz.3.1337': attribute type 2 has an invalid length. [ 213.305871][T10783] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1337'. [ 213.541655][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 213.780829][T10804] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 213.788686][T10804] netlink: 'syz.1.1342': attribute type 2 has an invalid length. [ 214.111091][T10821] netlink: 'syz.1.1348': attribute type 1 has an invalid length. [ 214.125080][T10821] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1348'. [ 214.163547][T10822] gre4: entered promiscuous mode [ 214.175141][T10822] gre4: entered allmulticast mode [ 214.232409][T10821] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 214.615179][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 214.642535][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.747225][T10848] bridge_slave_1 (unregistering): left allmulticast mode [ 214.763795][T10848] bridge_slave_1 (unregistering): left promiscuous mode [ 214.779434][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.967619][T10854] tipc: Enabling of bearer rejected, failed to enable media [ 214.979185][T10861] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1357'. [ 215.144649][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 215.309263][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.327579][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.944321][T10903] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 216.438781][T10906] syzkaller1: entered promiscuous mode [ 216.450395][T10906] syzkaller1: entered allmulticast mode [ 216.607579][T10926] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 216.893666][T10944] bridge0: entered allmulticast mode [ 216.952311][T10944] pim6reg: entered allmulticast mode [ 216.963055][T10950] __nla_validate_parse: 8 callbacks suppressed [ 216.963074][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 216.981340][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 216.987472][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 216.993962][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 217.005722][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 217.036108][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 217.069886][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 217.220914][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 217.308940][T10968] bridge3: entered promiscuous mode [ 217.323348][T10968] bridge3: entered allmulticast mode [ 217.407161][T10971] 8021q: VLANs not supported on syzkaller1 [ 217.631182][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 217.656663][T10983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1392'. [ 217.858503][T10998] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1396'. [ 218.220292][T11018] tap0: tun_chr_ioctl cmd 1074025676 [ 218.225738][T11018] tap0: owner set to 0 [ 218.423465][T11031] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20000 [ 219.071906][T11060] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 219.079855][T11060] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1413'. [ 219.249060][T11072] netlink: 'syz.2.1417': attribute type 12 has an invalid length. [ 219.266274][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 219.286699][T11073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1418'. [ 219.299885][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 219.305280][T11072] netlink: 'syz.2.1417': attribute type 12 has an invalid length. [ 219.313867][T11073] netlink: 'syz.0.1418': attribute type 5 has an invalid length. [ 220.172488][T11108] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 220.801249][T11141] syzkaller0: entered promiscuous mode [ 220.806783][T11141] syzkaller0: entered allmulticast mode [ 221.093845][T11157] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 221.392732][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 221.516395][T11166] sctp: [Deprecated]: syz.0.1448 (pid 11166) Use of int in maxseg socket option. [ 221.516395][T11166] Use struct sctp_assoc_value instead [ 222.696917][T11187] __nla_validate_parse: 13 callbacks suppressed [ 222.696938][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 223.096416][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 223.193042][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 223.336449][T11207] bond0: (slave wlan1): Releasing backup interface [ 224.017074][T11246] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 224.144519][T11251] netlink: 'syz.2.1475': attribute type 11 has an invalid length. [ 224.156537][T11249] netlink: 'syz.2.1475': attribute type 11 has an invalid length. [ 224.554467][T11263] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.879179][T11274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1481'. [ 225.147532][T11289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.740382][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 225.785546][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 225.806195][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 225.891421][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 226.183014][T11350] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1506'. [ 226.315268][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 227.912973][T11429] netem: change failed [ 228.053875][T11437] tipc: Enabling of bearer rejected, failed to enable media [ 228.304528][T11450] __nla_validate_parse: 3 callbacks suppressed [ 228.304549][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1529'. [ 228.565762][T11461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.262053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.176331][T11467] netlink: 'syz.1.1533': attribute type 2 has an invalid length. [ 236.200678][T11467] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1533'. [ 236.221139][T11467] nbd: must specify at least one socket [ 236.243566][T11472] tipc: Enabled bearer , priority 0 [ 236.371813][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 236.544301][T11472] syzkaller0: entered promiscuous mode [ 236.552773][T11472] syzkaller0: entered allmulticast mode [ 236.559071][T11472] tipc: Resetting bearer [ 236.700385][T11469] tipc: Resetting bearer [ 236.842618][T11508] netlink: 'syz.0.1540': attribute type 10 has an invalid length. [ 236.922723][T11512] netlink: 'syz.0.1540': attribute type 3 has an invalid length. [ 236.931471][T11512] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1540'. [ 236.962117][T11516] netlink: 'syz.0.1540': attribute type 10 has an invalid length. [ 237.272117][ T5862] tipc: Node number set to 3632109594 [ 238.110809][T11469] tipc: Disabling bearer [ 238.130588][T11522] bond0: (slave rose0): Error: Device can not be enslaved while up [ 238.565621][T11544] netlink: 'syz.3.1550': attribute type 8 has an invalid length. [ 238.585722][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 238.990266][T11567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1558'. [ 239.584815][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 239.806997][T11617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.893285][T11621] netlink: 'syz.2.1575': attribute type 33 has an invalid length. [ 240.056704][T11627] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.348628][T11645] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1580'. [ 240.359335][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 240.478700][T11649] netlink: 'syz.4.1581': attribute type 4 has an invalid length. [ 240.518580][ T5927] IPVS: starting estimator thread 0... [ 240.518753][T11647] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.605880][T11653] netlink: 'syz.2.1583': attribute type 32 has an invalid length. [ 240.620455][T11652] IPVS: using max 23 ests per chain, 55200 per kthread [ 240.635489][T11653] netlink: 776 bytes leftover after parsing attributes in process `syz.2.1583'. [ 240.678795][T11657] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.1584'. [ 240.705555][T11655] netlink: 'syz.2.1583': attribute type 32 has an invalid length. [ 240.966172][T11666] netlink: 'syz.2.1587': attribute type 2 has an invalid length. [ 241.951741][T11701] sctp: [Deprecated]: syz.4.1597 (pid 11701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.951741][T11701] Use struct sctp_sack_info instead [ 242.061569][T11703] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 242.069478][T11703] nbd: error processing sock list [ 242.077835][T11703] block nbd1: shutting down sockets [ 242.105616][T11707] __nla_validate_parse: 5 callbacks suppressed [ 242.105634][T11707] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1599'. [ 242.907857][T11751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.048194][T11762] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1613'. [ 243.062927][T11762] tipc: Enabling of bearer rejected, failed to enable media [ 243.132439][T11764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.155152][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 243.219356][T11766] smc: net device bond0 applied user defined pnetid SYZ2 [ 243.442566][T11771] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1616'. [ 243.566062][T11774] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1617'. [ 243.613246][T11774] gretap0: entered promiscuous mode [ 243.646425][T11776] pimreg3: entered allmulticast mode [ 243.655915][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1619'. [ 243.685800][T11778] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1619'. [ 243.699700][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.808183][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 243.951699][T11790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1622'. [ 243.998985][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 244.168873][T11801] netlink: 'syz.2.1624': attribute type 2 has an invalid length. [ 244.613451][T11814] pimreg: entered allmulticast mode [ 245.244170][T11842] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 245.383207][T11850] netlink: 'syz.0.1640': attribute type 21 has an invalid length. [ 245.403357][T11850] netlink: 'syz.0.1640': attribute type 6 has an invalid length. [ 245.446221][T11810] infiniband syz2: set down [ 245.455390][T11810] infiniband syz2: added bond0 [ 245.466841][T11810] syz2: rxe_create_cq: returned err = -12 [ 245.489712][T11810] infiniband syz2: Couldn't create ib_mad CQ [ 245.512866][T11810] infiniband syz2: Couldn't open port 1 [ 245.643136][T11810] RDS/IB: syz2: added [ 245.657418][T11810] smc: adding ib device syz2 with port count 1 [ 245.675544][T11810] smc: ib device syz2 port 1 has pnetid [ 246.079181][T11873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.167431][T11873] team_slave_0: entered allmulticast mode [ 246.180666][T11873] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 246.251663][T11880] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 246.775184][T11896] veth0: entered promiscuous mode [ 246.781393][T11895] veth0: left promiscuous mode [ 246.999084][T11906] geneve3: entered promiscuous mode [ 247.011246][T11906] geneve3: entered allmulticast mode [ 247.049225][ T6074] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.094016][ T6074] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.121818][ T6074] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.155151][ T6074] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.293547][T11906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.354758][T11906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.367567][T11906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 247.379429][T11921] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 247.537305][T11906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.548923][T11906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.569635][T11906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 247.722694][T11906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.753534][T11906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 247.778559][T11906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 247.801050][T11938] __nla_validate_parse: 11 callbacks suppressed [ 247.801068][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 248.137971][T11938] team0: Port device vlan0 removed [ 248.182297][T11906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.193214][T11906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.208949][T11906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 248.375278][T11944] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 248.411345][T11944] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 248.431161][T11948] tipc: Enabling of bearer rejected, failed to enable media [ 248.446984][T11948] netlink: zone id is out of range [ 248.459633][T11948] netlink: zone id is out of range [ 248.470242][T11948] netlink: zone id is out of range [ 248.475401][T11948] netlink: zone id is out of range [ 248.489157][ T1343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.501573][T11948] netlink: zone id is out of range [ 248.506764][T11948] netlink: zone id is out of range [ 248.526461][ T1343] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.542230][T11948] netlink: zone id is out of range [ 248.566754][T11948] netlink: zone id is out of range [ 248.573646][ T1343] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 248.616818][T11948] netlink: zone id is out of range [ 248.629416][ T6074] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.647896][ T6074] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.672700][ T6074] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 248.728573][ T1343] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.758713][ T1343] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.780473][ T1343] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 248.822593][ T6072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.840049][ T6072] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 248.863910][ T6072] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 248.979869][ T5881] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.114135][T11961] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 249.163314][T11961] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1674'. [ 249.534150][T11980] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 249.590194][T11981] netlink: 'syz.4.1678': attribute type 10 has an invalid length. [ 249.698115][T11980] bond4: entered promiscuous mode [ 249.729835][T11980] bond4: entered allmulticast mode [ 249.756740][T11980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.277178][T12019] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 250.306723][T12019] netlink: 'syz.3.1690': attribute type 2 has an invalid length. [ 250.325160][T12021] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 250.347489][T12019] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1690'. [ 250.480428][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 250.678101][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 250.799711][T12047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'. [ 250.928753][T12052] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 250.979257][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 251.052867][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 253.069021][T12078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 253.086544][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.095079][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.193233][T12086] net_ratelimit: 396 callbacks suppressed [ 253.193252][T12086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.244404][T12080] tipc: Enabling of bearer rejected, failed to enable media [ 253.255927][T12089] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 253.468030][T12101] tipc: Started in network mode [ 253.473760][T12101] tipc: Node identity c, cluster identity 4711 [ 253.485295][T12101] tipc: Node number set to 12 [ 254.223975][T12127] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 254.265085][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1725'. [ 254.300258][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1725'. [ 254.340974][T12133] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 254.915068][T12171] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1736'. [ 255.001954][T12176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.136255][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 255.219413][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1742'. [ 255.241458][T12186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1741'. [ 255.608083][T12205] netlink: 'syz.4.1746': attribute type 16 has an invalid length. [ 255.687695][T12207] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 255.785365][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 255.795180][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 255.822759][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 256.114383][T12229] vlan2: entered allmulticast mode [ 256.122686][T12229] bridge0: entered allmulticast mode [ 256.147925][T12234] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 256.199496][T12234] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 256.306339][T12239] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.428452][T12244] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 256.554801][T12249] syzkaller1: entered promiscuous mode [ 256.562243][T12249] syzkaller1: entered allmulticast mode [ 258.267726][T12330] netlink: 'syz.2.1786': attribute type 3 has an invalid length. [ 258.493377][T12340] netlink: 'syz.0.1790': attribute type 19 has an invalid length. [ 258.553757][T12340] __nla_validate_parse: 11 callbacks suppressed [ 258.553776][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 258.702707][T12340] netlink: 'syz.0.1790': attribute type 19 has an invalid length. [ 258.718621][ T6072] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.748507][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 258.758311][ T6072] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.791202][ T6072] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.996765][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 258.999778][T12357] netlink: 'syz.2.1796': attribute type 13 has an invalid length. [ 259.024790][T12355] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1795'. [ 259.206898][T12357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.219203][T12357] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.238866][T12357] batman_adv: batadv0: Interface activated: dummy0 [ 259.257867][T12357] batadv0: mtu less than device minimum [ 259.267722][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.280306][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.292436][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.304435][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.316375][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.328336][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.340358][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.352320][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.364310][T12357] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 259.398553][T12316] mpoa:mpoad_close: () going down [ 259.660609][T12388] netem: change failed [ 259.737315][T12392] syz.3.1806 (12392) used obsolete PPPIOCDETACH ioctl [ 259.828275][T12395] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1807'. [ 260.118397][T12405] netlink: 'syz.0.1811': attribute type 4 has an invalid length. [ 260.146127][T12407] veth0: entered promiscuous mode [ 260.180350][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'. [ 260.212589][T12409] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1813'. [ 260.267293][T12411] tipc: Enabled bearer , priority 0 [ 260.305006][T12411] syzkaller0: entered promiscuous mode [ 260.331940][T12411] syzkaller0: entered allmulticast mode [ 260.352852][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 260.362628][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 260.438897][T12411] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1814'. [ 260.460987][T12411] tipc: Resetting bearer [ 260.482407][T12410] tipc: Resetting bearer [ 260.507767][T12410] tipc: Disabling bearer [ 260.996232][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.046940][T12406] veth0: left promiscuous mode [ 261.231474][T12451] bond4: entered promiscuous mode [ 261.238980][T12451] bond4: entered allmulticast mode [ 261.250138][T12451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.255862][T12502] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 262.648089][ T6074] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 263.687139][T12554] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 263.909117][T12562] __nla_validate_parse: 8 callbacks suppressed [ 263.909137][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 263.959461][T12570] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1858'. [ 264.037300][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 264.138761][T12575] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 264.167607][T12579] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 264.262030][T12583] net_ratelimit: 17 callbacks suppressed [ 264.262051][T12583] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 264.286844][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'. [ 264.435304][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 264.513858][T12589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1864'. [ 264.870541][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1869'. [ 264.890511][T12609] tipc: Invalid UDP bearer configuration [ 264.890571][T12609] tipc: Enabling of bearer rejected, failed to enable media [ 264.987926][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1871'. [ 265.001618][T12609] tipc: Enabled bearer , priority 0 [ 265.030018][T12609] syzkaller0: entered promiscuous mode [ 265.044997][T12609] syzkaller0: entered allmulticast mode [ 265.087253][T12609] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 265.121226][T12620] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1873'. [ 265.145072][T12620] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1873'. [ 265.161103][T12609] tipc: Resetting bearer [ 265.171461][T12606] tipc: Resetting bearer [ 265.222805][T12606] tipc: Disabling bearer [ 266.367491][T12677] openvswitch: netlink: IPv6 tunnel dst address is zero [ 267.362028][T12738] gtp0: entered promiscuous mode [ 267.367479][T12738] gtp0: entered allmulticast mode [ 267.535535][T12744] gretap0: entered promiscuous mode [ 267.583702][T12745] 0{X功: renamed from gretap0 [ 267.613835][T12745] 0{X功: left promiscuous mode [ 267.623853][T12745] 0{X功: entered allmulticast mode [ 267.646047][T12745] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 268.111335][T12765] batman_adv: batadv0: Interface deactivated: dummy0 [ 268.137084][T12765] batman_adv: batadv0: Removing interface: dummy0 [ 268.205134][T12765] bridge_slave_0: left allmulticast mode [ 268.211884][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.316699][T12765] bond0: (slave bond_slave_0): Releasing backup interface [ 268.371476][T12765] bond0: (slave bond_slave_1): Releasing backup interface [ 268.431144][T12765] team0: Port device team_slave_0 removed [ 268.461038][T12765] team0: Port device team_slave_1 removed [ 268.509468][T12765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.566045][T12765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.598072][T12775] 8021q: VLANs not supported on syzkaller1 [ 268.683737][T12789] team0: Mode changed to "loadbalance" [ 268.696676][T12795] vlan0: entered promiscuous mode [ 269.065378][T12819] __nla_validate_parse: 24 callbacks suppressed [ 269.065401][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 269.079463][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 269.095591][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 269.368896][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1927'. [ 269.527192][T11496] udevd[11496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.586903][T12868] ip6tnl2: entered allmulticast mode [ 270.805458][T12883] netlink: 'syz.4.1943': attribute type 3 has an invalid length. [ 270.840545][T12883] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1943'. [ 271.170493][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1948'. [ 271.198003][T12897] netlink: 'syz.4.1946': attribute type 10 has an invalid length. [ 271.204197][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 271.245025][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 271.257087][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 271.270365][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'. [ 271.409207][T12903] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 271.572631][T12904] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.040359][T12922] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 272.078533][T12922] team0: Device veth1_macvtap failed to register rx_handler [ 272.208518][T12922] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 272.277152][T12922] team0: Device veth1_macvtap failed to register rx_handler [ 272.564621][T12950] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.934951][T12967] netlink: 'syz.2.1968': attribute type 13 has an invalid length. [ 272.948074][T12967] netlink: 'syz.2.1968': attribute type 17 has an invalid length. [ 272.961926][T12967] C: left promiscuous mode [ 272.966472][T12967] C: left allmulticast mode [ 272.993224][T12969] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 273.008552][T12967] tunl0: left promiscuous mode [ 273.030931][T12967] gre0: left promiscuous mode [ 273.035665][T12967] gre0: left allmulticast mode [ 273.046840][T12969] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 273.064999][T12967] gretap0: left promiscuous mode [ 273.082565][T12967] gretap0: left allmulticast mode [ 273.095718][T12967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.118228][T12975] netlink: 'syz.4.1969': attribute type 29 has an invalid length. [ 273.126987][T12969] netlink: 'syz.4.1969': attribute type 29 has an invalid length. [ 273.144111][T12981] bridge_slave_1: left allmulticast mode [ 273.162946][T12981] bridge_slave_1: left promiscuous mode [ 273.170563][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.194122][T12981] bridge_slave_0: left allmulticast mode [ 273.221184][T12981] bridge_slave_0: left promiscuous mode [ 273.251808][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.546376][T12999] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 273.557338][T12999] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 273.595674][T13001] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 273.634692][T13001] bond5: entered promiscuous mode [ 273.640488][T13001] bond5: entered allmulticast mode [ 273.650996][T13001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.704893][T13001] gtp0: entered promiscuous mode [ 273.724725][T13001] gtp0: entered allmulticast mode [ 273.964500][T13015] v: left allmulticast mode [ 273.991511][T13015] v: left promiscuous mode [ 273.996268][T13015] bridge0: port 3(v) entered disabled state [ 274.031896][T13015] bridge_slave_0: left allmulticast mode [ 274.051843][T13015] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.090398][T13015] bond0: (slave bond_slave_1): Releasing backup interface [ 274.171358][T13015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.193330][T13015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.208382][T13015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.216803][T13015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.245700][T13015] bond3: (slave bridge2): Releasing active interface [ 274.270951][T13015] bond4: (slave bridge4): Releasing active interface [ 274.304839][T13015] bond5: (slave geneve2): Releasing backup interface [ 274.313195][ T5862] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 274.462377][ T5927] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 274.918073][ T1115] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 274.935499][ T1115] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 274.966653][ T1115] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.046387][T13062] tipc: Enabled bearer , priority 0 [ 275.099851][ T5954] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.119045][T13053] tipc: Resetting bearer [ 275.151838][ T1115] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.195811][T13068] syzkaller0: entered promiscuous mode [ 275.220681][T13068] syzkaller0: entered allmulticast mode [ 275.279986][T13082] __nla_validate_parse: 6 callbacks suppressed [ 275.280006][T13082] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1994'. [ 275.301064][T13082] NCSI netlink: No device for ifindex 0 [ 275.314585][T13044] tipc: Resetting bearer [ 275.430534][T13044] tipc: Disabling bearer [ 275.479721][T13092] 8021q: VLANs not supported on syzkaller1 [ 275.611210][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 276.315555][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.467333][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.484767][T13131] syzkaller1: entered promiscuous mode [ 276.509695][T13131] syzkaller1: entered allmulticast mode [ 276.621091][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.656816][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.718594][T13148] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 277.056843][T13169] validate_nla: 1 callbacks suppressed [ 277.056863][T13169] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 277.085059][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'. [ 277.492996][T13199] netlink: 'syz.3.2026': attribute type 16 has an invalid length. [ 277.512311][T13199] netlink: 'syz.3.2026': attribute type 17 has an invalid length. [ 277.663567][T13199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.967575][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 278.166290][T13227] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.380825][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 278.451033][T13243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2041'. [ 278.461546][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 278.693695][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 278.742271][T13251] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2042'. [ 278.773968][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 279.000836][T13272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2049'. [ 279.044054][T13264] netlink: 'syz.4.2047': attribute type 10 has an invalid length. [ 279.081477][T13264] team0: Device veth1_macvtap failed to register rx_handler [ 279.106425][T13277] sctp: [Deprecated]: syz.1.2049 (pid 13277) Use of int in maxseg socket option. [ 279.106425][T13277] Use struct sctp_assoc_value instead [ 279.278775][T13281] xt_limit: Overflow, try lower: 604147548/4200216962 [ 279.336412][T13285] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 280.106112][T13312] tipc: Enabled bearer , priority 0 [ 280.131822][T13312] syzkaller0: entered promiscuous mode [ 280.140853][T13312] syzkaller0: entered allmulticast mode [ 280.252755][T13312] tipc: Resetting bearer [ 280.375549][T13312] __nla_validate_parse: 5 callbacks suppressed [ 280.375572][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.403451][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2061'. [ 280.412054][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.434836][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.707519][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.735898][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.754947][T13312] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2057'. [ 280.774576][T13311] tipc: Resetting bearer [ 280.809039][T13311] tipc: Disabling bearer [ 281.055378][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 281.247584][T13353] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2067'. [ 281.288185][T13353] sctp: [Deprecated]: syz.3.2067 (pid 13353) Use of int in max_burst socket option. [ 281.288185][T13353] Use struct sctp_assoc_value instead [ 281.301769][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2070'. [ 281.526158][T13370] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 281.593377][T13372] openvswitch: netlink: nsh attr 9 is out of range max 3 [ 281.600823][T13372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.781561][T13379] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 282.018934][ T5927] IPVS: starting estimator thread 0... [ 282.032258][T13391] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.086951][T13391] netlink: 'syz.2.2079': attribute type 2 has an invalid length. [ 282.150478][T13393] IPVS: using max 24 ests per chain, 57600 per kthread [ 282.364198][T13408] sit0: entered promiscuous mode [ 282.413004][T13408] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 282.619281][T13426] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 283.570883][ T36] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 284.622665][T13510] tipc: Enabled bearer , priority 0 [ 284.637793][T13509] tipc: Enabling of bearer rejected, already enabled [ 284.650039][T13510] syzkaller0: entered promiscuous mode [ 284.741793][T13510] syzkaller0: entered allmulticast mode [ 284.856779][T13510] tipc: Resetting bearer [ 284.938493][T13510] tipc: Disabling bearer [ 285.070740][T13525] netlink: 'syz.2.2113': attribute type 32 has an invalid length. [ 285.090708][T13525] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 285.307001][T13535] syzkaller1: entered promiscuous mode [ 285.312650][T13535] syzkaller1: entered allmulticast mode [ 285.490025][T13546] netlink: 'syz.2.2116': attribute type 16 has an invalid length. [ 285.513994][T13546] netlink: 'syz.2.2116': attribute type 17 has an invalid length. [ 285.565232][T13554] netlink: 'syz.0.2119': attribute type 21 has an invalid length. [ 285.582096][T13554] __nla_validate_parse: 11 callbacks suppressed [ 285.582115][T13554] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2119'. [ 285.604449][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'. [ 285.636197][T13546] bridge_slave_0: left promiscuous mode [ 285.651037][T13546] vlan0: left promiscuous mode [ 285.656543][T13546] macvlan0: left promiscuous mode [ 285.665565][T13546] macvlan0: left allmulticast mode [ 285.689915][T13546] bond1: left promiscuous mode [ 285.705211][T13546] bond1: left allmulticast mode [ 285.727539][T13557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'. [ 285.743181][T13546] geneve2: left promiscuous mode [ 285.750371][T13557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'. [ 285.764487][T13546] geneve2: left allmulticast mode [ 285.840725][T13546] veth0_macvtap: left allmulticast mode [ 285.846655][T13546] macvtap1: left allmulticast mode [ 285.911667][T13546] ip6tnl2: left allmulticast mode [ 285.922260][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.937634][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.951293][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.961898][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.030452][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.043428][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.072599][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.090399][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.105786][T13575] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2125'. [ 286.130506][T13576] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2125'. [ 286.155504][T13572] tipc: Enabled bearer , priority 0 [ 286.167240][T13572] syzkaller0: entered promiscuous mode [ 286.181088][T13572] syzkaller0: entered allmulticast mode [ 286.200620][T13572] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2124'. [ 286.212072][T13572] tipc: Resetting bearer [ 286.233622][T13571] tipc: Resetting bearer [ 286.257613][T13571] tipc: Disabling bearer [ 286.267022][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'. [ 286.283688][T13581] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2126'. [ 286.300691][T13581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2126'. [ 286.625386][T13592] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 286.642523][T13592] bond5: (slave vcan1): Error -95 calling set_mac_address [ 286.838768][T13607] tipc: Enabled bearer , priority 0 [ 286.856801][T13607] syzkaller0: entered promiscuous mode [ 286.880478][T13607] syzkaller0: entered allmulticast mode [ 286.971610][T13607] tipc: Resetting bearer [ 286.995667][T13607] tipc: Disabling bearer [ 287.795324][T13658] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 287.830520][T13658] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 288.662095][T13715] netlink: 'syz.1.2161': attribute type 16 has an invalid length. [ 288.716836][T13715] netlink: 'syz.1.2161': attribute type 17 has an invalid length. [ 288.800732][T13715] gretap0: left promiscuous mode [ 288.833709][T13715] sit0: left promiscuous mode [ 288.915343][T13715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.932778][T13720] veth1_to_bond: entered allmulticast mode [ 288.960697][T13726] gtp1: entered promiscuous mode [ 288.960931][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.969600][T13726] gtp1: entered allmulticast mode [ 289.138594][T13729] veth1_to_bond (unregistering): left allmulticast mode [ 289.193061][T13742] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 289.341450][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.502593][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.576569][T13757] netlink: 'syz.2.2177': attribute type 1 has an invalid length. [ 289.587154][T13757] netlink: 'syz.2.2177': attribute type 2 has an invalid length. [ 289.601634][T13757] netlink: 'syz.2.2177': attribute type 10 has an invalid length. [ 289.630979][T13757] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.871012][T13766] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 290.205909][T13778] netlink: 'syz.3.2182': attribute type 4 has an invalid length. [ 290.224705][T13781] netlink: 'syz.2.2183': attribute type 6 has an invalid length. [ 290.613614][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.639883][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.170230][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.334199][T13830] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 291.338965][T13829] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 291.787868][T13839] __nla_validate_parse: 11 callbacks suppressed [ 291.787890][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 292.376899][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 292.402048][T13870] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 292.514761][T13878] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 292.525562][T13878] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 293.145595][T13914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2216'. [ 293.201711][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 293.405739][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 293.412403][T13929] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2221'. [ 293.421491][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 293.602481][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 293.768723][T13948] syzkaller1: entered promiscuous mode [ 293.800309][T13948] syzkaller1: entered allmulticast mode [ 293.997757][T13959] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 294.059106][T13964] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2228'. [ 294.280038][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'. [ 295.059709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.222580][T14033] bridge5: entered promiscuous mode [ 295.251467][T14033] bridge5: entered allmulticast mode [ 295.512440][T14049] vlan2: entered promiscuous mode [ 295.527902][T14049] gretap0: entered promiscuous mode [ 295.931461][T14074] validate_nla: 3 callbacks suppressed [ 295.931488][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.004178][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.019359][T14080] netlink: 'syz.0.2256': attribute type 3 has an invalid length. [ 296.062380][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.075480][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.130558][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.151955][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.181224][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.219933][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 296.240119][T14074] netlink: 'syz.1.2257': attribute type 2 has an invalid length. [ 297.048295][T14125] __nla_validate_parse: 3 callbacks suppressed [ 297.048316][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2271'. [ 297.082892][T14128] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2272'. [ 297.396771][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2274'. [ 297.683227][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2278'. [ 297.848906][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 298.450466][T14182] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2284'. [ 299.475067][T14211] openvswitch: netlink: Missing valid actions attribute. [ 299.495489][T14211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.846041][T14200] tipc: Enabled bearer , priority 0 [ 300.867335][T14201] syzkaller0: entered promiscuous mode [ 300.888282][T14201] syzkaller0: entered allmulticast mode [ 300.932713][ T6093] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.953899][ T6093] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 300.980862][ T6093] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.989319][ T6093] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.015891][ T6093] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 301.041703][ T6093] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 301.053716][ T6093] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.063351][ T6093] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 301.076527][ T6093] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 301.107668][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 301.118854][T14201] tipc: Resetting bearer [ 301.155330][T14201] tipc: Disabling bearer [ 301.206219][ T6093] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.226078][ T6093] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 301.250146][ T6093] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 301.389421][T14237] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2293'. [ 301.500793][T14237] nbd0: detected capacity change from 0 to 549764202496 [ 301.565345][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2296'. [ 301.716420][ T5881] block nbd0: Receive control failed (result -104) [ 301.870725][T14264] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 302.456525][T14300] validate_nla: 57 callbacks suppressed [ 302.456548][T14300] netlink: 'syz.0.2308': attribute type 21 has an invalid length. [ 302.519694][T14300] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 302.559089][T14311] Bluetooth: MGMT ver 1.23 [ 302.723279][T14315] netlink: 'syz.0.2312': attribute type 11 has an invalid length. [ 302.756167][T14315] netlink: 'syz.0.2312': attribute type 4 has an invalid length. [ 302.791959][T14315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2312'. [ 302.888204][T14325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2315'. [ 302.912313][T14315] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 303.056164][T14341] syzkaller1: entered promiscuous mode [ 303.080526][T14341] syzkaller1: entered allmulticast mode [ 303.224734][T14355] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2321'. [ 303.380510][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2322'. [ 304.078343][T14374] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2327'. [ 304.128297][T14372] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2327'. [ 304.175842][T14382] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2327'. [ 304.439384][T14382] 0{X功: renamed from gretap0 [ 304.475889][T14382] 0{X功: entered allmulticast mode [ 304.495690][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 304.498949][T14382] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 304.580523][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 304.586736][ T5881] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 304.705523][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2335'. [ 305.225396][T14430] tipc: Enabled bearer , priority 0 [ 305.273621][T14430] tipc: Resetting bearer [ 305.291135][T14437] sctp: [Deprecated]: syz.4.2342 (pid 14437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.291135][T14437] Use struct sctp_sack_info instead [ 305.429477][T14429] tipc: Disabling bearer [ 305.740585][T14455] openvswitch: netlink: IP tunnel dst address not specified [ 305.935471][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 307.629938][T14549] netlink: 'syz.4.2372': attribute type 10 has an invalid length. [ 307.676659][T14549] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 307.785817][T14556] vlan0: entered allmulticast mode [ 307.808062][T14556] bridge0: entered allmulticast mode [ 307.817156][T14556] bridge6: port 1(vlan0) entered blocking state [ 307.839315][T14556] bridge6: port 1(vlan0) entered disabled state [ 307.867234][T14556] vlan0: entered promiscuous mode [ 307.872967][T14556] bridge0: entered promiscuous mode [ 308.348890][T14576] syzkaller0: entered promiscuous mode [ 308.361156][T14576] syzkaller0: entered allmulticast mode [ 309.917381][T14607] __nla_validate_parse: 10 callbacks suppressed [ 309.917401][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2387'. [ 310.453719][T14629] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2393'. [ 310.472074][T14631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2395'. [ 310.503027][T14633] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2394'. [ 310.572514][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2396'. [ 310.586788][T14637] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2397'. [ 310.961727][T14658] bridge: RTM_NEWNEIGH with invalid ether address [ 311.315751][T14673] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 311.361033][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2407'. [ 311.437586][T14673] netlink: 'syz.4.2407': attribute type 3 has an invalid length. [ 311.446669][T14673] netlink: 'syz.4.2407': attribute type 3 has an invalid length. [ 311.614764][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2410'. [ 312.190982][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2417'. [ 312.272016][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.324175][T14707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.352639][T14707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.384574][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.411974][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.502581][T14711] bond0: (slave batadv0): Releasing backup interface [ 312.593846][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 312.720381][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.851679][T14724] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 312.869784][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.894819][T14719] syzkaller0: entered promiscuous mode [ 312.915883][T14719] syzkaller0: entered allmulticast mode [ 314.296149][T14778] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 314.553615][T14782] dvmrp1: entered allmulticast mode [ 314.708900][T14786] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 314.913196][T14790] openvswitch: netlink: Message has 4 unknown bytes. [ 315.199079][T14804] __nla_validate_parse: 7 callbacks suppressed [ 315.199099][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'. [ 315.305525][T14809] netlink: 'syz.0.2450': attribute type 33 has an invalid length. [ 315.330890][T14809] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2450'. [ 315.384242][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 315.506302][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'. [ 315.784517][T14833] dvmrp1: left allmulticast mode [ 316.031079][T14845] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 316.167887][T14845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.422239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.458121][T14861] dvmrp1: entered allmulticast mode [ 316.901184][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 317.391889][T14897] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2475'. [ 317.591478][T14905] netlink: 372 bytes leftover after parsing attributes in process `syz.4.2477'. [ 317.640426][T14905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2477'. [ 317.808700][T14912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'. [ 317.883947][T14915] netlink: 'syz.1.2480': attribute type 16 has an invalid length. [ 317.896216][T14915] netlink: 'syz.1.2480': attribute type 17 has an invalid length. [ 317.944859][T14910] netlink: 'syz.0.2479': attribute type 12 has an invalid length. [ 318.041510][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.068006][T14915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.465385][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.722724][T14930] : entered promiscuous mode [ 318.741936][T14942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2487'. [ 319.223418][T14960] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 319.260882][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.277521][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.414002][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.436681][T14965] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 319.448768][T14965] netlink: 'syz.0.2494': attribute type 2 has an invalid length. [ 319.457652][T14965] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 319.654970][T14977] syzkaller1: entered promiscuous mode [ 319.671197][T14977] syzkaller1: entered allmulticast mode [ 319.694114][T14980] wg1: entered promiscuous mode [ 319.712757][T14980] wg1: entered allmulticast mode [ 319.736923][T14977] team_slave_0: left promiscuous mode [ 319.743761][T14977] team_slave_1: left promiscuous mode [ 319.866139][T14977] team0 (unregistering): Port device team_slave_0 removed [ 319.877926][T14977] team0 (unregistering): Port device team_slave_1 removed [ 320.196705][T14995] tipc: Enabled bearer , priority 0 [ 320.352723][T14995] syzkaller0: entered promiscuous mode [ 320.358428][T14995] syzkaller0: entered allmulticast mode [ 320.413655][T15002] __nla_validate_parse: 3 callbacks suppressed [ 320.413676][T15002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2507'. [ 321.915841][T15011] bond0: entered promiscuous mode [ 321.934630][T15011] bond_slave_0: entered promiscuous mode [ 321.945056][T15011] bond_slave_1: entered promiscuous mode [ 321.957860][T15011] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 322.047120][T14990] tipc: Resetting bearer [ 322.122412][T14990] tipc: Disabling bearer [ 322.380947][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 322.426902][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.543988][T15035] bond5: entered promiscuous mode [ 322.558716][T15035] bond5: entered allmulticast mode [ 322.569143][T15035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.714022][T15043] bond6: entered promiscuous mode [ 322.719215][T15043] bond6: entered allmulticast mode [ 322.729238][T15043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.060236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.134739][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 323.144505][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 323.314093][T15085] netlink: 'syz.1.2529': attribute type 13 has an invalid length. [ 323.535805][T15094] netlink: 'syz.1.2532': attribute type 11 has an invalid length. [ 323.591107][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 323.604145][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 323.623847][T15098] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 323.640959][T15098] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.756228][T15094] bond0: entered promiscuous mode [ 323.776743][T15094] bond0: left promiscuous mode [ 323.792027][T15109] netlink: 18 bytes leftover after parsing attributes in process `syz.3.2538'. [ 323.807908][T15112] netlink: 'syz.2.2536': attribute type 11 has an invalid length. [ 323.858327][T15112] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2536'. [ 324.405796][T15160] netlink: 'syz.0.2551': attribute type 10 has an invalid length. [ 324.642606][T15178] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 324.655176][T15178] netlink: 'syz.4.2555': attribute type 11 has an invalid length. [ 324.780275][T15178] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2555'. [ 325.017543][T15192] ------------[ cut here ]------------ [ 325.024577][T15192] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 325.039207][T15192] WARNING: CPU: 0 PID: 15192 at net/mac80211/main.c:425 ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.051691][T15192] Modules linked in: [ 325.055956][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.0.2556 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 325.068964][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.080281][T15192] RIP: 0010:ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.087519][T15192] Code: 00 00 48 85 c0 48 0f 44 e9 43 0f b6 04 27 84 c0 0f 85 b4 00 00 00 41 8b 55 00 48 c7 c7 20 f9 af 8c 48 89 ee e8 a0 c0 9d f6 90 <0f> 0b 90 90 e9 d8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 325.108144][T15192] RSP: 0018:ffffc9001bdc7af8 EFLAGS: 00010246 [ 325.115707][T15192] RAX: dd9f866684c8f300 RBX: 0000000000040000 RCX: 0000000000080000 [ 325.124418][T15192] RDX: ffffc9000af39000 RSI: 00000000000032a8 RDI: 00000000000032a9 [ 325.133133][T15192] RBP: ffff88805bf24120 R08: 0000000000000003 R09: 0000000000000004 [ 325.142757][T15192] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 325.151588][T15192] R13: ffff88805bf25728 R14: ffff88805bf24d80 R15: 1ffff1100b7e4ae5 [ 325.160948][T15192] FS: 00007f436c5526c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 325.171917][T15192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.178548][T15192] CR2: 0000200000002180 CR3: 0000000030ea4000 CR4: 00000000003526f0 [ 325.187449][T15192] Call Trace: [ 325.191926][T15192] [ 325.194905][T15192] ieee80211_set_tx_power+0xd4a/0x1020 [ 325.201833][T15192] cfg80211_wext_siwtxpower+0x356/0x570 [ 325.207447][T15192] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 325.213998][T15192] ioctl_standard_call+0xcb/0x1b0 [ 325.219064][T15192] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 325.225622][T15192] wext_ioctl_dispatch+0xee/0x410 [ 325.231734][T15192] ? __pfx_ioctl_standard_call+0x10/0x10 [ 325.238530][T15192] wext_handle_ioctl+0x100/0x1c0 [ 325.244170][T15192] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 325.251333][T15192] ? __lock_acquire+0xab9/0xd20 [ 325.256251][T15192] sock_ioctl+0x15f/0x790 [ 325.261995][T15192] ? __pfx_sock_ioctl+0x10/0x10 [ 325.266880][T15192] ? __fget_files+0x2a/0x420 [ 325.272633][T15192] ? __fget_files+0x3a0/0x420 [ 325.277355][T15192] ? __fget_files+0x2a/0x420 [ 325.283392][T15192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 325.288420][T15192] ? __pfx_sock_ioctl+0x10/0x10 [ 325.294491][T15192] __se_sys_ioctl+0xfc/0x170 [ 325.299243][T15192] do_syscall_64+0xfa/0x3b0 [ 325.305024][T15192] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.311466][T15192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.317576][T15192] ? clear_bhb_loop+0x60/0xb0 [ 325.323441][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.329392][T15192] RIP: 0033:0x7f436b78ebe9 [ 325.334732][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.356209][T15192] RSP: 002b:00007f436c552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.365604][T15192] RAX: ffffffffffffffda RBX: 00007f436b9b5fa0 RCX: 00007f436b78ebe9 [ 325.374634][T15192] RDX: 0000200000000400 RSI: 0000000000008b26 RDI: 0000000000000006 [ 325.384018][T15192] RBP: 00007f436b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 325.392569][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.401775][T15192] R13: 00007f436b9b6038 R14: 00007f436b9b5fa0 R15: 00007ffd27b963e8 [ 325.411438][T15192] [ 325.414503][T15192] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.421806][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.0.2556 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 325.433556][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.443752][T15192] Call Trace: [ 325.447060][T15192] [ 325.450056][T15192] dump_stack_lvl+0x99/0x250 [ 325.454717][T15192] ? __asan_memcpy+0x40/0x70 [ 325.459342][T15192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.464566][T15192] ? __pfx__printk+0x10/0x10 [ 325.469192][T15192] vpanic+0x281/0x750 [ 325.473194][T15192] ? __pfx__printk+0x10/0x10 [ 325.477802][T15192] ? __pfx_vpanic+0x10/0x10 [ 325.482323][T15192] ? is_bpf_text_address+0x292/0x2b0 [ 325.487642][T15192] panic+0xb9/0xc0 [ 325.491384][T15192] ? __pfx_panic+0x10/0x10 [ 325.495833][T15192] __warn+0x31b/0x4b0 [ 325.499920][T15192] ? ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.506459][T15192] ? ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.512984][T15192] report_bug+0x2be/0x4f0 [ 325.517328][T15192] ? ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.523854][T15192] ? ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.530387][T15192] ? ieee80211_link_info_change_notify+0x2e3/0x3a0 [ 325.536911][T15192] handle_bug+0x84/0x160 [ 325.541192][T15192] exc_invalid_op+0x1a/0x50 [ 325.545743][T15192] asm_exc_invalid_op+0x1a/0x20 [ 325.550616][T15192] RIP: 0010:ieee80211_link_info_change_notify+0x2e1/0x3a0 [ 325.557754][T15192] Code: 00 00 48 85 c0 48 0f 44 e9 43 0f b6 04 27 84 c0 0f 85 b4 00 00 00 41 8b 55 00 48 c7 c7 20 f9 af 8c 48 89 ee e8 a0 c0 9d f6 90 <0f> 0b 90 90 e9 d8 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 325.577379][T15192] RSP: 0018:ffffc9001bdc7af8 EFLAGS: 00010246 [ 325.583470][T15192] RAX: dd9f866684c8f300 RBX: 0000000000040000 RCX: 0000000000080000 [ 325.591473][T15192] RDX: ffffc9000af39000 RSI: 00000000000032a8 RDI: 00000000000032a9 [ 325.599454][T15192] RBP: ffff88805bf24120 R08: 0000000000000003 R09: 0000000000000004 [ 325.607467][T15192] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 325.615453][T15192] R13: ffff88805bf25728 R14: ffff88805bf24d80 R15: 1ffff1100b7e4ae5 [ 325.623453][T15192] ? ieee80211_link_info_change_notify+0x2e0/0x3a0 [ 325.630177][T15192] ieee80211_set_tx_power+0xd4a/0x1020 [ 325.635754][T15192] cfg80211_wext_siwtxpower+0x356/0x570 [ 325.641319][T15192] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 325.647408][T15192] ioctl_standard_call+0xcb/0x1b0 [ 325.652455][T15192] ? __pfx_cfg80211_wext_siwtxpower+0x10/0x10 [ 325.658535][T15192] wext_ioctl_dispatch+0xee/0x410 [ 325.663581][T15192] ? __pfx_ioctl_standard_call+0x10/0x10 [ 325.669240][T15192] wext_handle_ioctl+0x100/0x1c0 [ 325.674300][T15192] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 325.679776][T15192] ? __lock_acquire+0xab9/0xd20 [ 325.684747][T15192] sock_ioctl+0x15f/0x790 [ 325.689180][T15192] ? __pfx_sock_ioctl+0x10/0x10 [ 325.694050][T15192] ? __fget_files+0x2a/0x420 [ 325.698664][T15192] ? __fget_files+0x3a0/0x420 [ 325.703359][T15192] ? __fget_files+0x2a/0x420 [ 325.707992][T15192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 325.713030][T15192] ? __pfx_sock_ioctl+0x10/0x10 [ 325.717891][T15192] __se_sys_ioctl+0xfc/0x170 [ 325.722500][T15192] do_syscall_64+0xfa/0x3b0 [ 325.727023][T15192] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.732243][T15192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.738320][T15192] ? clear_bhb_loop+0x60/0xb0 [ 325.743015][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.748916][T15192] RIP: 0033:0x7f436b78ebe9 [ 325.753352][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.773067][T15192] RSP: 002b:00007f436c552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.781509][T15192] RAX: ffffffffffffffda RBX: 00007f436b9b5fa0 RCX: 00007f436b78ebe9 [ 325.789496][T15192] RDX: 0000200000000400 RSI: 0000000000008b26 RDI: 0000000000000006 [ 325.797597][T15192] RBP: 00007f436b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 325.805581][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.813562][T15192] R13: 00007f436b9b6038 R14: 00007f436b9b5fa0 R15: 00007ffd27b963e8 [ 325.821562][T15192] [ 325.825150][T15192] Kernel Offset: disabled [ 325.829516][T15192] Rebooting in 86400 seconds..